WO2021042808A1

WO2021042808A1 - Security information input method, information security device and storage medium

Info

Publication number: WO2021042808A1
Application number: PCT/CN2020/096585
Authority: WO
Inventors: 陈柳章
Original assignee: 深圳市文鼎创数据科技有限公司
Priority date: 2019-09-06
Filing date: 2020-06-17
Publication date: 2021-03-11
Also published as: CN112464183A

Abstract

A security information input method and apparatus and a storage medium. The method comprises: receiving an information obtaining instruction sent by a terminal (S101); sending keyboard device type description information to the terminal according to the information obtaining instruction (S103); generating security information after the terminal identifies that the information security device is a keyboard (S105); and inputting the security information to the terminal by means of a keypad protocol (S107). The information security device simulates user keys and inputs security information into the terminal without manual input by the user, which improves user experience.

Description

Safety information input method, information safety equipment and storage medium

This application claims the priority of the Chinese patent application filed at the Chinese Patent Office on September 6, 2019, with the application number 201910841601.8 and the title of the invention "security information input method, information security equipment, and storage medium". The entire content of the application is approved The reference is incorporated in this application.

Technical field

This application relates to the technical field of identity authentication, and specifically relates to a secure information input method, an information security device, and a storage medium.

Background technique

Nowadays, with the development of computer networks, online transactions have become more and more popular, but at the same time, security issues such as bank account numbers and passwords involved in online transactions have also followed and received more and more attention. Existing, common protection methods include fixed passwords, static passwords, and dynamic passwords. However, the above-mentioned password needs to be manually entered into the terminal and submitted to the server for identity authentication, which is cumbersome to operate, has a poor user experience, and risks the password being peeped during the input process.

technical problem

One of the objectives of the embodiments of the present application is to provide a secure information input method, an information security device, and a storage medium, which can automatically input a password without manually inputting a password.

Technical solutions

In order to solve the above technical problems, the technical solutions adopted in the embodiments of this application are:

In a first aspect, a security information input method is provided, which is applied to an information security device, and the method includes:

Receive an information acquisition instruction sent by the terminal;

Sending the keyboard device type description information to the terminal according to the information acquisition instruction;

After the terminal recognizes that the information security device is a keyboard, generating security information;

The security information is input into the terminal through a keyboard protocol.

In one embodiment, the "generating security information" includes:

Determine whether the user confirms the input of the security information operation is received;

If the user confirms the input of the security information operation, the security information is generated.

In an embodiment, the security information input method includes:

Enter the identification request process;

Detect whether identification information is received;

If the identification information is received, it is determined whether the identification information matches the preset identity verification information;

If the identity identification information matches the preset identity verification information, the security information is allowed to be sent.

In an embodiment, the identity recognition request process includes a fingerprint recognition process and/or a password recognition process.

In an embodiment, after the "inputting the security information into the terminal through a keyboard protocol", the security information input method further includes:

Generate a carriage return confirmation instruction;

The enter confirmation instruction is input into the terminal through a keyboard protocol.

In one embodiment, before the "sending keyboard device type description information to the terminal according to the information acquisition instruction", the security information input method includes:

Determine whether a command to switch to the safety information input mode is received;

If a command to switch to the safety information input mode is received, the current application mode is switched to the safety information input mode.

In a second aspect, an information security device is provided, the information security device further includes a processor and a memory, the memory stores a security information input program, and the security information input program is configured to be executed by the processor to achieve The security information input method described in any one of the above.

In an embodiment, the information security device further includes at least one of a USB module or a Bluetooth module.

In one embodiment, the information security device includes FIDO (Fast Identity Online, a fast online identity authentication mode) module, the FIDO module can switch the current application mode to the safe information input mode through mode switching.

In a third aspect, a storage medium is provided, the storage medium is a computer-readable storage medium, and a safe information input program is stored on the storage medium, and the safe information input program can be executed by one or more processors to Realize the security information input method as described in any one of the above.

Beneficial effect

The security information input method and device provided by the embodiments of the present application have the beneficial effect of simulating a user's key press through an information security device to input security information into the terminal without manual input by the user, thereby improving user experience.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application, the following will briefly introduce the accompanying drawings that need to be used in the embodiments or exemplary technical descriptions. Obviously, the accompanying drawings in the following description are only of the present application. For some embodiments, those of ordinary skill in the art can obtain other drawings based on these drawings without creative work.

FIG. 1 is a schematic structural diagram of an information security device provided by an embodiment of this application;

2 is a schematic flowchart of a security information input method provided by an embodiment of the application;

Figure 3 is a schematic diagram of a display interface of an input box of a terminal;

4 is a schematic flowchart of another security information input method provided by an embodiment of the application;

The realization, functional characteristics, and advantages of the purpose of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

Embodiments of the present invention

In order to make the purpose, technical solutions, and advantages of this application clearer, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, and are not used to limit the present application.

