CN101169815A - Computer system and data input method - Google Patents
Computer system and data input method Download PDFInfo
- Publication number
- CN101169815A CN101169815A CNA2007100317030A CN200710031703A CN101169815A CN 101169815 A CN101169815 A CN 101169815A CN A2007100317030 A CNA2007100317030 A CN A2007100317030A CN 200710031703 A CN200710031703 A CN 200710031703A CN 101169815 A CN101169815 A CN 101169815A
- Authority
- CN
- China
- Prior art keywords
- data
- transmission mode
- encrypted
- data input
- application program
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Storage Device Security (AREA)
Abstract
本发明公开了一种计算机系统,包括有:数据输入装置,用于输入数据;传输控制单元,用于在接收到非加密传输模式指示信息时,进入非加密传输模式,将所述数据输入装置输入的数据传输给应用程序接口,在接收到加密传输模式指示信息时,进入加密传输模式时,将所述数据输入单元输入的数据传输至所述数据加密单元;数据加密单元,用于对来自所述传输控制单元的数据进行加密;应用程序接口,用于将来自所述传输控制单元的数据或来自所述数据加密单元加密的数据发送至相应的应用程序,另外本发明还公开了一种数据输入方法。
The invention discloses a computer system, comprising: a data input device for inputting data; a transmission control unit for entering a non-encrypted transmission mode when receiving non-encrypted transmission mode instruction information, and inputting the data into the device The input data is transmitted to the application program interface, and when the encryption transmission mode instruction information is received, and the encryption transmission mode is entered, the data input by the data input unit is transmitted to the data encryption unit; the data encryption unit is used to encrypt data from The data of the transmission control unit is encrypted; the application program interface is used to send the data from the transmission control unit or the encrypted data from the data encryption unit to the corresponding application program. In addition, the invention also discloses a Data entry method.
Description
技术领域technical field
本发明涉及计算机领域,具体涉及一种计算机系统以及一种数据输入方法。The invention relates to the field of computers, in particular to a computer system and a data input method.
背景技术Background technique
随着计算机以及互联技术的快速发展,越来越多的利用计算机的辅助来执行重要的商业应用,例如互联网银行和家庭交易服务(HTTS)。但是,这种基于计算机的商业应用可能被记录软件或按键记录工具记录器恶意利用,这些间谍软件从键盘输入驱动器对应用程序的接口获取、记录用户输入的明文数据并发送给身份窃贼,类似的间谍软件如木马病毒、后门病毒等给用户的数据安全带来了严重威胁。With the rapid development of computers and Internet technologies, more and more computer-aided applications are used to execute important business applications, such as Internet banking and home transaction services (HTTS). However, such computer-based business applications can be maliciously exploited by logging software or keyloggers, which capture, record, and send cleartext data entered by the user from the keyboard input driver-to-application interface to identity thieves, similar to Spyware such as Trojan horse virus, backdoor virus, etc. have brought serious threats to user data security.
现有技术在一些安全性要求较高的应用场合(如自动取款机等),可使用加密键盘来输入数据。使用加密键盘的系统是一个专用系统,其使用特制键盘将用户输入的数据进行加密后通过键盘驱动程序发送给应用程序,应用程序根据内置的解密算法以及解密密钥解密用户输入的数据,进而完成后续业务处理。In the prior art, in some applications with high security requirements (such as automatic teller machines, etc.), an encrypted keyboard can be used to input data. The system using an encrypted keyboard is a dedicated system, which uses a special keyboard to encrypt the data entered by the user and then sends it to the application program through the keyboard driver. The application program decrypts the data entered by the user according to the built-in decryption algorithm and decryption key, and then completes Follow-up business processing.
现有技术的加密键盘只能使用在特定的应用场合,如应用于个人计算机等需要较高通用性的系统时,会导致由于大多数合法的应用程序由于没有与加密键盘加密算法和加密密钥对应的解密算法和解密密钥而导致合法的应用程序无法获取真正需要的输入数据(应用于个人计算机时,用户的大多数普通操作是不需要加密),导致系统兼容性差。The encryption keyboard of the prior art can only be used in specific applications, such as when being applied to a system requiring higher versatility such as a personal computer, which will cause most legal application programs to The corresponding decryption algorithm and decryption key cause legitimate applications to be unable to obtain the input data that is really needed (when applied to a personal computer, most of the common operations of the user do not require encryption), resulting in poor system compatibility.
发明内容Contents of the invention
有鉴于此,本发明实施例所要解决的技术问题在于,提供一种计算机系统以及数据输入方法,实现既能保证用户输入隐私数据(如互联网银行和家庭交易服务等用户名以及登录密码数据)的安全性,又能保证计算机系统对合法的普通应用程序的兼容性。In view of this, the technical problem to be solved by the embodiments of the present invention is to provide a computer system and a data input method, which can ensure that the user can input private data (such as user names and login password data of Internet banking and home transaction services) Security, but also to ensure the computer system's compatibility with legitimate common applications.
本发明实施例的一种计算机系统,包括:A kind of computer system of the embodiment of the present invention, comprises:
数据输入装置,用于输入数据;data input means for inputting data;
传输控制单元,用于在接收到非加密传输模式指示信息时,进入非加密传输模式,将所述数据输入装置输入的数据传输给应用程序接口,在接收到加密传输模式指示信息时,进入加密传输模式时,将所述数据输入单元输入的数据传输至所述数据加密单元;The transmission control unit is configured to enter the non-encrypted transmission mode when receiving the non-encrypted transmission mode indication information, transmit the data input by the data input device to the application program interface, and enter the encryption mode when receiving the encrypted transmission mode indication information In the transmission mode, the data input by the data input unit is transmitted to the data encryption unit;
数据加密单元,用于对来自所述传输控制单元的数据进行加密;a data encryption unit, configured to encrypt data from the transmission control unit;
应用程序接口,用于将来自所述传输控制单元的数据或来自所述数据加密单元加密的数据发送至相应的应用程序。The application program interface is used to send the data from the transmission control unit or the encrypted data from the data encryption unit to a corresponding application program.
