TWM632837U - Dual authentication device - Google Patents

Abstract

The present invention provides a double verification device. When the user wants to decrypt the first device (for example, a safe), the decryption information is first generated through the double verification device, and then the decryption information is converted into the first password with an algorithm of visual secret sharing. image and the second password image, and respectively transmit the first password image to the user device and the second password image to the first device. Therefore, when the user scans the display module to obtain the second password image through the corresponding user device, the first password image and the second password image can be overlapped and decrypted to obtain The decryption information is used to decrypt the above-mentioned first device. The present invention can solve the potential security concerns that may arise from the single verification mode that directly obtains the decryption information in the past.

Description

double verification device

A verification device, in particular a dual verification device that converts a password into at least two password images for verification through a visual secret sharing (VSS) algorithm.

At present, most of the verification mechanisms are still based on one-time password (OTP), but the security mechanism through one-time password authentication has obvious loopholes until today, for example, hackers will intercept the one-time password that will be used The balance of the account is transferred out.

Moreover, the safe deposit box that many banks provide to the user to store valuables at present is still managed in a traditional manner in which the user and the bank each keep a key respectively. When the user wants to open the safe, the bank must send a representative carrying the key to unlock the safe with the two keys held by the bank and the user. In this way, the bank not only needs to shoulder the responsibility of managing the keys, but also arranges manpower to assist the user to open the safe, which is time-consuming and laborious. However, using the existing one-time password as a security mechanism for managing the safe will have many security problems, resulting in the fact that the current safe cannot be managed in a fully electronic manner.

Accordingly, in view of the security problems existing in the current one-time password and the problem that there is no safe box for electronic management, it has become a problem to be solved in the field.

Specifically, according to an embodiment, the present invention provides a dual authentication device, which is signal-connected to at least one user device and at least one first device, so as to provide a user with a way to decrypt the first device, wherein the first device includes a display The module, the above-mentioned dual verification device includes: a first verification module and a second verification module. The above-mentioned first verification module is connected to the above-mentioned user device by a signal, and is used for receiving a decryption command that the above-mentioned user wants to decrypt correspondingly transmitted by the above-mentioned first device, and generating a decryption information for decrypting the above-mentioned first device. The above-mentioned second verification module is signal-connected to the above-mentioned first verification module and the above-mentioned user device, and uses a visual secret sharing (VSS) algorithm to convert the above-mentioned decrypted information into a first password map and transmit it an image to the user device, and a second password image to the first device. Wherein, the above-mentioned first password image and the above-mentioned second password image are inconsistent. Wherein, the above-mentioned second password image will be displayed on the above-mentioned display module. Wherein, when the above-mentioned user scans the above-mentioned display module to obtain the above-mentioned second password image through the above-mentioned user device, after overlapping and decrypting the above-mentioned first password image and the above-mentioned second password image, The decryption information is generated to allow the user to decrypt the first device through the decryption information.

According to another embodiment, the above-mentioned decryption information is selected from the group consisting of a one-time password (One-time password, OTP) and a graphic password.

According to another embodiment, the decryption information for each decryption of the first device is inconsistent with each other.

According to another embodiment, the above-mentioned user device is a portable device capable of taking pictures or scanning.

According to another embodiment, when the above-mentioned first device belongs to multiple users, the above-mentioned second verification module will transmit the inconsistent first password image to each of the above-mentioned multiple users corresponding to the number of the above-mentioned multiple users. the above-mentioned user device for each user.

According to another embodiment, when the above-mentioned first device belongs to multiple users, one of the above-mentioned multiple users will be used as a representative to scan and obtain the above-mentioned first device displayed on the above-mentioned user device by the other above-mentioned multiple users. A password image and the second password image on the first device are used to obtain the decryption information.

According to another embodiment, the above-mentioned first device further includes an input module to provide an interface for inputting the above-mentioned decryption information.

According to another embodiment, the above-mentioned dual authentication device further includes an image decryption module, which is signally connected to the above-mentioned user device, and the above-mentioned image decryption module has one of the encryption information of the above-mentioned visual secret sharing algorithm, and is used to convert the above-mentioned first A password image and the second password image are superimposed and decrypted according to the encryption rule to generate the decryption information.

According to another embodiment, when the second verification module transmits the first password image to the user device, it will encrypt the first password image with a password.

According to another embodiment, the first password image and the second password image are complementary images.

According to another embodiment, the password is the user's birthday, ID number, mobile phone number or a preset password.

According to another embodiment, the above-mentioned first device is a safe, an escort cash box or a combination lock.

According to the above, the efficacy of the present invention includes: (1) improving the security of existing password management (such as one-time password). (2) Solve the problem that some existing bank businesses (such as safe deposit box business) need to use the keys of the user (depositor) and the bank at the same time to open the safe deposit box. (3) Reduce the manpower required for banking operations (such as escorting cash box personnel and safe deposit box management personnel). (4) The present model can also be applied to cash withdrawal business. For example, the above-mentioned first device can be an automated teller machine (Automated Teller Machine, ATM) to perform cardless cash withdrawal through double verification.

