WO2017050093A1 - Login information input method, login information storage method, and associated device - Google Patents

Abstract

The embodiments of the invention disclose a login information input method, login information storage method, and associated device. The login information input method comprises: identifying a current page to be a login page of an application; identifying a target input field in the login page where login information is input into; receiving biological characteristic information input by a user; if the biological characteristic information is preconfigured biological characteristic information, obtaining, from a preconfigured database, login information characterized by the biological characteristic information for the user to log in to the application; and filling the login information into the target input field. The exemplary approach can auto fill a target input field in a login page, simplifying a user login operation, having wide applications, and not being limited by a development platform of an application.

Description

Login information input method, login information storage method, and related device Technical field

The present invention relates to the field of terminal interaction, and in particular, to a login information input method, a login information storage method, and related devices.

Background technique

With the rapid development of electronic technology and Internet technology, there are a large number of applications or websites that require users to register and log in before they can be used. Therefore, users need to memorize a large number of accounts and passwords. In order to protect the security of the account, many people prefer to set different passwords for different applications or websites, which is safe, but it also brings a big burden on memory.

In order to provide management of login information such as secure passwords, many password management tools have emerged to help users remember various online or offline accounts and passwords. The user only needs to set a key of the lock box (ie, the management password) to securely access information such as accounts and passwords stored in the lock box.

However, the existing password management tool has poor ease of use. The user first needs to input the management password to open the password box, and then copy and paste the account and password into the input field for inputting the account and password in the application, which is cumbersome to operate. .

In the prior art, when a website (such as Internet Explorer) is used to log in to a website, the user can automatically save the login information by setting "save the user name and password on the form", which is saved when the website is subsequently logged into the website. Accounts and passwords can be automatically populated into the login page for quick login. However, this fast login method has poor compatibility and is only applicable to applications that implement the form management function module and cannot be compatible with other applications.

Summary of the invention

The embodiment of the invention provides a login information input method, a login information storage method and a related device. By identifying a target input field in an application login page, the target input field in the login page can be automatically filled, which simplifies. User login operations, and a wide range of applications, not limited by the application development platform.

In a first aspect, the present invention discloses a login information input method, including:

Identifying that the current page is the login page of the application;

Identifying a target input field for inputting login information in the login page;

Receiving biometric information input by the user;

And if the biometric information is the preset biometric information, obtaining, by using the preset database, the login information of the user that is characterized by the biometric information and logging in to the application;

The login information is populated into the target input domain.

With reference to the first aspect, in a first possible implementation, the target input field includes at least two input fields; and the filling the login information into the target input domain includes: analyzing the at least Attributes of respective input fields in the two input fields; respectively, obtaining login information corresponding to attributes of the respective input fields from the login information according to attributes of the respective input fields; in each of the input fields The login information that matches the attributes of each input field is filled separately.

With reference to the first aspect, in a second possible implementation manner, the filling the login information into the target input domain includes: receiving a user input selection operation, where the selecting operation is used to select a padding login a target input field of the information; analyzing an attribute of the target input field selected by the selecting operation; and obtaining, according to the attribute of the selected target input field, the attribute of the selected target input field from the login information Login information; filling the selected target input field with login information that matches the attribute of the selected target input field.

With reference to the first aspect, in a third possible implementation, if the biometric information is preset biometric information, the user that is obtained by acquiring the biometric information from a preset database logs in to the application. Program login information, including:

The target operating system transmits the biometric information to a trusted execution environment;

The trusted execution environment verifies whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, the trusted execution environment acquires the The user characterized by the biometric information logs in to the login information of the application and transmits the login information to the target operating system.

With reference to the first aspect, or in combination with any one of the first to the third possible implementations of the first aspect, in a fourth possible implementation, the login information in the preset database is The encryption rule is used to encrypt the login information. Before the filling the login information into the target input field, the method further includes: decrypting the login information by using a decryption rule corresponding to the preset encryption rule.

In conjunction with the fourth possible implementation of the first aspect, or in combination with the first or the first possible implementation of the first aspect, in a fifth possible implementation, the identifying the login page The target input fields used to enter login information, including:

Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page;

In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain.

In a second aspect, the present invention discloses a method for saving login information, including:

Identifying that the current page is the login page of the application;

Identifying a target input field for inputting login information in the login page;

Receiving login information input by the user in the target input field;

Receiving biometric information input by the user;

And if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

With reference to the second aspect, in a first possible implementation, if the biometric information is preset biometric information, the login information is used as a user represented by the biometric information to log in to the application. The login information of the program saves the login information to the preset database, including:

The target operating system transmits the biometric information to a trusted execution environment;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system;

If the biometric information is preset biometric information, the target operating system sends the login information to the trusted execution environment;

If the biometric information is preset biometric information, the trusted execution environment uses the login information as login information of the user that is characterized by the biometric information to log in to the application, and saves the login information to In the default database.

With reference to the second aspect, or in combination with the first possible implementation of the second aspect, in a second possible implementation, before the saving the login information into the preset database, the method further includes : Encrypt the login information according to a preset encryption rule.