本发明实施例一种数据输入方法,包括:A data input method according to an embodiment of the present invention, comprising:
在接收到非加密传输模式指示信息时,启动非加密传输模式,将数据输入装置输入的数据通过应用程序接口传输给相应的应用程序;When receiving the non-encrypted transmission mode instruction information, start the non-encrypted transmission mode, and transmit the data input by the data input device to the corresponding application program through the application program interface;
在接收到加密传输模式指示信息时,启动加密传输模式,对数据输入装置输入的数据进行加密,并将加密后的加密数据通过应用程序接口传输给相应的应用程序。When receiving the encrypted transmission mode instruction information, start the encrypted transmission mode, encrypt the data input by the data input device, and transmit the encrypted encrypted data to the corresponding application program through the application program interface.
实施本发明实施例的一种计算机系统以及一种数据输入方法,通过在数据输入驱动器或数据输入装置中设置加密和非加密两种传输模式,当用户需要进行一些安全性要求较高的隐私数据输入操作时(如互联网银行和家庭交易服务等用户名以及登录密码数据),接收加密传输模式指示信息,启动加密传输模式,对用户输入的隐私数据进行加密并将加密后的数据发送给对应的特定应用程序,进而由该特定应用程序完成对数据的解密,保证了系统的安全性,当用户需要进行普通的数据输入操作时,接收选择非加密传输模式将用户输入的数据直接传输给相应的合法应用程序,保证了计算机系统对合法的普通应用程序的兼容性。Implementing a computer system and a data input method according to an embodiment of the present invention, by setting two transmission modes of encryption and non-encryption in the data input driver or data input device, when the user needs to perform some private data with higher security requirements When inputting operations (such as Internet banking and home transaction services such as user names and login password data), receive encrypted transmission mode instruction information, start the encrypted transmission mode, encrypt the private data entered by the user, and send the encrypted data to the corresponding A specific application program, and then the specific application program completes the decryption of the data, ensuring the security of the system. When the user needs to perform ordinary data input operations, the receiver selects the non-encrypted transmission mode to directly transmit the data input by the user to the corresponding Legitimate applications ensure the compatibility of computer systems with legitimate common applications.
附图说明Description of drawings
图1是本发明计算机系统的第一实施例组成示意图;Fig. 1 is a schematic diagram of the composition of the first embodiment of the computer system of the present invention;
图2是本发明计算机系统的第二实施例组成示意图;Fig. 2 is a schematic composition diagram of the second embodiment of the computer system of the present invention;
图3是本发明数据输入方法的第一实施例流程示意图;3 is a schematic flow chart of the first embodiment of the data input method of the present invention;
图4是本发明数据输入方法的第二实施例流程示意图;Fig. 4 is a schematic flow chart of the second embodiment of the data input method of the present invention;
图5是本发明数据输入方法的第三实施例流程示意图;Fig. 5 is a schematic flow chart of the third embodiment of the data input method of the present invention;
图6是本发明数据输入方法的第四实施例流程示意图。Fig. 6 is a schematic flowchart of the fourth embodiment of the data input method of the present invention.
具体实施方式Detailed ways
为了使本发明的技术方案及优点更加清楚明白,下面结合附图并举实施例对本发明实施例进行进一步详细说明。In order to make the technical solutions and advantages of the present invention clearer, the embodiments of the present invention will be further described in detail below in conjunction with the accompanying drawings.
参考图1,是本发明计算机系统的第一实施例组成示意图。如图所示,本实施例所述的计算机系统主要包括数据输入装置11、驱动接口121、传输控制单元122、数据加密单元123以及应用程序接口124,下面对各个单元部件进行详细描述:Referring to FIG. 1 , it is a schematic composition diagram of the first embodiment of the computer system of the present invention. As shown in the figure, the computer system described in this embodiment mainly includes a
数据输入装置11,用于输入数据。The
此处,数据输入装置11没有具体限制,而是可以一般地表示从系统用户接收数据所有的用户数据输入装置。例如,作为数据输入装置11,可以使用键盘、数字小键盘、鼠标、操纵杆等,优选地可以使用能够输入相对大量的信息并广泛应用于个人计算机等的键盘。Here, the
