WO2009018684A1

WO2009018684A1 - The keyboard for encrypting and authenticating against trojan horse with one time key

Info

Publication number: WO2009018684A1
Application number: PCT/CN2007/002383
Authority: WO
Inventors: Kamfu Wong
Original assignee: Kamfu Wong
Priority date: 2007-08-08
Filing date: 2007-08-08
Publication date: 2009-02-12
Also published as: HK1151660A1; CN101933315B; CN101933315A

Abstract

The keyboard for encrypting and authenticating has normal mode and encryption mode. In the normal mode, the information inputted in the keyboard (3) is outputted through the communication interface (4) directly. In the encryption mode, the information inputted in the keyboard (3) is saved on the main chip (1) temporarily. When all the information is inputted, and the mode key (5) is pressed to change the encryption mode to the normal mode, the main chip (1) uses one key (A) which is not used before to encrypt the saved information, and outputs it through the communication interface (4). Because the information is not outputted in the encryption mode, and the information is encrypted by the one-time key before it is outputted. So even the encrypted information is obtained by the Trojan horse of hacker, the information can not be decrypted correctly.

Description

An encrypted authentication keyboard that can be used against Trojan horses with a disposable one-time key

[Technical Field]

The present invention relates to the field of information transmission security, and in particular to an encrypted authentication keyboard for authentication

【technical background】

Due to the current security problems of the general network, there are often incidents of hackers stealing other people's accounts. Some organizations that require high network security, such as financial institutions, use some two-factor authentication methods to combat hackers, such as using security tokens (Token). Device), when the user logs in to the financial institution's server, the security encoder generates a code. In addition to entering the correct user password, the user must enter the correct code to log in to the financial institution's server. These security encoders usually have a built-in key. When used, the security coder generates a security code by complex algorithm calculation according to factors such as time, and uses the same key in the financial institution's server, according to time. The factor is calculated by the same algorithm to generate a code. If the code generated by the financial institution's server is the same as the security code generated by the security codec, the identity of the security coder can be authenticated, and the user password is checked. At the same time, the security code and user password can be authenticated to log in successfully. Although this two-factor authentication method can improve the network security problem, some network security problems are still not properly solved. For example, some hackers use various intrusion methods to place the Trojan horse in the user's computer and connect to the user. When the financial institution's server intercepts the data input by the user on the computer keyboard through the Trojan horse program, including the account number, the account password and the security code input by the user, the hacker immediately logs in to the financial institution's server and steals the data according to the intercepted data. Money in the user's account. Many people I am afraid that my computer may be hacked and installed a Trojan horse program, so I dare not use the financial transaction service of financial institutions. This is an extremely problem to be solved.

[Summary of the Invention]

It is an object of the present invention to provide a keyboard having an encryption authentication function, which can encrypt and output important sensitive data input by a user from a keyboard to prevent these important sensitive materials from being leaked during transmission.

The object of the present invention is to achieve such an encryption authentication keyboard for authenticating identity and encrypting data, characterized in that the main structure of the keyboard includes a main chip (1), a keyboard controller (2), Button (3), communication interface (4), mode button (5), display device (6), the encrypted authentication keyboard has a standard mode and an encryption mode, and in the standard mode, the data input on the button (3) It will be directly output on the communication interface (4). In the encryption mode, the data input on the button (3) will be temporarily saved on the main chip (1). After the input is completed, press the mode button (5) once to switch to the standard mode. The main chip (1) extracts an unused key according to a predetermined program (A) encrypts the temporarily stored data and then outputs it through the communication interface (4).

among them,

The main chip (1) is provided with a CPU and a memory, and is connected with a keyboard controller (2), a communication interface (4), a display device (6) and the like, and operates according to a predetermined program to realize the identity of the authenticated user in the server and Each of the predetermined functions includes encrypting the data input by the user in the encryption mode, displaying the prompt information through the display device (6), transmitting the data through the communication interface (4), and the keyboard controller (2) and each button (3) And the mode key (5) is connected, operates according to a predetermined program, realizes reading the data input by the user through each button (3), and transmits the data input by the user to the main chip (1) for further processing; as well as,

The main chip α) uses the key input by the user in the encryption mode through each button (3) to the key

(Α) Encrypt the input data and transmit it to the server through the communication interface (4). The server decrypts the data using the key (Β) paired with the key (Α) to restore the data input by the user, and Check the content of the data. After checking, the user's identity authentication is successful, and then the server will perform corresponding operations according to the data content.

as well as,

In the encryption mode, the main chip (1) of the encrypted authentication keyboard of the present invention is instantly transmitted by the keyboard controller (2) to the main chip (1) by the main chip (1). The display device (6) instantly displays the data input by the user, and temporarily stores the data in the main chip (1).