With reference to the second aspect, in a third possible implementation manner, the identifying, in the login page, a target input field for inputting login information, including:

Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page;

In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain.

In a third aspect, the present invention discloses a login information input device, including:

a first identifying unit, configured to identify that the current page is a login page of the application;

a second identifying unit, configured to identify a target input field for inputting login information in the login page;

a receiving unit, configured to receive biometric information input by the user;

And an obtaining unit, configured to: if the biometric information is preset biometric information, acquire, from a preset database, login information of a user that is characterized by the biometric information and log in to the application;

a padding unit, configured to fill the login information into the target input domain.

With reference to the third aspect, in a first possible implementation, the target input field includes at least two input fields, and the filling unit is configured to: analyze each input domain in the at least two input domains According to the attributes of the respective input fields, the login information corresponding to the attributes of the input fields is respectively obtained from the login information; and the attributes of the input fields are respectively filled in the respective input fields. Compliance login information.

With reference to the third aspect, in a second possible implementation, the filling unit is specifically configured to: receive a user input selection operation, where the selection operation is used to select a target input field that needs to be filled with login information; Selecting an attribute of the target input field selected by the operation; obtaining, according to the attribute of the selected target input field, the login information that matches the attribute of the selected target input field; and the selected target The input field is populated with login information that matches the attributes of the selected target input field.

With reference to the third aspect, in a third possible implementation manner, the acquiring unit is specifically configured to:

Transmitting the biometric information to the trusted execution environment by the target operating system;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, obtaining the preset biometric information from the preset database by using the trusted execution environment. The user characterized by the biometric information logs in to the login information of the application, and sends the login information to the target operating system.

With reference to the third aspect, or in combination with any one of the first to the third possible implementation manners of the third aspect, in a fourth possible implementation manner, the login information in the preset database is The encryption rule is used to encrypt the login information. The device further includes: a decryption unit, configured to use the decryption rule corresponding to the preset encryption rule before the filling unit fills the login information into the target input domain Decrypt the login information.

With reference to the third aspect, or in combination with the first or second possible implementation of the third aspect, in a fifth possible implementation, the second identifying unit is specifically configured to: obtain the login page Corresponding context; the context is used to represent the control object and the resource referenced by the login page; in the context corresponding to the login page, the context is identified according to a preset context for identifying the target input domain Target input field.

In a fourth aspect, the present invention discloses a login information storage device, including:

a first identifying unit, configured to identify that the current page is a login page of the application;

a second identifying unit, configured to identify a target input field for inputting login information in the login page;

a first receiving unit, configured to receive login information input by the user in the target input field;

a second receiving unit, configured to receive biometric information input by the user;

a saving unit, configured to: if the biometric information is preset biometric information, use the login information as login information of a user that is represented by the biometric information to log in to the application, and save the login information to a pre Set in the database.

With reference to the fourth aspect, in a first possible implementation manner, the saving unit is specifically configured to:

Transmitting the biometric information to the trusted execution environment by the target operating system;

Verifying, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system;

And if the biometric information is preset biometric information, sending the login information to the trusted execution environment by using the target operating system;

Passing the trusted execution environment if the biometric information is preset biometric information The login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

With reference to the fourth aspect, or in combination with the first possible implementation manner of the fourth aspect, the apparatus further includes: an encryption unit, configured to: before the saving unit saves the login information to the preset database, according to the pre- The encryption rule is used to encrypt the login information.

With reference to the fourth aspect, in a third possible implementation, the second identifying unit is specifically configured to: obtain a context corresponding to the login page; the context is used to represent a control object referenced by the login page And a resource; in the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain.

In a fifth aspect, the present invention discloses a terminal for implementing the method of the first aspect, comprising: an input device, an output device, a memory, and a processor coupled to the memory, wherein:

The processor reads instructions stored in the memory for performing the following steps:

Recognizing that the current page displayed in the output device is a login page of the application;

Identifying a target input field for inputting login information in the login page;

Receiving biometric information input by a user through the input device;

And if the biometric information is the preset biometric information, obtaining, by using the preset database, the login information of the user that is characterized by the biometric information and logging in to the application;

The login information is populated into the target input domain.

With reference to the fifth aspect, in a first possible implementation, the target input field includes at least two input fields; and the step of filling the login information into the target input domain includes:

The processor analyzes attributes of respective input fields in the at least two input fields;

And the processor respectively acquires login information that matches the attributes of the respective input domains from the login information according to attributes of the respective input domains;

The processor fills each of the input fields with login information that matches the attributes of the respective input fields.

With reference to the fifth aspect, in a second possible implementation, the step of filling the login information into the target input domain includes:

Receiving, by the input device, a selection operation input by a user, the selecting operation is for selecting a target input field that needs to be filled with login information; analyzing an attribute of the target input field selected by the selecting operation; The target of the target input domain, obtained from the login information The login information is matched with the attribute of the selected target input domain; and the selected target input domain is filled with the login information that matches the attribute of the selected target input domain.

