WO2017008631A1 - 信息输入方法和系统、用户设备和终端 - Google Patents

信息输入方法和系统、用户设备和终端 Download PDF

Info

Publication number
WO2017008631A1
WO2017008631A1 PCT/CN2016/087468 CN2016087468W WO2017008631A1 WO 2017008631 A1 WO2017008631 A1 WO 2017008631A1 CN 2016087468 W CN2016087468 W CN 2016087468W WO 2017008631 A1 WO2017008631 A1 WO 2017008631A1
Authority
WO
WIPO (PCT)
Prior art keywords
trusted device
user equipment
information
user
near field
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/087468
Other languages
English (en)
French (fr)
Inventor
王磊
沈凌楠
朱兴
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Publication of WO2017008631A1 publication Critical patent/WO2017008631A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G06F21/35—User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly

Definitions

  • the present application relates to the field of information security technologies, and in particular, to an information input method and system, user equipment, and a terminal.
  • the user uses a password input device provided by another person to input a password, but other people's devices are still vulnerable to attack, destruction, modification, etc., for example, the input device may be modified to record the password when the user inputs a password. , resulting in a password leak.
  • the present application aims to solve at least one of the technical problems in the related art to some extent.
  • an object of the present application is to provide an information input method, which can improve the security of information input and reduce the possibility of user information being stolen.
  • Another object of the present application is to propose a user equipment.
  • Another object of the present application is to propose a terminal.
  • Another object of the present application is to propose an information input system.
  • the information input method of the first aspect of the present application includes: the user equipment establishes a near field communication connection with the non-trusted device; the user equipment receives the information input by the user, and passes the information through the The near field communication connection is sent to the non-trusted device to implement information input to the non-trusted device.
  • the information input method proposed by the embodiment of the first aspect of the present application receives the information input by the user equipment and sends the information to the non-trusted device, and can input the information directly from the traditional user to the non-trusted device, and change the content to the user.
  • the user equipment is input to the non-trusted device. Since the user does not directly contact the non-trusted device, the user device is in contact with the user. Since the user device is the user's own device, the non-trusted device that is usually provided by another person may Improve trustworthiness, which can improve the security of information input and reduce the possibility of user information being stolen.
  • the information input method of the second aspect of the present application includes: establishing a near field communication connection between the non-trusted device and the user equipment; and receiving, by the non-trusted device, the near-field communication by the user equipment The transmitted input information is connected, and the input information is input by the user through the user device.
  • the non-trusted device receives the information input by the user transmitted by the user equipment, and the information is input by the user into the user equipment instead of the non-trusted device, thereby improving Information security.
  • the user equipment provided by the embodiment of the third aspect of the present invention includes: a connection module, configured to establish a near field communication connection with the non-trusted device; and a transmission module, configured to receive information input by the user, and Information is sent to the non-trusted device over the near field communication connection to enable information input to the non-trusted device.
  • the user equipment of the second embodiment of the present application receives the information input by the user and sends the information to the non-trusted device, and can input the information directly from the traditional user to the non-trusted device, and change the user to the user.
  • the device is input to the non-trusted device. Since the user does not directly contact the non-trusted device, the user device is in contact with the user. Since the user device is the user's own device, it can be improved compared to the non-trusted device usually provided by others. Trustworthiness, which can improve the security of information input and reduce the possibility of user information being stolen.
  • the terminal belongs to a non-trusted device, and the terminal includes: a connection module, configured to establish a near field communication connection with the user equipment; and a receiving module, configured to receive The input information sent by the user equipment through the near field communication connection, and the input information is input by a user through a user equipment.
  • the terminal proposed by the embodiment of the fourth aspect of the present invention receives the information input by the user transmitted by the user equipment. Since the information is input by the user into the user equipment of the user rather than the non-trusted device, the security of the information can be improved.
  • the information input system proposed by the embodiment of the fifth aspect of the present invention includes: the user equipment as shown in the third aspect, and the terminal as shown in the fourth aspect.
  • the information input system of the fifth embodiment of the present application when the user inputs information on the user equipment, and the user equipment sends the information to the non-trusted device, thereby preventing the user from directly contacting the non-trusted device, thereby improving information input. Security, reducing the possibility of user information being stolen.
  • FIG. 1 is a schematic flow chart of an information input method according to an embodiment of the present application.
  • FIG. 2 is a schematic flow chart of an information input method according to another embodiment of the present application.
  • FIG. 3 is a schematic flow chart of an information input method according to another embodiment of the present application.
  • FIG. 4 is a schematic structural diagram of a user equipment according to another embodiment of the present application.
  • FIG. 5 is a schematic structural diagram of a user equipment according to another embodiment of the present application.
  • FIG. 6 is a schematic structural diagram of a terminal according to another embodiment of the present application.
  • FIG. 7 is a schematic structural diagram of a terminal according to another embodiment of the present application.
  • FIG. 8 is a schematic structural diagram of an information input system according to another embodiment of the present application.
  • FIG. 1 is a schematic flowchart of an information input method according to an embodiment of the present application, where the method includes:
  • S11 The user equipment establishes a near field communication connection with the non-trusted device.
  • a non-trusted device is a device whose security needs to be improved relative to a user.
  • a non-trusted device is usually a device that is not used by the user, but is a device provided by a third party.
  • Non-trusted devices are for example: ATM or POS.
  • the user equipment establishes a near field communication connection with the non-trusted device, including:
  • the user equipment After the user equipment enters the near field sensing area of the non-trusted device, the user equipment The non-trusted device sends a triggering instruction for establishing a near field communication connection, or the user equipment receives a triggering instruction sent by the non-trusted device to establish a near field communication connection;
  • the user equipment establishes a near field communication connection with the non-trusted device according to the triggering instruction.
  • the user equipment is a mobile phone
  • the non-trusted device is a POS.
  • the mobile phone can actively send a trigger command to establish a near field communication connection to the POS, and the POS agrees to establish the mobile phone and the POS.
  • a near field communication connection can be established.
  • the POS can actively send a trigger command to the mobile phone, and the mobile phone and the POS can establish a near field communication connection after the mobile phone agrees.
  • a preset app (such as a security input program) can be installed in the mobile phone, and the mobile phone actively initiates a trigger instruction or receives a trigger instruction by the user's operation on the app.
  • the user equipment receives information input by the user, and sends the information to the non-trusted device through the near field communication connection, so as to implement information input to the non-trusted device.
  • the user equipment receives information input by the user, including:
  • the user equipment presents an information input interface to the user, and receives information input by the user in the information input interface, where the information input interface is a security keyboard.
  • the security keyboard is a virtual keyboard. When information input is required, it can be popped up and displayed on the user interface. The order of the keys displayed on the security keyboard is dynamically changed, thereby improving security.
  • the user can also input information through a physical button on the user equipment or an input method keyboard provided by the user equipment.
  • the prompt interface may be displayed on the user equipment, for example, prompting the user to input information.
  • the information input interface is displayed to the user.
  • the prompt interface may include an input box for inputting information.
  • the user sees the prompt interface and clicks the input box, if the user inputs using the physical button on the user device, the physical button input may be directly used; or, If the information input interface is in the form of software, such as an input interface of the input method or a security keyboard, the user can trigger the user equipment to display the information input interface after clicking the input box.
  • the information input by the user is, for example, a password, a verification code, an identification number, and the like that require secure input.
  • the user inputs a password on the user equipment. Since the user equipment is the user's own device, it is difficult for the non-trusted device such as ATM to be maliciously modified, or the user is easy to send. Now that its own device has been maliciously modified, the user can input information on the user device to improve the security of information input compared to inputting information on non-trusted devices such as POS and ATM.