驱动接口121,用于将所述数据输入装置11输入的数据传输给所述数据传输控制单元122。The
传输控制单元122,用于在接收到非加密传输模式指示信息时,进入非加密传输模式,将所述数据输入装置11输入的数据传输给应用程序接口124,在接收到加密传输模式指示信息时,进入加密传输模式,将所述数据输入单元11输入的数据传输至所述数据加密单元123。The
具体实现时,指示所述传输控制单元122进入非加密传输模式可以有两种实现方式,其中一种实现方式为应用程序通过应用程序接口向传输控制单元122发送用于指示传输控制单元122进入非加密传输模式的非加密传输模式指示信息,当所述传输控制单元122接收到非加密传输模式指示信息时,进入非加密传输模式。例如当用户退出某一银行登录程序时,应用程序通知传输控制单元122进入非加密传输模式。其中另一种实现方式为数据输入装置11向所述传输控制单元122发送用于指示所述传输控制单元122进入非加密传输模式的非加密传输模式指示信息,当所述传输控制单元122接收到所述非加密传输模式指示信息,进入非加密传输模式。例如可以在键盘上设置一按键,用户可通过该按键向传输控制单元122发送非加密传输模式指示信息,通知传输控制单元122进入非加密传输模式。During specific implementation, there are two ways to instruct the
相应地,具体实现时,指示所述传输控制单元122进入加密传输模式可以有两种实现方式,其中一种实现方式为应用程序通过应用程序接口向传输控制单元122发送用于指示传输控制单元122进入加密传输模式的加密传输模式指示信息,当所述传输控制单元122接收到加密传输模式指示信息时,进入加密传输模式。例如当用户退出某一银行登录程序时,应用程序通知传输控制单元122进入非加密传输模式。其中另一种实现方式为数据输入装置11向所述传输控制单元122发送用于指示所述传输控制单元122进入加密传输模式的加密传输模式指示信息,当所述传输控制单元122接收到所述加密传输模式指示信息,进入加密传输模式。例如可以在键盘上设置一按键,用户可通过该按键向传输控制单元122发送加密传输模式指示信息,通知传输控制单元122进入加密传输模式。Correspondingly, during specific implementation, there are two implementations for instructing the
数据加密单元123,用于对来自所述传输控制单元122的数据进行加密。此处,数据加密单元123用于加密的加密算法选择以及加密密钥选择在本发明中不做具体限制,任何常规的优异的算法乃至将来可以出现的新的算法都可以考虑应用于此。具体实现时,考虑到具体应用时,对待不同的需要安全加密输入的应用程序对象一般会设置不同的加密算法以及加密密钥用于加密相应的用户输入,为此所述数据加密单元123需要根据不用的应用程序对象选择不同的加密算法以及加密密钥,为此,具体实现时,所述数据加密单元123主要包括:The
选择单元1231,用于选择加密来自所述传输控制单元122的数据的加密算法和加密密钥。The
数据加密执行单元1232,用于根据所述选择单元1231选择的加密算法和加密密钥对来自所述传输控制单元的数据进行加密。The data
此处,具体实现时,对应于通过应用程序通过发送所述加密传输模式指示信息触发进入加密传输模式的实现方式,可以在该加密传输模式指示信息中进一步包含用于指示具体选择何种加密算法以及加密密钥的信息,所述选择单元1231可根据该信息选择相应的加密算法以及加密密钥,当然,这仅仅是一种举例描述。Here, during specific implementation, corresponding to the implementation of triggering entry into the encrypted transmission mode through the application program by sending the encrypted transmission mode indication information, the encrypted transmission mode indication information may further include instructions for indicating which encryption algorithm to specifically select And the information of the encryption key, the
应用程序接口124,将来自所述传输控制单元122的数据或来自所述数据加密单元123加密的数据发送至相应的应用程序。The
此处,所述应用程序接口124为数据输入驱动器12与各个应用程序间的通信接口,大多数非法应用程序(如木马病毒等黑客程序)一般都是通过从所述应用程序接口124非法监听以盗取用户输入的机密数据的,而本发明实施例在加密传输模式时,所述应用程序接口124发送至相应的应用程序的数据是经加密的密文数据,非法应用程序即使获取了该密文数据,由于不知道相应的解密算法以及解密密钥也就无法获取相应的机密数据。Here, the
本发明实施例中,在加密传输模式时,合法应用程序为了能从来自应用程序接口124的密文数据获取相应的数据信息也即解密后的明文数据,在应用程序中需内置相应的解密单元,也即以与所述数据加密单元123加密用户输入的数据时所使用的加密算法以及加密密钥对应的解密算法以及解密密钥。In the embodiment of the present invention, in the encrypted transmission mode, in order to obtain the corresponding data information from the ciphertext data from the
在以上本发明计算机系统的第一实施例中,具体实现时,所述驱动接口121、传输控制单元122、数据加密单元123以及应用程序接口124共同组成键盘驱动部分,通过以上对本发明计算机系统的第一实施例的描述可知,本实施例通过数据传输控制单元中设置非加密传输模式和加密传输模式两种传输模式,在数据传输控制单元接收到非加密传输模式指示信息时,进入非加密传输模式,将数据输入装置输入的数据通过应用程序接口直接传输给相应的应用程序,在数据传输控制单元接收到加密传输模式指示信息时,进入加密传输模式,将数据输入装置输入的数据传输给数据加密单元,并通过数据加密单元进行数据加密后,将加密后的数据通过应用程序传输给相应的应用程序,为此,实现了对用户输入的密码等隐私数据(如银行登录密码)采用加密传输模式传输,这样非法应用程序(如木马病毒)即使获得了加密后的数据,也会因为没有相应的解密算法和解密密钥而无法获取相应的明文数据,系统安全性得到提高,而对用户输入的非隐私数据采用非加密传输模式传输,这样任何合法的普通应用程序都能正常的获得用户对其输入的数据,提高了系统兼容性。In the above first embodiment of the computer system of the present invention, during specific implementation, the
参考图2,是本发明计算机系统的第二实施例组成示意图。如图所示,本实施例所述的计算机系统主要包括数据输入装置211、传输控制单元212、数据加密单元213、驱动接口214以及应用程序接口22,下面对各单元部件进行详细描述:Referring to FIG. 2 , it is a schematic composition diagram of the second embodiment of the computer system of the present invention. As shown in the figure, the computer system described in this embodiment mainly includes a data input device 211, a transmission control unit 212, a data encryption unit 213, a driver interface 214, and an application program interface 22. Each unit is described in detail below:
数据输入装置211、用于输入数据。The data input device 211 is used for inputting data.
