TWI506477B - Secure input method and system for virtual keyboard - Google Patents

Description

Virtual keyboard security input method and system

The invention relates to a safe input method for a virtual keyboard, in particular to a safe input method for preventing input messages of a side recording software or a malicious program side recording keyboard button.

The keyboard is a common input device in a personal computer, and the user can input a string through the input of the keyboard. In addition to the writing of text, you can log in to the website through the keyboard's input account and password. However, the general personal computer does not establish a security protection mechanism between the keyboard and the host. Therefore, the software of the keyboard side recording can easily obtain the signal of the keyboard key, and the user does not even know that someone inputs the keyboard key input on the computer. The message caused the personal account and password to be stolen. Therefore, websites that require higher security (such as online banking, etc.) will provide a virtual keyboard for the user to enter a password to prevent the user from using the general keyboard to cause account password theft. For example, when using online banking, a "virtual keyboard" will be displayed when the password is entered, allowing the user to use the mouse to replace the keyboard button to enter a password and log into the website. When using the virtual keyboard to enter a password, the general keyboard side recording software or malicious program cannot record and monitor the selected button. Therefore, when you enter a password on a computer in a public place in a relatively unsafe environment (such as Internet cafes, airports, department stores, etc.), most of the way you click the virtual keyboard through the mouse It can prevent passwords from being recorded and stolen.

In addition, with the increasing popularity of mobile devices (such as smart phones or tablets), the application level of virtual keyboards has also expanded to mobile devices. Fig. 1A is a schematic diagram showing a virtual keyboard using a mobile device of an Android system, and Fig. 1B is a schematic view showing a virtual keyboard using an Apple mobile device. As shown in FIG. 1A and FIG. 1B, although the virtual keyboard 10A or 10B of the mobile device of different systems is somewhat different in use, the arrangement of the letters is unified with the QWERTY layout design, and the letters and numbers of the QWERTY keyboard. The order of placement is fixed. When using the virtual keyboard of the mobile device, if the user needs to input an account number or password, it is usually necessary to input letters and numbers in the same field at the same time. The keyboard on the mobile device needs to be switched keyboard configuration to input letters in the same field at the same time. With the number, it is inconvenient to use. In summary, since the virtual keyboards used on desktop computers, notebook computers or mobile devices are mainly designed in the order of QWERTY keyboards, the software or malware can be used to know the user according to the location selected by the user. The entered letter causes the account password to be monitored. Even when the user uses the virtual keyboard of the mobile device in a public place, it is easy for others to guess the letter entered by the user from the location selected by the user.

Therefore, there is a need for a secure input method for designing a virtual keyboard, so that the side recording software or malicious program cannot monitor the user's account password, and even the user's account password monitored by the side recording software or malicious program is wrong.

The object of the present invention is to provide a secure input method for a virtual keyboard, by which the user-entered message can be prevented from being monitored by a skimming software or a malicious program.

According to the above objective, the present invention discloses a method for safely inputting a virtual keyboard, comprising the steps of: setting a plurality of keyboard configurations; setting at least one security rule in the plurality of keyboard configurations; and transforming the plural when inputting a field The keyboard is configured to receive a plurality of input strings; and to determine that the plurality of input strings received through the plurality of keyboard configurations conform to the security rule, providing authorization.

Another object of the present invention is to provide a secure input system for a virtual keyboard that is installed on a mobile device to prevent others from peek at the user's input actions and to know the information entered by the user.

According to the above objective, the present invention discloses a security input system for a virtual keyboard, which includes a setting module, a corresponding module, a security module, a receiving module, and a determining module. The setting module is used to set a plurality of keyboard configurations. The security module is configured to set at least one security rule in the plurality of keyboard configurations. The receiving module is configured to convert the plurality of keyboard configurations to receive a plurality of input strings when inputting in a field. The determining module is configured to determine that the plurality of input strings received through the plurality of keyboard configurations are consistent with the security rule, and the authorization is provided.