In order to describe various embodiments of the present invention more specifically, the accompanying drawings are used for description below.

Please refer to FIG. 1 . FIG. 1 is a schematic diagram of a first structure of a dual authentication device according to an embodiment of the present invention.

As shown in Fig. 1, according to an embodiment, the present invention provides a two-factor authentication device 100, which is signal-connected to at least one user device 120 and at least one first device 140, so as to provide a user to decrypt the above-mentioned first device 140, wherein the above-mentioned first The device 140 includes a display module 142 , and the dual verification device 100 includes: a first verification module 102 and a second verification module 104 . The above-mentioned first verification module 102 is connected to the above-mentioned user device 120 by a signal, and is used to receive a decryption command that the above-mentioned user wants to decrypt the corresponding transmission of the above-mentioned first device 140, and generate a decryption information for decrypting the above-mentioned first device 140 . The above-mentioned second verification module 104 is connected to the above-mentioned first verification module 102 and the above-mentioned user device 120 by a signal, and converts the above-mentioned decrypted information to generate and transmit a first A password image is sent to the user device 120 , and a second password image is sent to the first device 140 . Wherein, the above-mentioned first password image and the above-mentioned second password image are inconsistent. Wherein, the above-mentioned second password image will be displayed on the above-mentioned display module 142 . Wherein, when the above-mentioned user scans the above-mentioned display module 142 to obtain the above-mentioned second password image through the above-mentioned user device 120, the above-mentioned first password image and the above-mentioned second password image are overlapped and decrypted Afterwards, the decryption information is generated, so that the user can decrypt the first device 140 through the decryption information. The above-mentioned double authentication device 100 can be, for example, a server host, a rented cloud host, or a service device jointly formed by multiple hosts, and has information processing and network connection capabilities. The above-mentioned first device 140 can be, for example, a computer device capable of information processing and network connection, and has space for storing valuables, such as banknotes, gold, and real estate deeds.

According to another embodiment, the above-mentioned decryption information is selected from the group consisting of a one-time password (One-time password, OTP) and a graphic password.

According to another embodiment, the decryption information for each decryption of the first device 140 is inconsistent with each other.

According to another embodiment, the above-mentioned user device 120 is a portable device capable of taking pictures or scanning.

According to another embodiment, when the first device 140 belongs to multiple users, the second verification module 104 will transmit the inconsistent first password image to each user corresponding to the number of the multiple users. The user devices 120 of the plurality of users.

According to another embodiment, when the above-mentioned first device 140 belongs to multiple users, one of the above-mentioned multiple users will be used as a representative to scan and obtain the other above-mentioned multiple users displayed on the corresponding user device 120 After the above-mentioned first password image and the above-mentioned second password image on the first device 140 are obtained, the above-mentioned decryption information is obtained.

According to the specific example of the above embodiments, through the visual secret sharing (VSS) algorithm, the confidential image or data can be converted into multiple random pieces (such as the first password image and the second password image mentioned above). Password image) shared image, shared with multiple participants (such as the aforementioned users), each participant has a shared image, when it is necessary to restore the confidential image, it can be displayed by superimposing the shared images Export confidential information (such as the aforementioned decrypted information). For example, in the case of distributing confidential information to two participants, each pixel on the confidential image will be expanded into a 2×2 image block, resulting in a model as shown in Table 1 (as mentioned above, the minimum The two participants are respectively a user and a first device 140).

 

   

   

       

 

   

   

   

   

   

   

   

   

  Table 1: Examples of visual secret sharing (VSS) models Pixel Extended share 1 (Share1) Extended share 2 (Share2) Stacked Pixel Extended share 1 (Share1) Extended share 2 (Share2) Stacked

As shown in Table 1, when the pixel is a black point (B), choose one column from the left two columns of Table 1 to become the block content in the two pictures, and if it is a white point (W), choose from the combination of the two right columns pick. The content of each block on the picture has only two possible types (BWWB, WBBW), so the proportion of black and white distribution on each image block is the same, and the selected image block is determined randomly, so it cannot Discover the content of confidential information from a single image, thereby achieving the confidentiality and security of information. When superimposing two pictures, the black dot part of the classified image will combine to form a completely black block, while the white dot part will combine to form a half black and half white block, thus producing a 50% color difference contrast.

According to another embodiment, the first device 140 further includes an input module 144 to provide an interface for inputting the decryption information.

Please refer to FIGS. 1-2 at the same time. FIG. 2 is a schematic diagram of a second structure of a dual authentication device according to an embodiment of the present invention.