传输控制单元122,用于在接收到非加密传输模式指示信息时,进入非加密传输模式,将所述数据输入装置11输入的数据传输给应用程序接口124,在接收到加密传输模式指示信息时,进入加密传输模式,将所述数据输入单元11输入的数据传输至所述数据加密单元123。The
此处,与本发明计算机系统第一实施例中描述的类似,具体实现时,指示所述传输控制单元212进入非加密传输模式可以有两种实现方式,其中一种实现方式为应用程序通过应用程序接口向传输控制单元212发送用于指示传输控制单元212进入非加密传输模式的非加密传输模式指示信息,当所述传输控制单元212接收到非加密传输模式指示信息时,进入非加密传输模式。例如当用户退出某一银行登录程序时,应用程序通知传输控制单元212进入非加密传输模式。其中另一种实现方式为数据输入装置211向所述传输控制单元212发送用于指示所述传输控制单元212进入非加密传输模式的非加密传输模式指示信息,当所述传输控制单元212接收到所述非加密传输模式指示信息,进入非加密传输模式。例如可以在键盘上设置一按键,用户可通过该按键向传输控制单元212发送非加密传输模式指示信息,通知传输控制单元212进入非加密传输模式。Here, similar to that described in the first embodiment of the computer system of the present invention, during specific implementation, there are two ways to instruct the transmission control unit 212 to enter the non-encrypted transmission mode, one of which is that the application program passes the application The program interface sends to the transmission control unit 212 non-encrypted transmission mode instruction information for instructing the transmission control unit 212 to enter the non-encrypted transmission mode, and when the transmission control unit 212 receives the non-encrypted transmission mode instruction information, it enters the non-encrypted transmission mode . For example, when the user exits a certain bank login program, the application program notifies the transmission control unit 212 to enter the non-encrypted transmission mode. Another implementation is that the data input device 211 sends to the transmission control unit 212 unencrypted transmission mode indication information for instructing the transmission control unit 212 to enter the unencrypted transmission mode, when the transmission control unit 212 receives The non-encrypted transmission mode indication information enters the non-encrypted transmission mode. For example, a key can be set on the keyboard, through which the user can send non-encrypted transmission mode indication information to the transmission control unit 212, and notify the transmission control unit 212 to enter the non-encrypted transmission mode.
相应地,具体实现时,指示所述传输控制单元212进入加密传输模式可以有两种实现方式,其中一种实现方式为应用程序通过应用程序接口向传输控制单元212发送用于指示传输控制单元212进入加密传输模式的加密传输模式指示信息,当所述传输控制单元212接收到加密传输模式指示信息时,进入加密传输模式。例如当用户退出某一银行登录程序时,应用程序通知传输控制单元212进入非加密传输模式。其中另一种实现方式为数据输入装置211向所述传输控制单元212发送用于指示所述传输控制单元212进入加密传输模式的加密传输模式指示信息,当所述传输控制单元212接收到所述加密传输模式指示信息,进入加密传输模式。例如可以在键盘上设置一按键,用户可通过该按键向传输控制单元212发送加密传输模式指示信息,通知传输控制单元212进入加密传输模式。Correspondingly, during specific implementation, there are two implementations for instructing the transmission control unit 212 to enter the encrypted transmission mode, one of which is that the application program sends an instruction to the transmission control unit 212 to the transmission control unit 212 through the application program interface. Encrypted transmission mode indication information for entering the encrypted transmission mode, when the transmission control unit 212 receives the encrypted transmission mode indication information, enters the encrypted transmission mode. For example, when the user exits a certain bank login program, the application program notifies the transmission control unit 212 to enter the non-encrypted transmission mode. Another implementation is that the data input device 211 sends to the transmission control unit 212 encrypted transmission mode indication information for instructing the transmission control unit 212 to enter the encrypted transmission mode, when the transmission control unit 212 receives the Encrypted transmission mode instruction information, enter encrypted transmission mode. For example, a key can be set on the keyboard, through which the user can send encrypted transmission mode instruction information to the transmission control unit 212, and notify the transmission control unit 212 to enter the encrypted transmission mode.
数据加密单元213,用于对来自所述传输控制单元212的数据进行加密。此处,数据加密单元213用于加密的加密算法选择以及加密密钥选择在本发明中不做具体限制,任何常规的优异的算法乃至将来可以出现的新的算法都可以考虑应用于此。具体实现时,考虑到具体应用时,对待不同的需要安全加密输入的应用程序对象一般会设置不同的加密算法以及加密密钥用于加密相应的用户输入,为此所述数据加密单元213需要根据不用的应用程序对象选择不同的加密算法以及加密密钥,为此,具体实现时,所述数据加密单元213主要包括:A data encryption unit 213, configured to encrypt data from the transmission control unit 212. Here, the encryption algorithm selection and encryption key selection used by the data encryption unit 213 for encryption are not specifically limited in the present invention, and any conventional excellent algorithm or even new algorithms that may appear in the future can be considered for application here. During specific implementation, when considering specific applications, different encryption algorithms and encryption keys are generally set for different application objects that require secure encrypted input to encrypt corresponding user input. For this reason, the data encryption unit 213 needs to be based on Different application program objects select different encryption algorithms and encryption keys. For this reason, during specific implementation, the data encryption unit 213 mainly includes:
选择单元2131,用于选择加密来自所述传输控制单元212的数据的加密算法和加密密钥。The selection unit 2131 is configured to select an encryption algorithm and an encryption key for encrypting data from the transmission control unit 212 .
数据加密执行单元2132,用于根据所述选择单元2131选择的加密算法和加密密钥对来自所述传输控制单元的数据进行加密。The data encryption execution unit 2132 is configured to encrypt the data from the transmission control unit according to the encryption algorithm and the encryption key selected by the selection unit 2131 .
此处,具体实现时,对应于通过应用程序通过发送所述加密传输模式指示信息触发进入加密传输模式的实现方式,可以在该加密传输模式指示信息中进一步包含用于指示具体选择何种加密算法以及加密密钥的信息,所述选择单元2231可根据该信息选择相应的加密算法以及加密密钥,当然,这仅仅是一种举例描述。Here, during specific implementation, corresponding to the implementation of triggering entry into the encrypted transmission mode through the application program by sending the encrypted transmission mode indication information, the encrypted transmission mode indication information may further include instructions for indicating which encryption algorithm to specifically select And the information of the encryption key, the selection unit 2231 can select the corresponding encryption algorithm and the encryption key according to the information, of course, this is only an example description.