With reference to the fifth aspect, in a third possible implementation, if the biometric information is preset biometric information, the user that is obtained by acquiring the biometric information from a preset database logs in to the application. The steps of the program's login information, including:

Transmitting, by the target operating system, the biometric information to a trusted execution environment;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, proceeding from the trusted execution environment And obtaining, by the database, login information of the user that is characterized by the biometric information and logging in to the application, and sending the login information to the target operating system by using the trusted execution environment.

With reference to the fifth aspect, or in combination with the first to the third possible implementation manners of the fifth aspect, in a fourth possible implementation manner, the login information in the preset database is preset The encryption rule performs the encrypted login information. The processor is further configured to decrypt the login information by using a decryption rule corresponding to the preset encryption rule before filling the login information into the target input domain.

With reference to the fifth aspect, or in combination with the first or the second possible implementation manner of the fifth aspect, in a fifth possible implementation, the identifying the login page for inputting the login The steps of entering the domain of the information include:

The processor acquires a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page;

The processor identifies the target input domain according to a preset context for identifying the target input domain in a context corresponding to the login page.

In a sixth aspect, the present invention discloses a terminal for implementing the method of the second aspect, comprising: an input device, an output device, a memory, and a processor coupled to the memory, wherein:

The processor reads instructions stored in the memory for performing the following steps:

Recognizing that the current page displayed in the output device is a login page of the application;

Identifying a target input field for inputting login information in the login page;

Receiving login information input by the user in the target input field by the input device;

Receiving biometric information input by a user through the input device;

And if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

With reference to the sixth aspect, in a first possible implementation, if the biometric information is preset biometric information, the login information is used as a user represented by the biometric information to log in to the application. The login information of the program, the step of saving the login information into the preset database, including:

Transmitting, by the target operating system, the biometric information to a trusted execution environment;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system;

And if the biometric information is preset biometric information, the processor sends the login information to the trusted execution environment by using the target operating system;

If the biometric information is preset biometric information, the processor saves the login information as login information of the user that is represented by the biometric information to the application through the trusted execution environment, and saves the login information. The login information is in a preset database.

With reference to the sixth aspect, or in combination with the first possible implementation manner of the sixth aspect, in a second possible implementation, the processor is further configured to: before saving the login information to the preset database The login information is encrypted according to a preset encryption rule.

With reference to the sixth aspect, in a third possible implementation, the step of identifying a target input field for inputting login information in the login page includes:

Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page;

In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain.

Embodiments of the present invention are configured to identify a target input field for inputting login information in a login page of an application, and verify biometric information input by the user, and if verified, obtain the user login from the preset database. The login information of the application, and filling the login information into the target input domain, can automatically fill the target input field in the login page, It simplifies the user's login operation and is widely applicable without the limitations of the application development platform.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below.

1 is a schematic flowchart of a method for saving login information according to an embodiment of the present invention;

2A is an exemplary login page of an application program according to an embodiment of the present invention;

2B is an exemplary interface for saving login information according to an embodiment of the present invention;

2C is an exemplary interface for saving identity verification of login information according to an embodiment of the present invention;

3A is a schematic diagram of a login information encryption process according to an embodiment of the present invention;

FIG. 3B is a schematic diagram of a process for generating an encryption key according to an embodiment of the present invention; FIG.

FIG. 3C is a schematic diagram of another login information encryption process according to an embodiment of the present invention; FIG.

FIG. 3D is a schematic diagram of a process for generating a verification code according to an embodiment of the present invention; FIG.

4 is a schematic flowchart of a login information input method according to an embodiment of the present invention;

FIG. 5A is an exemplary interface of login information input according to an embodiment of the present invention; FIG.

FIG. 5B is an exemplary interface for inputting login authentication information according to an embodiment of the present invention; FIG.

FIG. 6A is a schematic diagram of a login information decryption process according to an embodiment of the present invention; FIG.

FIG. 6B is a schematic diagram of a process for generating a decryption key according to an embodiment of the present invention; FIG.

FIG. 6C is a schematic diagram of another login information decryption process according to an embodiment of the present invention; FIG.

FIG. 7 is a schematic structural diagram of a login information storage apparatus according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a login information input apparatus according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a terminal for implementing a method for saving login information according to an embodiment of the present disclosure;

FIG. 10 is a schematic structural diagram of a terminal for implementing a login information input method according to an embodiment of the present invention.

detailed description

The technical solution in the embodiment of the present invention will be described below with reference to the accompanying drawings in the embodiments of the present invention. Describe clearly. It is apparent that the described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The present invention can be implemented by a mobile terminal, and can also be implemented by a computing device such as a personal computer or a network device. The following describes the mobile terminal as an example.

Preferably, the solution of the present invention can be implemented by an APP installed and running in a mobile terminal. Specifically, the solution of the present invention can be implemented by an APP that is always running in the background. Further, the solution of the present invention can be integrated as a function module in an APP that is always running in the background.

