TWM575144U - Computing equipment using password of operating system to encrypt and decrypt - Google Patents

Abstract

A computing device that verifies a password through an operating system for encryption and decryption, and the application executed by the computing device calls the application interface of the operating system running in the computing device after inputting the account data containing the password, so that the operating system determines Whether the account data is verified or not, and when the account data is verified, the application uses a password to encrypt or decrypt the target of the job, which can achieve the technical effect of generating an encryption method that takes into consideration the security and usability of the application.

Description

A computing device that verifies a password through an operating system for encryption and decryption

A computing device for encrypting and decrypting, in particular, a computing device that verifies a password through an operating system for encryption and decryption.

With the development of hardware and network technology, the choice of mobile devices is increasing, and the speed of innovation is getting faster and faster. With the development of mobile devices, mobile devices have gradually replaced traditional computers.

As people become more accustomed to doing things that have been done on computers using mobile devices, such as finding information, playing games, shopping, paying bills, checking accounts, etc., the various applications installed on mobile devices are more and more stored. User-related sensitive information, such as bank account information, credit card information, personal data, vouchers, etc. In order to protect these sensitive materials, some applications will write a fixed key during development to allow the application to use a fixed amount of gold. The key encrypts sensitive data, but this method is actually not secure. Once the fixed key used by the application is cracked, the sensitive data of the user using the same application is at risk.

Therefore, some applications change the key to use the device identification data related to the mobile device, such as the serial number of the specific hardware component in the mobile device or the mobile device, IMEI, etc., since the device identification data is mostly one-to-one with the mobile device. Correspondence, therefore, even if the key used by an application on a mobile device is cracked, the keys used by other devices using the same application are different, and therefore, on other devices using the same application. Sensitive data still cannot be easily obtained.

However, the above method of using the device identification data related to the mobile device as a key is not suitable for all applications, but only for an application that does not need to be backed up, because the device identification data of each mobile device is different, indicating that it is installed in each The same application used on the mobile device uses different keys. The file encrypted by the device identification data of a mobile device cannot be decrypted using the device identification data of other mobile devices. Therefore, the application on the mobile device is used. When copied to other mobile devices, it will not be used.

In summary, it can be seen that the encryption method with low security in the prior art has been used in all applications, but the security method with high security is only a problem that some applications can use, so it is necessary An improved technical means is proposed to solve this problem.

In view of the problem that the prior art has a high security encryption method, and only some applications are suitable for use, the present invention discloses a computing device for verifying a password through an operating system for encryption and decryption, wherein: the operating system disclosed by the present invention a computing device for verifying a password for encryption and decryption, the computing device comprising at least: a peripheral input device; a bus bar; a processor electrically connected to the peripheral input device through the bus bar for executing the operating system and the application installed in the operating system The program provides input account information through the peripheral input device, the account data includes the target account recorded by the operating system and the password corresponding to the target account, and an application for providing an application selection target and providing an application call operation system The interface enables the operating system to determine whether the account data has been verified, and provides an application to encrypt or decrypt the job target using the password when the account data is verified.

The computing device disclosed in the present application is as above, and the difference from the prior art is that the application in the computing device inputs the account information, calls the application interface of the operating system, and causes the operating system in the computing device to determine the account data. Whether it is verified, the application uses the password to encrypt or decrypt the job target when the account data is verified, to solve the problems of the prior art, and to achieve the technical effect of making the application encryption and security and usability.

10‧‧‧ Computing equipment

11‧‧‧Operating system

15‧‧‧ processor

16‧‧‧ memory module

17‧‧‧ Busbar

18‧‧‧ peripheral output device

19‧‧‧ peripheral input device

100‧‧‧Application

110‧‧‧Target selection module

120‧‧‧Input module

130‧‧‧System Call Module

150‧‧‧Addition and decryption module

Step 210‧‧‧Select the target of the operation

Step 220‧‧‧ Provide input account information, the account data includes the target account recorded by the operating system and the corresponding password

Step 222‧‧‧Get all the accounts recorded by the operating system

Step 224‧‧‧ Provide the target account selected from all accounts

Step 226‧‧‧ Provide the password corresponding to the target account

Step 230‧‧‧ Call the application interface of the operating system to enable the operating system to determine whether the target account and password have been verified

Step 240‧‧‧Determine whether the account data has been verified

Step 250‧‧‧Use a password to encrypt or decrypt the job target

Figure 1A is a schematic diagram of the components of the computing device for verifying the password through the operating system for encryption and decryption.