驱动接口214,用于将来自所述传输控制单元212或所述数据加密单元213机密的数据传输给应用程序接口。The driver interface 214 is configured to transmit the confidential data from the transmission control unit 212 or the data encryption unit 213 to an application program interface.
应用程序接口22,用于将来自所述驱动接口的数据传输给相应的应用程序。The application program interface 22 is used to transmit the data from the drive interface to the corresponding application program.
下面为了利于技术人员实施本实施例,在此以本实施例所描述的计算机系统应用于个人计算机为例对各个关键部件以及区别于现有技术的关键点进行描述,此种类似的描述不应当看做是对本发明保护范围的限定。在本实施应用于个人计算机时,所述数据输入装置211可对应为键盘部分,驱动接口214与应用程序接口22的功能与现有技术中键盘驱动程序部分的主要功能是基本相同的,均为键盘与各个应用程序的信息交互接口。本实施例的关键改进点为在键盘中增加了传输控制单元212和数据加密单元213,所述传输控制单元212和所述数据加密单元213可基于MCU微处理器实现,在键盘上可设置一个或多个按键组合用于控制所述传输控制单元212,以使其可以在加密传输模式和非加密传输模式之间做切换选择,以及进一步地在加密时,选择相应的算法以及加密密钥。另外,为了增加操作的便利性,在启动需要加密传输模式输入的应用程序对象时,应用程序可以发送指示信息并通过驱动接口214发送至传输控制单元212,以指示传输控制单元213在加密传输模式和非加密传输模式之间切换以及在加密传输模式时,选择相应的算法和加密密钥。在非加密传输模式时,传输控制单元212将用户所输入的数据直接传输给通信接口214,此时,用户的数据输入与现有的普通键盘数据输入是几乎相同的,这样任何合法的普通应用程序都能正常的获得用户对其输入的数据,提高了系统兼容性。In order to facilitate technical personnel to implement this embodiment, the computer system described in this embodiment is applied to a personal computer as an example to describe various key components and key points different from the prior art. Such similar descriptions should not It is regarded as limiting the protection scope of the present invention. When this implementation is applied to a personal computer, the data input device 211 can correspond to a keyboard part, and the functions of the driver interface 214 and the application program interface 22 are basically the same as the main functions of the keyboard driver part in the prior art. The keyboard is an information interaction interface with various application programs. The key improvement point of this embodiment is that a transmission control unit 212 and a data encryption unit 213 are added to the keyboard. The transmission control unit 212 and the data encryption unit 213 can be realized based on an MCU microprocessor, and a or multiple key combinations are used to control the transmission control unit 212, so that it can switch between encrypted transmission mode and non-encrypted transmission mode, and further select a corresponding algorithm and encryption key when encrypting. In addition, in order to increase the convenience of operation, when starting an application program object that requires encrypted transmission mode input, the application program can send instruction information and send it to the transmission control unit 212 through the driver interface 214 to instruct the transmission control unit 213 to operate in encrypted transmission mode. When switching between non-encrypted and non-encrypted transmission modes and in encrypted transmission mode, select the corresponding algorithm and encryption key. When in the non-encrypted transmission mode, the transmission control unit 212 directly transmits the data input by the user to the communication interface 214. At this time, the user's data input is almost the same as the existing common keyboard data input, so that any legal common application The program can normally obtain the data input by the user, which improves the system compatibility.
参考图3为本发明数据输入方法的第一实施例流程示意图。本实施例由应用程序触发加密传输模式和非加密传输模式的切换,由数据输入驱动器(对应于键盘驱动部分)完成输入数据的加密,并由应用程序完成对输入数据的解密。用于加密/解密的密钥可以由数据输入驱动器、应用程序内置(例如出厂前设置密钥)。下面结合附图3对本实施例的实施过程做详细描述,本实施例的具体实现过程如下:Referring to FIG. 3 , it is a schematic flowchart of the first embodiment of the data input method of the present invention. In this embodiment, the application program triggers the switching between the encrypted transmission mode and the non-encrypted transmission mode, and the data input driver (corresponding to the keyboard drive part) completes the encryption of the input data, and the application program completes the decryption of the input data. The key used for encryption/decryption can be built-in by data input driver, application program (for example, the key is set before leaving the factory). Below in conjunction with accompanying drawing 3, the implementation process of this embodiment is described in detail, and the specific implementation process of this embodiment is as follows:
步骤301,应用程序向数据输入驱动器发送用于指示所述数据输入驱动器进入加密模式的加密传输模式指示信息,所述数据驱动器接收到所述加密传输模式指示信息后,切换至加密传输模式。Step 301 , the application program sends encrypted transmission mode instruction information to the data input driver for instructing the data input driver to enter the encryption mode, and the data driver switches to the encrypted transmission mode after receiving the encrypted transmission mode instruction information.
此处,进一步地,所述加密传输模式指示信息还可包含指示具体选择何种加密算法以及加密密钥的信息。Here, further, the encryption transmission mode indication information may also include information indicating which encryption algorithm and encryption key to specifically select.
步骤302,用户通过所述数据输入装置输入明文数据。Step 302, the user inputs plaintext data through the data input device.
步骤303,所述数据输入驱动器对来自所述数据输入装置的明文数据进行加密生成加密后的密文数据。Step 303, the data input driver encrypts the plaintext data from the data input device to generate encrypted ciphertext data.
步骤304,所述数据输入驱动器向应用程序发送加密后的密文数据。Step 304, the data input driver sends the encrypted ciphertext data to the application program.
步骤305,应用程序解密来自所述数据驱动器的所述密文数据。Step 305, the application program decrypts the ciphertext data from the data driver.