Here, the mobile terminal includes, but is not limited to, any smart operating system-based handheld electronic product, which can perform human-computer interaction with a user through an input device such as a keyboard, a virtual keyboard, a touch pad, a touch screen, and a voice control device, such as intelligence. Mobile phones, tablets, etc. Among them, the smart operating system includes, but is not limited to, any operating system that enriches device functions by providing various mobile applications to mobile devices, such as Android, IOS, Windows Phone, and the like.

Referring to FIG. 1, FIG. 1 is a schematic flowchart of a method for saving login information according to an embodiment of the present invention. In the login information saving method shown in FIG. 1, the mobile terminal identifies a target input field for inputting login information in the login page of the application, and if the biometric information input by the user passes the verification, the target is input into the domain. The login information is used as the login information of the user to log in to the application, and is saved in the preset database, so that the login information input by the user on the login page is automatically saved in the preset data, which is a description of the present invention. The login information input method provides support. As shown in Figure 1, the method includes:

S101. Identify that the current page is a login page of the application.

S103. Identify a target input field for inputting login information in the login page.

S105. Receive login information input by the user in the target input field.

S107. Receive biometric information input by a user.

S109, if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information, and the login information is saved in a preset database. .

Specifically, the application program in the embodiment of the present invention refers to an application currently opened by the user, which may be a web application (Web App), or a hybrid application (Hybrid App), or a native application (Native). App). The login page according to the embodiment of the present invention refers to a page for inputting login information provided by the application to the user. The login information related to the embodiment of the present invention refers to information required for the user to log in to the application, such as a username and a password.

In a specific implementation, the mobile terminal may identify an application to which the current page belongs according to an interface element included in the current page. For example, the application to which the current page belongs is identified based on information such as text or image or trademark in the title bar of the current page. In an actual application, the mobile terminal can also identify an application to which the current page belongs according to other information, such as a prompt in a pop-up window, which is not limited herein.

Further, the mobile terminal needs to identify whether the current page is the login page.

In an implementation manner, the mobile terminal may analyze whether the current page is the login page according to an interface element included in the current page. For example, if the current page contains a "login" control for triggering a login request, the mobile terminal can determine that the current page is the login page.

In another implementation manner, the terminal may determine whether the target input domain exists in the current page, and if the target input domain exists, determine that the current page is the login page.

In the embodiment of the present invention, the terminal may obtain a context corresponding to the login page, and identify the target input domain according to the context.

The context is used to characterize control objects and resources referenced by the login page. For example, in Android, the Activity Context is created when the application interface is launched, and is mainly used to save references to current interface controls and resources.

Here, the control object includes but is not limited to: an input type control for receiving user input, such as a button, a text input box (such as EditText in Android), and an output type control for displaying information to the user, such as Label, text display box (such as TextView in Android). Here, resources include, but are not limited to, text, images, and the like displayed in the output control.

In a specific implementation, the mobile terminal may first identify an input field in the current page for inputting text information according to the type of the control. For example, as shown in FIG. 2A, the mobile terminal may identify the control object in the login page 301 as a text input box as an input field, including: an input field 302, an input field 304, and an input field 306.

It should be noted that the login information related to the embodiment of the present invention does not include dynamic information that is temporarily generated to prevent malicious login, such as a dynamic verification code. Accordingly, the target input field does not include an input field for inputting temporary login information such as a dynamic verification code.

In a specific implementation, the mobile terminal may preset a context for identifying the target input domain, and in the context corresponding to the login page, identify the target according to a preset context for identifying the target input domain. Enter the domain. The context corresponding to the target input field may include: adjacent controls of the target input field on the page layout, and resources referenced by adjacent controls.

For example, the adjacent control of the user name field is preset as a text display box, and the text resources referenced by the user include: "user name", "account", "mailbox" and the like. Then, the mobile terminal can recognize the input field after the text display box whose content is "user name" in FIG. 2A as the user name field.

It should be noted that the context corresponding to the target input domain may also be customized by the user. For example, third-party software needs to log in with an ID number. Then, the third party can display the text display box whose content is "ID card number" as the adjacent control of the user name field.

The example is only one implementation manner of the embodiment of the present invention, and may be different in practical applications, and should not be construed as limiting.

Further, the mobile terminal may analyze an attribute of the target input domain according to a context corresponding to the target input domain. Here, the attribute of the target input field can be used to indicate the type of information received by the target input field.

For example, in FIG. 2A, the adjacent control of the input field 302 is a text display box whose display content is "user name", and the adjacent control of the input field 304 is a text display frame whose display content is "password". Then, the mobile terminal can determine that the input field 302 is a username field for receiving the username; the input field 304 is a password domain for receiving the password. The example is only one implementation manner of the embodiment of the present invention, which may be different in actual application and should not be construed as limiting.

It can be understood that the embodiment of the present invention identifies the target input domain by analyzing the context of the login page, which is not restricted by the development platform of the application program, and has wide application range and good compatibility.

In a specific implementation, after identifying the target input field in the login page, the mobile terminal may monitor the target input domain, determine whether there is information input in the target input domain, and if information is input, The login information entered in the target input field is saved to a preset database for secure storage.