  • the password in this embodiment is not limited to the commonly used digital password, and may also be a password in the form of graphics, pictures, or the like.
  • the method can be applied to a password input application of a non-trusted device.
  • the non-trusted device requires the user to input a password
  • the user device initiates or initiates a user device according to a connection trigger command initiated by the non-trusted device.
  • the user can take the mobile phone to enter the near field sensing area of the POS. After the mobile phone enters the near field sensing area of the POS, the mobile phone and the POS can establish a near field communication connection.
  • a predetermined app such as a secure input program
  • a prompt interface may be popped up in the app, prompting the user to input safely, and after the user determines to adopt the security input, the information may be popped up again.
  • Input interface (such as a security keyboard), after which the user can enter the password through the security keyboard.
  • the trigger command for triggering the establishment of the near field communication connection includes an instruction to invoke the information input interface, or, after establishing the near field communication connection, Prompt the user to start the information input interface.
  • the user equipment sends the information input by the user to the non-trusted device through the near field communication method.
  • the non-trusted device is a POS
  • the user directly inputs information into the POS.
  • the user does not directly input information to the POS, but the user inputs the information to the user first.
  • the user equipment is sent to the POS through a communication connection.
  • the non-trusted device Since the non-trusted device is the received message, it is not the explicit information when the user directly inputs. Therefore, even if the non-trusted device is installed with a malicious camera or the like, the information transmitted in the message cannot be stolen, thereby improving the information. safety.
  • the method may further include:
  • the information in the preset format may be specifically sent to the non-trusted device when the information is sent.
  • the preset format is pre-negotiated by the user equipment and the non-trusted device.
  • the preset format may enable the information in the preset format obtained by the user equipment to be recognized only by the non-trusted device. Since other devices cannot recognize this information, thereby reducing theft, further improving security.
  • the user input information is received by the user equipment and sent to the non-trusted device, and the information input can be directly input from the traditional user to the non-trusted device, and the user is input to the non-trusted device through the user device. Because the user does not directly contact the non-trusted device, the user device is in contact with the user. Since the user device is the user's own, the trustworthiness can be improved relative to the non-trusted device usually provided by others, thereby improving The security of information input reduces the possibility of user information being stolen.
  • FIG. 2 is a schematic flowchart of an information input method according to another embodiment of the present application, where the method includes:
  • the non-trusted device establishes a near field communication connection with the user equipment.
  • the non-trusted device After the user equipment enters the near field sensing area of the non-trusted device, the non-trusted device sends a triggering instruction to establish the near field communication connection to the user equipment, or the non-trusted device Receiving, by the user equipment, a triggering instruction for establishing a near field communication connection; the non-trusted device establishing a near field communication connection with the user equipment according to the triggering instruction.
  • the non-trusted device is, for example, a POS or an ATM, and the user device refers to the user's own device, such as a mobile phone.
  • the non-trusted device receives input information sent by the user equipment by using the near field communication connection, where the input information is input by a user through a user equipment.
  • the input information is information that needs to be input securely.
  • the input information is a password, an ID number, or a verification code.
  • the process of establishing a near field communication connection between the non-trusted device and the user equipment may specifically include: when the non-trusted device requires the user to input a password, initiate a trigger connection trigger instruction to the user equipment or receive the user equipment.
  • the initiated connection triggers an instruction and establishes a near field communication connection between the user equipment and the non-trusted device according to the trigger instruction.
  • the method may further include:
  • the non-trusted device transmits the input information to a server to cause the server to process the input information.
  • the user inputs the password into the mobile phone, and the mobile phone sends the password to the POS, and then the POS sends the password to the corresponding server for password verification, and obtains the password verification result. After the verification is successful, the user is allowed to perform subsequent operations.
  • the non-trusted device receives the information input by the user transmitted by the user equipment. Since the information is input by the user into the user device instead of the non-trusted device, the security of the information can be improved.
  • FIG. 3 is a schematic flowchart of an information input method according to another embodiment of the present application.
  • the information is used as a password
  • the user equipment is a user's own mobile phone.
  • the non-trusted device is a POS or ATM (abbreviated as POS/ATM), and the password verification process is described in combination with the user equipment and the non-trusted device.
  • NFC Near Field Communication
  • SE Security Element
  • near field communication technology is now being applied to more and more mobile devices, consumer electronics, PCs and intelligent control tools for short-range wireless communication.
  • more and more terminals such as POS and ATM are beginning to support near-field payment
  • more and more mobile phones are beginning to support near-field communication technology.
  • the user equipment may include a security input module and a near field communication module.
  • the security input module is configured to display a password input interface to the user and receive a password input by the user, and generate a verification password, etc.
  • the near field communication module is used to
  • the non-trusted device establishes a near field communication connection and uses near field communication technology to communicate with the non-trusted device.
  • the non-trusted device may include a near field communication module and a POS/ATM system, and the near field communication module is configured to establish a near field communication connection with the user equipment, and communicate with the user equipment by using a near field communication technology, and the POS/ATM system is used for The verification password sent by the user device is verified.
  • the information input method of this embodiment includes:
  • it may include:
  • the user's mobile phone is close to the POS/ATM near field communication sensing area.
  • the user places his or her mobile phone close to the POS/ATM near field communication sensing area.
  • the user can install a secure input program on the mobile phone.
  • the mobile phone enters the POS/ATM near field communication sensing area
  • the user can initiate a secure input program and trigger a near field communication module to establish a near field communication connection through the secure input program.
  • the two can exchange the communication protocol used by the security input and the security-related algorithms used in the transmission process, and typically include algorithms such as encryption and signature, and other necessary parameters related to the application.
  • the safe input program and POS/ATM enter the wait for safe input state.
  • the embodiments of the present application do not limit the security algorithms such as encryption and signature negotiated during the handshake process. These algorithms have a complete and mature system and can be selected according to actual needs.
  • the embodiment of the present application does not limit the specific implementation scheme of the mobile terminal and the POS/ATM terminal.
  • it may include:
  • the security input program in the user's mobile phone pops up a prompt prompting the user to make a secure input.
  • the secure input program generates a dynamic, secure keyboard based on information about the application and the environment.
  • a typical security keyboard has features such as disturbed key arrangements. If the secure input program is required, the user may be given further identity confirmation or access control before making a secure entry.
  • the user enters a password.
  • the user inputs the password information of the POS/ATM application through the secure input keyboard of his mobile phone.
  • the embodiment of the present application does not limit the features of the mobile phone security keyboard.
  • the characteristics of the security keyboard can be selected according to actual needs.
  • it may include:
  • the security input program operates on the input password according to the password requirements of the actual application specification, and generates application-verifiable password security information.
  • the generated security information cannot be identified and verified only by the authenticator of the application.
  • the security input program transmits the generated password information to the POS/ATM system through the near field communication module according to the communication protocol negotiated with the POS/ATM terminal in step S31 and the security algorithm.
  • it may include:
  • POS/ATM verifies the password information transmitted by the secure input program.
  • the POS/ATM system can notify the user of the mobile phone through the near field communication module. If the verification is successful, the user can perform related operations such as payment. If the verification fails, you can restart S32 to re-enter the password, or the verification fails and interrupt the service.
  • the user can input a password on the user equipment, and the user equipment can transmit the password to the verification device through near field communication, implement secure password input based on near field communication, improve security, and protect user privacy data.