When the data temporarily stored in the main chip (1) reaches the specified size, or when the operating mode of the main chip (1) is switched from the encryption mode to the standard mode, the main chip (1) will be from the main chip (1) according to a predetermined program. Extract an unused key (Α) and an index number (C) corresponding to the key (Α), and use the key (Α) to encrypt the data temporarily stored in the encryption mode together with the chip number (D). The ciphertext, and then the ciphertext, the index number (C), the chip number (D), and the like constitute an authentication package, and the authentication package is transmitted to the server through the communication interface (4) output, and the server adopts the key ( Α) The paired key (Β) decrypts the ciphertext to restore the data entered by the user, and after the main chip (1) encrypts the temporarily stored data, the temporarily stored data is deleted, and the piece is deleted. The key (Α) is deleted or discarded or marked as used, so that the key (Α) is not used again by the main chip (1).

This achieves the object of the present invention.

The invention has the advantages that the user can input important information on the keyboard in the encryption mode, and the key data is encrypted by using the one-time key, and then sent out by the keyboard, even if the hacker uses the Trojan horse program to intercept The encrypted data sent from the keyboard is taken, and the content of the important data input by the user cannot be cracked. The keyboard of the present invention is particularly suitable for the online banking service requiring high security, and the account number can be secretly entered through the keyboard of the present invention. , sensitive account information such as account password and amount.

[Description of the Drawings]

1 is a block diagram of a first embodiment of an encrypted authentication keyboard of the present invention; FIG. 2 is a block diagram of a second embodiment of the encrypted authentication keyboard of the present invention; FIG. 3 is an encrypted authentication of the present invention; FIG. 4 is a schematic perspective view of a fourth embodiment of the cryptographic authentication keyboard of the present invention; FIG. 5 is a perspective view of a fifth embodiment of the cryptographic authentication keyboard of the present invention. Figure 6 is a schematic perspective view of a sixth embodiment of the encryption authentication keyboard of the present invention; Figure 7 is a block diagram showing a seventh embodiment of the encryption authentication keyboard of the present invention; FIG. 9 is a schematic perspective view showing the ninth embodiment of the cryptographic authentication keyboard of the present invention. FIG. In the figures, the same numerals represent the same devices and components, and the drawings are schematic for illustrating the main features and configurations of the keyboard of the present invention.

【detailed description】

The method of the present invention will be further described in detail below with reference to the accompanying drawings.

1 is a block diagram of a first embodiment of an encryption authentication keyboard of the present invention. The main structure of the encryption authentication keyboard shown in the figure includes a main chip (1) and a keyboard controller (2). Button (3), communication interface (4), mode button (5), display device (6), wherein the main chip (1) is provided with a CPU and a memory, and a keyboard controller (2), a communication interface (4) ) The display device (6) and the like are connected, operate according to a predetermined program, and realize the identity of the authenticated user in the server and various predetermined functions, including encrypting the data input by the user in the encryption mode, displaying the prompt information through the display device (6), The data is transmitted through the communication interface (4), and the keyboard controller (2) is connected to each button (3) and the mode button (5), and operates according to a predetermined program, so that the reading user inputs through each button (3). Data, the user input data is transferred to the main chip (1) for further processing; and, the main chip (1) will input the data input by the user through each button (3) in the encryption mode, and input with the key (A) The data is encrypted, and then transmitted to the server through the communication interface (4>, and the server uses the key (B) paired with the key (A) to decrypt the data and restore the data input by the user, and check the data content, check After the error is correct, the user's identity authentication is successful, and then the server will perform corresponding operations according to the data content.

among them,

The communication interface (4) may be a wireless communication device, or a wired communication device, or a Bluetooth device, or an infrared device, or a USB interface, or an RS-232 interface, or a PS2 keyboard interface.

