WO2011050514A1

WO2011050514A1 - Security keyboard and authorization usage method thereof

Info

Publication number: WO2011050514A1
Application number: PCT/CN2009/074619
Authority: WO
Inventors: 盛永祥; 邢益涛
Original assignee: Sheng Yongxiang; Xing Yitao
Priority date: 2009-10-26
Filing date: 2009-10-26
Publication date: 2011-05-05
Also published as: CN102667797A; CN102667797B

Abstract

The present invention provides a security keyboard, which includes a control module, a user characteristic collection module and a storage module. When the security keyboard is used, the control module collects the user characteristic through the user characteristic collection module，compares and verifies it with the user characteristic pre-stored in the storage module to determine whether the user is authorized to use the security keyboard. The present invention also provides an authorization usage method of the security keyboard. The application of the security keyboard of the present invention can prevent the information from being stolen, and enhance the information security.

Description

Security keyboard and its authorized use method

[Technical Field]

The present invention relates to a keyboard and an authorized use method thereof, and more particularly to a security keyboard and an authorized use method thereof.

【Background technique】

With the development of information technology, information security is increasingly important. At present, there are various types of hacking passwords on the Internet, such as QQ software hacking passwords. What's more, some people with special purposes write special programs to steal online banking accounts and passwords, causing huge economic losses. Therefore, how to strengthen the protection of information security to avoid information leakage is an important issue faced by technicians.

In the existing computer technology, it is common to use a multi-user and multi-account method to define which users can use which functions in the computer, which is realized by computer software. However, in some cases the above software protection still does not guarantee information security. For example, a user of a computer has logged in. When the user temporarily leaves the computer for some reason, many users forget to log out of the account, or are afraid of trouble and do not want to quit the account, so that during the time of leaving, there may be other Users who do not have access to the computer use the computer to illegally edit important documents using the keyboard, such as tampering with or deleting certain important content.

In view of the deficiencies of the prior art, it is urgent to provide a safe and reliable keyboard and its authorized use method to ensure the security of user data.

[Summary of the Invention]

In order to overcome the security risks existing in the login system in the prior art, the present invention provides a security keyboard and an authorized use method thereof. The invention provides a security keyboard, which comprises a control module, a user feature collection module and a storage module. When the security keyboard is used, the control module collects user features and existing users in the storage module through the user feature collection module. The feature is compared to verify whether the user is authorized to use the secure keyboard.

In an embodiment of the present invention, the security keyboard further includes a storage module, the security keyboard is in communication with the monitoring module in the upper computer, and the monitoring module is configured to monitor a program running in the upper computer. When the running program needs to fill in a password, the control module The password is intercepted and stored in the storage module, and the password is encrypted, and then transmitted to the monitoring module of the upper computer. The monitoring module decrypts the password and fills it into the running program.

In an embodiment of the invention, the user feature collection module collects fingerprint information, iris information or face information of the user.

In one embodiment of the invention, the storage module stores feature information that the user pre-registered for using the secure keyboard.

The invention provides a method for authorizing the use of a security keyboard, the method comprising the steps of: collecting feature information of a user and performing comparison verification with an existing user feature; determining whether the user has the right to use the security keyboard, and when the user passes the verification Allows the user to use the security keyboard, otherwise the user is prohibited from using the security keyboard.

In an embodiment of the present invention, the program running in the upper computer is monitored. When the running program needs to fill in the password, the security keyboard intercepts the password and stores the password, and then encrypts the password and transmits it to the upper computer. After decrypting the machine, fill in the running program.

In one embodiment of the invention, fingerprint information, iris information or facial type information of the user is collected.

In one embodiment of the present invention, feature information pre-registered by a user using a secure keyboard is stored. [Description of the Drawings]

Fig. 1 is a block diagram showing the structure of a security keyboard of the present invention.

2 shows a flow diagram of one embodiment of a security keyboard in which the present invention is used.

Figure 3 shows a flow chart of another embodiment of a security keyboard in which the present invention is used.

Figure 4 shows the trend line of the different user tap key presses.

【detailed description】

Specific embodiments of the present invention will be described in more detail hereinafter with reference to the accompanying drawings. However, the invention may be embodied in different forms and should not be considered limited to the embodiments described herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and the scope of the invention will be fully conveyed by those skilled in the art.

Fig. 1 is a block diagram showing the structure of a security keyboard of the present invention. In Fig. 1, the structural connection relationship of the security keyboard of the present invention is described in detail. The security keyboard 100 includes a monitoring module 112 and a lower device 120 disposed in the upper computer 111, and the upper computer 111 communicates with the lower device 120 via USB. The lower device includes a control module 121, a keyboard 122, a user feature collection module 123, and a storage module 124, wherein the control module 121, the user feature collection module 123, and the storage module 124 are disposed on the keyboard 122.

The host computer 111 in the present invention is usually a computer. The monitoring module 112 is configured to monitor the operation of the host computer 111 and send the monitoring result of the monitoring module to the control module 121 as necessary. Keyboard 122 is used for normal keyboard input. The user feature collection module 123 is configured to collect feature information of the user, and the storage module 124 is configured to store feature information that the user has previously collected and stored using the security keyboard 100 and password information required to log in to certain programs.

In the present invention, when the user needs to input using the keyboard 122, it is necessary to authenticate and obtain authorization, otherwise the user cannot input using the keyboard 122. For example, when the user wants to make When the keyboard 122 is used, the control module 121 collects the feature information of the user through the user feature collection module 123. The control module 121 then analyzes the feature information of the user and performs comparison verification with the user feature information stored and stored in the storage module 124. If the user passes the verification, the user is allowed to use the keyboard 122 for input, otherwise the user is prohibited from using the keyboard 122 for input.