10A‧‧‧Virtual Keyboard

10A‧‧‧Virtual Keyboard

S202~S208‧‧‧Steps

30A‧‧‧Virtual Keyboard

302A‧‧‧ letter button

304A‧‧‧Digital buttons

30B‧‧‧Virtual Keyboard

302B‧‧‧ letter button

304B‧‧‧Digital buttons

306B‧‧‧ letter button

30C‧‧‧Virtual Keyboard

302C‧‧‧ letter button

304C‧‧‧Digital buttons

30D‧‧‧Virtual Keyboard

302D‧‧‧ letter button

304D‧‧‧Digital buttons

306D‧‧‧ math operation button

30E‧‧‧Virtual Keyboard

302E‧‧‧ letter button

304E‧‧‧Digital buttons

306E‧‧‧Mathematical buttons

40‧‧‧Safe input system

402‧‧‧Setting module

404‧‧‧Security Module

406‧‧‧ receiving module

408‧‧‧Judgement module

1A is a schematic diagram showing a virtual keyboard using a mobile device of an Android system; FIG. 1B is a schematic diagram showing a virtual keyboard using an Apple mobile device; and FIG. 2 is a security input showing a virtual keyboard of the present invention; Flowchart of the method; FIG. 3A to FIG. 3E are diagrams showing a virtual keyboard with a safe input method according to an embodiment of the present invention; FIG. 4 is a block diagram showing a secure input system of the virtual keyboard of the present invention.

The technical solution of the present invention will be described in detail below with reference to the accompanying drawings. It is to be noted that, in the different illustrations, the same element symbols represent the same or similar elements. The face direction of the additional pattern mentioned below is defined as the normal vector perpendicular to the plane. The directional terminology used herein is for the purpose of illustration and understanding of the invention.

Fig. 2 is a flow chart showing a method of safe input of the virtual keyboard of the present invention. As shown in FIG. 2, in step S202, a plurality of keyboard configurations (Keyboard Layout) are set on the virtual keyboard, and the keys of each of the plurality of keyboard configurations are randomly displayed, that is, each time the keyboard configuration is not displayed. the same. In this step, since the virtual keyboard is not a physical keyboard, the keyboard configuration can be changed by programming, so that the key arrangement of the virtual keyboard of the present invention is different from the key arrangement of the conventional QWERTY keyboard, and the virtual keyboard of the present invention The keyboard configuration includes both alphabetic keys and numeric keys, and even the arithmetic symbol keys are included in the keyboard configuration of the virtual keyboard of the present invention. For example, when the user wants to input a password, and the password is a string consisting of six letters and/or numbers, in the secure input method of the present invention, the user can input one or more letters with After the string of numbers or digits, the keyboard is configured to be sorted by another keyboard, and the user inputs the remaining strings.

In step S204, at least one security rule is set in a plurality of keyboard configurations. In order to prevent the keyboard configuration of the virtual keyboard from being skimmed or monitored by the side recording software or malicious program, in the security input method of the present invention, the security rule is set on the virtual keyboard, and the security rule is set. It can be designed by the user, or it can be set according to an algorithm built into the virtual keyboard. Further, security rules can include security prompts or security strings, which are not limited here. If the security rule contains a security prompt, the user knows to enter a specific string on a keyboard configuration of the virtual keyboard through a security prompt. For example, the security rule of the security input method of the present invention includes a security prompt for displaying a certain color of a certain letter on a keyboard configuration of a virtual keyboard differently from other keyboards when the user views The display of certain letters on the virtual keyboard is different from other letters, knowing that according to the prompts of these letters, you need to enter a specific letter on the virtual keyboard. For example, as shown in FIG. 3B, if the security prompt is to change the brightness of the keys of the symbols "b", "e" and "w" on the virtual keyboard from other keys, the security rule may be to input the prompt symbol on the virtual keyboard. The symbols of the sequential displacement, such as the symbols of the last two digits of the cue symbol, in this embodiment, the symbols of the last two digits of the symbols "b", "e" and "w" are "d", "g", respectively. With "y", the user knows to enter "d", "g" and "y". Moreover, each time the virtual keyboard is used, the security prompts show different symbols with different brightness. Each time the user inputs a different symbol, the position of the symbol on the virtual keyboard is different, and even the keyboard configuration of the virtual keyboard is not. The same, so even if there is a side recording software or malware on the computer or mobile device, the personal information that is recorded or monitored is not a valid password or account number. In addition, it should be noted that the above-mentioned symbols are exemplified by keyboards of English letters, but in different embodiments, symbols having different brightnesses may be numbers or other punctuation marks, which are not limited herein. Moreover, in different embodiments, the security rule may also be the right button of the button with different input brightness, and is not limited to the order of the symbols as a reference of the security rule, and the order of any symbol or the position of any button may be used as the present invention. The security rules, and the user can change according to personal habits or preferences, is not limited here. In addition, the security rules of the present invention may also include The security string, the user remembers a number of letters or numbers as a security string. In the keyboard configuration in which the virtual keyboard is randomly displayed, the user knows to input a specific string in the keyboard configuration. Or the security rule is to calculate by using the security string with an algorithm, and then input the calculation result into the virtual keyboard.