Continuing to refer to FIG. 1, the main chip (1) shown in the figure further includes a unique chip number (D), and is provided with a plurality of keys (A) and a plurality of index numbers (C), each of which The index number (C) corresponds to a key (A), and each index number (C) is different from each other.

In addition, the working mode of the main chip (1) of the cryptographic authentication keyboard of the present invention includes a standard mode and an encryption mode, wherein, in the standard mode, the data input by the user on the button (3) is immediately controlled by the keyboard controller (2) Transferred to the main chip (1), the main chip (1) directly transfers the data input by the user to the communication interface (4) output; in the encryption mode, the data input by the user on the button (3) is instantly controlled by the keyboard The device (2) is transferred to the main chip (1), and the main chip (1) displays the data input by the user through the display device (6), and temporarily stores the data in the main chip (1); When the working mode of the main chip (1) is switched from the encryption mode to the standard mode When the data temporarily stored in the main chip (1) reaches the specified size, for example, when the size of the temporarily stored data is 16 bytes, the main chip (1) will be from the main chip (1) according to a predetermined program. Extract an unused key (A) and an index number (C) corresponding to the key (A), and use the key (A) to encrypt the data temporarily stored in the encryption mode together with the chip number (D). The ciphertext, and then the ciphertext, the index number, the chip number (D), and the like constitute an authentication package, and the authentication package is output to the server through the communication interface (4), and the main chip (1) will temporarily store the data. After encryption, the key (A) is deleted or discarded or marked as used, so that the key (A) is not used again by the main chip (1).

On the server side, there are multiple authentication accounts in the server, and each authentication account corresponds to a main chip of the keyboard (1), and the chip number (D) of the main chip (1) corresponding to the account is stored in the authentication account and one Account password, each authentication account stores multiple keys (B) and multiple index numbers (C), and each index number (C) corresponds to one key (B).

as well as,

The key (B) in each authentication account is paired with the key (A) in the main chip (1) corresponding to the account, and each key (B) has a matching key (A). Each pair of paired keys (A) and keys (B) have the same index number (C).

In terms of setting, before using the encrypted authentication keyboard of the present invention, an authentication account is opened in the server in advance, and the server generates a plurality of pairs of keys and a plurality of sequential index numbers (C) in a random manner by various methods, each pair The key is assigned an index number (C), and then each pair of keys is stored in the main chip (1) and the authentication account of the encrypted authentication keyboard together with the assigned index number (C), and stored in the main chip (1). It is called the key (A), and the key (B) stored in the authentication account. If the encryption algorithm used is an asymmetric cryptographic algorithm, the key (A) and the key (B) are pairs of each other. Key, if the encryption algorithm used is a symmetric cryptographic algorithm, the key (A) The key (B) is a pair of identical keys. When one of the keys (A) is encrypted, the data can be decrypted using the key (B) paired with the key (A). In terms of encryption and decryption algorithms, various algorithms can be used, such as Data Encryption Standard (DES), Triple Data Encryption Standard (Triple-DES), RSA algorithm (RSA algorithm), one-time password ( One Time Pad), Public Key Infrastructure (PKI) and other algorithms can well achieve the object of the present invention.

Continuing to refer to FIG. 1, the mode key (5) shown in the figure is mainly used to select the working mode of the main chip (1). In the standard mode, when the user presses the mode key (5) once, the main chip (1) is immediately Switching the operating mode to the encryption mode, and when the user presses the mode button (5) once, the main chip (1) immediately switches the operating mode to the standard mode.

The main chip (1) of the keyboard of the present invention is further provided with an unlock password. Before the working mode of the main chip (1) is switched from the standard mode to the encryption mode, the user must input the correct unlock password through the button (3), the main chip ( 1) Switch the working mode to the encryption mode. This further enhances the security of the cryptographic authentication keyboard of the present invention.