  • the user equipment 40 includes:
  • connection module 41 configured to establish a near field communication connection with the non-trusted device
  • the user equipment is a device used by the user, including but not limited to a mobile phone, or a tablet computer.
  • a non-trusted device is a device whose security needs to be improved relative to a user.
  • a non-trusted device is usually a device that is not used by the user, but is a device provided by a third party.
  • Non-trusted devices are for example: ATM or POS.
  • the user equipment establishes a near field communication connection with the non-trusted device as an example. It can be understood that the user equipment can establish other forms of communication connection with the non-trusted device. For example, a Bluetooth connection can also be established. Connection, wifi connection, etc.
  • a near field communication module can be set in the user equipment and the non-trusted device, respectively, to establish the communication connection.
  • the near field communication module specifically refers to the connection module in this embodiment.
  • connection module 41 is specifically configured to:
  • the user equipment is a mobile phone
  • the non-trusted device is a POS.
  • the mobile phone can actively send a trigger command to establish a near field communication connection to the POS.
  • the mobile phone and POS can establish a near field communication connection.
  • the POS can actively send a trigger command to the mobile phone, and the mobile phone and the POS can establish a near field communication connection after the mobile phone agrees.
  • a preset app (such as a security input program) can be installed in the mobile phone, and the mobile phone actively initiates a trigger instruction or receives a trigger instruction by the user's operation on the app.
  • the transmission module 42 is configured to receive information input by the user, and send the information to the non-trusted device through the near field communication connection to implement information input to the non-trusted device.
  • the transmission module 42 includes:
  • the first unit 421 is configured to display an information input interface to the user, and receive information input by the user in the information input interface, where the information input interface is a security keyboard.
  • the security keyboard is a virtual keyboard. When information input is required, it can be popped up and displayed on the user interface. The order of the keys displayed on the security keyboard is dynamically changed, thereby improving security.
  • the user can also input information through a physical button on the user equipment or an input method keyboard provided by the user equipment.
  • the prompt interface may be displayed on the user equipment, for example, prompting the user to input information.
  • the information input interface is displayed to the user.
  • the prompt interface may include an input box for inputting information.
  • the user sees the prompt interface and clicks the input box, if the user inputs using the physical button on the user device, the physical button input may be directly used; or, If the information input interface is in the form of software, such as an input interface of the input method or a security keyboard, the user can trigger the user equipment to display the information input interface after clicking the input box.
  • the transmission module 42 includes:
  • the second unit 422 is configured to perform preset operations on the information input by the user to obtain information in a preset format.
  • the third unit 423 is configured to send the information in the preset format to the non-trusted device.
  • the preset format is pre-negotiated by the user equipment and the non-trusted device.
  • the preset format may enable the information in the preset format obtained by the user equipment to be recognized only by the non-trusted device. Since other devices cannot recognize this information, thereby reducing theft, further improving security.
  • the information input by the user is, for example, a password, a verification code, an identification number, and the like that require secure input.
  • the information is a password that needs to be input into the non-trusted device, and the connection module 41 is specifically used to:
  • the connection triggering instruction initiated by the non-trusted device is actively initiated or received, and a near field communication connection with the non-trusted device is established according to the triggering instruction.
  • the user inputs a password on the user equipment. Since the user equipment is the user's own device, it is difficult for the non-trusted device such as ATM to be maliciously modified relative to the POS, or the user can easily find that the device is maliciously modified. Therefore, the user inputting information on the user equipment can improve the security of information input with respect to inputting information on a non-trusted device such as POS or ATM.
  • the password in this embodiment is not limited to the commonly used digital password, and may also be a password in the form of graphics, pictures, or the like.
  • the method can be applied to a password input application of a non-trusted device.
  • the non-trusted device requires the user to input a password
  • the user device initiates or initiates a user device according to a connection trigger command initiated by the non-trusted device.
  • the user can take the mobile phone to enter the near field sensing area of the POS. After the mobile phone enters the near field sensing area of the POS, the mobile phone and the POS can establish a near field communication connection.
  • a predetermined app such as a secure input program
  • a prompt interface may be popped up in the app, prompting the user to input safely, and after the user determines to adopt the security input, the information may be popped up again.
  • Input interface (such as a security keyboard), after which the user can enter the password through the security keyboard.
  • the trigger command for triggering the establishment of the near field communication connection includes an instruction to invoke the information input interface, or, after establishing the near field communication connection, Prompt the user to start the information input interface.
  • the user input information is received by the user equipment and sent to the non-trusted device, and the information input can be directly input from the traditional user to the non-trusted device, and the user is input to the non-trusted device through the user device. Because the user does not directly contact the non-trusted device, the user device is in contact with the user. Since the user device is the user's own, the trustworthiness can be improved relative to the non-trusted device usually provided by others, thereby improving The security of information input reduces the possibility of user information being stolen.
  • the terminal 60 includes:
  • connection module 61 configured to establish a near field communication connection with the user equipment
  • connection module 61 is specifically configured to:
  • the user equipment After the user equipment enters the near field sensing area of the terminal, sending a trigger instruction for establishing a near field communication connection to the user equipment, or receiving a trigger instruction for establishing a near field communication connection sent by the user equipment;
  • the triggering instruction establishes a near field communication connection with the user equipment.
  • the non-trusted device is, for example, a POS or an ATM, and the user device refers to the user's own device, such as a mobile phone.
  • the receiving module 62 is configured to receive input information sent by the user equipment by using the near field communication connection, where the input information is input by the user through the user equipment.
  • the input information is information that needs to be input securely.
  • the input information is a password, an ID number, or a verification code.
  • connection module 61 is specifically configured to:
  • the process of establishing a near field communication connection between the non-trusted device and the user equipment may specifically include: when the non-trusted device requires the user to input a password, initiate a trigger connection trigger instruction to the user equipment or receive the user equipment.
  • the initiated connection triggers an instruction and establishes a near field communication connection between the user equipment and the non-trusted device according to the trigger instruction.
  • the device 60 further includes:
  • the sending module 63 is configured to send the input information to the server, so that the server processes the input information.
  • the user inputs the password into the mobile phone, and the mobile phone sends the password to the POS, and then the POS sends the password to the corresponding server for password verification, and obtains the password verification result. After the verification is successful, the user is allowed to perform subsequent operations.
  • the non-trusted device receives the information input by the user transmitted by the user equipment. Since the information is input by the user into the user device instead of the non-trusted device, the security of the information can be improved.
  • FIG. 8 is a schematic structural diagram of an information input system according to another embodiment of the present application.
  • the system 80 includes: a user equipment 81 and a non-trusted device 82.
  • the user equipment 81 receives information input by the user and sends the information to the non-trusted device 82. .
  • the user device 81 is, for example, a mobile phone, a tablet computer, or the like
  • the non-trusted device 82 is, for example, a POS, an ATM, or the like.
  • composition of the specific user equipment refer to FIG. 4 or FIG. 5 .
  • composition of the specific non-trusted device refer to FIG. 6 or FIG. 7 , and details are not described herein again.
  • the user equipment when the user inputs information on the user equipment, the user equipment sends the information to the non-trusted device, so that the user can directly contact the non-trusted device, thereby improving security during information input and reducing user information being stolen.
  • the user equipment sends the information to the non-trusted device, so that the user can directly contact the non-trusted device, thereby improving security during information input and reducing user information being stolen.
  • portions of the application can be implemented in hardware, software, firmware, or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.
  • each functional unit in each embodiment of the present application may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.
  • the above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Telephone Function (AREA)