For example, as shown in FIG. 2B, when detecting that there is information input in the target input field, the mobile terminal may pop up a prompt box on the login page to prompt the user to save the login information input in the target input field. .

In the embodiment of the present invention, the preset database is used to securely store login information of the user. Using Before the user accesses the preset database, the mobile terminal needs to authenticate the user, and the authenticated user can: write the information into the preset database, or change the information in the preset database, or read the The information in the default database.

In a specific implementation, before the login information input in the target input field is saved in the preset database, the mobile terminal may receive biometric information input by the user, and if the biometric information is preset biometric information, Then, the login information input in the target input field is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

For example, as shown in FIG. 2C, the mobile terminal can verify the identity of the user by scanning the user's fingerprint. The example is only an implementation manner of the embodiment of the present invention. In an actual application, the mobile terminal can also verify the identity of the user by means of face recognition, iris recognition, voice feature recognition, etc., and the user identity is verified. . Of course, in addition to verifying the biometric information, the mobile terminal can verify the identity of the user by using other authentication methods, such as password verification, which is not limited in the embodiment of the present invention.

In the embodiment of the present invention, the preset database may be as shown in Table 1, and is only used to save login information of a single legal user:

Table 1

The preset database shown in Table 1 stores the login information of the single legitimate user login "Application 1" and "Application 2". The user corresponds to two login information (ie, two login accounts) for logging in “application 2”, namely: login information B and login information C.

In the embodiment of the present invention, the preset database may also be used to save login information of multiple legal users as shown in Table 2:

Table 2

The preset database shown in Table 2 stores the legitimate users: "User 1" and "User 2", and logs in the login information of "Application 1" and "Application 2". Among them, "user 1" corresponds to two registration information for "application 2", which are: login information B and login information C; "user 2" corresponds to two login information for "application 1", respectively. Yes: login information D, login information E.

It should be noted that the single legal user may correspond to one (or more) preset biometric information. Each of the plurality of legitimate users may also correspond to one (or more) preset biometric information. That is: one (or more) preset biometric information can be used to characterize a legitimate user.

In practical applications, the user can set preset biometric information (such as a fingerprint) when using (or registering) the scheme of the present invention for the first time.

It should be noted that the preset database shown in Table 1 and Table 2 is only an implementation manner of the embodiment of the present invention, and may be different in actual application and should not be limited. The data storage form of the preset database may include, but is not limited to, a database, a file, a table, and the like.

In the embodiment of the present invention, in order to enhance the security of the preset database, when the login information input in the target input field is saved, the mobile terminal may encrypt the login information according to a preset encryption rule, and encrypt the encrypted information. The login information is saved to the database.

The encryption process of the login information according to the embodiment of the present invention may be as shown in FIG. 3A, and the mobile terminal encrypts the login information by using a symmetric encryption algorithm (such as AES256). The encryption key may be a preset encryption key.

In the embodiment of the present invention, the mobile terminal may set an administrative password of the preset database, The management password is used to generate the encryption and decryption key of the symmetric encryption algorithm, that is, the encryption and decryption key of the symmetric encryption algorithm is not required to be saved, and only the management password needs to be saved. In a specific implementation, the mobile terminal may store the management password in a Trusted Execution Environment (TEE) corresponding to the preset biometric information, where the preset biometric information may be the acquired management password. Voucher.

In practical applications, the user can set the management password when using (or registering) the scheme of the present invention for the first time.

As shown in FIG. 3B, the mobile terminal may generate an encryption key for the management password by using a salting algorithm to increase encryption complexity and improve security.

Preferably, the encryption process of the login information in the embodiment of the present invention may be as shown in FIG. 3C, including:

A. After the verification of the biometric information (such as a fingerprint) is passed, the management password is taken out from the TEE;

B. The extracted management password is generated by the salt adding algorithm to generate data to be verified, wherein the salt value 2 may be preset;

C. Comparing whether the data to be verified and the verification code are consistent. If they are consistent, the management password is correct, and D is performed; wherein the verification code generation process may be as shown in FIG. 3D;

D. generating an encryption key by using a salt-adding algorithm by using the management password, wherein the salt value 1 may be preset;

E. Encrypting the login information by a symmetric encryption algorithm (such as AES256) using the encryption key to generate encrypted login information.

It can be seen from the encryption process shown in FIG. 3C that after the management password is retrieved from the TEE, the mobile terminal can verify whether the retrieved management password is correct, and if correct, use the retrieved management password to generate the encryption key. The encryption of the login information ensures the correctness and security of the encryption, and provides a basis for subsequent decryption of the login information.

It should be noted that, in an actual application, the encryption process of the login information involved in the embodiment of the present invention may also adopt other encryption algorithms, such as an asymmetric encryption algorithm, which is not limited herein.

In order to further enhance the security of the solution of the present invention, the steps involved in user identity verification and login information preservation may preferably be performed by a Trusted Execution Environment (TEE), which will involve input and output of human-computer interaction (such as S101 to S107 above). ) is executed by the target operating system. Trusted execution The line environment communicates with the target operating system. The target operating system can typically be an open operating system.

