TW202030629A - Login application method and login application system - Google Patents

Abstract

A login application method is applied to an login application system which has a fingerprint identification module. The fingerprint identification module includes a fingerprint capturing module and a fingerprint database. The fingerprint database stores the fingerprint login data. The fingerprint capturing module captures the user fingerprint data of a user. The login application method includes: receiving a login request; determining if a verification condition of an application corresponded to the login request includes a fingerprint identification login; if the verification condition includes the fingerprint identification login, determining if the fingerprint login data stored in the fingerprint database has changed; if the fingerprint login data has changed, requesting the user to reset the fingerprint login data.

Description

Application program login method and application program login system

The invention relates to an application program login method and an application program login system, in particular to an application program login method and an application program login system that can improve software login security.

Nowadays, many mobile phones on the market have fingerprint readers, which can be pressed by a user to sense the user's fingerprint. Many mobile online banking software can allow users to log in to the software through fingerprint recognition. When the user needs to log in to the software, he can press his finger on the fingerprint reader to make the fingerprint reader sense the fingerprint; if the sensed fingerprint matches any fingerprint identification data recorded in the fingerprint database of the mobile phone operating system, then The recognition is deemed successful, so the user can log in to the software.

However, some users will record the fingerprints of relatives and friends in their mobile phones to facilitate the use of mobile phones together. Therefore, if the pressed fingerprint matches any of the fingerprint identification data recorded in the fingerprint database of the mobile phone operating system, it is regarded as a successful identification operation mechanism. The relatives and friends of the original mobile phone user can also easily log in to the original user’s mobile network. Road banking software. What's more, if someone with bad intentions deliberately register their fingerprints in the original user’s mobile phone, they can also log in to the original user’s mobile online banking software smoothly. As a result, it will be difficult to protect the original user’s Financial privacy.

Therefore, it is necessary to provide an application login method that can improve software login security.

The main purpose of the present invention is to provide an application login method that can improve software login security.

To achieve the above objective, an application login method of the present invention is applied to an application login system provided with a fingerprint recognition module. The fingerprint recognition module includes a fingerprint capture module and a fingerprint database. The fingerprint database stores login fingerprint data, and the fingerprint capture module captures user fingerprint data of the user. The application login method includes: receiving a login request; determining whether a verification condition of an application corresponding to the request includes a fingerprint verification login; if the verification condition includes fingerprint verification login, determining whether the login fingerprint data stored in the fingerprint database Changed; if changed, the user is required to reset the login fingerprint data.

According to an embodiment of the present invention, the application login method further includes: if there is no change, providing a fingerprint verification type login instruction to retrieve user fingerprint data of the user.

According to an embodiment of the present invention, the application login method further includes: determining whether the user fingerprint data matches the login fingerprint data; if the user fingerprint data matches the login fingerprint data, approving the login request.

According to an embodiment of the present invention, if the verification condition of the application does not include fingerprint verification login, a non-fingerprint verification login interface is provided.

The main purpose of the present invention is to provide an application login system that can improve the security of software login. The application login system includes a fingerprint recognition module, an application login module, a judgment module and a control module. The fingerprint identification module includes a fingerprint capture module and a fingerprint database. The fingerprint database stores login fingerprint data. The fingerprint capture module captures fingerprint data of a user. The application login module signal is connected to the fingerprint recognition module, and the application login module receives a login request. The judgment module signal is connected to the application login module and the fingerprint database. The judgment module judges whether an authentication condition of an application corresponding to the login request includes a fingerprint authentication login. If it does, the judgment module judges the fingerprint database stored Whether the login fingerprint information has been changed. The control module signal connection judgment module, if the login fingerprint data stored in the fingerprint database is changed, the control module requires the user to reset the login fingerprint data.

According to an embodiment of the present invention, the application login system further includes an encryption and decryption module. The encryption and decryption module signals are connected to the fingerprint database. The encryption and decryption module is used to encrypt the login fingerprint data stored in the fingerprint database. deal with.

In order to allow your reviewer to better understand the technical content of the present invention, preferred specific embodiments are described as follows.

Please refer to FIG. 1 to FIG. 6 for the application login system and application login method of an embodiment of the present invention. Fig. 1 is a system architecture diagram of an application login system and a server according to an embodiment of the present invention; Fig. 2 is a step flow chart of an application login method according to an embodiment of the present invention; Fig. 3 is an embodiment of the present invention The schematic diagram of the login method menu; Figure 4 is a schematic diagram of the non-fingerprint verification login interface of an embodiment of the present invention; Figure 5 is a schematic diagram of the login fingerprint data reset instruction of an embodiment of the present invention; Figure 6 is the present invention A schematic diagram of fingerprint verification login instructions in one embodiment.

