TW201541274A - Data access method - Google Patents

Abstract

A data access method comprises the following steps: (A) when a host module receives an access request via an input module, the host module is in an offline state with a network; (B) when the host module receives an input data corresponding to a password and at the same time is in the offline state with a network, the host module transmits the input data to a hardware control unit; (C) when the hardware control unit receives the input data, the hardware control unit confirms, according to the input data, whether the password of the input data is in compliance with a pre-stored reference password; and (D) if the confirmation result of the hardware control unit is positive, the hardware control unit allows the access of a user data, and if the confirmation result of the hardware control unit is negative, the hardware control unit declines the access of the user data.

Description

Data access method

The present invention relates to a data access method, and more particularly to a data access method requiring a password.

With the rapid development of information technology, people have gradually changed the way people live. Computers and the Internet are an indispensable part of life for people, whether they are personal information or company business materials. It can be accessed through the media of computers and the Internet, but also because of the popularity of the Internet, the Internet hackers have also risen a lot, and malicious acts such as malicious intrusion, destruction of computer systems, tampering with internal computer data, etc. Information security poses considerable harm.

In order to prevent important user data from being stolen, destroyed and stolen, passwords are often used to protect important user data. However, if the password used to protect user data is stolen, serious consequences will be irreparable. A number of techniques have been proposed to prevent hackers from using trojans to record passwords. For example, the Republic of China No. 200905541 "Dynamic Virtual Keyboard Password Input Method" publication discloses a dynamic virtual keyboard password input method, which is required by users. When entering confidential information, the virtual keyboard dynamically changes the position of the numbers and letters in a rotating manner to prevent the hacker from recording the password data entered by the user according to the absolute position on the screen.

However, with the advancement of information technology, the hacker attack method has become more mature and diversified. The malicious program can identify the screen position of the user's click password according to the user's mouse click, and record the user's use of the screen. The virtual keyboard selects the operation screen when the password is selected, thereby stealing the user's password. Therefore, how to improve the shortcomings of the above method and effectively prevent the information security problem of the user's data being stolen becomes an urgent problem to be solved.

Accordingly, it is an object of the present invention to provide a method of accessing data that effectively prevents user data from being stolen.

Therefore, the data access method of the present invention is applicable to a data access system including an input module, a hardware control unit pre-stored with a reference password and a user data corresponding to the password, and an a network connection and electrically connecting the input module and the host module of the hardware control unit, the method comprising the following steps: (A) when the host module receives an access request via the input module, The host module and the network are in an offline state; (B) when the host module receives the input data corresponding to a password and simultaneously the offline state with the network, the host module transmits the input data to The hardware control unit (C), when the hardware control unit receives the input data, the hardware control unit confirms, according to the input data, whether the password of the input data meets the pre-stored reference password; and (D) When the confirmation result of the hardware control unit is YES, the hardware control unit allows access of the user data, and when the confirmation result of the hardware control unit is negative, the hardware control unit rejects the user data. Access.

The effect of the present invention is that the host module and the network are in the offline state, and the input data corresponding to the password is transmitted under the condition that the host module and the network are in the offline state. The confirmation to the hardware control unit to determine whether the password is the same as the reference password can prevent the hacker from transmitting an illegal input data that is counterfeit to the input data to the hardware control unit, thereby preventing the hacker from stealing the user data. .

1‧‧‧Input module

2‧‧‧Host module

21‧‧‧Internet communication interface

22‧‧‧ memory

23‧‧‧ Processor

3‧‧‧ hardware control unit

4‧‧‧Display module

501~505‧‧‧Steps

601~607‧‧‧Steps

Other features and advantages of the present invention will be apparent from the embodiments of the present invention, wherein: Figure 1 is a system block diagram illustrating a data access system utilizing the data access method of the present invention; A flow chart illustrating a first preferred embodiment of the data access method of the present invention; and FIG. 3 is a flow chart illustrating a second preferred embodiment of the data access method of the present invention.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are denoted by the same reference numerals.

Referring to Figure 1, a first preferred embodiment of the data access method of the present invention is applicable to a data access system. The data access system includes an input module 1, a host module 2, a hardware control unit 3, and a display module 4.

The input module 1 is operable to generate an access request and corresponding Input data for a password. In the preferred embodiment, the input module 1 is a keyboard.

The host module 2 includes a network communication interface 21, a memory 22, and an electrical connection interface 21, the memory 22, the input module 1, the display module 4, and the hardware control unit. 3 processor 23. The network communication interface 21 can operate in a wired state connected to a network or an offline state disconnected from the network. The memory 22 stores a host application executable by the processor 23 and a network detection program.

When the processor 23 receives the access request from the input module 1, the processor 23 executes the host application to operate the network communication interface 21 in the offline state, and the processor 23 executes the The host application starts the execution of the network detection program, and the processor 23 executes the network detection program to detect whether the network interface is maintained in the offline state. When the detection result of the execution of the network detection program indicates that the network communication interface 21 is in the offline state and the processor 23 receives the input data from the input module 1, the processor 23 executes the The host application causes the display module 4 to present a plurality of preset words unrelated to the password, and transmits the input data to the hardware control unit 3, wherein the preset words have the same number of words as the password yuan.