Specifically, the specific implementation manner of the foregoing S109 may include:

The target operating system may send the biometric information received in the foregoing S107 to a trusted execution environment;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system;

If the biometric information is preset biometric information, the target operating system sends the login information to the trusted execution environment;

If the biometric information is preset biometric information, the trusted execution environment uses the login information as login information of the user that is characterized by the biometric information to log in to the application, and saves the login information to In the default database.

The steps of performing the solution of the present invention by using the trusted execution environment and the target operating system respectively can prevent the steps of user identity verification and login information saving from being maliciously falsified due to malicious attacks on the target operating system, and the solution of the present invention can be enhanced. Security.

In the embodiment of the present invention, the mobile terminal can identify the target input field for inputting the login information in the login page of the application, and verify the biometric information input by the user, and if verified, input the target input field. The login information is saved in the preset database as the login information of the user logging in to the application, and the login information input by the user on the login page is automatically saved, which provides support for the login information input method described later in the present invention.

Referring to FIG. 4, FIG. 4 is a schematic flowchart of a login information input method according to an embodiment of the present invention. In the login information input method shown in FIG. 4, the mobile terminal identifies a target input field for inputting login information in the login page of the application, and if the biometric information input by the user passes the verification, the current database is obtained from the preset database. The login information of the user is registered in the application, and the login information is filled into the target input domain, so that the target input field in the login page is automatically populated, which simplifies the login operation of the user. As shown in FIG. 4, the method includes:

S401. Identify that the current page is a login page of the application.

S403. Identify a target input field for inputting login information in the login page.

S405. Receive biometric information input by a user.

S407. If the biometric information is the preset biometric information, obtain the login information of the user that is characterized by the biometric information and log in to the application from the preset database.

S409. Fill the login information into the target input domain.

For details, refer to the related content in the embodiment of FIG. 1 for S401 and S403, and details are not described herein. That is to say, the mobile terminal can identify the target input field in the login page through S401 and S403, and further analyze the attributes of the target input field.

In a specific implementation, as shown in FIG. 5A, after the user opens the login page of the application, the mobile terminal may query the preset database to determine whether the login information of the application is in the preset database. If yes, a prompt box is displayed on the login page to prompt the user to fill the target input field.

In the embodiment of the present invention, the preset database is used to securely store login information of the user. Before the user accesses the preset database, the mobile terminal needs to authenticate the user, and verify the passed user: write information to the preset database, or change the information in the preset database, or read The information in the preset database.

In a specific implementation, before acquiring the login information of the user to log in to the application, the mobile terminal may receive biometric information input by the user, and if the biometric information is preset biometric information, The preset database is configured to acquire login information of the user that is characterized by the biometric information and log in to the application, and fill the acquired login information into the target input domain.

For example, as shown in FIG. 5B, the mobile terminal can verify the identity of the user by scanning the user's fingerprint. The example is only an implementation manner of the embodiment of the present invention. In an actual application, the mobile terminal can also verify the identity of the user by means of face recognition, iris recognition, voice feature recognition, etc., and the user identity is verified. . Of course, in addition to verifying the biometric information, the mobile terminal can verify the identity of the user by using other authentication methods, such as password verification, which is not limited in the embodiment of the present invention.

In the embodiment of the present invention, the preset database may be used to save the login information of a single legal user, as shown in Table 1 in the embodiment of the present invention. In the embodiment of the present invention, the preset database may also be used to save login information of multiple legal users as shown in Table 2 in the embodiment of FIG. 1 .

It should be noted that the single legal user may correspond to one (or more) preset biometric information. Each of the plurality of legitimate users may also correspond to one (or more) preset creatures Feature information. That is: one (or more) preset biometric information can be used to characterize a legitimate user.

In practical applications, the user can set preset biometric information (such as a fingerprint) when using (or registering) the scheme of the present invention for the first time.

In the embodiment of the present invention, the target input field may include at least two input fields, such as a username field and a password field. When filling the at least two input fields, the mobile terminal may respectively obtain logins corresponding to the attributes of the respective input domains from the login information according to attributes of respective input domains in the at least two input domains. Information, and each of the input fields is filled with login information that matches the attributes of the respective input fields.

Referring to the content in the embodiment of FIG. 1, the attribute of the target input field can be used to indicate the type of information received by the target input field. That is to say, the username field is used to receive the username, and the password domain is used to receive the password.

The user name field and password field are taken as an example to describe the filling situation of the target input field in detail:

If the username field and password field are both blank. Then, the mobile terminal may obtain the user name and password of the user to log in to the application from the preset database according to the identifier of the application and the identifier of the user characterized by the biometric information, and fill the username Go to the blank username field and populate the password with a blank password field.

It should be noted that if one user corresponds to multiple login information, that is, one user has multiple login accounts (for example, "user 1" in Table 2 above has two login information of login "application 2"), at the filling office. When the target input field is described, the mobile terminal may preferably pop up a selection interface to enable the user to select one of the plurality of login accounts to log in.