As shown in FIGS. 1 and 2, in an embodiment of the present invention, the application login method of the present invention is edited as a computer program and applied to an application login system 1 provided with a fingerprint recognition module. The application login system 1 can be a mobile device or a tablet computer, but the application login system 1 of the present invention is not limited to the foregoing embodiment. The application login system 1 includes a fingerprint recognition module 10, an application login module 20, a judgment module 30, a control module 40, a transmission module 50, an encryption and decryption module 60, and a storage module. Group 70. In this embodiment, the application is a mobile online banking software, and the user has agreed to include fingerprint authentication login into the authentication conditions of the application before using the application, so that the user can use the fingerprint recognition model Group 10 performs fingerprint verification to log in the mobile online banking software and connect to a server 900 of the bank for financial transactions. In this embodiment, the server 900 includes an identity authentication module 910, which can receive the fingerprint verification result of the application login to the system 1 and allow the user to connect.

According to a specific embodiment of the present invention, the fingerprint recognition module 10 senses and recognizes the user's fingerprint. The fingerprint recognition module 10 is a built-in module of the application login system. The fingerprint recognition module 10 includes a fingerprint capture module 11 and a fingerprint database 12. The fingerprint capture module 11 captures user fingerprint data of one of the users. The fingerprint database 12 stores at least one login fingerprint data. Because a verification condition for logging in the application includes fingerprint verification, the login fingerprint data stored in the fingerprint database 12 can be used as a fingerprint verification basis for logging in the application. In an embodiment of the present invention, when the user wants to log in to the mobile online banking software, the user must first press the icon of the mobile online banking software on the touch screen of the system 1 to open the application with a finger For the application, the action of opening the application will be received by the application login module 20 and regarded as a login request corresponding to the mobile online banking software.

The judgment module 30 signals the fingerprint database 12 of the fingerprint identification module 10, the application login module 20, the transmission module 50, the encryption and decryption module 60, and the storage module 70. In an embodiment of the present invention, the determining module 30 determines whether the user has agreed to include fingerprint verification login into the verification condition of the application before this login. If so, the verification condition of the application corresponding to the login request includes Fingerprint authentication login; if not, the authentication condition of the application corresponding to the login request does not include fingerprint authentication login.

As shown in Figure 3, when the verification conditions of the application include fingerprint verification login and the user selects fingerprint verification login, the judgment module 30 will further determine whether the login fingerprint data stored in the fingerprint database 12 has been changed before this login. For example, the judgment module 30 will check whether another login fingerprint data has been added to the fingerprint database 12 before this login, or whether the user's original login fingerprint data stored in the fingerprint database 12 before this login Deleted or changed; if another fingerprint is added to the fingerprint database 12 before this login, or the original login fingerprint data is deleted or changed before this login, the login fingerprint data stored in the fingerprint database 12 will be determined Has changed. If the judgment module 30 judges that the login fingerprint data stored in the fingerprint database 12 has not been changed before this login, the judgment module 30 will further judge whether the user fingerprint data matches the login fingerprint data. If the login fingerprint data stored in the database 12 matches, the user has to log in to the mobile online banking software and connect to a server 900 of the bank to conduct financial transactions.

In an embodiment of the present invention, the control module 40 signals the connection judgment module 30; if the judgment module 30 further judges that the login fingerprint data stored in the fingerprint database 12 has been changed before this login, as shown in FIG. 5 The control module 40 can control the application login module 20 to generate and provide a login fingerprint data reset instruction C on the display screen of the mobile device 1 to request the user to reset the login fingerprint data. At this time, the control module 40 will The application login module 20 displays a login fingerprint data reset instruction C to inform the user to press the finger on the fingerprint recognition module 10 again, so that the fingerprint recognition module 10 senses the fingerprint, and the control module 40 will Reset to the only login fingerprint data; in addition, the login fingerprint data reset instruction C will also display the account and password input fields for the original user to enter the account and password to ensure that the person who re-enters the fingerprint is the original user . After the login fingerprint data is reset, the user can open the mobile online banking software again to log in again. Thereby, the application login method of the present invention improves the application login security to ensure user privacy, and prevents legitimate users of accounts belonging to non-mobile online banking software from using the login fingerprint data stored in the fingerprint database 12 to log in to the mobile network The occurrence of the Bank’s software has solved the problem described in the previous technology.

In an embodiment of the present invention, the transmission module 50 is a network module, which can signal to connect to the server 900 on the network. The encryption and decryption module 60 signals the fingerprint database 12, and the encryption and decryption module 60 is used to encrypt the login fingerprint data stored in the fingerprint database 12 to ensure data security; the encryption and decryption module 60 can also encrypt The subsequent data is decrypted for the judgment module 30 to read the data. The storage module 70 is, for example, a memory, which is used to store the computer program edited by the application login method.