步骤306,需要加密的数据输入完毕,应用程序向所述数据输入驱动器发送用于指示所述数据输入驱动器进入非加密传输模式的非加密传输模式指示信息,所述数据驱动器接收到所述非加密传输模式指示信息后,切换至非加密传输模式。Step 306, after the data input that needs to be encrypted is completed, the application program sends to the data input driver the non-encrypted transmission mode indication information for instructing the data input driver to enter the non-encrypted transmission mode, and the data driver receives the non-encrypted After the transmission mode instruction message, switch to non-encrypted transmission mode.
步骤307,用户通过所述数据输入装置输入明文数据。Step 307, the user inputs plaintext data through the data input device.
步骤308,所述数据输入驱动器将来自所述数据输入装置的明文数据传输至应用程序。Step 308, the data input driver transmits the plaintext data from the data input device to the application program.
参考图4为本发明数据输入方法的第二实施例流程示意图。本实施例由用户向数据输入装置输入指示信息触发加密传输模式和非加密传输模式的切换,由数据输入驱动器(对应于键盘驱动部分)完成输入数据的加密,并由应用程序完成对输入数据的解密。用于加密/解密的密钥可以由数据输入驱动器、应用程序内置(例如出厂前设置密钥)。下面结合附图4对本实施例的实施过程做详细描述,本实施例的具体实现过程如下:Referring to FIG. 4 , it is a schematic flowchart of the second embodiment of the data input method of the present invention. In this embodiment, the user inputs instruction information to the data input device to trigger the switching of the encrypted transmission mode and the non-encrypted transmission mode, and the data input driver (corresponding to the keyboard driver part) completes the encryption of the input data, and completes the encryption of the input data by the application program decrypt. The key used for encryption/decryption can be built-in by data input driver, application program (for example, the key is set before leaving the factory). Below in conjunction with accompanying drawing 4, the implementation process of this embodiment is described in detail, and the specific implementation process of this embodiment is as follows:
步骤401,所述数据输入装置向所述数据输入驱动器发送用户输入的用于指示所述数据输入驱动器进入加密传输模式的加密传输模式指示信息,所述数据驱动器接收到所述加密传输模式指示信息后,切换至加密传输模式。Step 401, the data input device sends encrypted transmission mode instruction information input by the user to the data input driver for instructing the data input driver to enter the encrypted transmission mode, and the data driver receives the encrypted transmission mode instruction information After that, switch to encrypted transmission mode.
此处,进一步地,所述加密传输模式指示信息还可包含指示具体选择何种加密算法以及加密密钥的信息。在一具体实施例中,为了便于用户输入操作,可提供相应的显示界面供用户作为模式选择以及在选择加密传输模式时,进一步选择相应的加密算法等。Here, further, the encryption transmission mode indication information may also include information indicating which encryption algorithm and encryption key to specifically select. In a specific embodiment, in order to facilitate the user's input operation, a corresponding display interface may be provided for the user to select a mode and further select a corresponding encryption algorithm when selecting an encrypted transmission mode.
步骤402,用户通过所述数据输入装置输入明文数据。Step 402, the user inputs plaintext data through the data input device.
步骤403,所述数据输入驱动器对来自所述数据输入装置的明文数据进行加密生成加密后的密文数据。Step 403, the data input driver encrypts the plaintext data from the data input device to generate encrypted ciphertext data.
步骤404,所述数据输入驱动器向应用程序发送加密后的密文数据。Step 404, the data input driver sends the encrypted ciphertext data to the application program.
步骤405,应用程序解密来自所述数据驱动器的所述密文数据。Step 405, the application decrypts the ciphertext data from the data driver.
步骤406,需要加密的数据输入完毕,数据输入装置向向所述数据输入驱动器发送用户输入的用于指示所述数据输入驱动器进入非加密传输模式的非加密传输模式指示信息,所述数据驱动器接收到所述非加密传输模式指示信息后,切换至非加密传输模式。Step 406, after the data input that needs to be encrypted is completed, the data input device sends the unencrypted transmission mode indication information input by the user to the data input driver to instruct the data input driver to enter the unencrypted transmission mode, and the data driver receives After receiving the non-encrypted transmission mode indication information, switch to the non-encrypted transmission mode.
步骤407,用户通过所述数据输入装置输入明文数据。Step 407, the user inputs plaintext data through the data input device.
步骤408,所述数据输入驱动器将来自所述数据输入装置的明文数据传输至应用程序。Step 408, the data input driver transmits the plaintext data from the data input device to the application program.
参考图5为本发明数据输入方法的第三实施例流程示意图。本实施例由应用触发加密传输模式和非加密传输模式的切换,由数据输入装置(对应于键盘部分)完成输入数据的加密,并由应用程序完成对输入数据的解密。用于加密/解密的密钥可以由数据输入装置、应用程序内置(例如出厂前设置密钥)。下面结合附图5对本实施例的实施过程做详细描述,本实施例的具体实现过程如下:Referring to FIG. 5 , it is a schematic flowchart of a third embodiment of the data input method of the present invention. In this embodiment, the application triggers the switching between the encrypted transmission mode and the non-encrypted transmission mode, the data input device (corresponding to the keyboard part) completes the encryption of the input data, and the application program completes the decryption of the input data. The key used for encryption/decryption can be built-in by the data input device or the application program (for example, the key is set before leaving the factory). Below in conjunction with accompanying drawing 5, the implementation process of this embodiment is described in detail, and the specific implementation process of this embodiment is as follows:
步骤501,应用程序向所述数据输入驱动器发送用于指示所述数据输入装置进入加密传输模式的加密传输模式指示信息。Step 501, the application program sends encrypted transmission mode instruction information to the data input driver for instructing the data input device to enter the encrypted transmission mode.
步骤502,所述数据输入驱动器将来自应用程序的所述加密传输模式指示信息传输至所述数据输入装置,所述数据输入装置接收到所述加密传输模式指示信息后,切换至加密传输模式。Step 502, the data input driver transmits the encrypted transmission mode indication information from the application program to the data input device, and the data input device switches to the encrypted transmission mode after receiving the encrypted transmission mode indication information.