If the username field is not blank, the password field is blank. Then, the mobile terminal may obtain, according to the identifier of the application, the identifier of the user represented by the biometric information, and the username entered in the username field, the user to obtain the login by using the username from the preset database. Describe the application's password and populate it with a blank password field.

Optionally, in the embodiment of the present invention, the mobile terminal may selectively fill the target input domain according to a user's selection operation.

Specifically, the mobile terminal may receive a selection operation input by the user, and log in from the login information (ie, the user characterized by the biometric information received by S405 to log in to the application according to the attribute of the target input field selected by the selection operation. Obtaining login information in accordance with an attribute of the selected target input field, and filling the selected target input field with the selected target input The attributes of the inbound domain match the login information.

For example, the user can select a target input field for filling by a single-finger touch on the login page. Preferably, the mobile terminal may perform the above S405 while receiving the single-finger touch selection of the user. That is to say, the mobile terminal can acquire the fingerprint information of the user while receiving the user's selection operation (touch operation). This can reduce the number of user operations and improve the user experience.

It should be noted that the user may also select a target input field to be filled by one finger on the login page, and input fingerprint information by another finger. In practical applications, the user can also select the target input field to be filled by other means, such as long pressing the target input field, and there is no restriction here.

Referring to the content of the embodiment of FIG. 1 , in order to enhance the security of the preset database, the login information in the preset database may be login information encrypted by using a preset encryption rule. Correspondingly, the mobile terminal needs to decrypt the login information obtained by S407. The decryption rule may be a pre-set decryption rule corresponding to the preset encryption rule.

If the encryption process of the login information is as shown in FIG. 3A, then, as shown in FIG. 6A, the mobile terminal can similarly decrypt the encrypted login information by a symmetric encryption algorithm. The decryption key is the same as the encryption key.

Referring to the content of the embodiment of FIG. 1 , the mobile terminal may set an administrative password of the preset database, where the management password is used to generate an encryption and decryption key of a symmetric encryption algorithm, that is, an encryption and decryption key that does not need to save a symmetric encryption algorithm. , only need to save the management password. In a specific implementation, the mobile terminal may store the management password in a Trusted Execution Environment (TEE) corresponding to the preset biometric information, where the preset biometric information may be obtained by acquiring the management password. certificate.

In practical applications, the user can set the management password when using (or registering) the scheme of the present invention for the first time.

If the generation process of the encryption key is as shown in FIG. 3B, in order to maintain the consistency of the encryption/decryption key, as shown in FIG. 6B, the mobile terminal can similarly generate the decryption key using the management password.

If the encryption process of the login information is as shown in FIG. 3C, then, correspondingly, the decryption process of the encrypted login information may be as shown in FIG. 6C, including:

A. After the verification of the biometric information (such as a fingerprint) is passed, the management password is taken out from the TEE;

B. The extracted management password is generated by the salt adding algorithm to generate data to be verified, wherein the salt value 2 may be preset;

C. Comparing whether the data to be verified and the verification code are consistent, if they are consistent, it means that the obtained management password is correct, and D is executed; the process of generating the verification code may be as shown in FIG. 3D;

D. using the management password to generate a decryption key by a salting algorithm, wherein the salt value 1 may be preset;

E. Decrypt the encrypted login information by a symmetric encryption algorithm (such as AES256) using the decryption key generated by D to obtain the original login information.

It can be seen from the decryption process shown in FIG. 6C that after the management password is retrieved from the TEE, the mobile terminal needs to verify whether the extracted management password is correct, and if correct, the decryption key is generated by using the extracted management password. The key is used to decrypt the login information to ensure the correctness and security of the entire encryption and decryption process.

It should be noted that the decryption rule of the encrypted login information may also be other decryption rules corresponding to the login information encryption rule, such as the decryption process agreed by the asymmetric encryption algorithm, which is not limited herein.

In order to further enhance the security of the solution of the present invention, the steps involved in user identity verification and login information acquisition may preferably be performed by a Trusted Execution Environment (TEE), which involves steps of input and output of human-computer interaction (such as S401 to S405 described above). , S409) is executed by the target operating system. The trusted execution environment and the target operating system communicate with each other. The target operating system can typically be an open operating system.

Specifically, the specific implementation manner of the foregoing S407 may include:

The target operating system sends the biometric information received in the above S405 to the trusted execution environment;

The trusted execution environment verifies whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, the trusted execution environment acquires the The user characterized by the biometric information logs in to the login information of the application and transmits the login information to the target operating system. Correspondingly, the target operating system acquires the login information sent by the trusted execution environment.

The foregoing steps of performing the solution of the present invention by using the trusted execution environment and the target operating system respectively can avoid user identity verification and the user authentication due to malicious attacks on the target operating system. The steps of obtaining the login information are maliciously tampering, and the security of the solution of the present invention can be enhanced.