The cryptographic authentication keyboard of the present invention can be applied to terminals that need to transmit important data to a server, such as a computer, a mobile phone, a set top box remote controller, etc., and the terminal and the server are provided by the user using the cryptographic authentication keyboard of the present invention. When connecting, when inputting some important information, such as account number, password, payment amount, service confirmation information, etc., you can switch the keyboard to the encryption mode, and then input the important data on the keyboard. After the input is completed, the user only needs to press the mode once. The key (5), the main chip (1) encrypts the data input by the user into an authentication data package and transmits it to the server. The server receives the authentication data output by the main chip of the keyboard (1) through the communication interface (4). In the package, find the ciphertext, index number (C), chip number (D) from the contents of the authentication package, and find the authentication account corresponding to the chip number (D) in the server from the chip number (D). The user extracts a key (B) from the authentication account with the index number (C) to decrypt the ciphertext and restore the data and chip number (D) input by the user. After the decryption succeeds, the chip number (D) is checked. After the error is correct, the server can confirm that the authentication package is from the main chip that owns the chip number (D).

(1) If the server issues the data, the key (B) will be deleted or discarded or marked as used, so that the key (B) will not be used by the server again.

In this specification, a server refers to a host of a computer to be accessed by a user, such as a server of various types of online banking, a database server, an email server, and the like, a computer host or a computer system or a computer program that requires authentication of a user. In addition, when the encrypted authentication keyboard outputs the encrypted data to the server, the encrypted data is transmitted to the server through a device including a terminal connected to the encrypted authentication keyboard, a network, etc., for convenience of explanation, relevant in this specification. The description is omitted and is simply summarized as outputting data to the server.

Referring to FIG. 2, FIG. 2 is a block diagram showing a second embodiment of the cryptographic authentication keyboard of the present invention. The main structure of the main chip (1) shown in the figure includes a key card (101) and an interface circuit (102). And a connector (103), wherein the key fob (101) is a separate component separated from other components, and the interface circuit (102) is connected through the connector (103), the interface circuit (102) Connected to the keyboard controller (2), communication interface (4), mode button (5), display device (6) and other components, the key card (101) is equipped with CPU and memory, chip number (D), and more Strip key

(A) and a plurality of index numbers (C), and the connector (103) may be a USB interface connector, or an SD memory card interface connector, or a MINI-SD memory card interface connector, or an MMC Memory card interface connector, or interface connector for memory card or memory card device such as RS-MMC memory card interface connector.

The second embodiment is different from the first embodiment in that, in the second embodiment, the main chip (1) is divided into two parts, a key card (101) and an interface circuit (102). Interface power The part of the road (102) and the keyboard controller (2), the button (3), the communication interface (4), the mode button (5), the display device (6), etc. are disposed in the keyboard, and through the connector (103) The key card (101) is plugged in. When the key card (101) is plugged into the keyboard through the connector (103), the user can encrypt the input data through the key card (101) in the encryption mode. The design of the keyboard and the key card (101) is different, so that different people can use the same encrypted authentication keyboard. As long as the user inserts his own key card (101) into the keyboard, the keyboard becomes the user immediately. The personal encryption authentication keyboard, after the use of the key card (101) is pulled out of the keyboard, the keyboard can be used by others.

3 to FIG. 5, FIG. 3 is a schematic perspective view showing the third embodiment of the encrypted authentication keyboard of the present invention, and FIG. 4 is a schematic perspective view showing the fourth embodiment of the encrypted authentication keyboard of the present invention. 5 is a schematic perspective view of a fifth embodiment of the cryptographic authentication keyboard of the present invention, and FIGS. 3 to 5 respectively show an example in which the present invention is applied to a terminal device, including the computer keyboard and the diagram shown in FIG. The mobile phone keyboard shown in Fig. 4, the set top box remote control keyboard shown in Fig. 5, and the like. The above examples are used to illustrate the features of the present invention. The cryptographic authentication keyboard of the present invention can be applied to all devices having a keyboard for inputting data by the user. Without departing from the spirit of the present invention, the implementation details can be adjusted, for example, The main chip (1) of the broken line portion shown in FIG. 1 and the keyboard controller (2) are combined into one controller, and for example, the interface circuit (102) and the connector of the broken line portion shown in FIG. 2 are 103) Combining with the keyboard controller (2) or the like as a controller, or combining the main chip (1), the keyboard controller (2), the communication interface (4), etc. into one unit, can also realize the present invention well The purpose is all within the scope of protection of the present invention.