此处,进一步地,所述加密传输模式指示信息还可包含指示具体选择何种加密算法以及加密密钥的信息。Here, further, the encryption transmission mode indication information may also include information indicating which encryption algorithm and encryption key to specifically select.
步骤503,所述数据输入装置对用户输入的明文数据进行加密生成加密后的密文数据。Step 503, the data input device encrypts the plaintext data input by the user to generate encrypted ciphertext data.
步骤504,所述数据输入装置将加密后的密文数据传输至所述数据输入驱动器。Step 504, the data input device transmits the encrypted ciphertext data to the data input driver.
步骤505,所述数据输入驱动器向应用程序发送加密后的密文数据。Step 505, the data input driver sends the encrypted ciphertext data to the application program.
步骤506,应用程序解密来自所述数据驱动器的所述密文数据。Step 506, the application program decrypts the ciphertext data from the data driver.
步骤507,需要加密的数据输入完毕,应用程序向所述数据输入驱动器发送用于指示所述数据输入装置进入非加密传输模式的非加密传输模式指示信息。Step 507, after the data that needs to be encrypted is input, the application program sends unencrypted transmission mode indication information for instructing the data input device to enter the unencrypted transmission mode to the data input driver.
步骤508,数据输入驱动器将所述非加密传输模式指示信息传输至所述数据输入装置,所述数据驱动器接收到所述非加密传输模式指示信息后,切换至非加密传输模式。Step 508, the data input driver transmits the non-encrypted transmission mode indication information to the data input device, and the data driver switches to the non-encrypted transmission mode after receiving the non-encrypted transmission mode indication information.
步骤509,用户通过数据输入装置输入明文数据。Step 509, the user inputs plaintext data through the data input device.
步骤510,数据输入驱动器将来自数据输入装置的明文数据传输至应用程序。In step 510, the data input driver transmits the plaintext data from the data input device to the application program.
参考图6为本发明数据输入方法的第四实施例流程示意图。本实施例由用户向数据输入装置输入指示信息触发加密传输模式和非加密传输模式的切换,由数据输入装置(对应于键盘部分)完成输入数据的加密,并由应用程序完成对输入数据的解密。用于加密/解密的密钥可以由数据输入装置、应用程序内置(例如出厂前设置密钥)。下面结合附图6对本实施例的实施过程做详细描述,本实施例的具体实现过程如下:Referring to FIG. 6 , it is a schematic flowchart of a fourth embodiment of the data input method of the present invention. In this embodiment, the user inputs instruction information to the data input device to trigger the switching between the encrypted transmission mode and the non-encrypted transmission mode, and the data input device (corresponding to the keyboard part) completes the encryption of the input data, and the application program completes the decryption of the input data . The key used for encryption/decryption can be built-in by the data input device or the application program (for example, the key is set before leaving the factory). Below in conjunction with accompanying drawing 6, the implementation process of this embodiment is described in detail, and the specific implementation process of this embodiment is as follows:
步骤601,用户向所述数据输入装置输入用于指示所述数据输入装置进入加密传输模式的加密传输模式指示信息,所述数据输入装置切换至加密传输模式。Step 601, the user inputs encrypted transmission mode instruction information for instructing the data input device to enter the encrypted transmission mode into the data input device, and the data input device switches to the encrypted transmission mode.
此处,进一步地,所述加密传输模式指示信息还可包含指示具体选择何种加密算法以及加密密钥的信息。在一具体实施例中,为了便于用户输入操作,可提供相应的显示界面供用户作为模式选择以及在选择加密传输模式时,进一步选择相应的加密算法等。Here, further, the encryption transmission mode indication information may also include information indicating which encryption algorithm and encryption key to specifically select. In a specific embodiment, in order to facilitate the user's input operation, a corresponding display interface may be provided for the user to select a mode and further select a corresponding encryption algorithm when selecting an encrypted transmission mode.
步骤602,用户输入明文数据,所述数据输入装置对用户输入的明文进行加密生成加密后的明文数据。In step 602, the user inputs plaintext data, and the data input device encrypts the plaintext input by the user to generate encrypted plaintext data.
步骤603,所述数据输入装置将加密后的密文数据传输至所述数据输入驱动器。Step 603, the data input device transmits the encrypted ciphertext data to the data input driver.
步骤604,所述数据输入驱动器向应用程序发送加密后的密文数据。Step 604, the data input driver sends the encrypted ciphertext data to the application program.
步骤605,应用程序解密来自所述数据驱动器的所述密文数据。Step 605, the application decrypts the ciphertext data from the data driver.
步骤606,需要加密的数据输入完毕,用户向所述数据输入装置输入用于指示所述数据输入装置进入非加密传输模式的非加密传输模式指示信息,所述数据输入装置进入非加密传输模式。Step 606, after the data to be encrypted is input, the user inputs to the data input device unencrypted transmission mode indication information for instructing the data input device to enter the unencrypted transmission mode, and the data input device enters the unencrypted transmission mode.
步骤607,用户通过数据输入装置输入明文数据。Step 607, the user inputs plaintext data through the data input device.
步骤608,数据输入驱动器将来自数据输入装置的明文数据传输至应用程序。Step 608, the data input driver transmits the plaintext data from the data input device to the application program.