Figure 1B is a schematic diagram of the module of the application for verifying the password through the operating system for encryption and decryption.

Figure 2A is a flow chart of the method for verifying passwords through the operating system for encryption and decryption.

Figure 2B is a flow chart of the method for inputting the target account and password proposed by the author.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and the embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

The author can complete the verification of the target account pre-registered in the operating system by the operating system, and encrypt or decrypt the specified file by using the password corresponding to the verified target account, thereby providing the user with sufficient security and usability. .

The present application is applied to a computing device 10 as shown in FIG. 1A. The computing device 10 of the present application includes, but is not limited to, one or more processors 15, one or more memory modules 16, and connections. Components such as bus bars 17 of different components (including memory module 16 and processor 15), for example, computing devices may be mobile phones, tablets, navigation devices, multimedia players, e-book readers, electronic dictionaries, palm-type electric toys. Wait. Through the various components included, computing device 10 can load and execute the operating system to cause the operating system to run on computing device 10, while computing device 10 can also execute applications installed in the operating system.

The busbar 17 of the computing device 10 of the present application may include one or more types, including, for example, a data bus, an address bus, a control bus, and an expansion function convergence. Bus types such as expansion bus, and/or local bus. Busbars for computing devices include, but are not limited to, side-by-side industry standard architecture (ISA) busses, peripheral component interconnect (PCI) busses, video electronic standards associations (VESA) local busses, and tandem universal sequence busses (USB), Fast Peripheral Component Interconnect (PCI-E) bus, etc.

The processor 15 of the computing device 10 of the present invention is coupled to the busbar 17. The processor 15 includes a register group or a scratchpad space, and the register set or scratchpad space may be entirely on the processing wafer, or wholly or partially outside the processing wafer and via a dedicated electrical connection and/or via The bus bar is coupled to the processor. Processor 15 can be a processing unit, a microprocessor, or any suitable processing element. If The computing device 10 is a multi-processor device, that is, the computing device 10 includes a plurality of processors 15. The processors 15 included in the computing device 10 are all the same or similar, and are coupled and communicated through the bus bar 17.

The processor 15 of the computing device 10 can be coupled to a chip set (not shown) or electrically connected to the chip set via the bus bar 17. A chipset consists of one or more integrated circuits (ICs) that contain a memory controller and a peripheral input/output (I/O) controller. The chipset typically provides input and memory management functions, as well as providing a plurality of general purpose and/or dedicated registers, timers, etc., wherein the general purpose and/or dedicated registers and timers are coupled or One or more processors electrically coupled to the chip set are accessed or used. In addition, the memory controller and the peripheral input/output controller may be included in one integrated circuit, or may be implemented using two or more integrated circuits.

The processor 15 can access the data in the memory module and the large-capacity storage area through the memory controller. For example, the memory controller can access the data included in the cache memory or the hard disk drive. The above memory module includes any type of volatile memory and/or non-volatile memory (NVRAM) memory, such as static random access memory (SRAM), dynamic random access. Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The mass storage area described above may include any type of storage device, such as a hard disk drive, a compact disc, a tape drive, a flash drive (flash memory), a solid state disk (SSD), or any other storage device. Wait.

The processor 15 can also pass through the peripheral output/input controller via peripheral peripheral input/output bus and peripheral output device 18, peripheral input device 19, communication interface (not shown), and peripheral devices such as GPS receivers (not shown). Or interface communication. The peripheral input device 19 can be any type of input device, such as a keyboard, a mouse, a trackball, a trackpad, a rocker, etc., and the peripheral output device 18 can be any type of output device, such as a display, a printer, etc., surrounding Input device 19 and peripheral output device 18 can also be the same device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface, and the wireless communication interface can include a wireless local area network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), mobile communication network, or other wireless data transmission. The interface of the protocol, the wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL data machine, a cable (data) data machine, and the like. The processor 15 can periodically poll various peripheral devices and interfaces to enable the computing device to perform input and output of data, as well as to communicate with another computing device having the elements described above.

