WO2017084572A1

WO2017084572A1 - Encryption method for clear-text passwords

Info

Publication number: WO2017084572A1
Application number: PCT/CN2016/106026
Authority: WO
Inventors: 徐江锋
Original assignee: 徐江锋
Priority date: 2015-11-21
Filing date: 2016-11-16
Publication date: 2017-05-26
Also published as: CN105406965A

Abstract

An encryption method for clear-text passwords relates to the field of authentication of all passwords, in particular to the field of security of passwords used in mobile terminal payment, bank payment and network account payment, and the like. Technical defects of easiness in peeping and leaking existing fixed-number passwords and poor security and the problem of huge property loss brought by stolen passwords on a network side caused by Trojan horse virus and inveigling of a fishing website are resolved. The method comprises: orderly arrange nine or more labels in a password input interface, each label randomly displaying one to-be-selected character, and each label having an unique position code corresponding to same; correct passwords stored in a password database are a password algorithm set by a user by combining with the position codes; and when to-be-checked passwords input in a password textbox of the password input interface by the user are equal to a computing result obtained by replacing the position codes in the password algorithm into the to-be-selected character correspondingly displayed by a current position code for computation, password authentication succeeds. The encryption method is simple and fast, and passwords can be input in stranger's presence; and correct to-be-checked passwords requiring to be input for each login or payment operation by a user are different, the user does not need to worry about peeping by others, and safety is achieved.

Description

Encryption method for plaintext password

[0001] The present invention relates to the field of all password authentication, and more particularly to the fields of mobile payment, bank payment, and password security used in network account payment.

Background technique

[0002] In daily life, passwords are an important means for us to verify the identity of users. Whether it is bank withdrawals, shopping mall pos machines, securities transactions, mobile payments, web applications, even work logins, access control, etc., passwords are required. However, these passwords are mostly six-digit fixed-digit passwords. The network application passwords also add letters, symbols, capitalization, etc. Although some passwords have added security measures, but frequently lose passwords in public, there are still security risks, such as: An acquaintance is embarrassed to avoid it. The stranger is inconvenient to block it. The criminals are telephoto, causing people to lose property due to the password being sneaked. The network is spoofed by the Trojan virus and phishing websites. The problem of huge property losses, so the user's trust in the current account security is still not high enough, especially in the field of mobile payment, resulting in difficulty in the promotion of mobile payment. Although the payment field also has a small amount of confidentiality, it is not flexible enough, so people are eager to have safer measures or methods to protect citizens' property and information security.

technical problem

[0003] In summary, the purpose of the present invention is to solve the problem that the existing fixed-value passwords are easily sneaked and leaked, and the security is poor. The network side causes a huge amount of property due to the hacking of the Trojan virus and the phishing website. The problem of loss, and the introduction of a clear text password encryption method.

Problem solution

Technical solution

[0004] In order to solve the technical problem proposed by the present invention, the technical solution adopted is: a method for encrypting a plaintext password, characterized in that the method is to arrange nine or more labels in an orderly manner in a password input interface, The tags randomly display a candidate character, each tag has a unique location code corresponding thereto; the correct password stored in the password database is a password algorithm set by the user in combination with the location code; when the user is in the password text box of the password input interface Entering the pending password is equivalent to replacing the location code in the cryptographic algorithm with the current one. The position code corresponds to the calculation result obtained by calculating the candidate character to be displayed, and the password verification is passed.

[0005] When the user enters the password to be verified in the password text box of the password input interface is not equal to the calculation result obtained by replacing the location code in the password algorithm with the candidate character displayed corresponding to the current location code, the password verification fails. The peer regenerates the candidate characters displayed on all labels.

[0006] The candidate characters randomly displayed in each label are randomly displayed with any number, letter or symbol; or the randomly selected graphic or color is used to replace the candidate characters; or the color is combined with the candidate characters.

[0007] Each of the labels is arranged in two or more rows, each row being three or more.

[0008] The number of the password text boxes is 2-6, and each password text box allows one character to be input.

[0009] The password text box includes more than one real password box, and the rest is a misleading password box; each real password text box is set with a corresponding password algorithm, and the password to be verified is input in the real password text box. Verify; the password to be tested entered in the misleading password box does not need to be verified.

[0010] The cryptographic algorithm includes a fixed value, a candidate character corresponding to the display of the position code, and an arithmetic operation of the candidate character corresponding to the display of the position code.

[0011] The number of the password text boxes is four, each password text box allows one character to be input, the first two password text boxes use a set of password algorithms, and the latter two password text boxes use a set of password algorithms.