The hardware control unit 3 prestores a reference password and user data corresponding to the password. In the preferred embodiment, the hardware control unit 3 is implemented as a chip, and is electrically connected to the host module 2 by being disposed on a Secure Digital (SD) card. But not limited to this, you can also set the chip to a USB The host module 2 further includes a secure digital transmission interface when the chip is disposed on the SD card, and the host module is disposed when the chip is disposed on the USB flash drive. 2 also includes a universal serial bus transmission interface.

When the hardware control unit 3 receives the input data from the host module 2, the hardware control unit 3 confirms, according to the input data, whether the password of the input data meets the reference password pre-stored by the hardware control unit 3, When the confirmation result of the hardware control unit 3 is YES, the hardware control unit 3 allows access of the user data, and when the confirmation result of the hardware control unit 3 is negative, the hardware control unit 3 rejects Access to this user profile.

The display module 4 is configured to display the preset words (eg, '*' characters) irrelevant to the password, wherein the preset words presented in the display module 4 have the same number of words as the password. yuan.

Referring to Figures 1 and 2, a first preferred embodiment of the data access method of the present invention comprises the following steps.

As shown in step 501, when the processor 23 of the host module 2 receives the access request via the input module 1, the processor 23 of the host module 2 executes the host application to make the host module 2 The network communication interface 21 operates in the offline state, and the processor 23 of the host module 2 executes the host application to start execution of the network detection program.

As shown in step 502, when the processor 23 of the host module 2 receives the input data generated by the input module 1 and corresponding to the password, and the detection result of the network detection program is executed, the detection result indicates Network access When the interface 21 is in the offline state, the processor 23 of the host module 2 executes the host application to cause the display module 4 to present a preset word irrelevant to the password, and transmit the input data to the hardware. Control unit 3, wherein the preset words have the same number of characters as the password.

As shown in step 503, when the hardware control unit 3 receives the input data, the hardware control unit 3 confirms, according to the input data, whether the password of the input data meets the pre-stored reference password, when the hardware control unit When the confirmation result of 3 is YES, step 504 is continued; when the confirmation result of the hardware control unit 3 is NO, step 505 is continued.

As shown in step 504, the hardware control unit 3 allows access to the user profile.

As shown in step 505, the hardware control unit 3 rejects access to the user profile.

It is worth mentioning that when the detection result of the execution of the network detection program indicates that the network communication interface 21 is in the connection state, the processor 23 executes the host application to be presented in the display module 4. An error message, and the input of the input data is not received, wherein the error message may be, for example, a text message in which the network is connected and the input data is at risk of being stolen.

From the above description, the advantages of the embodiment can be summarized as follows: the processor 23 executes the host application to operate the network communication interface 21 in the offline state, and executes the network detection program. The detection result indicates that the network communication interface 21 is in the offline state, and the input data corresponding to the password is transmitted to the hardware control unit 3 to The confirmation that the password is the same as the reference password can prevent the hacker from transmitting an illegal input data that is counterfeit to the input data to the hardware control unit 3, because the host module 2 is in the offline state. The input data is transmitted to the hardware control unit 3, so the hacker cannot transmit the illegal input data to the hardware control unit 3 under the offline condition, thereby preventing the hacker from stealing the user data.

A second preferred embodiment of the data access method of the present invention can be implemented by a data access system similar to that of FIG. 1 with the difference that when the processor 23 of the host module 2 receives the input from the input module 1 Upon accessing the request, the processor 23 executes the host application to transmit a password input interface request to the hardware control unit 3 in response to the access request.

When the hardware control unit 3 receives the password input interface request from the host module 2, the hardware control unit 3 generates a password input interface including a dynamic keyboard in response to the password input interface request, and the The password input interface is sent to the processor 23, and the processor 23 executes the host application to display the password input interface on the display module 4, so that the input data is clicked and displayed on the display module by using the input module 1 The dynamic keyboard on group 4 is generated, wherein the input data includes a plurality of coordinate positions corresponding to the password and located at the dynamic keyboard. In the preferred embodiment, the input module 1 is a touch panel or a mouse.

The processor 23 executes the host application to encrypt the coordinate locations before the input data is transferred to the hardware control unit 3.

When the hardware control unit 3 receives the input data from the host module 2, the hardware control unit 3 decrypts the host module 2 The coordinate positions are dense, and the password is recognized based on the decrypted coordinates.

Referring to Figures 1 and 3, a second preferred embodiment of the data access method of the present invention comprises the following steps.

As shown in step 601, when the processor 23 of the host module 2 receives the access request via the input module 1, the processor 23 of the host module 2 executes the host application to make the host module 2 The network communication interface 21 operates in the offline state, and the processor 23 of the host module 2 executes the host application to start execution of the network detection program.

As shown in step 602, the processor 23 of the host module 2 executes the host application to transmit the password input interface request to the hardware control unit 3 in response to the access request.