In an embodiment of the present invention, when the user wants to log in to the mobile online banking software, the user can open the mobile online banking software. At this time, the application login system 1 will start the computer program of the application login method, and Step 101: Receive a login request.

When the user wants to log in to the mobile online banking software, the user must first press the icon of the mobile online banking software on the touch screen of the application login module 20 with a finger to open the application and start the action of the application It will be received by the application login module 20 and regarded as a login request corresponding to the mobile online banking software and passed to the judgment module 30.

Then, the application login system 1 will perform step 102: determine whether an authentication condition of an application corresponding to the login request includes a fingerprint authentication login. As shown in FIG. 3, the judgment module 30 judges whether a verification condition of the application includes a fingerprint authentication login; according to a specific embodiment of the present invention, the judgment module 30 judges whether the user has already logged in before this login. It is agreed to include fingerprint verification login into the verification condition of the application. If it is, the verification condition of the application corresponding to the login request includes fingerprint verification login; if not, the verification condition of the application corresponding to the login request does not include fingerprint verification login. If included, go to step 103. If the judgment module 30 confirms that the login request does not include fingerprint verification login, it will proceed to step 104: providing a non-fingerprint verification login interface.

As shown in FIG. 4, after the judgment module 30 confirms that the login request is not applicable to fingerprint verification login, the control module 40 controls the application login module 20 to provide a non-fingerprint verification login interface B. The non-fingerprint authentication login interface B has fields for entering account and password for users to enter the account and password to log in to the software. However, the aspect of the non-fingerprint authentication type login interface B is not limited to this, and it can also be a login interface for entering a pattern lock for authentication. After the user enters the account and password, the judgment module 30 checks whether the account and password are correct to confirm whether login is allowed. However, the login method using the account password or the pattern lock is a prior art in the field, and it is not the focus of this case. Therefore, I will not repeat it.

Please go back to step 102. If the judgment module 30 confirms that the login request is suitable for fingerprint authentication login, it will proceed to step 103: determine whether the login fingerprint data stored in the fingerprint database has been changed.

As shown in FIG. 3, the application login module 20 generates a login mode selection interface A on the display screen of the mobile device 1. When the authentication conditions of the application include fingerprint authentication login and the user selects fingerprint authentication login, the judgment module 30 controls The encryption and decryption module 60 first decrypts the login fingerprint data stored in the fingerprint database 12, and then determines whether the login fingerprint data stored in the fingerprint database 12 has been changed; for example, the determination module 30 will check whether the fingerprint database 12 is new Add another login fingerprint data, or whether the user's original login fingerprint data stored in the fingerprint database 12 is deleted or changed; if another fingerprint is added to the fingerprint database 12, or the original login fingerprint data is deleted Or change, it is determined that the login fingerprint data stored in the fingerprint database 12 has been changed.

If the login fingerprint data stored in the fingerprint database 12 has been changed, it means that the mobile online banking software may be used by legitimate users of the account of the non-mobile online banking software to log in to the mobile network using the login fingerprint data stored in the fingerprint database 12 The bank software situation occurs; at this time, step 106 will be performed: the user is required to reset the login fingerprint data.

As shown in FIG. 5, after the judgment module 30 confirms that the login fingerprint data stored in the fingerprint database 12 has been changed, the control module 40 displays a login fingerprint data reset instruction C in the application login module 20 to inform the user Press the finger on the fingerprint recognition module 10 again to allow the fingerprint recognition module 10 to sense the fingerprint, and the control module 40 will reset the fingerprint as the only login fingerprint data; in addition, the login fingerprint data reset instruction C will also Display the account and password input fields for the original user to enter the account and password to ensure that the person who re-enters the fingerprint is the original user. After the login fingerprint data is reset, the user can open the mobile online banking software again to log in again.

Please go back to step 103. If the judgment module 30 confirms that the login fingerprint data stored in the fingerprint database has not been changed, it means that the mobile online banking software will not be logged in by someone else's fingerprint, so it will proceed to step 105: provide a fingerprint Authenticated login instructions to retrieve user fingerprint data of the user.

As shown in FIG. 6, the control module 40 will control the application login module 20 to provide a fingerprint verification type login instruction D, which will inform the user to press the finger on the fingerprint recognition module 10 to make the fingerprint recognition module 10 sense fingerprint.

When the user presses the finger on the fingerprint recognition module 10, step 107 is performed: receiving a user fingerprint data.

The fingerprint recognition module 10 senses the user's fingerprint and receives the user's fingerprint data, and the user's fingerprint data is sent to the judgment module 30.

Then, step 108 is performed: it is determined whether the user fingerprint data matches the login fingerprint data.

The judgment module 30 judges whether the received user fingerprint data matches the login fingerprint data stored in the fingerprint database 12. If not, it means that the person who currently inputs the fingerprint is not the original user, and therefore the control module 40 will reject the login request. If it is true, it means that the person who entered the fingerprint is the original user, so step 109: approve the login request.