Advantageous effects of the invention

Beneficial effect

[0012] The beneficial effects of the present invention are: The present invention is a simple and fast encryption method capable of inputting a password as a stranger; the correct password stored in the password database is a cryptographic algorithm set by the user in combination with the location code, and is not It is a fixed number or letter preset by the user. Each time the user enters the login or payment operation, the correct password to be checked is not the same, and there is no need to worry about being voyeuristic, and it is safe and secure. The cryptographic algorithm is relatively simple and easy to remember, and can be used mainly for small payment and simplified payment operations. For large payment, a relatively complicated cryptographic algorithm can be used, which requires secondary verification or secondary verification in combination with traditional encryption methods.

[0013] Since the encryption method can adopt various algorithms such as force reduction, multiplication, multiplication, position code, fixed value code, misdirect code, color positioning code, etc., the user can select a suitable and easy to remember method to set. Brief description of the encryption algorithm DRAWINGS

1 is a schematic diagram of a password input interface of Cases 1 to 4 of the present invention;

2 is a schematic diagram of a password input interface of Case 5 of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

[0016] The structure of the present invention will be further described below in conjunction with the preferred embodiments of the present invention.

[0017] The encryption method of the plaintext password of the present invention is that more than nine tags are arranged in an orderly manner in the password input interface, and each tag randomly displays one candidate character, and each tag has a unique location code corresponding thereto; The correct password stored in the database is the password algorithm set by the user in combination with the location code; when the password entered by the user in the password text box of the password input interface is equal to replacing the location code in the password algorithm with the candidate to be displayed corresponding to the current location code The calculation result obtained by the character calculation 吋, the password verification is passed. When the password to be verified entered by the user in the password text box of the password input interface is not equal to the calculation result obtained by replacing the location code in the password algorithm with the candidate character displayed corresponding to the current location code, the password verification fails, and the pair fails. The candidate characters displayed on all labels are regenerated.

[0018] wherein, the above ordered arrangement may be a rectangular array, a circular array, for example: 9 labels, a 3 * 3 rectangular array; 18 labels, a 2 * 9 rectangular array; 27 labels, a 3 * 9 rectangle Array, 12 tags, in a circular array.

[0019] The candidate character randomly displayed in each label may be randomly displayed with any number, letter or symbol; or the randomly selected graphic or color may be used to replace the candidate character; or the color may be combined with the candidate character. The number of password text boxes is 2~6, and each password text box allows one character to be input. Preferably, the number of the password text boxes is four, each password text box allows one character to be input, the first two password text boxes use a set of password algorithms, and the latter two password text boxes use a set of password algorithms.

[0020] Case 1 - Opcode Encryption

[0021] Referring to FIG. 1, 18 labels are displayed in the password input interface, and 18 labels are arranged in a 2*9 rectangular array, that is, divided into upper and lower rows, 9 in each row; the position codes of the upper 9 labels are respectively It is A1~A9; the position codes of the next 9 labels are B1~B9 respectively; the number of password text boxes is 4, the numbers are respectively Ml, M2, M3, M4; if the user corresponds to the password text boxes M1 and M2 A set of cryptographic algorithms is set to: A2+B1, a set of cryptographic algorithms corresponding to the ciphertext boxes M3 and M4 are set to: A8*A7; as shown in Figure 1, label A2 The candidate characters randomly displayed by Bl are the numbers 5, 8, A2+B1 = 5+8 = 13, which is the calculation obtained by replacing the position code in the cryptographic algorithm with the candidate character corresponding to the current position code. The result is 13, the password text box Ml enters ten digits: "1", the password text box M2 enters the single digit: "3"; the randomly selected characters of the labels A8 and A7 are the numbers 3, 8, A8*A7 = 3*8 = 24, that is, the calculation result obtained by replacing the position code in the cryptographic algorithm with the candidate character displayed corresponding to the current position code is 24, and the cipher text box M3 is input with ten digits: "2", password The text box M4 enters a single digit: "4"; that is, the passwords to be checked in the password text boxes M1, M2, M3, and M4 through the keyboard are "1", "3", "2", "4".吋Verification passed; otherwise, the verification fails, and the candidate characters displayed on all the labels are re-randomly generated. In order to facilitate the user to quickly and clearly identify the position code of the label, each row of three consecutive labels is a group, and the interval between each group is appropriately increased.