Referring to FIG. 6, FIG. 6 is a schematic perspective view of a sixth embodiment of the cryptographic authentication keyboard of the present invention, showing a portable small wireless keyboard, the main structure of the sixth embodiment and the second embodiment. Basically the same, except the communication of the encrypted authentication keyboard of the sixth embodiment The interface (4) is an interface using a wireless communication method, and may be an infrared device, a Bluetooth device, or a wireless communication device used with a smart card wireless reader, or other wireless communication device. The encryption authentication keyboard of this embodiment can be used for identity authentication purposes of bank cards such as credit cards and debit cards. The key card αου shown in FIG. 6 is a bank card issued by a financial institution, including various credit cards and loans. A bank card such as a card is used in conjunction with an encrypted authentication keyboard and a store POS. When paying, put the key card (101) into the connector (103) of the encrypted authentication keyboard, input the bank account password and amount, encrypt the data input by the user by the encrypted authentication keyboard, and then put the card on the POS machine to read the card. The encrypted data is transmitted to the bank's accounting server through the POS machine, and the bank's accounting server decrypts the encrypted data and checks the data content to verify the identity of the cardholder. After the verification is successful, the bank performs the relevant payment. operating.

Referring to FIG. 7, FIG. 7 is a block diagram showing a seventh embodiment of the cryptographic authentication keyboard of the present invention. The structure of the cryptographic authentication keyboard further includes a storage device interface (7). The device interface (7) is connected to the external storage device (8), and is mainly used for storing the authentication package through the storage device interface (7) to the external storage device (8), and the storage device (8) Including various types of USB memory devices, SD memory cards, Mini-SD memory cards, MMC memory cards, RS-MCC memory cards and other memory devices. The encrypted authentication keyboard of this embodiment can store the encrypted data, that is, the authentication data packet, through the communication interface (4), and can store the authentication data package in the storage device (8), and then transmit it to the server through other channels. .

Referring to FIG. 8, FIG. 8 is a schematic perspective view of the eighth embodiment of the cryptographic authentication keyboard of the present invention. The present embodiment is different from the previous embodiments in that the display of the cryptographic authentication keyboard of the eighth embodiment is different. The device (6) is externally connected to the encryption authentication keyboard. The display device (6) is both a display of the computer (9) and a display device (6) for encrypting the authentication keyboard, as shown in FIG. (6) Connected to the encrypted authentication keyboard via cable (601) The display device (6) is connected to the display interface of the computer (9) through another cable (602), and the communication interface (4) of the encrypted authentication keyboard is connected to the keyboard interface of the computer (9) through the keyboard cable (401). Connection, in the standard mode of the encryption authentication keyboard, the data input on the button (3) will be directly output to the computer (9) in the communication interface (4); in the encryption mode, the data input on the button (3) will Immediately transmitted from the keyboard controller (2) to the main chip (1), the input data is instantly transmitted to the display device (6) by the main chip (1), and the main chip (1) temporarily stores the input data. In the main chip (1), when the display device (6) receives the data transmitted from the encrypted authentication keyboard, the display device (6) immediately displays the received data on the screen of the display device (6) according to a predetermined program. When the encrypted authentication keyboard is switched back to the standard mode, the display device (6) ends the display of the data transmitted by the encrypted authentication keyboard. The advantage of this embodiment is that the display of the original computer (9) is used as the display device (6). The general computer display is provided with a processor and a memory device, etc., as long as an interface is added in the display to receive the encrypted authentication keyboard. The data output in the secret mode is OK, so that the encryption of the authentication keyboard can reduce the cost of setting the display, and the screen of the computer (9) has a larger screen area and can display more input data. The object of the present invention can be well achieved regardless of whether the display device (6) of the encrypted authentication keyboard is externally connected to the computer (9) display or the manner of the foregoing embodiments. The scope of protection.