The following is a description of the operation of this creation by using the schematic diagram of the application module for verifying the password through the operating system to verify and decrypt the code in the "1B". As shown in FIG. 1B, the system of the present application is applied to the application 100, and includes a target selection module 110, an input module 120, a system call module 130, and an encryption/decryption module 150. The application 100 is installed in the operating system 11, the operating system 11 is running in the computing device 10, and after the processor of the computing device 10 executes the program code of the application 100, the target selection module 110 proposed by the author Modules such as input module 120, system call module 130, and encryption and decryption module 150 can be generated and operated.

The target selection module 110 is responsible for selecting a job target. The job target selected by the target selection module 110 is one or more files included in the application 100 or one or more other programs installed in the same operating system 11 as the application 100. The target selection module 110 may select a specific one or more job targets according to the settings, or may select a user designation according to a target selection signal generated by the user using the peripheral input device 19 of the computing device 10, such as confirmation, selection, or click. One or more job targets.

The input module 120 is responsible for providing input account information. In more detail, the input module 120 can input, input, slide, click, and the like according to the peripheral input device 19 of the computing device 10. Account information. The input module 120 provides the input account data including the target account and the password corresponding to the target account, wherein the target account is usually recorded by the operating system 11 of the installed application 100. In other words, one or more accounts can be recorded in the operating system 11 of the installed application 100, and the target account is one of the accounts recorded by the operating system 11 of the installed application 100.

In general, the target account and password provided by the input module 120 are usually arranged by a certain number of letters, numbers and symbols. The input module 120 can also generate a target account according to the account input signal generated by the user inputting the letters, numbers, or symbols in the target account by using the peripheral input device 19 of the computing device 10, and can also generate the target account through the computing device. The peripheral output device 18 of the display unit 10 displays all the account accounts recorded by the operating system 11 obtained by the system call module 130, and selects according to the account selection signal generated by the user using the peripheral input device 19 to perform a click or select operation. A displayed account, the selected account is the target account. In addition, the input module 120 converts the password input signal generated by the user's operation of inputting letters, numbers, and symbols in sequence by the peripheral input device 19 to generate a password, and may also input the gesture by the user using the peripheral input device 19. The password input signal generated by the operation of selecting a picture or the like is converted into a password, so that the user inputs the password through the peripheral input device 19.

The system call module 130 is responsible for calling the application interface (API) provided by the operating system 11 of the installation application 100, and is responsible for receiving data or signals transmitted by the called application interface, wherein, depending on the requirements, the system The application interface called by the call module 130 will also be different. For example, the system call module 130 can call the application interface of the account to enable the operating system 11 to transmit all of the recorded accounts back to the system call module 130 via the processor 15 of the computing device 10.

For another example, the system call module 130 can call the application interface of the account verification, and provide the input account data provided by the input module 120 to the application through the account verification application interface. The system 11 allows the operating system 11 to determine whether the account information provided by the system call module 130 has passed the verification by the processor 15 of the computing device 10, and can transmit the determination result back to the system call module 130.

That is, the operating system 11 can determine whether the target account in the account data transmitted by the system call module 130 is one of the accounts recorded by the operating system 11 through the processor 15 of the computing device 10, and determine the account data and the target. Whether the password corresponding to the account is the same as the password of the target account recorded by the operating system 11. If the operating system 11 determines that the target account in the account data is not the account recorded by the operating system 11, the operating system 11 can determine that the account data has not passed the verification, and if the operating system 11 determines that the target account in the account data is recorded by the operating system 11 The account number, but the password corresponding to the target account in the account data is different from the password of the target account recorded by the operating system 11, and the operating system 11 can also determine that the account data has not passed the verification. In other words, only the target account in the account system is determined by the operating system 11 as the account recorded by the operating system 11, and the password corresponding to the target account in the account data is the same as the password of the target account recorded in the operating system 11 The system 11 can judge the account data to pass the verification.