As shown in step 603, when the hardware control unit 3 receives the password input interface request from the host module 2, the hardware control unit 3 generates the password including the dynamic keyboard in response to the password input interface request. The input interface is transmitted to the processor 23, and the processor 23 executes the host application to display the password input interface on the display module 4, wherein the input data is utilized by the input module 1 is generated by clicking on a dynamic keyboard displayed on the display module 4, and the input data includes the coordinates corresponding to the password and located at the coordinates of the dynamic keyboard.

As shown in step 604, when the processor 23 of the host module 2 receives the input data and the detection result of the network detection program indicates that the network communication interface 21 is in the offline state, the host Module 2 The processor 23 executes the host application to cause the display module 4 to present a preset word code irrelevant to the password, and encrypt the coordinate positions, and transmit the encrypted coordinate positions to the hardware control unit 3, Wherein the preset words have the same number of characters as the password.

As shown in step 605, when the hardware control unit 3 receives the input data, the hardware control unit 3 decrypts the coordinate positions encrypted by the host module 2, and recognizes the coordinates according to the decrypted coordinates. a password, and confirming whether the password of the input data meets the pre-stored reference password. When the confirmation result of the hardware control unit 3 is YES, proceeding to step 606; when the confirmation result of the hardware control unit 3 is no, Proceed to step 607.

As shown in step 606, the hardware control unit 3 allows access to the user profile.

As shown in step 607, the hardware control unit 3 rejects access to the user profile.

From the above description, the advantages of the embodiment can be summarized as follows: the processor 23 executes the host application to operate the network communication interface 21 in the offline state, and executes the network detection program. The detection result indicates that the network communication interface 21 is in the offline state, and the input data corresponding to the password is transmitted to the hardware control unit 3 to confirm whether the password and the reference password are the same. The hacker can be prevented from transmitting the illegal input data spoofing the input data to the hardware control unit 3, thereby preventing the hacker from stealing the user data. In addition, the input data corresponding to the password is made by providing the password input interface including the dynamic keyboard. It is difficult to directly recognize the password, and further, by encrypting the coordinate positions via the host module 2, further protection of the coordinate positions can be provided.

In summary, the processor 23 of the host module 2 executes the host application to operate the network communication interface 21 in the offline state, and the detection result indication of the execution of the network detection program is The network communication interface 21 is in the offline state, and the input data corresponding to the password is transmitted to the hardware control unit 3 to confirm whether the password and the reference password are the same, thereby avoiding the hacker. The illegal input data counterfeiting the input data is transmitted to the hardware control unit 3, thereby preventing the hacker from stealing the user data corresponding to the reference password, so that the object of the present invention can be achieved.

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, that is, the simple equivalent changes and modifications made by the patent application scope and patent specification content of the present invention, All remain within the scope of the invention patent.

501~505‧‧‧Steps

Claims (7)

A data access method is applicable to a data access system, the data access system includes an input module, a hardware control unit prestored with a reference password and a user data corresponding to the password, and a network with a network The circuit is connected and electrically connected to the input module and the host module of the hardware control unit, and the method includes the following steps: (A) when the host module receives an access request via the input module, the host module The group is offline with the network; (B) when the host module receives the input data corresponding to a password and simultaneously displays the offline status with the network, the host module transmits the input data to the hard (C) when the hardware control unit receives the input data, the hardware control unit confirms, according to the input data, whether the password of the input data meets the pre-stored reference password; and (D) when the hard When the confirmation result of the body control unit is YES, the hardware control unit allows access of the user data, and when the confirmation result of the hardware control unit is negative, the hardware control unit rejects access of the user data. The data access method of claim 1, wherein in the step (B), the input data is generated by using the input module. The data access method of claim 1, the data access system further comprising a display module electrically connected to the host module, and between the step (A) and the step (B), the method further comprises the following steps: (E) the host module transmits a password input in response to the access request The interface requests to the hardware control unit; and (F) when the hardware control unit receives the password input interface request from the host module, the hardware control unit generates a password input in response to the password input interface request Interface, and the password input interface is transmitted to the host module, the host module displays the password input interface on the display module, and the input data is utilized by the input module and operates through the password input interface And produced. The data access method of claim 3, wherein, in the step (B), when the host module receives the input data, the host module causes the display module to display a maximum number of passwords. Pre-set words, wherein the preset words have the same number of characters as the password. The data access method of claim 3, wherein in the step (F), the password input interface comprises a dynamic keyboard, and the input data is dynamically displayed by clicking on the display module by using the input module. Produced by the keyboard. The data access method of claim 5, wherein in the step (F), the input data includes a plurality of coordinate positions corresponding to the password and located at the dynamic keyboard, and then in the step (C), When the hardware control unit receives the input data, the hardware control unit further identifies the password according to the coordinate positions, and confirms whether the password of the input data meets the pre-stored reference password. The data access method of claim 6, wherein in the step (B), when the host module receives the input data corresponding to the password and simultaneously goes offline with the network, the host module Group encrypts the coordinate positions And transmitting the encrypted coordinate positions to the hardware control unit, and then in the step (C), the hardware control unit decrypts the encrypted coordinate positions before performing the identification of the password.