It should be noted that when a component is referred to as being "fixed to" or "installed on" another component, it can be directly on the other component or indirectly on the other component. When a component is said to be "connected" to another component, it can be directly or indirectly connected to the other component. The terms "upper", "lower", "left", "right", etc. indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, and are only for ease of description, and do not indicate or imply the device referred to. Or the element must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be construed as a limitation of the present application. For those of ordinary skill in the art, the specific meaning of the above terms can be understood according to specific conditions. The terms "first" and "second" are only used for ease of description, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features. The meaning of "plurality" means two or more than two, unless otherwise specifically defined.

In order to illustrate the technical solutions described in this application, detailed descriptions are given below in conjunction with specific drawings and embodiments.

Please refer to FIG. 1, an embodiment of the present application uses an information security device. The information security device includes a processor 300, a memory 400, a USB module 600, a Bluetooth module 700, and FIDO (Fast Identity Online) Module 800. The information security device also includes a network interface (not shown) and a communication bus 700. The processor 300, the mode switching module 500, and the FIDO module 600 are connected through a communication bus 500. The memory 400 stores a safety information input program, the safety information input program is configured to be executed by the processor 300, and the processor 300 executes the safety information input program to implement the safety information input method.

Specifically, the information security device further includes at least one of a USB module 600 or a Bluetooth module 700. The information security device can send security information to the terminal through a wired transmission method via USB; or enter the security information into the terminal by establishing Bluetooth communication with the terminal. The information security device includes a FIDO module 800, and the FIDO module 800 can switch the current application mode to the security information input mode through mode switching. You can directly enter the FIDO verification mode through mode switching. When establishing a connection with a terminal that uses FIDO for identity authentication, you can directly perform FIDO authentication.

Please refer to FIG. 2, an embodiment of the present application also provides a security information input method, which is applied to an information security device, and the security information input method includes:

Step S101: Receive an information acquisition instruction sent by a terminal;

Step S103: Send the keyboard device type description information to the terminal according to the information acquisition instruction;

Step S105: After the terminal recognizes that the information security device is a keyboard, generate security information;

Step S107: Input the security information into the terminal through a keyboard protocol.

In this embodiment, after the information security device establishes a communication connection with the terminal, the terminal needs to confirm the type of the information security device, and the information security device sends the keyboard device type description information to the terminal in preparation for simulating the keyboard to input security information. The input keyboard device type description can be a keyboard descriptor or a keyboard descriptor based on the Bluetooth protocol. Specifically, after the information security device establishes a data connection with the terminal through the USB module 600 or the Bluetooth module 700, the input keyboard device type description is sent to the terminal, so that the terminal device recognizes the information security device as a keyboard. Specifically, when the terminal sends the keyboard descriptor to the terminal through the USB module 600 or the Bluetooth module 700, the terminal recognizes that the information security device is a keyboard, and waits for the information security device to input characters. Generate security information, and input the security information into the input box of the terminal according to the keyboard protocol. In some embodiments, before sending the keyboard device type description information to the terminal, it is determined whether a command to switch to the safe information input mode is received; if the command to switch to the safe information input mode is received, the current FIDO mode is switched Go to the security information input mode. If it is currently in the security information input mode, after the terminal recognizes that the information security device is a keyboard, it will determine whether the command to switch to FIDO mode is accepted, if it is received, switch to FIDO mode, otherwise, continue to input security information mode.

Specifically, as shown in Figure 3, when the user uses the terminal for login and transaction, the terminal displays a security information input box waiting for the user to input security information, and enters security information through the corresponding input keyboard device type description to complete the input of identity information .

In an embodiment, the method further includes: judging whether an operation of confirming input of safety information by the user is received;

In this embodiment, if it is determined that the terminal recognizes the information security device as a keyboard, the information security device cyclically waits for the user's confirmation to input security information, and by pressing the key, the user confirms the operation of inputting security information, and then generates security information and inputs it to the terminal . Specifically, a single-click button can be used as an operation for the user to confirm the input of security information, and a double-click button can be used as a command to switch to the FIDO mode or a command to switch to the security information input mode.

In an embodiment, referring to FIG. 4, the security information input method may further include:

Step S301: Enter the identity recognition request process;

Step S303: Detect whether the identification information is received; if the identification information is received, perform step S305; otherwise, perform step S301;

Step S305: Determine whether the identity information matches the preset identity verification information; if the identity information matches the preset identity verification information, perform step S307; otherwise, perform step S301;

Step S307: Allow sending of security information.

Specifically, in order to prevent the information security equipment from being stolen by others, it is necessary to further verify the identity of the user. In this embodiment, the identity recognition request process includes at least one of a fingerprint recognition process or an identity verification password recognition process. By pre-saving the fingerprint information or identity verification password in the information security device, the user identity can be further confirmed before the security information is input to the terminal.

In one embodiment, the information security device is a dynamic token, and the security information is a dynamic password. In another embodiment, the information security device is a cipher, the security information is an account password, and after the terminal recognizes the cipher as a keyboard, the cipher further includes: displaying a list of accounts. After the user selects the account, the account password corresponding to the selected account is entered into the terminal through the keyboard protocol (specifically, the account number is entered into the terminal first, and the password is entered into the terminal again when the user confirmation instruction is received again).