It is worth mentioning that in most operating systems 11, the system call module 130 needs to obtain the account information usage right of the operating system 11 to call the account-related application interface provided by the operating system 11. In general, the user can operate the operating system 11 so that the operating system 11 first sets the application 100 to have the account information usage right through the processor 15 of the computing device 10; if the user does not pre-set the application 100 in the operating system 11 When the system call module 130 calls the account-related application interface, the system call module 130 can prompt the user to set the application 100 to the operating system 11 through the peripheral output device 18 of the computing device 10. The account information usage authority or the specific program of the operating system 11 executed by the processor 15 causes the operating system 11 to inquire through the peripheral output device 18 whether the application 100 has the account information usage right. limit. When the user selects to allow the application 100 to have the account information usage right through the peripheral input device 19 of the computing device 10, the operating system 11 can set the application 100 to have the account information usage permission through the processor 15, and vice versa, the operating system 11 Calls to the system call module 130 can typically be rejected. Therefore, before the system call module 130 calls the application program provided by the operating system 11, the user may first determine whether the application 100 has the account information usage right in the operating system 11, for example, provided by the operating system 11. The application interface checks whether the application 100 has the account information usage right or checks the setting value of the application 100 (but the present invention is not limited thereto). If the application 100 has the account information usage right, the system call module 130 can If the application 100 does not have the account information usage right, the system call module 130 can generate and display a prompt message for setting the application server 100 to use the account information; but in reality, the system calls The module 130 can also directly call the application interface provided by the operating system 11 without determining. If the application 100 has the account information usage right, the system call module 130 can directly obtain all the accounts recorded by the operating system 11, and if The application 100 does not have the right to use the account information, then the system calls The module 130 will not be able to obtain any account recorded by the operating system 11. In some embodiments, the operating system 11 can generate an error message or an alert message through the processor and display the generated error message or warning message through the peripheral output device 18. Or, the processor 100 generates a prompt message that the application 100 needs to have the account information usage right and displays the generated prompt message through the peripheral output device 18.

The encryption and decryption module 150 is responsible for encrypting or decrypting the target selected by the target selection module 110 by using the input module 120 to provide the password in the input account data when the system call module 130 receives the determination result indicating that the account data is verified. . If the system call module 130 receives the determination result that the account data has not passed the verification, the encryption and decryption module 150 may reject the operation of encrypting or decrypting the job target selected by the target selection module 110. Wherein, the encryption and decryption module 150 can be used for multiple The industry target is combined and encrypted into one data file, and multiple data files can be separately generated for each job target.

In general, the encryption/decryption module 150 can select to encrypt or decrypt the target object selected by the target selection module 110 according to the definition of the application 100 or the operation of the user, but the creation is not limited thereto.

In some embodiments, the encryption and decryption module 150 may generate a key according to the password in the input account data provided by the input module 120, and may use the generated key to encrypt or decrypt the job target. For example, the encryption and decryption module 150 may generate a key or a trajectory operation of a gesture as a password to generate a key according to the number and/or order of pictures as passwords, but the creation is not limited thereto. .

Next, the operation system and method of the present creation are explained in the first embodiment, and please refer to the flowchart of the method for verifying the password through the operating system to perform encryption and decryption according to the "2A". In this embodiment, it is assumed that the authoring application is in the data backup and restore program, so that all the materials backed up are protected during the backup and restore process.

After the user performs the backup function in the data backup and restore program (application 100), the target selection module 110 can select the job target (step 210). In this embodiment, it is assumed that the user can select all the programs and all the files installed in the operating system 11 through the target selection interface provided by the target selection module 110. The target selection module 110 can install the selected ones of the user. All programs and files in the operating system 11 are targeted for the job.

After the target selection module 110 selects the job target, the input module 120 can provide input account information (step 220). In this embodiment, it is assumed that the system call module 130 can call the application interface provided by the operating system 11 to obtain all the accounts recorded by the operating system 11 (step 222), as shown in the flow of "FIG. 2B". All the obtained accounts can be provided to the input module 120. The input module 120 can display a list of all accounts obtained by the system call module 130, and can provide the user to select one of the accounts as the target account (step 224), and provide user input after the user selects the target account. The password corresponding to the selected target account (step 226), so that the user can complete the input of the account data through the input module 120.