In step S206, when a field is input, a plurality of keyboard configurations are transformed to receive a plurality of input strings. When a user wants to enter a personal account or password on a website or application (APP), when the account or password field is entered, the keyboard configuration of the virtual keyboard changes with the user's settings. Further, in the same field, the keyboard configuration of the virtual keyboard of the present invention can be changed multiple times to complete the step of receiving a plurality of input strings in the field. Moreover, each time the keyboard configuration of the virtual keyboard is changed, the virtual keyboard displays a key sequence different from other keyboard configurations. In addition, in different embodiments, it may also be set in the same field, some input strings need to be used in conjunction with security rules, and some input strings are passwords preset by the user, and need not be used in conjunction with security rules. Not limited.

In step S208, it is determined that the authorization is provided if the plurality of input strings received through the plurality of keyboard configurations match the security rules. In the secure input method of the present invention, if the input string received through the plurality of keyboard configurations can correspond to a preset security rule, authorization can be provided, and the user can log in to the website or the application. Through the above-mentioned secure input method of the virtual keyboard, since the side recording software or the malicious program does not know that there is a security rule required for input on the virtual keyboard, even if the side recording software or malicious program logs or monitors the string input by the user. However, according to the security rule of the security input method of the present invention, the user enters a string or keyboard position differently from the last input string or keyboard position, and the side recording or monitoring function of the side recording software or malicious program is invalid. Achieve the purpose of safe input on the virtual keyboard.

3A and 3B are schematic views showing a virtual keyboard with a secure input method according to an embodiment of the present invention. As shown in FIG. 3A, the keyboard arrangement of the virtual keyboard 30A of the present invention is different from the arrangement order of the conventional QWERTY keyboard. Moreover, the virtual keyboard 30A has both a letter button 302A and a number button 304A, so that the user does not need to switch between the letter button 302A and the number button 304A. In addition, the arrangement of the alphabetic keys 302A and the numeric keys 304A on the virtual keyboard 30A of the present invention are randomly arranged, so that the side recording software or malicious program cannot know the alphabet or number input by the user by referring to the arrangement order of the conventional QWERTY keyboard. Why? For example, after the security rule inputs a partial string for the user, the virtual keyboard 30A of the present invention automatically switches to a different keyboard configuration. For example, when the user inputs a partial string in a field, the virtual keyboard 30A is switched to The keyboard configuration 30B as shown in Fig. 3B. On the virtual keyboard 30B of FIG. 3B, the keyboard configuration is different from the virtual keyboard 30A shown in FIG. 3A, and also has the alphanumeric button 302B numeric button 304B. In addition, the security rule of the present invention includes a security prompt that is different from the remaining alphanumeric buttons 302B in the display of certain alphanumeric buttons 306B, by which the user displays a different security alert for the alphanumeric button 306B, the user knows according to the security prompt Enter the correct message in this field.