Abstract

本申请提出一种信息输入方法和系统、用户设备和终端，该信息输入方法包括：用户设备与非可信设备建立近场通信连接；所述用户设备接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。该方法能够提高信息输入时的安全性，降低用户信息被窃取的可能性。

Description

信息输入方法和系统、用户设备和终端 技术领域
本申请涉及信息安全技术领域，尤其涉及一种信息输入方法和系统、用户设备和终端。
背景技术
在实际的生产生活中，通过密码验证，实现各种访问控制、身份验证、权限授权的场景非常多。尤其对于像销售终端(Point Of Sale，POS)，自动柜员机(Automatic Teller Machine，ATM)等涉及资金的场景，密码输入安全显得极其重要。
现有技术中，用户采用他人提供的密码输入设备进行密码输入，但是他人的设备依然容易被攻击，破坏，改造等，例如，输入设备被改造后可能会在用户输入密码时，对密码进行拍摄，从而造成密码泄露。
发明内容
本申请旨在至少在一定程度上解决相关技术中的技术问题之一。
为此，本申请的一个目的在于提出一种信息输入方法，该方法可以提高信息输入时的安全性，降低用户信息被窃取的可能性。
本申请的另一个目的在于提出一种用户设备。
本申请的另一个目的在于提出一种终端。
本申请的另一个目的在于提出一种信息输入系统。
为达到上述目的，本申请第一方面实施例提出的信息输入方法，包括：用户设备与非可信设备建立近场通信连接；所述用户设备接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
本申请第一方面实施例提出的信息输入方法，通过用户设备接收用户输入的信息并发送给非可信设备，可以将信息输入从传统的用户直接输入到非可信设备中，改变为用户通过用户设备输入到非可信设备中，由于用户不直接与非可信设备接触，与用户接触的是用户设备，由于用户设备是用户自己的，相对于通常由他人提供的非可信设备，可以提高可信任度，从而可以提高信息输入时的安全性，降低用户信息被窃取的可能性。
为达到上述目的，本申请第二方面实施例提出的信息输入方法，包括：非可信设备与用户设备建立近场通信连接；所述非可信设备接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
本申请第二方面实施例提出的信息输入方法，非可信设备接收通过用户设备传输的用户输入的信息，由于信息是由用户输入到自己的用户设备而不是非可信设备内，从而可以提高信息的安全性。
为达到上述目的，本申请第三方面实施例提出的用户设备，包括：连接模块，用于与非可信设备建立近场通信连接；传输模块，用于接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
本申请第二方面实施例提出的用户设备，通过用户设备接收用户输入的信息并发送给非可信设备，可以将信息输入从传统的用户直接输入到非可信设备中，改变为用户通过用户设备输入到非可信设备中，由于用户不直接与非可信设备接触，与用户接触的是用户设备，由于用户设备是用户自己的，相对于通常由他人提供的非可信设备，可以提高可信任度，从而可以提高信息输入时的安全性，降低用户信息被窃取的可能性。
为达到上述目的，本申请第四方面实施例提出的终端，所述终端属于非可信设备，所述终端包括：连接模块，用于与用户设备建立近场通信连接；接收模块，用于接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
本申请第四方面实施例提出的终端，接收通过用户设备传输的用户输入的信息，由于信息是由用户输入到自己的用户设备而不是非可信设备内，从而可以提高信息的安全性。
为达到上述目的，本申请第五方面实施例提出的信息输入系统，包括：如第三方面所示的用户设备，以及，如第四方面所示的终端。
本申请第五方面实施例提出的信息输入系统，通过用户在用户设备上输入信息，用户设备将信息发送给非可信设备，可以避免用户直接与非可信设备接触，从而提高信息输入时的安全性，降低用户信息被窃取的可能性。
本申请附加的方面和优点将在下面的描述中部分给出，部分将从下面的描述中变得明显，或通过本申请的实践了解到。
附图说明
本申请上述的和/或附加的方面和优点从下面结合附图对实施例的描述中将变得明显和容易理解，其中：
图1是本申请一实施例提出的信息输入方法的流程示意图；
图2是本申请另一实施例提出的信息输入方法的流程示意图；
图3是本申请另一实施例提出的信息输入方法的流程示意图
图4是本申请另一实施例提出的用户设备的结构示意图；
图5是本申请另一实施例提出的用户设备的结构示意图；
图6是本申请另一实施例提出的终端的结构示意图；
图7是本申请另一实施例提出的终端的结构示意图；
图8是本申请另一实施例提出的信息输入系统的结构示意图。
具体实施方式
下面详细描述本申请的实施例，所述实施例的示例在附图中示出，其中自始至终相同或类似的标号表示相同或类似的模块或具有相同或类似功能的模块。下面通过参考附图描述的实施例是示例性的，仅用于解释本申请，而不能理解为对本申请的限制。相反，本申请的实施例包括落入所附加权利要求书的精神和内涵范围内的所有变化、修改和等同物。
图1是本申请一实施例提出的信息输入方法的流程示意图，该方法包括：
S11：用户设备与非可信设备建立近场通信连接。
其中，用户设备是用户自己使用的设备，包括但不限于手机，或者，平板电脑等。
非可信设备是相对于用户来讲的安全性有待提高的设备，非可信设备通常是非用户自己使用的设备，而是由第三方提供的设备。
非可信设备例如为：ATM或者POS。
本实施例中，以用户设备与非可信设备建立近场通信连接为例，可以理解的是，用户设备可以与非可信设备建立其他形式的通信连接，例如，还可以建立蓝牙连接，声波连接，wifi连接等。以近场通信连接为例，可以分别在用户设备和非可信设备中设置近场通信模块，以建立该通信连接。
可选的，所述用户设备与非可信设备建立近场通信连接，包括：
在所述用户设备进入所述非可信设备的近场感应区域后，所述用户设备向 所述非可信设备发送建立近场通信连接的触发指令，或者，所述用户设备接收所述非可信设备发送的建立近场通信连接的触发指令；
所述用户设备根据所述触发指令与所述非可信设备建立近场通信连接。
以用户设备是手机，非可信设备是POS为例，当手机进入POS的近场通信感应区后，手机可以主动向POS发送建立近场通信连接的触发指令，POS同意建立后，手机和POS可以建立近场通信连接。或者，手机进入POS的近场通信感应区后，POS可以主动向手机发送触发指令，手机同意后，手机和POS可以建立近场通信连接。具体的，可以在手机内安装预设的app(如称为安全输入程序)，手机通过用户在该app上的操作主动发起触发指令或接收触发指令。S12：所述用户设备接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
可选的，所述用户设备接收用户输入的信息，包括：
所述用户设备向所述用户展示信息输入界面，并接收所述用户在所述信息输入界面内输入的信息，所述信息输入界面是安全键盘。
其中，安全键盘是一种虚拟键盘，在需要信息输入时，可以弹出并展示在用户界面上，安全键盘上显示的按键排列顺序是动态改变的，从而可以提高安全性。
当然，可以理解的是，用户也可以通过用户设备上的物理按键或者用户设备提供的输入法键盘等进行信息输入。
另外，在用户设备与非可信设备建立通信连接后，可以在用户设备上显示提示界面，例如，提示用户请输入信息等。
当用户在所述提示界面中选择输入信息时，向用户展示信息输入界面。
例如，提示界面中可以包括用于输入信息的输入框，当用户看到提示界面，并点击该输入框后，如果用户使用用户设备上的物理按键输入，则可以直接采用物理按键输入；或者，如果信息输入界面是软件形式，例如输入法的输入界面或者安全键盘等，用户在点击输入框后，可以触发用户设备展示信息输入界面。
用户输入的信息例如为密码，验证码，身份证号等需要安全输入的信息。
以密码为例，现有技术中，用户直接在ATM上输入密码，如果ATM被恶意安装窃取密码的摄像头后，就会造成用户密码的丢失。
而本实施例中，用户在用户设备上输入密码，由于用户设备是用户自己的设备，相对于POS，ATM等非可信设备难以被恶意改造，或者用户很容易发 现自己的设备被恶意改造，因此，用户在用户设备上输入信息相对于在POS，ATM等非可信设备上输入信息可以提高信息输入的安全性。
另外，当本实施例输入的信息是要输入到非可信设备内进行验证的密码时，本实施例中的密码不限于通常采用的数字密码，还可以是图形，图片等形式的密码。
具体的，该方法可以应用于非可信设备的密码输入应用中，当非可信设备需要用户输入密码时，用户设备主动发起或根据非可信设备主动发起的连接触发指令，建立用户设备与非可信设备之间的连接。