It should be noted that when the system call module 130 can call the application interface provided by the operating system 11 to obtain all the accounts recorded by the operating system 11 (step 222), the system call module 130 needs to obtain the account information usage rights. In this embodiment, the system call module 130 can directly call the application interface provided by the operating system 11. If the user has preset the application 100 to have the account information usage right, the system call module 130 can smoothly call the operation. The application interface provided by the system 11; if the user does not preset the application 100 to have the account information usage right, when the system call module 130 calls the application interface, the operating system 11 can pop up a confirmation window or a dialog box to query the user. Whether the application 100 has the account information usage right, if the user chooses to agree, the system call module 130 can smoothly call the application interface provided by the operating system 11, but if the user selects differently, the application 100 displays an error. The message is closed.

After the input module 120 provides the input account data (step 220), the system call module 130 can call the application interface of the operating system 11 and transmit the input account data provided by the input module 120 to the called application interface. The operating system 11 is configured to enable the operating system 11 to determine whether the target account number and the corresponding password in the account data transmitted by the system call module 130 are verified (step 230), and can be used to call the application called by the system call module 130. The interface passes the determination result back to the system call module 130.

After the system call module 130 obtains the determination result returned by the operating system 11, the encryption and decryption module 150 can determine that the input module 120 provides the input according to the judgment result obtained by the system call module 130. Whether the entered account data has passed the verification (step 240). If the encryption/decryption module 150 determines that the input account data provided by the input module 120 has not passed the verification, the encryption/decryption module 150 will not perform the encryption or decryption operation.

If the encryption/decryption module 150 determines that the input account module provides the input account data for verification, the encryption and decryption module 150 can perform the encryption or decryption operation by using the input module 120 to provide the password in the input account data (step 250). In this embodiment, since the backup function is executed at this time, the encryption and decryption module 150 can perform an encryption operation, and the encryption/decryption module 150 can select the target object selected by the target selection module 110 (installed in the operating system). After all the programs and files in 11 are combined into one file, the input module 120 is used to provide the input password to encrypt the combined file to generate a data file. Thus, the data backup and restore program completes the data backup operation.

When the user wants to restore the backed up data, the restore function in the data backup and restore program (application 100) can be executed, and the target selection module 110 can select the job target (step 210). In this embodiment, it is assumed that the user can select the data file generated by the previous backup through the target selection interface provided by the target selection module 110, and the target selection module 110 can display all the files and programs included in the data file, and provide The user selects, if the user selects two programs and one file, the target selection module 110 can use the program and file selected by the user as the work target.

After the target selection module 110 selects the job target, the input module 120 can provide input account information (step 220). In this embodiment, it is assumed that the user can complete the input of the account data through the input module 120, as in the process of "2B".

After the input module 120 provides input account information (step 220), the system call module 130 can call the application interface of the operating system 11 and input through the called application interface. The module 120 provides the input account data to the operating system 11, so that the operating system 11 can determine whether the target account and the corresponding password in the account data transmitted by the system call module 130 pass the verification (step 230), and can pass through The application interface called by the system call module 130 transmits the determination result back to the system call module 130.

After the system call module 130 obtains the determination result returned by the operating system 11, the encryption and decryption module 150 can determine whether the input account data provided by the input module 120 is verified according to the judgment result obtained by the system call module 130 (step 240). ). If the encryption/decryption module 150 determines that the input account data provided by the input module 120 is verified, the encryption and decryption module 150 can perform an encryption or decryption operation by using the password in the input account data provided by the input module 120 (step 250). In this embodiment, since the restore function is executed at this time, the encryption and decryption module 150 can perform the decryption operation, that is, the input target module 120 provides the input password to decrypt the target object selected by the target selection module 110. That is, the two programs and one file selected by the user are decrypted, and thus the data backup and restore program completes the data restoration operation.

Thus, through the creation, the operating system 11 on the user device of the user can provide the application interface called by the system call module 130 of the author, whether the user performs backup or restore on the same device, or Backup and restore on different devices can be completed smoothly, and there is no problem that the backup data on different devices cannot be decrypted during the restoration.