Still refer to Figures 3A and 3B. When the user wants to enter a personal account number or password in a field, the virtual keyboard 30A or the virtual keyboard 30B will jump out of the desktop displayed on the personal computer or mobile device. In this embodiment, the virtual keyboard 30A shown in FIG. 3A, which does not have the security prompt virtual keyboard 30A, appears in the first embodiment, but in different embodiments, the security prompt as shown in FIG. 3B may appear first. The virtual keyboard 30B of the keyboard configuration is not limited to the virtual keyboard 30A that is switched to the keyboard configuration without the security prompt as shown in FIG. 3A. Even switching from the virtual keyboard 30B with the security prompt keyboard configuration shown in FIG. 3B to other security mentions A virtual keyboard 30C of another keyboard configuration is shown. Moreover, in the same field input, the virtual keyboard 30A (which may also be 30B or 30C) of the present invention can be switched twice or more, and two or more different keyboard configurations are changed, which is not limited herein. In addition, in the virtual keyboard 30C of FIG. 3C, the brightness of the "5" and "6" buttons on the virtual keyboard is different from the other buttons, and the security rule is to use a mathematical algorithm to match the brightness of the digital keys on the virtual keyboard 30C. Operate and enter the result of the operation into the virtual keyboard. In this embodiment, the algorithm that is paired is multiplication and the order of the numbers resulting from the product is reversed. For example, in the 3C figure, the numerical keys "5" and "6" have different brightness, and the product result is 30, and the user knows to press two numeric keys of "0" and "3". In the embodiment of the present invention, the algorithm of the security rule may be changed according to the setting of the user, and is not limited herein.

3D is a schematic diagram showing a virtual keyboard of another embodiment of the present invention. As shown in FIG. 3D, the keyboard configuration of the virtual keyboard 30D includes an arithmetic button 306D in addition to the letter button 302D and the number button 304D. In this embodiment, there is no button with different brightness on the virtual keyboard 30D as a security prompt of the security rule. The user must first remember some numbers as a security string, and the set number according to the mathematical operation symbol of the specific button position. And use this mathematical operation symbol to do mathematical operations. For example, the numbers memorized by the user are "1", "3", and "9", and these numbers are used as security strings, and the security rules select arithmetic symbols for setting specific positions. For example, the arithmetic symbol at the lower right corner of the virtual keyboard is selected for operation, and the mathematical operation button 306D at the lower right corner of the 3D image is a mathematical operation symbol of the division "/". According to the mathematical operation symbol, the user knows To perform a mathematical operation of 9/3/1, and input the result of the operation "3" on the virtual keyboard.

Fig. 3E is a schematic view showing a virtual keyboard according to still another embodiment of the present invention. As shown in FIG. 3E, the keyboard configuration of the virtual keyboard 30E includes a letter button 302E and a number button 304E. With the mathematical operation button 306E, in this embodiment, the security rule may be a button that presses a specific position as an input string in any keyboard configuration. For example, as shown in FIG. 3E, in the keyboard configuration of the virtual keyboard 30E, without any button brightness different from that of other buttons, the user is fixedly pressed in the upper right corner and the upper left corner of the virtual keyboard 30E. The buttons in the lower left corner position are three buttons "d", "a" and "9" in Fig. 3E. Alternatively, in various embodiments, the security rule may be a button that presses a predetermined relative position of a particular alphanumeric or numeric button preset by the user, such as a left button. For example, as shown in FIG. 3E, the user-preset string is "b" and "z", and the left button of the letter buttons "b" and "z" is "4" and "-", so use Press the "4" and "-" buttons. Through the secure input method of the virtual keyboard of the present invention, the user can avoid the side recording or monitoring of the side recording software or malicious program in the internet application or application that needs to log in the account or password, and prevent the personal data from being stolen.