例如，用户需要在POS内输入密码时，用户可以拿着手机进入POS的近场感应区域，在手机进入POS的近场感应区域后，手机和POS可以建立近场通信连接。在手机内已安装预定的app(如安全输入程序)时，手机和POS建立连接后，在该app内可以弹出提示界面，提示用户可以安全输入，在用户确定采用安全输入后，可以再弹出信息输入界面(如安全键盘)，之后，用户可以通过该安全键盘进行密码输入。
当然，可以理解的是，也可以采用其他触发方式触发信息输入界面的展示，例如，触发建立近场通信连接的触发指令中包含调用信息输入界面的指令，或者，在建立近场通信连接后，提示用户启动信息输入界面等。
其中，如上所示，
用户设备通过近场通信方式将用户输入的信息发送给非可信设备。
现有技术中，以非可信设备是POS为例，用户是直接将信息输入到POS中，而本申请实施例中，不再是用户直接向POS输入信息，而是用户将信息先输入到用户设备中，再由用户设备通过通信连接发送给POS。
由于非可信设备是接收到的消息，并不是用户直接输入时的显式信息，因此，即使非可信设备被安装了恶意摄像头等也不能窃取到消息中传输的信息，从而提高了信息的安全性。
可选的，该方法还可以包括：
对所述用户输入的信息进行预设运算，得到预设格式的信息。
在得到预设格式的信息后，在信息发送时可以具体是将预设格式的信息发送给非可信设备。
其中，预设格式是用户设备和非可信设备预先协商的，该预设格式可以使得用户设备运算后得到的预设格式的信息仅能被非可信设备识别。由于其他设备不能识别该信息，从而降低被窃取性，进一步提高安全性。
本实施例中，通过用户设备接收用户输入的信息并发送给非可信设备，可以将信息输入从传统的用户直接输入到非可信设备中，改变为用户通过用户设备输入到非可信设备中，由于用户不直接与非可信设备接触，与用户接触的是用户设备，由于用户设备是用户自己的，相对于通常由他人提供的非可信设备，可以提高可信任度，从而可以提高信息输入时的安全性，降低用户信息被窃取的可能性。
图2是本申请另一实施例提出的信息输入方法的流程示意图，该方法包括：
S21：非可信设备与用户设备建立近场通信连接；
例如，在所述用户设备进入所述非可信设备的近场感应区域后，所述非可信设备向所述用户设备发送建立近场通信连接的触发指令，或者，所述非可信设备接收所述用户设备发送的建立近场通信连接的触发指令；所述非可信设备根据所述触发指令与所述用户设备建立近场通信连接。
非可信设备例如为POS或者ATM，用户设备是指用户自己的设备，如手机。
S22：所述非可信设备接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
其中，所述输入信息是需要安全输入的信息。例如，输入信息是密码，身份证号，或者，验证码等。
以密码为例，非可信设备与用户设备建立近场通信连接的流程可以具体包括：当非可信设备需要用户输入密码时，向所述用户设备发起触发连接触发指令或者接收所述用户设备发起的连接触发指令，并根据所述触发指令建立用户设备与非可信设备之间的近场通信连接。
另一实施例中，该方法还可以包括：
所述非可信设备将所述输入信息发送给服务器，以使所述服务器对所述输入信息进行处理。
例如，用户将密码输入到手机中，手机将密码发送给POS，之后POS将密码发给相应的服务器进行密码验证，得到密码验证结果。当验证成功后，允许用户进行后续操作。
本实施例中，非可信设备接收通过用户设备传输的用户输入的信息，由于信息是由用户输入到自己的用户设备而不是非可信设备内，从而可以提高信息的安全性。
图3是本申请另一实施例提出的信息输入方法的流程示意图。本实施例中，以信息为密码为例，假设用户设备是用户自己的手机，非可信设备是POS或者ATM(简写为POS/ATM)，结合用户设备和非可信设备描述密码验证流程。
以用户设备与非可信设备之间的通信采用近场通信为例，近场通信技术(Near Field Communication，NFC)通常指近距离的无线通信技术。当前，最典型的基于近场通信基于近距离高频无线通信技术实现，可用距离大致在10厘米。其近距离的特点使其具有防信号干扰、通信冲突等优点，被大范围用于电子身份识别或者数据传输。市面上大量基于NFC的卡片附带安全单元(Security Element，SE)实现安全的本地信息存储，防止卡内信息篡改、拷贝等。这些技术特点使得近场通信技术使用范围广泛，不仅适合普通的电子标签，也满足金融IC卡等高安全要求场景。
随着近场通信技术应用和发展，如今近场通信技术也被应用于越来越多的移动设备、消费类电子产品、PC和智能控制工具间进行近距离无线通信。例如，越来越多的POS、ATM等终端开始支持近场支付，越来越多的移动手机开始支持近场通信技术。
如图3所示，用户设备可以包括安全输入模块和近场通信模块，安全输入模块用于向用户显示密码输入界面以及接收用户输入的密码，并生成验证密码等，近场通信模块用于与非可信设备建立近场通信连接，并采用近场通信技术与非可信设备进行通信。非可信设备可以包括近场通信模块和POS/ATM系统，近场通信模块用于与用户设备建立近场通信连接，并采用近场通信技术与用户设备进行通信，POS/ATM系统用于对用户设备发送的验证密码进行验证。
参见图2，本实施例的信息输入方法包括：
S31：通信握手。
具体可以包括：
1.1，用户手机靠近POS/ATM近场通信感应区。
例如，当用户需要进行安全输入时，用户将自己的手机靠近POS/ATM近场通信感应区。
1.2，建立近场通信连接。
例如，用户可以在手机上安装安全输入程序，当手机进入POS/ATM近场通信感应区后，用户可以启动安全输入程序，通过安全输入程序触发两者的近场通信模块建立近场通信连接。
1.3，进行安全通信握手。
在安全通信握手时，两者可以交换本次安全输入采用的通信协议、传输过程采用的安全相关的算法，典型的包括加密、签名等算法，以及其他应用相关的必要参数。此时，安全输入程序与POS/ATM进入等待安全输入状态。
需要说明的是，本申请实施例不限制具体的近场通信技术和通信模式。只要能实现数据传输即可。理论上采用蓝牙、声波等其他通信手段同样可以达到期望的效果。
本申请实施例不限制握手过程中协商的加密、签名等安全算法，这些算法已经具备完整、成熟的体系，可根据实际的需要按需选择。
本申请实施例不限制手机端和POS/ATM端具体实现方案。
S32：安全输入
具体可以包括：
2.1，弹出安全密码输入提示。
例如，用户手机中的安全输入程序弹出提示，提示用户可以进行安全输入。
2.2，弹出安全输入键盘。
例如，安全输入程序根据应用、环境的信息产生动态的安全键盘。典型的安全键盘具有被扰乱的按键排列等特征。如果需要安全输入程序在进行安全输入前可能对用户进行进一步的身份的确认或者访问的控制。
2.3，用户进行密码输入。
例如，用户通过自己手机的安全输入键盘输入本次POS/ATM应用的密码信息。
需要说明的是，本申请实施例不限制手机安全键盘的特征。应用中可以根据实际的需要选择安全键盘的特征。
S33：安全传输
具体可以包括：
3.1，密码信息运算。
例如，安全输入程序根据实际应用规范的密码需求对输入密码进行运算，生成应用可验证的密码安全信息。生成的安全信息无法只能被应用的验证方识别和验证。
3.2，根据握手的结果进行安全传输。
例如，安全输入程序根据步骤S31中与POS/ATM终端协商的通信协议、安全算法将生成的密码信息通过近场通信模块传输给POS/ATM系统。
S34：安全验证
具体可以包括：
4.1，密码验证。
例如，POS/ATM对安全输入程序传输过来的密码信息进行验证。
4.2，结果通知。
例如，POS/ATM系统可以将验证结果通过近场通信模块通知用户手机。如果验证成功，用户可以正常进行如支付等相关操作。如果验证失败，可以重新开始执行S32重新进行密码输入，或者验证失败，中断业务。
本实施例中，用户可以在自己的用户设备上输入密码，用户设备可以通过近场通信将密码传输给验证设备，实现基于近场通信的安全密码输入，提高安全性，保护用户隐私数据。
图4是本申请另一实施例提出的用户设备的结构示意图，用户设备40包括：
连接模块41，用于与非可信设备建立近场通信连接；
其中，用户设备是用户自己使用的设备，包括但不限于手机，或者，平板电脑等。
非可信设备是相对于用户来讲的安全性有待提高的设备，非可信设备通常是非用户自己使用的设备，而是由第三方提供的设备。
非可信设备例如为：ATM或者POS。
本实施例中，以用户设备与非可信设备建立近场通信连接为例，可以理解的是，用户设备可以与非可信设备建立其他形式的通信连接，例如，还可以建立蓝牙连接，声波连接，wifi连接等。
以近场通信连接为例，可以分别在用户设备和非可信设备中设置近场通信模块，以建立该通信连接。其中，近场通信模块在本实施例中具体是指连接模块。
可选的，所述连接模块41具体用于：
在所述用户设备进入所述非可信设备的近场感应区域后，向所述非可信设备发送建立近场通信连接的触发指令，或者，接收所述非可信设备发送的建立近场通信连接的触发指令；
根据所述触发指令与所述非可信设备建立近场通信连接。