The operation system and method of the present creation will be explained in the second embodiment. Please refer to "2A". In this embodiment, it is assumed that the present creation is used to protect the data recorded in the database of the application 100, but the creation is not limited thereto.

When the application 100 begins execution, or when the application 100 needs to access the database, the author can be executed to decrypt the database so that the application 100 can access the database. First of all, The target selection module 110 can select a job target (step 210). In this embodiment, the application 100 can define a job target as a database in order to perform data access. Thus, the target selection module 110 can select a database according to the definition of the application 100. For the job target.

After the target selection module 110 selects the job target (step 210), the input module 120 can provide input account information (step 220). In this embodiment, it is assumed that the user can pre-set the account data in the application 100, and the encryption and decryption module 150 can encrypt the account data set by the user and store it. Thus, when the input module 120 needs to provide input account data. The encryption and decryption module 150 can decrypt the account data stored in the application 100 in advance, so that the input module 120 can obtain the decrypted account data, thereby completing the input of the account data.

Thereafter, the system call module 130 can call the application interface of the operating system 11 and transmit the input data of the input module 120 to the operating system 11 through the called application interface, so that the operating system 11 can determine the system call module 130. Whether the target account and the corresponding password in the transmitted account data are verified (step 230), and the judgment result can be transmitted back to the system call module 130 through the application interface called by the system call module 130. In this embodiment, when the system call module 130 calls the application interface of the operating system 11, the system call module 130 needs to obtain the account information usage right, otherwise the operating system 11 will reject the call of the system call module 130, then the system The call module 130 can first determine whether the user has the right to use the account information in the operating system 11 to set the application 100. If the user does not preset the application 100 to have the account information usage right, the system call module 130 can generate and A prompt message is displayed to prompt the user to set the application 100 to have the account information usage right, and after the user setting application 100 has the account information usage permission, it can be determined again whether the user first sets the application 100 to have the account in the operating system 11. Information If the system call module 130 determines that the user has set the application 100 to have the account information usage right, the system call module 130 can smoothly call the application interface provided by the operating system 11 if the user is installing the application. When the program 100 has set the application 100 to have the account information usage right, the system call module 130 can smoothly call the application interface provided by the operating system 11.

After the operating system 11 transmits the determination result to the system call module 130 through the application interface called by the system call module 130, if the encryption and decryption module 150 determines that the input account data provided by the input module 120 has not passed the verification, the application is applied. Program 100 can generate an error message and close.

If the encryption and decryption module 150 determines that the input account module provides the input account data for verification, the encryption and decryption module 150 can use the input module 120 to input the password in the account data to perform an encryption or decryption operation (step 250). In this embodiment, since the application 100 is ready to access the database at this time, the encryption and decryption module 150 can perform the decryption operation according to the definition of the application 100, that is, decrypt the application by using the password input by the input module 120. The database of program 100.

When the application 100 is closed, the author will also be executed to encrypt the database that needs to be protected. First, the target selection module 110 can select a job target (step 210). In this embodiment, the application 100 can also define the job target as a database. Thus, the target selection module 110 can select the database as the job target according to the definition of the application 100.

After the target selection module 110 selects the job target (step 210), the input module 120 can provide input account information (step 220). In this embodiment, it is assumed that the input module 120 can directly use the account data obtained when the decrypted database is used. Alternatively, as shown above, the encryption and decryption module 150 can set the account set by the user in the application 100 in advance. The data is decrypted, so that the input module 120 obtains the decrypted account data to complete the input of the account data.

Thereafter, the system call module 130 can call the application interface of the operating system 11 and transmit the input data of the input module 120 to the operating system 11 through the called application interface, so that the operating system 11 can determine the system call module 130. Whether the target account and the corresponding password in the transmitted account data are verified (step 230), and the judgment result can be transmitted back to the system call module 130 through the application interface called by the system call module 130.

If the encryption and decryption module 150 determines that the input account data provided by the input module 120 is verified, the encryption and decryption module 150 can perform an encryption or decryption operation using the password in the account data input by the input module 120 (step 250). In this embodiment, since the application 100 is ready to be closed at this time, the encryption and decryption module 150 can perform an encryption operation according to the definition of the application 100, that is, using the password input by the input module 120 to encrypt the application 100. database.