Referring to FIG. 8, FIG. 8 shows that the embodiment can be further improved. The cable (601) can be incorporated into the keyboard cable (401) and the cable (602), that is, one more group is added to the original keyboard cable (401). Wiring and pins, and a set of such wiring and pins are added to the cable (602). This additional set of wiring and pins is the wiring and pins of the original cable (601), and then through the computer (9). The additional set of wires and pins are connected from the keyboard interface to the display interface, which reduces the number of cables that are externally wired to the encrypted authentication keyboard, although a new set of wires and pins are added. It is connected to the display through the computer (9), but this additional set of wiring and pins is physically separated from the internal motherboard of the computer (9) for security. The incorporation of the cable (601) into the keyboard cable (401) and the cable (602) achieves the objects of the present invention well and is within the scope of the present invention.

Referring to FIG. 9, FIG. 9 is a schematic perspective view of a ninth embodiment of the cryptographic authentication keyboard of the present invention. The present embodiment is different from the eighth embodiment in that the cryptographic authentication keyboard of the embodiment is disposed at On a notebook computer, the display screen of the notebook computer is a display device (6) for encrypting the authentication keyboard, the notebook computer is equal to the computer (9) in the eighth embodiment, and the encryption authentication keyboard and the computer (9) are integrated. As shown in FIG. 9, the components of the encrypted authentication keyboard and the computer (9) and the display device (6) constitute a notebook computer, and their operation modes and functions are the same as those of the eighth embodiment, and the present invention can be well realized. The purpose is all within the scope of protection of the present invention.

The cryptographic authentication keyboard of the invention has the advantages of simple structure, easy operation, safety and reliability, low cost, and can effectively counter the Trojan horse program, and ensures that some important data input through the terminal keyboard can be safely transmitted to the server, especially for some online banking services. It is also suitable for servers that involve confidential information, and its implementation will bring good social and economic benefits.

Claims

Rights request

An encrypted authentication keyboard for authenticating an identity and encrypting data, characterized in that: the main structure of the encrypted authentication keyboard comprises a main chip (1), a keyboard controller (2), and a button

(3), communication interface (4), mode key (5), display device (6), the encrypted authentication keyboard, has a standard mode and an encryption mode, in the standard mode, the data input on the button (3) will Directly output on the communication interface (4). In the encryption mode, the data input on the button (3) is temporarily saved on the main chip (1). After the input is completed, press the mode button once.

(5) When switching to the standard mode, the main chip (1) extracts an unused key according to the predetermined program (A) Encrypts the temporarily stored data and outputs it via the communication interface (4).

2. The cryptographic authentication keyboard according to claim 1, wherein the main chip (1) is provided with a CPU and a memory, and is associated with a keyboard controller (2), a communication interface (4), a display device (6), and the like. Connect, operate according to a predetermined program, realize the identity of the authenticated user in the server and various predetermined functions, including encrypting the data input by the user in the encryption mode, displaying the prompt information through the display device (6), and transmitting the data through the communication interface (4) And, the keyboard controller (2) is connected with each button (3) and the mode button (5), operates according to a predetermined program, and reads data input by the user through each button (3), and transmits the data input by the user. Go to the main chip (1) for further processing;

as well as,

The main chip (1) encrypts the input data by the key (A) in the data input by the user through the keys (3) in the encryption mode, and transmits the data to the server through the communication interface (4), which is used by the server and the secret The key (B) paired with the key (A) decrypts the data and restores the input by the user. The information, and check the content of the data, after verifying that the user's identity authentication is successful, then the server will perform the corresponding operation according to the data content.

The cryptographic authentication keyboard according to claim 1 or 2, wherein the communication interface (4) is a wireless communication device, or a wired communication device, or a Bluetooth device, or an infrared device, or a USB interface. , or RS-232 interface, or PS2 keyboard interface.

The cryptographic authentication keyboard according to claim 1 or 2, wherein the main chip

(1) Also included is a unique chip number (D).

(1) There are multiple keys (A) and multiple index numbers (C), each index number (C) corresponds to one key (A), and each index number (C) is different from each other. .

6. The cryptographic authentication keyboard according to claim 1 or 2, wherein in the encryption mode, the data input by the user on the button (3) is immediately transmitted by the keyboard controller (2) to the main chip (1). The main chip (1) displays the data input by the user through the display device (6), and temporarily stores the data in the main chip (1).