Figure 4 is a block diagram showing the secure input system of the virtual keyboard of the present invention. As shown in FIG. 4, the security input system 40 of this embodiment includes a setting module 402, a security module 404, a receiving module 406, and a determining module 408. The setting module 402 allows a plurality of keyboard configurations of the virtual keyboard to be displayed in a random manner in the virtual keyboard. The security module 404 is configured to set at least one security rule on the plurality of keyboard configurations, and the security module 404 can be configured in multiple keyboard configurations. Setting different security rules or the same security rules is not limited here. The receiving module 406 receives a plurality of input strings in a converted keyboard configuration in a field of the computer or mobile device. The determining module 408 determines that the authorization string is provided if the input string received through the keyboard configuration matches the security rule. Through the security input system of the present invention, the virtual keyboard or the malicious program can not be side-recorded or guessed by the user to input the string, so that the virtual keyboard is more secure in use.

Although the present invention has been disclosed above with preferred embodiments, it is not intended to limit the present invention. The invention is intended to be limited to the scope of the invention, and the scope of the invention is defined by the scope of the appended claims. Prevail.

S202~S208‧‧‧Steps

Claims (18)

A security input method for a virtual keyboard, comprising: setting a plurality of keyboard configurations; setting at least one security rule in the plurality of keyboard configurations; and transforming the plurality of keyboard configurations and receiving according to the security rules when inputting a field And a plurality of input strings; and determining that the plurality of input strings received through the plurality of keyboard configurations conform to the security rule, and providing authorization. The security input method of claim 1, wherein the security rule further comprises providing a security prompt. The security input method of claim 2, wherein the security prompt is to display at least one of the plurality of letter keys or at least one of the plurality of numeric keys in each of the plurality of keyboard configurations and the remaining plurality of The keys are different. The security input method of claim 3, wherein each of the plurality of keyboard configurations further comprises at least one mathematical operation button, and the security rule is to select a preset position on each of the plurality of keyboard configurations. The arithmetic symbol button performs a calculation on the plurality of numbers preset by the security prompt according to the arithmetic symbol button, and uses the operation result as the plurality of input word strings. The method of claim 2, wherein the plurality of fields are transformed when the field is input The step of the keyboard being configured to receive the plurality of input strings provides the security prompt on the plurality of keyboard configurations, and inputting a plurality of input strings according to the security prompt. The security input method according to claim 2, wherein the security rule is a symbol that inputs a prompt symbol in a sequence on a virtual keyboard. The security input method of claim 1, wherein the security rule comprises setting a plurality of security strings. The method of claim 7, wherein the security rule is to select the plurality of security strings as the plurality of input strings. The method of claim 7, wherein the security rule is the result of the operation according to the mathematical algorithm based on the plurality of security strings as the plurality of input strings. The security input method of claim 7, wherein the security rule is a button that presses one of the plurality of security strings to preset a relative position. The security input method of claim 1, wherein the plurality of letter keys and the plurality of number keys of each of the plurality of keyboard configurations are randomly arranged. The security input method as described in claim 1, wherein the security rule is a press pre A button for setting the keyboard position is used as the input string. The security input method of claim 1, wherein the plurality of keyboard configurations are automatically transformed to receive the plurality of input strings. A security input system for a virtual keyboard, comprising: a setting module for displaying a plurality of keyboard configurations of the virtual keyboard in a random manner; and a security module for setting a security rule of the plurality of keyboard configurations; The receiving module is configured to receive a plurality of input strings on the plurality of keyboard configurations when inputting a field; and a determining module is configured to determine the plurality of input words received through the plurality of keyboard configurations The string matches the security rule and provides authorization. The security input system of claim 14, wherein the security rule is a button for pressing a preset keyboard position as the input string. The security input system of claim 14, wherein the security rule is a button that presses one of a plurality of security strings to preset a relative position. The security input system of claim 14, wherein the security rule is the result of the operation according to a mathematical algorithm based on a plurality of security strings as the plurality of input strings. The security input system of claim 14, wherein the security rule is a symbol that shifts a plurality of cue symbols in an order as the input string.