以上所述仅是本发明的优选实施方式,应当指出,对于本技术领域的普通技术人员来说,在不脱离本发明原理的前提下,还可以作出若干改进和润饰,这些改进和润饰也应视为本发明的保护范围。The above is only a preferred embodiment of the present invention, it should be pointed out that for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications should also be It is regarded as the protection scope of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2007100317030A CN101169815A (en) | 2007-11-27 | 2007-11-27 | Computer system and data input method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2007100317030A CN101169815A (en) | 2007-11-27 | 2007-11-27 | Computer system and data input method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101169815A true CN101169815A (en) | 2008-04-30 |
Family
ID=39390435
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2007100317030A Pending CN101169815A (en) | 2007-11-27 | 2007-11-27 | Computer system and data input method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101169815A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102664887A (en) * | 2012-04-19 | 2012-09-12 | 江汉大学 | Input information protecting method, device and system |
| CN103020536A (en) * | 2012-12-20 | 2013-04-03 | 曙光云计算技术有限公司 | Terminal equipment |
| CN104917603A (en) * | 2014-09-22 | 2015-09-16 | 中兴通讯股份有限公司 | Information secure transmission method, receiving terminal and sending terminal |
| CN105227294A (en) * | 2015-09-29 | 2016-01-06 | 北京江南天安科技有限公司 | Cipher machine and its implementation and encrypting and deciphering system and method thereof |
| CN105991279A (en) * | 2015-02-05 | 2016-10-05 | 富泰华工业(深圳)有限公司 | Encryption and decryption system of electronic device, and encryption and decryption method thereof |
| CN106303913A (en) * | 2015-06-01 | 2017-01-04 | 深圳市南方硅谷微电子有限公司 | Bluetooth transceiver therein and information transceiving method thereof |
| WO2017107642A1 (en) * | 2015-12-22 | 2017-06-29 | 国民技术股份有限公司 | Text processing method, apparatus and system for secure input method |
| CN116614304A (en) * | 2023-06-21 | 2023-08-18 | 广州思睿芯科半导体有限公司 | Data transmission method and system |
-
2007
- 2007-11-27 CN CNA2007100317030A patent/CN101169815A/en active Pending
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102664887A (en) * | 2012-04-19 | 2012-09-12 | 江汉大学 | Input information protecting method, device and system |
| CN103020536A (en) * | 2012-12-20 | 2013-04-03 | 曙光云计算技术有限公司 | Terminal equipment |
| CN104917603B (en) * | 2014-09-22 | 2019-03-12 | 中兴通讯股份有限公司 | A kind of information security transmission method, receiving terminal, and sending terminal |
| CN104917603A (en) * | 2014-09-22 | 2015-09-16 | 中兴通讯股份有限公司 | Information secure transmission method, receiving terminal and sending terminal |
| CN105991279A (en) * | 2015-02-05 | 2016-10-05 | 富泰华工业(深圳)有限公司 | Encryption and decryption system of electronic device, and encryption and decryption method thereof |
| CN106303913A (en) * | 2015-06-01 | 2017-01-04 | 深圳市南方硅谷微电子有限公司 | Bluetooth transceiver therein and information transceiving method thereof |
| CN106303913B (en) * | 2015-06-01 | 2019-06-25 | 深圳市南方硅谷微电子有限公司 | Bluetooth transceiver therein and its information transceiving method |
| CN105227294A (en) * | 2015-09-29 | 2016-01-06 | 北京江南天安科技有限公司 | Cipher machine and its implementation and encrypting and deciphering system and method thereof |
| CN105227294B (en) * | 2015-09-29 | 2018-08-03 | 北京江南天安科技有限公司 | Cipher machine and its implementation and encrypting and deciphering system and its method |
| CN106911625A (en) * | 2015-12-22 | 2017-06-30 | 国民技术股份有限公司 | A kind of text handling method of safe input method, device and system |
| WO2017107642A1 (en) * | 2015-12-22 | 2017-06-29 | 国民技术股份有限公司 | Text processing method, apparatus and system for secure input method |
| CN106911625B (en) * | 2015-12-22 | 2020-04-24 | 国民技术股份有限公司 | Text processing method, device and system for safe input method |
| CN116614304A (en) * | 2023-06-21 | 2023-08-18 | 广州思睿芯科半导体有限公司 | Data transmission method and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102271037B (en) | Based on the key protectors of online key | |
| CN103929307B (en) | Cipher-code input method, intelligent cipher key equipment and client terminal device | |
| KR101878149B1 (en) | Device, system, and method of secure entry and handling of passwords | |
| CN101051904B (en) | Method for landing by account number cipher for protecting network application sequence | |
| CN103930899B (en) | Method for the management public data of input and private data at equipment | |
| US9961048B2 (en) | System and associated software for providing advanced data protections in a defense-in-depth system by integrating multi-factor authentication with cryptographic offloading | |
| CN101593254B (en) | Safe input method and system for notebook computer | |
| CN102970139B (en) | Data security validation method and device | |
| CN101169815A (en) | Computer system and data input method | |
| US20180062863A1 (en) | Method and system for facilitating authentication | |
| CN101965574B (en) | Authentication information generation system, authentication information generation method and a client device | |
| GB2508606A (en) | Mobile application for credential recovery | |
| TW201539247A (en) | Password input and verification method and system thereof | |
| JP2009512069A5 (en) | ||
| CN108718233B (en) | Encryption method, computer equipment and storage medium | |
| JP5827724B2 (en) | Method and apparatus for entering data | |
| CN103777912A (en) | Imaging equipment as well as safe imaging method and imaging system thereof | |
| CN104866129A (en) | Computing device and password input method thereof | |
| KR100447777B1 (en) | Hacking prevention of key stroke data | |
| US20250167985A1 (en) | Method, apparatus, device and medium for processing genetic data | |
| KR101267875B1 (en) | Apparatus for message encryption and decryption using virtual keyboard and recording medium storing program for executing method of the same in computer | |
| WO2015124798A2 (en) | Method & system for enabling authenticated operation of a data processing device | |
| CN100583174C (en) | Data safety processing method using online banking system safety terminal | |
| CN113193956B (en) | Account information processing method and device | |
| CN112765628A (en) | Information interaction method and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Open date: 20080430 |