[0022] Case 2 - Fixed Value Code Encryption

[0023] In order to simplify the cryptographic algorithm of Case 1, for easy memory, the cryptographic algorithm may adopt a fixed value manner, for example, a set of cryptographic algorithms corresponding to the cipher text boxes M3 and M4 are set to fixed values: "8" and "9" Then, in Figure 1, only the passwords to be checked in the password text boxes M1, M2, M3, and M4 through the keyboard are "1", "3", "8", "9", and the password is entered.吋, the correct password for the password text box Ml, M2 is variable, and the correct password for the password text box M3, M4 is a fixed value: "8" and "9".

[0024] Case 3 - Misleading Code Encryption

[0025] In order to further simplify Case 2, the password text box contains more than one real password box, and the rest is a misleading password box; each real password text box is set with a corresponding password algorithm, and the real password text box is input. The password to be verified needs to be verified; the password to be tested entered in the misleading password box does not need to be verified. For example, if the password text boxes M1 and M2 in Case 2 are set as the real password box, and the password text boxes M3 and M4 are set as the misleading password box, then in FIG. 1, the password to be checked is input in the password text boxes M1 and M2 through the keyboard. 1", "3" can be verified; any number can be entered in the password text box M3, M4, the purpose is to avoid entering the password to be verified according to the password text box Ml, M2, and the password algorithm A2 corresponding to the password text boxes M1 and M2 +B1.

Case 4 - Location Code Encryption

[0027] In order to simplify the cryptographic algorithm, the candidate character corresponding to the displayed position code is directly equivalent to the cryptographic algorithm. For example, the cipher algorithm corresponding to the cipher text box M1 in FIG. 1 is Al, and the cipher algorithm corresponding to the cipher text box M2 is B3. The password algorithm corresponding to the password text box M3 is A7, and the password algorithm corresponding to the password text box M4 is B9; the passwords to be checked in the password text boxes M1, M2, M3, and M4 by the keyboard are "2", "9". , "8", "7" 吋 pass the verification; the user only needs to remember the position code of the four labels, and input the candidate characters displayed by the labels Al, B3, A7, B 9 each time into the four password text boxes Ml , M2, M3, M4 can be.

[0028] Example 5 - Color Location Code Encryption

[0029] Referring to FIG. 2, 18 labels are displayed in the password input interface, and 18 labels are arranged in a 2*9 rectangular array, that is, divided into upper and lower rows, 9 in each row; each label randomly displays a color, The password algorithm is the N-bit color after the preset color; for example: the password algorithm corresponding to the password text box M1 is red + 2 digits, then the password text box M1 should be blue, and the blue color can be directly clicked by the mouse. Label; if there are four password text boxes, and so on.

[0030] It is also possible to combine case 5 with case 1-4, and random numbers appear on the labels of random colors.

, performs various operations based on the numbers on the selected color.

Claims

Claim

A method for encrypting a plaintext password, characterized in that the method is that nine or more tags are arranged in an orderly manner in a password input interface, and each tag randomly displays a candidate character, and each tag has a unique corresponding one. The correct password stored in the password database is the password algorithm set by the user in combination with the location code; when the password entered by the user in the password text box of the password input interface is equal to the replacement of the location code in the password algorithm with the current location code The calculated result of the displayed candidate character is calculated, and the password verification is passed.

The method for encrypting a plaintext password according to claim 1, wherein: when the password entered by the user in the password text box of the password input interface is not equal to replacing the location code in the password algorithm with the current location code The calculated result of the displayed candidate character is calculated, the password verification fails, and the candidate characters displayed on all the labels are regenerated.

The method for encrypting a plaintext password according to claim 1, wherein: the candidate character randomly displayed by each label is randomly displayed with any number, letter or symbol; or the randomly displayed graphic or color is used for replacement. Select a character; or combine colors with the characters to be selected.

The plaintext password encryption method according to claim 1, wherein each of the labels is arranged in two or more rows, each row being three or more.

The method for encrypting plaintext passwords according to claim 1, wherein the number of the cipher text boxes is 2-6, and each cipher text box allows one character to be input. The method for encrypting a plaintext password according to claim 5, wherein: the password text box includes more than one real password box, and the rest is a misleading password box; each real password text box is set with a Corresponding cryptographic algorithm, the password to be tested entered in the real password text box needs to be verified; the password to be tested entered in the misleading password box does not need to be verified.

The method for encrypting a plaintext password according to claim 1, wherein: the cryptographic algorithm comprises a fixed value, a candidate character corresponding to the position code, and an arithmetic operation of the candidate character corresponding to the position code. [Claim 8] A method for encrypting a plaintext password according to claim 1, wherein: the number of the password text boxes is four, and each password text box allows one character to be input, the first two passwords. The text box uses a set of cryptographic algorithms, and the latter two cipher text boxes use a set of cryptographic algorithms.