The information security device in the foregoing embodiment uses the information security device to simulate user keystrokes and input security information into the terminal without manual input by the user, thereby improving user experience.

In this embodiment, the memory 400 includes at least one type of readable storage medium. The readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (such as SD or DX memory, etc.), magnetic memory, magnetic disk, and optical disk. Wait. In some embodiments, the memory 400 may be an internal storage unit of an information security device, such as a hard disk of the information security device. In other embodiments, the memory 400 may also be an external storage device of the information security device, such as a plug-in hard disk equipped on the information security device, a smart memory card (Smart Media Card, SMC), and a secure digital (Secure Digital, SD). Card, Flash Card, etc. Further, the memory 400 may also include both an internal storage unit of an information security device and an external storage device. The memory 400 can be used not only to store application software and various data installed in the information security device, such as codes of the information security device, etc., but also to temporarily store data that has been output or will be output.

The processor 300 may be a central processing unit (Central Processing Unit) in some embodiments. Processing Unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chips are used to run program codes or process data stored in the memory 400, for example, execute a security information input program.

The network interface may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface), which is usually used to establish a communication connection between the information security device and other electronic devices.

The network interface is used to realize the connection and communication between these components.

The communication bus 500 is used to implement connection and communication between these components.

In addition, an embodiment of the present application also proposes a storage medium that stores a security information input program, and the security information input program can be executed by one or more processors to implement the following operations:

Step S101: Receive an information acquisition instruction sent by a terminal;

The specific implementation of the storage medium of the present application is basically the same as the foregoing embodiments of the security information input method and the information security device, and will not be repeated here.

It should be noted that the serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments. And the terms "include", "include" or any other variants thereof in this article are intended to cover non-exclusive inclusion, so that a process, device, article or method including a series of elements not only includes those elements, but also includes those elements that are not explicitly included. The other elements listed may also include elements inherent to the process, device, article, or method. If there are no more restrictions, the element defined by the sentence "including one..." does not exclude the existence of other identical elements in the process, device, article, or method that includes the element.

Through the description of the above implementation manners, those skilled in the art can clearly understand that the above-mentioned embodiment method can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is better.的实施方式。 Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM) as described above. , Magnetic disk, optical disk), including a number of instructions to make an information security device execute the method described in each embodiment of this application.

The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from a website, computer, server, or data center. Transmission to another website site, computer, server or data center via wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be stored by a computer or a data storage device such as a server or a data center integrated with one or more available media. The usable medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid state hard disk (SSD)), etc.

Those skilled in the art can clearly understand that, for the convenience and conciseness of the description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

The above are only optional embodiments of the application, and are not used to limit the application. For those skilled in the art, this application can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the scope of the claims of this application.

Claims

A security information input method applied to information security equipment, characterized in that the method includes:

Receive an information acquisition instruction sent by the terminal;

Sending the keyboard device type description information to the terminal according to the information acquisition instruction;

After the terminal recognizes that the information security device is a keyboard, generating security information;

The security information is input into the terminal through a keyboard protocol.
The security information input method according to claim 1, wherein said "generating security information" comprises:

Determine whether the user confirms the input of the security information operation is received;

If the user confirms the input of the security information operation, the security information is generated.
The safety information input method according to claim 1, wherein the safety information input method comprises:

Enter the identification request process;

Detect whether identification information is received;

If the identification information is received, it is determined whether the identification information matches the preset identity verification information;

If the identity identification information matches the preset identity verification information, the security information is allowed to be sent.
The security information input method according to claim 3, wherein the identity recognition request process includes a fingerprint recognition process and/or a password recognition process.
The security information input method according to claim 1, wherein after the "input the security information into the terminal through a keyboard protocol", the security information input method further comprises:

Generate a carriage return confirmation instruction;

The enter confirmation instruction is input into the terminal through a keyboard protocol.
The security information input method according to claim 1, characterized in that, before the "sending keyboard device type description information to the terminal according to the information acquisition instruction", the security information input method comprises:

Determine whether a command to switch to the safety information input mode is received;

If a command to switch to the safety information input mode is received, the current application mode is switched to the safety information input mode.
The security information input method according to any one of claims 1-6, wherein the information security device is a dynamic token, and the security information is a dynamic password.
The security information input method according to any one of claims 1 to 6, wherein the information security device is a cipher, and the security information is an account password.
An information security device, characterized in that the information security device further includes a processor and a memory, the memory stores a security information input program, and the security information input program is configured to be executed by the processor to implement the claims The security information input method described in any one of 1-8.
The information security device according to claim 9, wherein the information security device further comprises at least one of a USB module or a Bluetooth module.
The information security device according to claim 10, wherein the information security device comprises a FIDO (Fast Identity Online, fast online identity authentication mode) module, and the FIDO module can switch the current application mode to security through mode switching. Information input mode.
A storage medium, characterized in that: the storage medium is a computer-readable storage medium, and a safety information input program is stored on the storage medium, and the safety information input program can be executed by one or more processors to realize The security information input method according to any one of claims 1-8.