7. The cryptographic authentication keyboard according to claim 1, wherein the mode key (5) is mainly used to select an operation mode of the main chip (1), and in the standard mode, when the user presses the mode key once ( 5) After the main chip (1) immediately switches the working mode to the encryption mode, and, When the user presses the mode button (5) once, the main chip (1) immediately switches the operating mode to the standard mode.

The cryptographic authentication keyboard according to claim 1 or 2 or 7, wherein when the data temporarily stored in the main chip (1) reaches a specified size, or the working mode of the main chip (1) When switching from the encryption mode to the standard mode, the master chip α) extracts an unused key (Α) from the main chip (1) and an index number (C) corresponding to the key (Α) according to a predetermined program. The key (Α) encrypts the data temporarily stored in the encryption mode together with the chip number (D) into a ciphertext, and then composes the ciphertext, the index number, the chip number (D), etc. into the authentication package, and the authentication is performed. The data packet is output to the server through the communication interface (4), and after the main chip (1) encrypts the temporarily stored data, the temporarily stored data is deleted, and the key is deleted.

(Α) Delete or discard or mark as used so that the key (Α) will not be used again by the main chip ( 1).

The cryptographic authentication keyboard according to claim 8, wherein the structure of the encrypted authentication keyboard further comprises a storage device interface (7), the storage device interface (7) and an external storage device ( 8) The connection is mainly used for storing the authentication package through the storage device interface (7) to the external storage device (8), and the storage device (8) includes various USB memory devices, SD memory cards, Mini-SD memory card, hidden C memory card, RS-MMC memory card and other memory devices.

10. The cryptographic authentication keyboard according to claim 1 or 2 or 7, wherein the main chip (1) is further provided with an unlock password, and the working mode of the main chip (1) is cut by a standard mode. Before switching to the encryption mode, the user must enter the correct unlock password by pressing the button (3), and the main chip (1) switches the working mode to the encryption mode.

11. The cryptographic authentication keyboard according to claim 1 or 2 or 3 or 4 or 5 or 6 or 7 or 8 or 9 or 10, wherein said main chip (1) main structure comprises a key card (101), interface circuit (102), connector (103), wherein the key card (101) is separate, separate from other components, and the interface circuit (102) is through the connector (103) Connected, the interface circuit (102) is connected to the keyboard controller (2), the communication interface (4), the mode key (5), the display device (6), etc., and the key card (101) is provided with a CPU and a memory. , chip number (D), multiple keys (A) and multiple index numbers (C).

12. The cryptographic authentication keyboard of claim 11, wherein the connector (103) is a USB interface connector, or an SD memory card interface connector, or a MINI-SD memory card interface connector, Or MMC memory card interface connector, or RS-MMC memory card interface connector.

The cryptographic authentication keyboard according to claim 11, wherein the key card (101) is a bank card issued by a financial institution, and includes bank cards such as various credit cards and debit cards, and is matched at the time of payment. Encrypted authentication keyboard is used. A server, in combination with an encryption authentication keyboard, is used for user identity authentication, wherein the server is provided with a plurality of authentication accounts, and each authentication account corresponds to a main chip of the keyboard (1), and the authentication account is Storing the main chip (1) corresponding to the account Chip number (D) and an account password, each authentication account stores multiple keys (B) and multiple index numbers (C>, each index number (C) corresponds to a key (B), and

The key (B) in each authentication account is paired with the key (A) in the main chip (1) corresponding to the account, and each key (B) has a matching key (A). Each pair of paired keys (A) and keys (B) have the same index number (C). The server according to claim 14, wherein each time the server receives the authentication data packet outputted by the main chip (1) of the keyboard through the communication interface (4), the ciphertext is found from the content of the authentication data package. , index number (C), chip number (D), from the chip number (D), find the authentication account corresponding to the chip number (D) in the server, and extract one from the authentication account with the index number (C) The key (B) decrypts the ciphertext and restores the data and chip number (D) input by the user. After the decryption is successful and the chip number (D) is verified, the server can confirm that the authentication packet is from the own chip number ( D) is issued by the main chip (1), and after the server decrypts the data, the key (B) is deleted or discarded or marked as used, so that the key (B) will not be used again. Used by the server.