Thus, through the creation, the data recorded in the application 100 can be protected, and even if the application 100 is backed up to be executed on a different device, the operating system 11 of the device in which the application is installed provides the application called by the author. Interface, the application library's database can also successfully complete the decryption and encryption operations, and will not be able to access the original data because it is installed on different devices.

In the above two embodiments, when the encryption/decryption module 150 encrypts or decrypts the job target selected by the target selection module 110 by using the password in the account data input by the input module 120 (step 250), the encryption and decryption module 150 may The key is generated according to the password input by the input module 120, and then the key is used to encrypt or decrypt the job target. For example, when the input module 120 provides the input password as a gesture, a picture, or selects a specific option, the encryption and decryption module 150 can be based on the trajectory of the input gesture, the information of the picture, or the information analyzed by the picture, or Select the content of the selected option or the corresponding data to generate the key, and then use the key to encrypt or decrypt the job target.

In summary, it can be seen that the difference between the present creation and the prior art is that the application having the computing device calls the application interface of the operating system running in the computing device after inputting the account data, so that the operating system determines whether the account data passes. Verification, and when the account data is verified, the application uses the password to encrypt or decrypt the target of the job. This technology can solve the security method with high security in the prior art. Only some applications are suitable for use. The problem, in turn, achieves the technical power of making the application encrypted with both security and usability.

Furthermore, the method for verifying passwords through the operating system for encryption and decryption can be implemented in hardware, software or a combination of hardware and software, or can be implemented in a centralized manner in a computer system or distributed in different components. The decentralized implementation of several interconnected computer systems.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

Claims (10)

A computing device for verifying a password through an operating system for encryption and decryption, the computing device comprising: at least one peripheral input device; a bus bar; a processor electrically connected to the peripheral input device through the bus bar for performing a An operating system and an application installed in the operating system, by which an input account data is provided through the peripheral input device, the account data includes a target account recorded by the operating system and a password corresponding to the target account, and Providing the application to select a job target, and providing the application to call an application interface of the operating system, so that the operating system determines whether the account data is verified, and provides the application when the account data is verified. Use this password to encrypt or decrypt the job target. The computing device for verifying a password through an operating system for encrypting and decrypting as described in claim 1, wherein the job target is at least one file in the application or at least one other program or file installed in the operating system. . A computing device for verifying a password through an operating system for encrypting and decrypting as described in claim 1, wherein the processor is to provide the application to call another application interface of the operating system to obtain the record recorded by the operating system. All accounts, and providing one of the account selection signals generated by the application according to the peripheral input device, one of the accounts is selected as the target account, and providing the application with a password generated according to the peripheral input device The input signal generates the password corresponding to the target account. The computing device for verifying a password through an operating system to perform encryption and decryption according to claim 3, wherein the password input signal is provided by the peripheral input device to sequentially input letters, numbers, and symbols, and provide input gestures. Or provide a selection of images to generate. The computing device for verifying a password through the operating system to perform encryption and decryption according to the first aspect of the patent application, wherein the processor is further configured to determine whether the application obtains an account information usage right of the operating system, and the application When the program obtains access to the account information, the application is provided to call the application interface. The computing device for verifying a password for decryption and decryption through an operating system according to claim 1, wherein the processor is further configured to provide the application to generate a key according to the password, and use the key to encrypt or decrypt the key. The job target. The computing device that verifies the password through the operating system to perform encryption and decryption as described in claim 6 of the patent application, wherein the password is the number and/or order of the pictures, or the trajectory of the gesture. A computing device for verifying a password through an operating system for encrypting and decrypting as described in claim 6 wherein the processor provides the application to select the job target according to the setting, or provides the application according to the peripheral input device. The operation signal selects the job target. The computing device for verifying a password for decryption and decryption through an operating system as described in claim 6, wherein the processor is further configured to provide the application to encrypt the account data, so that the application stores the encrypted account data. . The computing device for verifying a password for decryption and decryption through the operating system, as described in claim 9, wherein the processor is further configured to provide the application to decrypt the account data, so that the application obtains the account data.