以用户设备是手机，非可信设备是POS为例，当手机进入POS的近场通信感应区后，手机可以主动向POS发送建立近场通信连接的触发指令，POS 同意建立后，手机和POS可以建立近场通信连接。或者，手机进入POS的近场通信感应区后，POS可以主动向手机发送触发指令，手机同意后，手机和POS可以建立近场通信连接。具体的，可以在手机内安装预设的app(如称为安全输入程序)，手机通过用户在该app上的操作主动发起触发指令或接收触发指令。
传输模块42，用于接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
可选的，参见图5，所述传输模块42包括：
第一单元421，用于向所述用户展示信息输入界面，并接收所述用户在所述信息输入界面内输入的信息，所述信息输入界面是安全键盘。
其中，安全键盘是一种虚拟键盘，在需要信息输入时，可以弹出并展示在用户界面上，安全键盘上显示的按键排列顺序是动态改变的，从而可以提高安全性。
当然，可以理解的是，用户也可以通过用户设备上的物理按键或者用户设备提供的输入法键盘等进行信息输入。
另外，在用户设备与非可信设备建立通信连接后，可以在用户设备上显示提示界面，例如，提示用户请输入信息等。
当用户在所述提示界面中选择输入信息时，向用户展示信息输入界面。
例如，提示界面中可以包括用于输入信息的输入框，当用户看到提示界面，并点击该输入框后，如果用户使用用户设备上的物理按键输入，则可以直接采用物理按键输入；或者，如果信息输入界面是软件形式，例如输入法的输入界面或者安全键盘等，用户在点击输入框后，可以触发用户设备展示信息输入界面。
可选的，所述传输模块42包括：
第二单元422，用于对所述用户输入的信息进行预设运算，得到预设格式的信息；
第三单元423，用于将所述预设格式的信息发送给所述非可信设备。
其中，预设格式是用户设备和非可信设备预先协商的，该预设格式可以使得用户设备运算后得到的预设格式的信息仅能被非可信设备识别。由于其他设备不能识别该信息，从而降低被窃取性，进一步提高安全性。
用户输入的信息例如为密码，验证码，身份证号等需要安全输入的信息。
可选的，所述信息是需要输入到所述非可信设备中的密码，所述连接模块 41具体用于：
在所述非可信设备需要用户输入密码时，主动发起或接收所述非可信设备发起的连接触发指令，并根据所述触发指令建立与非可信设备之间的近场通信连接。
以密码为例，现有技术中，用户直接在ATM上输入密码，如果ATM被恶意安装窃取密码的摄像头后，就会造成用户密码的丢失。
而本实施例中，用户在用户设备上输入密码，由于用户设备是用户自己的设备，相对于POS，ATM等非可信设备难以被恶意改造，或者用户很容易发现自己的设备被恶意改造，因此，用户在用户设备上输入信息相对于在POS，ATM等非可信设备上输入信息可以提高信息输入的安全性。
另外，当本实施例输入的信息是要输入到非可信设备内进行验证的密码时，本实施例中的密码不限于通常采用的数字密码，还可以是图形，图片等形式的密码。
具体的，该方法可以应用于非可信设备的密码输入应用中，当非可信设备需要用户输入密码时，用户设备主动发起或根据非可信设备主动发起的连接触发指令，建立用户设备与非可信设备之间的连接。
例如，用户需要在POS内输入密码时，用户可以拿着手机进入POS的近场感应区域，在手机进入POS的近场感应区域后，手机和POS可以建立近场通信连接。在手机内已安装预定的app(如安全输入程序)时，手机和POS建立连接后，在该app内可以弹出提示界面，提示用户可以安全输入，在用户确定采用安全输入后，可以再弹出信息输入界面(如安全键盘)，之后，用户可以通过该安全键盘进行密码输入。
当然，可以理解的是，也可以采用其他触发方式触发信息输入界面的展示，例如，触发建立近场通信连接的触发指令中包含调用信息输入界面的指令，或者，在建立近场通信连接后，提示用户启动信息输入界面等。
本实施例中，通过用户设备接收用户输入的信息并发送给非可信设备，可以将信息输入从传统的用户直接输入到非可信设备中，改变为用户通过用户设备输入到非可信设备中，由于用户不直接与非可信设备接触，与用户接触的是用户设备，由于用户设备是用户自己的，相对于通常由他人提供的非可信设备，可以提高可信任度，从而可以提高信息输入时的安全性，降低用户信息被窃取的可能性。
图6是本申请另一实施例提出的终端的结构示意图，该终端属于非可信设 备，终端60包括：
连接模块61，用于与用户设备建立近场通信连接；
可选的，所述连接模块61具体用于：
在所述用户设备进入所述终端的近场感应区域后，向所述用户设备发送建立近场通信连接的触发指令，或者，接收所述用户设备发送的建立近场通信连接的触发指令；根据所述触发指令与所述用户设备建立近场通信连接。
非可信设备例如为POS或者ATM，用户设备是指用户自己的设备，如手机。
接收模块62，用于接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
其中，所述输入信息是需要安全输入的信息。例如，输入信息是密码，身份证号，或者，验证码等。
可选的，所述连接模块61具体用于：
当所述终端需要用户输入密码时，向所述用户设备发起连接触发指令或者接收所述用户设备发起的连接触发指令，并根据所述触发指令建立所述近场通信连接。
以密码为例，非可信设备与用户设备建立近场通信连接的流程可以具体包括：当非可信设备需要用户输入密码时，向所述用户设备发起触发连接触发指令或者接收所述用户设备发起的连接触发指令，并根据所述触发指令建立用户设备与非可信设备之间的近场通信连接。
另一实施例中，参见图7，该装置60还包括：
发送模块63，用于将所述输入信息发送给服务器，以使所述服务器对所述输入信息进行处理。
例如，用户将密码输入到手机中，手机将密码发送给POS，之后POS将密码发给相应的服务器进行密码验证，得到密码验证结果。当验证成功后，允许用户进行后续操作。
本实施例中，非可信设备接收通过用户设备传输的用户输入的信息，由于信息是由用户输入到自己的用户设备而不是非可信设备内，从而可以提高信息的安全性。
图8是本申请另一实施例提出的信息输入系统的结构示意图，该系统80包括：用户设备81和非可信设备82，用户设备81接收用户输入的信息，并发送给非可信设备82。
用户设备81例如为手机，平板电脑等，非可信设备82例如为POS，ATM等。
具体的用户设备的组成可以参见图4或图5所示，具体的非可信设备的组成可以参见图6或图7所示，在此不再赘述。
本实施例中，通过用户在用户设备上输入信息，用户设备将信息发送给非可信设备，可以避免用户直接与非可信设备接触，从而提高信息输入时的安全性，降低用户信息被窃取的可能性。
需要说明的是，在本申请的描述中，术语“第一”、“第二”等仅用于描述目的，而不能理解为指示或暗示相对重要性。此外，在本申请的描述中，除非另有说明，“多个”的含义是两个或两个以上。
流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为，表示包括一个或更多个用于实现特定逻辑功能或过程的步骤的可执行指令的代码的模块、片段或部分，并且本申请的优选实施方式的范围包括另外的实现，其中可以不按所示出或讨论的顺序，包括根据所涉及的功能按基本同时的方式或按相反的顺序，来执行功能，这应被本申请的实施例所属技术领域的技术人员所理解。
应当理解，本申请的各部分可以用硬件、软件、固件或它们的组合来实现。在上述实施方式中，多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或固件来实现。例如，如果用硬件来实现，和在另一实施方式中一样，可用本领域公知的下列技术中的任一项或他们的组合来实现：具有用于对数据信号实现逻辑功能的逻辑门电路的离散逻辑电路，具有合适的组合逻辑门电路的专用集成电路，可编程门阵列(PGA)，现场可编程门阵列(FPGA)等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，该程序在执行时，包括方法实施例的步骤之一或其组合。
此外，在本申请各个实施例中的各功能单元可以集成在一个处理模块中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。所述集成的模块如果以软件功能模块的形式实现并作为独立的产品销售或使用时，也可以存储在一个计算机可读取存储介质中。
上述提到的存储介质可以是只读存储器，磁盘或光盘等。
在本说明书的描述中，参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本申请的至少一个实施例或示例中。在本说明书中，对上述术语的示意性表述不一定指的是相同的实施例或示例。而且，描述的具体特征、结构、材料或者特点可以在任何的一个或多个实施例或示例中以合适的方式结合。
尽管上面已经示出和描述了本申请的实施例，可以理解的是，上述实施例是示例性的，不能理解为对本申请的限制，本领域的普通技术人员在本申请的范围内可以对上述实施例进行变化、修改、替换和变型。