According to another embodiment, the double authentication device 100 further includes an image decryption module 106, which is signally connected to the user device 120. The image decryption module 106 has encrypted information of one of the algorithms for visual secret sharing, and is used for The above-mentioned first password image and the above-mentioned second password image are superposed and decrypted according to the above-mentioned encryption rules to generate the above-mentioned decryption information.

According to another embodiment, when the second verification module 104 transmits the first password image to the user device 120 , it will encrypt the first password image with a password.

According to another embodiment, the first password image and the second password image are complementary images.

According to another embodiment, the password is the user's birthday, ID number, mobile phone number or a preset password.

According to another embodiment, the above-mentioned first device 140 is a safe, an escort cash box or a combination lock.

According to another embodiment, the first verification module 102, the second verification module 104, the image decryption module 106, the display module 142, and the input module 144 can be implemented by hardware circuits and software, or all of them can be implemented by hardware circuit to achieve.

Please refer to FIG. 3 . FIG. 3 is a flow chart illustrating the implementation of a dual authentication device according to an embodiment of the present invention. Figure 3 includes steps 300-340, which are described in detail below.

In step 300, the user transmits a decryption command to decrypt the first device (security device) through the user device.

In step 310, decryption information for decrypting the first device is generated through the first authentication module.

In step 320, convert the decrypted information to generate a first password image and transmit the second password image to the user device and the second password image to the first device through the algorithm of visual confidentiality sharing through the second verification module.

In step 330, whether the decryption information can be generated after the first encrypted image is superimposed on the second encrypted image and decrypted. If yes, go to step 340a; if not, go to step 340b.

In step 340a, the decryption information is input to decrypt the first device.

In step 340b, the decryption information cannot be obtained to decrypt the first device.

The present invention is only disclosed in preferred embodiments, but anyone familiar with the technical field should understand that the above embodiments are only used to describe the present invention, and are not intended to limit the scope of patent rights claimed by the present invention. All changes or substitutions that are equal or equivalent to the above-mentioned embodiments should be interpreted as falling within the spirit or scope of the present invention. Therefore, the scope of protection of the present invention should be defined by the scope of the following patent application.

100: double authentication device 102: The first verification module 104: The second verification module 106:Image decryption module 120: user device 140: First device 142:Display module 144: input module 300-340: steps

In order to make the above-mentioned technology and other purposes, features, advantages and embodiments of the present invention more obvious and understandable, the accompanying drawings are described as follows: FIG. 1 is a schematic diagram of a first structure of a dual authentication device according to an embodiment of the present invention. FIG. 2 is a schematic diagram of a second structure of a double verification device according to an embodiment of the present invention. FIG. 3 is a flowchart illustrating the implementation of a double authentication device according to an embodiment of the present invention.

100: double authentication device

102: The first verification module

104: The second verification module

120: user device

140: First device

142:Display module

144: input module

Claims (10)

A double authentication device, signally connected to at least one user device and at least one first device, to provide a user to decrypt the first device, wherein the first device includes a display module, including: A first verification module, connected to the user device with a signal, is used to receive a decryption instruction transmitted by the user to decrypt the corresponding transmission of the first device, and generate a decryption information for decrypting the first device; and a second verification module, signally connected to the first verification module and the user device, using a visual secret sharing algorithm to convert the decryption information to generate and transmit a first password image to the user device, and a second password image to the first device, Wherein, the first password image and the second password image are inconsistent, Wherein, the second password image will be displayed on the display module, Wherein, when the user obtains the second password image by scanning the display module through the associated user device, after the first password image and the second password image are superimposed and decrypted, The decryption information is generated so that the user can decrypt the first device through the decryption information. The double authentication device as claimed in claim 1, wherein the decryption information is selected from the group consisting of one-time passwords and graphic passwords. The dual authentication device as claimed in claim 1, wherein the decryption information for decrypting the first device each time is inconsistent with each other. The dual authentication device as claimed in claim 1, wherein the user device is a portable device with a camera or scan function. The double verification device as claimed in claim 1, wherein when the first device belongs to multiple users, the second verification module will transmit the first password images that are inconsistent with each other corresponding to the number of users to the user device of each of the users. The dual verification device as described in claim 5, wherein one of the users is a representative, and obtains the first password image and the first device displayed by other users on the user's device by scanning After the second encrypted image, the decryption information is obtained. The dual authentication device as claimed in claim 1, wherein the first device further includes an input module to provide an interface for inputting the decryption information. The dual authentication device as described in claim 1 further includes an image decryption module, which is signally connected to the user device, and the image decryption module has one of the encryption information of the algorithm for visual secret sharing, and is used for the The first password image and the second password image are superimposed and decrypted according to the encryption rule to generate the decryption information. The dual verification device as claimed in claim 1, wherein when the second verification module transmits the first password image to the user device, it will encrypt the first password image with a password. The double authentication device as claimed in claim 1, wherein the first password image and the second password image are complementary images.

Images