If the determination module 30 determines that the received user fingerprint data matches the login fingerprint data stored in the fingerprint database 12, the control module 40 will approve the login request, and control the transmission module 50 to send the login request to the server 900 The identity authentication module 910 connects the application login system 1 to the server 900 for the user to log in to the mobile online banking software and use the mobile banking functions provided by the server 900.

With the application login method and application login system of the present invention, it can be ensured that only the original user of the application login system can log in to the software by means of fingerprint verification, even if others change the login fingerprint data stored in the application login system, It is also not possible to log in to the software by means of fingerprint verification, so the software login security can be improved.

It should be noted that the above are only examples, not limited to the examples. For example, those that do not deviate from the basic structure of the present invention should be the scope of the rights claimed by this patent, and the scope of the patent application shall prevail.

1: Application login system 10: Fingerprint recognition module 11: Fingerprint capture module 12: Fingerprint database 20: Application login module 30: Judgment module 40: control module 50: Transmission module 60: Encryption and decryption module 70: storage module 900: server 910: Identity Authentication Module A: Login method selection interface B: Non-fingerprint authentication login interface C: Login fingerprint data reset instruction D: Fingerprint authentication login instructions

Figure 1 is a system architecture diagram of an application login system and a server according to an embodiment of the present invention. FIG. 2 is a flowchart of the steps of an application login method according to an embodiment of the present invention. FIG. 3 is a schematic diagram of a login method menu of an embodiment of the present invention. 4 is a schematic diagram of a non-fingerprint authentication type login interface according to an embodiment of the present invention. FIG. 5 is a schematic diagram of a reset instruction of login fingerprint data according to an embodiment of the present invention. Fig. 6 is a schematic diagram of a fingerprint-verified login instruction according to an embodiment of the present invention.

1: Application login system

10: Fingerprint recognition module

11: Fingerprint capture module

12: Fingerprint database

20: Application login module

30: Judgment module

40: control module

50: Transmission module

60: Encryption and decryption module

70: storage module

900: server

910: Identity Authentication Module

Claims (9)

An application program login method applied to an application program login system provided with a fingerprint recognition module. The fingerprint recognition module includes a fingerprint capture module and a fingerprint database. The fingerprint database stores at least one login fingerprint data, The fingerprint capture module captures user fingerprint data of one of the users. The application login method includes: Receive a login request; Determine whether a verification condition of an application corresponding to the login request includes a fingerprint verification login; If the verification condition includes the fingerprint verification login, determine whether the at least one login fingerprint data stored in the fingerprint database has been changed; and If it has been changed, the user is required to reset the at least one login fingerprint data. The application login method described in item 1 of the scope of patent application includes: If it has not been changed, a fingerprint authentication type login instruction is provided to retrieve the user's fingerprint data of the user. The application login method described in item 2 of the scope of patent application includes: Determine whether the user fingerprint data matches the at least one login fingerprint data; and If the user fingerprint data matches the at least one login fingerprint data, the login request is approved. For example, in the application login method described in item 3 of the scope of patent application, if the authentication condition of the application does not include the fingerprint authentication login, a non-fingerprint authentication login interface is provided. An application login system, including: A fingerprint recognition module, including a fingerprint capture module and a fingerprint database, the fingerprint database stores at least one login fingerprint data, the fingerprint capture module captures a user fingerprint data; An application login module, the signal is connected to the fingerprint recognition module, and the application login module receives a login request; A judgment module, the signal is connected to the application login module and the fingerprint database, the judgment module judges whether a verification condition of an application corresponding to the login request includes a fingerprint authentication login, if it includes, the judgment module The group determines whether the at least one login fingerprint data stored in the fingerprint database has been changed; and A control module, a signal connected to the judgment module, if the at least one login fingerprint data stored in the fingerprint database has been changed, the control module requires the user to reset the at least one login fingerprint data. For example, the application login system described in item 5 of the scope of patent application, wherein if the judgment module determines that the at least one login fingerprint data stored in the fingerprint database has not been changed, the application login module provides a fingerprint verification type Login instructions so that the fingerprint identification module can retrieve the user's fingerprint data of the user. For example, the application login system described in item 6 of the scope of patent application, wherein the determination module is further used to determine whether the user fingerprint data matches the at least one login fingerprint data, and if so, the control module approves the login request . For example, in the application login system described in item 7 of the scope of patent application, if the verification condition does not include the fingerprint verification login request, the control module provides a non-fingerprint verification login interface. For example, the application login system described in item 8 of the scope of patent application further includes an encryption and decryption module, the encryption and decryption module signal is connected to the fingerprint database, and the encryption and decryption module is used for the fingerprint database The stored at least one login fingerprint data is encrypted.

Images