Claims (24)

  1. 一种信息输入方法，其特征在于，包括：
    用户设备与非可信设备建立近场通信连接；
    所述用户设备接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
  2. 根据权利要求1所述的方法，其特征在于，所述用户设备与非可信设备建立近场通信连接，包括：
    在所述用户设备进入所述非可信设备的近场感应区域后，所述用户设备向所述非可信设备发送建立近场通信连接的触发指令，或者，所述用户设备接收所述非可信设备发送的建立近场通信连接的触发指令；
    所述用户设备根据所述触发指令与所述非可信设备建立近场通信连接。
  3. 根据权利要求1所述的方法，其特征在于，所述用户设备接收用户输入的信息，包括：
    所述用户设备向所述用户展示信息输入界面，并接收所述用户在所述信息输入界面内输入的信息，所述信息输入界面是安全键盘。
  4. 根据权利要求1所述的方法，其特征在于，所述将所述信息通过所述近场通信连接发送给所述非可信设备之前，所述方法还包括：
    对所述用户输入的信息进行预设运算，得到预设格式的信息；
    所述将所述信息通过所述近场通信连接发送给所述非可信设备，包括：
    将所述预设格式的信息发送给所述非可信设备。
  5. 根据权利要求1-4任一项所述的方法，其特征在于，所述信息是需要安全输入的信息。
  6. 根据权利要求1-4任一项所述的方法，其特征在于，所述方法应用于非可信设备的密码输入应用中；
    所述用户设备与非可信设备建立近场通信连接，具体包括：
    所述用户设备在所述非可信设备需要用户输入密码时，主动发起或接收所述非可信设备发起的连接触发指令，并根据所述触发指令建立与非可信设备之间的近场通信连接。
  7. 根据权利要求1-4任一项所述的方法，其特征在于，所述非可信设备包括：ATM或者POS。
  8. 一种信息输入方法，其特征在于，包括：
    非可信设备与用户设备建立近场通信连接；
    所述非可信设备接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
  9. 根据权利要求8所述的方法，其特征在于，所述非可信设备与用户设备建立近场通信连接，包括：
    在所述用户设备进入所述非可信设备的近场感应区域后，所述非可信设备向所述用户设备发送建立近场通信连接的触发指令，或者，所述非可信设备接收所述用户设备发送的建立近场通信连接的触发指令；
    所述非可信设备根据所述触发指令与所述用户设备建立近场通信连接。
  10. 根据权利要求8所述的方法，其特征在于，还包括：
    所述非可信设备将所述输入信息发送给服务器，以使所述服务器对所述输入信息进行处理。
  11. 根据权利要求8-10任一项所述的方法，其特征在于，所述输入信息是需要安全输入的信息。
  12. 根据权利要求8-10任一项所述的方法，其特征在于，所述非可信设备与用户设备建立近场通信连接包括：
    当非可信设备需要用户输入密码时，向所述用户设备发起触发连接触发指令或者接收所述用户设备发起的连接触发指令，并根据所述触发指令建立用户设备与非可信设备之间的近场通信连接。
  13. 根据权利要求8-10任一项所述的方法，其特征在于，所述非可信设备包括：ATM或者POS。
  14. 一种用户设备，其特征在于，包括：
    连接模块，用于与非可信设备建立近场通信连接；
    传输模块，用于接收用户输入的信息，并将所述信息通过所述近场通信连接发送给所述非可信设备，以实现对所述非可信设备的信息输入。
  15. 根据权利要求14所述的设备，其特征在于，所述连接模块具体用于：
    在所述用户设备进入所述非可信设备的近场感应区域后，向所述非可信设备发送建立近场通信连接的触发指令，或者，接收所述非可信设备发送的建立近场通信连接的触发指令；
    根据所述触发指令与所述非可信设备建立近场通信连接。
  16. 根据权利要求14所述的设备，其特征在于，所述传输模块包括：
    第一单元，用于向所述用户展示信息输入界面，并接收所述用户在所述信息输入界面内输入的信息，所述信息输入界面是安全键盘。
  17. 根据权利要求14所述的设备，其特征在于，所述传输模块包括：
    第二单元，用于对所述用户输入的信息进行预设运算，得到预设格式的信息；
    第三单元，用于将所述预设格式的信息发送给所述非可信设备。
  18. 根据权利要求14-17任一项所述的设备，其特征在于，所述信息是需要输入到所述非可信设备中的密码，所述连接模块具体用于：
    在所述非可信设备需要用户输入密码时，主动发起或接收所述非可信设备发起的连接触发指令，并根据所述触发指令建立与非可信设备之间的近场通信连接。
  19. 一种终端，所述终端属于非可信设备，其特征在于，所述终端包括：
    连接模块，用于与用户设备建立近场通信连接；
    接收模块，用于接收所述用户设备通过所述近场通信连接发送的输入信息，所述输入信息由用户通过用户设备输入。
  20. 根据权利要求19所述的终端，其特征在于，所述连接模块具体用于：
    在所述用户设备进入所述终端的近场感应区域后，向所述用户设备发送建立近场通信连接的触发指令，或者，接收所述用户设备发送的建立近场通信连接的触发指令；
    根据所述触发指令与所述用户设备建立近场通信连接。
  21. 根据权利要求19所述的终端，其特征在于，还包括：
    发送模块，用于将所述输入信息发送给服务器，以使所述服务器对所述输入信息进行处理。
  22. 根据权利要求19-21任一项所述的终端，其特征在于，所述连接模块具体用于：
    当所述终端需要用户输入密码时，向所述用户设备发起连接触发指令或者接收所述用户设备发起的连接触发指令，并根据所述触发指令建立所述近场通信连接。
  23. 根据权利要求19-21任一项所述的终端，其特征在于，所述终端是ATM或者POS。
  24. 一种信息输入系统，其特征在于，包括：
    如权利要求14-18任一项所述的设备；以及，
    如权利要求19-23任一项所述的终端。
PCT/CN2016/087468 2015-07-10 2016-06-28 信息输入方法和系统、用户设备和终端 Ceased WO2017008631A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510405480.4 2015-07-10
CN201510405480.4A CN106326783A (zh) 2015-07-10 2015-07-10 信息输入方法和系统、用户设备和终端