A method of authorizing the use of the security keyboard 100 of the present invention will now be described in detail with reference to FIG. First, the user starts a program in step 201. In step 202, the monitoring module detects that the user starts a program and acquires feature information of the application software, such as the type of the application software, the registration time, and the like, and the monitoring module determines, according to the feature information, whether the application software is protected, that is, uses Does the software require special authorization? When the program is not protected, the user is allowed to freely use the security keyboard 100. When the program is protected, the user is prompted to authorize the use of the secure keyboard 100 in step 203. In step 204, the control module 121 obtains the characteristics of the user through the user feature collection module 123 and determines whether the user is allowed to use the program. When the user passes the authorization verification, the user is allowed to freely use the security keyboard 100 in step 206. When the user does not pass the authorization verification, the user is not allowed to the security keyboard 100 in step 205, and returns to step 203 to prompt the user to re-authorize.

FIG. 3 shows a flow diagram of another embodiment of a security keyboard 100 that is authorized to use the present invention. The security keyboard 100 of the present invention prevents the password from being stolen during transmission from the keyboard to the host computer. When using the security keyboard 100 in accordance with the present invention, in step 301, the user activates a piece of software. In step 302, the monitoring module 112 of the present invention monitors that a software is running on the host computer and determines whether a password is required to log in to the software. If a password is required, the monitoring module 112 establishes communication with the control module 121 on the keyboard 122. In step 303, the monitoring module 112 determines whether the information input by the user is a password according to the position of the cursor in the upper computer. For example, if the current cursor position is in the account filling field, then the content input by the user is not the password. In step 304, the content input by the user is directly transmitted to the upper computer and filled in the account column. If current The position of the cursor is in the password filling field, then the content entered by the user is the password. In the steps

In 305, the control module 121 intercepts the password input by the user and stores the password in the storage module 124, and then encrypts the password. The encryption method is, for example, a non-linear transformation according to a certain formula, and of course, other commonly used encryption methods can also be used. In step 306, the control module 121 transmits the encrypted password to the monitoring module 112. In step 307, the monitoring module 112 decrypts the password and fills in the corresponding password filling field. In step 308, the monitoring module 112 reminds the user whether to confirm the password. If the user thinks that the password is incorrect or wishes to re-set the password, then in step 309, the monitoring module 112 prompts the user to delete the current password and re-enter it, and returns to step 305. If the user confirms the password, then in step 310, the software saves the password and ends the process.

In the embodiment according to the present invention, the user's identity verification is performed by the user feature collection module 123 to collect the feature information of the user, and then perform user identity verification by comparing with the user feature information collected and stored in advance. However, in other embodiments in accordance with the invention, other methods may be used to verify the identity of the user. For example, the user's identity is verified by the user's tendency to change the strength of the keyboard button. Assuming that the user has to tap several keys on the keyboard, such as TIME, the strength of a user may be different each time the above four buttons are tapped, but the trend of the tapping force is the same, which is different from the personal habits. Related. In one chart, the four buttons of T I M E are the horizontal axis, and the tapping force of each button is the vertical axis. The velocity of each button is expressed as a point in the graph, and the points are connected by a straight line. This shows the change in the strength of the user tapping each time they tap. As shown in Fig. 4, it can be judged from Fig. 4 that the two taps represented by the upper two lines are performed by the same person, and the one jumper represented by the next jumper is tapped by another person. In this way, the identity of the user can be verified.

The security keyboard 100 provided by the invention can prevent illegal users from inputting through the keyboard by verifying the identity of the user who uses the keyboard, and does not allow the unauthorized user to use the security keyboard 100 to prevent someone from deliberately tampering with the editing document, thereby protecting the user's data. Safety. And the invention of the invention The full keyboard 100 is simple to implement and convenient to use, and since the authorization is implemented by hardware, the security performance is high and it is not easy to be stolen. Features are not intended to limit the scope of the invention. Any change or singularity that can be easily accomplished by those skilled in the art is intended to be within the scope of the invention. The scope of the invention should be determined by the scope of the claims.

Claims

Rights request

A security keyboard, comprising: a control module, a user feature collection module, and a storage module, wherein when the security keyboard is used, the control module is configured by the user feature collection module The user feature is compared with the existing user features in the storage module to determine whether the user is authorized to use the security keyboard.

The security keyboard according to claim 1, wherein the security keyboard further comprises a storage module, the security keyboard is in communication with a monitoring module in the upper computer, and the monitoring module is configured to monitor the upper computer a running program, when the running program needs to fill in a password, the control module intercepts and stores the password in the storage module, and encrypts the password, and then transmits the monitoring to the upper computer. In the module, the monitoring module decrypts the password and fills in the running program.

The security keyboard according to claim 1, wherein the user feature collection module collects fingerprint information, iris information or face information of the user.

4. The security keyboard according to claim 1, wherein the storage module stores feature information pre-registered by a user for using the security keyboard.

A method for authorizing the use of a security keyboard, the method comprising the steps of: collecting feature information of a user, and performing comparison verification with an existing user feature;

Determining whether the user has the right to use the security keyboard, and allowing the user to use the security keyboard when the user passes the verification, otherwise the user is prohibited from using the security keyboard.

The authorized use method of the security keyboard according to claim 5, wherein the program running in the upper computer is monitored, and when the running program needs to fill in a password, the security keyboard intercepts the password and The password is stored, and then the password is encrypted, transmitted to the host computer, decrypted in the host computer, and filled into the running program.

7. The method for authorized use of a security keyboard according to claim 5, wherein User fingerprint information, iris information or face information.

8. The method of authorized use of a security keyboard according to claim 5, wherein the storage user is feature information pre-registered using the security keyboard.