Publications (1)

Publication Number Publication Date
WO2017008631A1 true WO2017008631A1 (zh) 2017-01-19

Family

ID=57725778

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/087468 Ceased WO2017008631A1 (zh) 2015-07-10 2016-06-28 信息输入方法和系统、用户设备和终端

Country Status (2)

Country Link
CN (1) CN106326783A (zh)
WO (1) WO2017008631A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111986024A (zh) * 2020-08-25 2020-11-24 北京文思海辉金信软件有限公司 交易处理方法、装置及电子终端

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123454A (zh) * 2007-09-21 2008-02-13 北京交通大学 基于蓝牙的手机银联卡数据传输方法及系统
CN102054316A (zh) * 2009-11-06 2011-05-11 中国银联股份有限公司 一种通过手机进行密码认证的银行卡交易方法及系统
US20110238573A1 (en) * 2010-03-25 2011-09-29 Computer Associates Think, Inc. Cardless atm transaction method and system
CN103164911A (zh) * 2011-12-09 2013-06-19 国民技术股份有限公司 一种刷卡支付系统和方法
CN103455913A (zh) * 2013-08-26 2013-12-18 天地融科技股份有限公司 Nfc支付方法、装置、系统及移动终端
CN103927655A (zh) * 2014-05-04 2014-07-16 谢宇杰 基于蓝牙的智能设备支付方法及系统

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101931949B (zh) * 2010-08-11 2014-11-05 中兴通讯股份有限公司 一种移动终端间明话和密话通信切换的方法及系统
CN102984698A (zh) * 2011-09-06 2013-03-20 中兴通讯股份有限公司 一种进行近场通信安全性保护的方法及移动通信终端
CN103701601A (zh) * 2013-12-16 2014-04-02 天地融科技股份有限公司 一种数据传输方法和系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123454A (zh) * 2007-09-21 2008-02-13 北京交通大学 基于蓝牙的手机银联卡数据传输方法及系统
CN102054316A (zh) * 2009-11-06 2011-05-11 中国银联股份有限公司 一种通过手机进行密码认证的银行卡交易方法及系统
US20110238573A1 (en) * 2010-03-25 2011-09-29 Computer Associates Think, Inc. Cardless atm transaction method and system
CN103164911A (zh) * 2011-12-09 2013-06-19 国民技术股份有限公司 一种刷卡支付系统和方法
CN103455913A (zh) * 2013-08-26 2013-12-18 天地融科技股份有限公司 Nfc支付方法、装置、系统及移动终端
CN103927655A (zh) * 2014-05-04 2014-07-16 谢宇杰 基于蓝牙的智能设备支付方法及系统

Also Published As

Publication number Publication date
CN106326783A (zh) 2017-01-11

Similar Documents

Publication Publication Date Title
US20210312029A1 (en) Proximity Unlock and Lock Operations for Electronic Devices
CN111542822B (zh) 用于共享屏幕数据的电子装置和方法
EP3198789B1 (en) Securely pairing computing devices
US11488234B2 (en) Method, apparatus, and system for processing order information
US20140115340A1 (en) Unique device identifier provision method and apparatus
WO2017041599A1 (zh) 业务处理方法及电子设备
KR20200028820A (ko) Uwb 트랜잭션을 위한 방법 및 전자 장치
CN104303481A (zh) 用于远程便携无线设备认证的方法和装置
US11734416B2 (en) Construct general trusted application for a plurality of applications
KR20200028809A (ko) Uwb 트랜잭션을 위한 방법 및 전자 장치
EP4172821B1 (en) Method and system of securing vpn communications
CN115104283A (zh) 电子设备和用于在电子设备中执行对等服务的方法
WO2018022383A1 (en) Authenticating a device utilizing a secure display
CN105325021B (zh) 用于远程便携式无线设备认证的方法和装置
JP6201835B2 (ja) 情報処理装置、情報処理方法及びコンピュータプログラム
US20230171010A1 (en) Method and device for determining proximity of electronic device
JP7681603B2 (ja) 非接触カードのアプレットを制御するための技術
CN110869960B (zh) 个人通信设备、支付终端、金融交易系统和方法以及存储介质
CN117240475A (zh) 一种智能门锁的通信方法、系统、设备及介质
CN114697007A (zh) 一种密钥管理的方法、相应装置及系统
WO2017008631A1 (zh) 信息输入方法和系统、用户设备和终端
CN108197940A (zh) 移动终端的支付请求响应方法、移动终端及可读存储介质
CN116743467A (zh) 智能门锁的电池配件的真伪认证方法、智能门锁及终端
JP2018026141A (ja) 情報処理装置、情報処理方法及びコンピュータプログラム
CN115019419A (zh) 一种车辆开锁方法、装置、设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16823778

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16823778

Country of ref document: EP

Kind code of ref document: A1