In the embodiment of the present invention, the mobile terminal can identify the target input field for inputting the login information in the login page of the application, and verify the biometric information input by the user. If the verification is successful, the user is obtained from the preset database. Logging in the login information of the application, and populating the login information into the target input domain, can automatically fill the target input field in the login page, simplify the login operation of the user, and have a wide application range. Not limited by the application development platform.

Referring to FIG. 7, FIG. 7 is a schematic structural diagram of a login information storage apparatus according to an embodiment of the present invention. As shown in FIG. 7, the login information holding device 70 may include a first identifying unit 701, a second identifying unit 703, a first receiving unit 705, a second receiving unit 707, and a saving unit 709. among them:

The first identifying unit 701 is configured to identify that the current page is a login page of the application;

a second identifying unit 703, configured to identify a target input field for inputting login information in the login page;

The first receiving unit 705 is configured to receive login information input by the user in the target input field;

a second receiving unit 707, configured to receive biometric information input by a user;

The saving unit 709 is configured to use the login information as login information of the user that is characterized by the biometric information to log in to the application, and save the login information to a preset database.

Specifically, the application program in the embodiment of the present invention refers to an application currently opened by the user, and may be a web application (Web App), a hybrid application (Hybrid App), or a native application (Native App). The login page according to the embodiment of the present invention refers to a page for inputting login information provided by the application to the user. The login information related to the embodiment of the present invention refers to information required for the user to log in to the application, such as a username and a password.

In a specific implementation, the login information storage device 70 may identify an application to which the current page belongs according to an interface element included in the current page. For example, the application to which the current page belongs is identified based on information such as text or image or trademark in the title bar of the current page. In the actual application, the login information storage device 70 can also identify the application to which the current page belongs according to other information, such as a prompt in the pop-up window, which is not limited herein.

Further, the first identifying unit 701 needs to identify whether the current page is the login page.

In an implementation manner, the first identifying unit 701 may be based on an interface element included in the current page. To analyze whether the current page is the login page. For example, if the current page contains a "login" control for triggering a login request, the first identifying unit 701 can determine that the current page is the login page.

In another implementation manner, the first identifying unit 701 may determine whether the target input domain exists in the current page, and if the target input domain exists, determine that the current page is the login page.

In the embodiment of the present invention, the second identifying unit 703 may acquire a context corresponding to the login page, and identify the target input domain according to the context.

The context is used to characterize control objects and resources referenced by the login page. For example, in Android, the Activity Context is created when the application interface is launched, and is mainly used to save references to current interface controls and resources.

Here, the control object includes but is not limited to: an input type control for receiving user input, such as a button, a text input box (such as EditText in Android), and an output type control for displaying information to the user, such as Label, text display box (such as TextView in Android). Here, resources include, but are not limited to, text, images, and the like displayed in the output control.

In a specific implementation, the second identifying unit 703 may preset a context for identifying the target input domain, and identify, according to a preset context for identifying the target input domain, in a context corresponding to the login page. The target input field. The context corresponding to the target input field may include: adjacent controls of the target input field on the page layout, and resources referenced by adjacent controls.

In the embodiment of the present invention, the preset database is used to securely store login information of the user. Before the user accesses the preset database, the user needs to be authenticated, and the passed user can verify: the information is written into the preset database, or the information in the preset database is changed, or the read Preset the information in the database.

In a specific implementation, before the saving unit 709 saves the login information input in the target input field to the preset database, the second receiving unit 707 may receive biometric information input by the user, if the biometric information is Presetting the biometric information, the saving unit 709 uses the login information input in the target input field as login information of the user that is represented by the biometric information to log in to the application, and saves the login information to a preset. In the database.

It should be noted that one (or more) preset biometric information can be used to represent a legitimate user.

In practical applications, the user can set a preset when using (or registering) the scheme of the present invention for the first time. Biometric information (such as fingerprints).

In the embodiment of the present invention, in order to enhance the security of the preset database, when the login information input in the target input field is saved, the login information storage device 70 needs to perform encryption processing on the login information.

Further, the login information holding device 70 may further include: an encryption unit, in addition to the first identification unit 701, the second identification unit 703, the first receiving unit 705, the second receiving unit 707, and the saving unit 709, The saving unit 709 encrypts the login information according to a preset encryption rule before saving the login information to the preset database.

Further, in order to further enhance the security of the solution of the present invention, the saving unit 709 can preferably perform steps involving user identity verification and login information saving through a Trusted Execution Environment (TEE). The trusted execution environment and the target operating system communicate with each other. The target operating system can typically be an open operating system.

In a specific implementation, the saving unit 709 can be specifically configured to:

Transmitting the biometric information to the trusted execution environment by the target operating system;

Verifying, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system;

And if the biometric information is preset biometric information, sending the login information to the trusted execution environment by using the target operating system;

If the biometric information is preset biometric information, the login information is used as login information of the user that is represented by the biometric information to log in to the application by the trusted execution environment, and the login information is saved. Go to the default database.

The saving unit 709 performs the relevant steps of the solution of the present invention by using the trusted execution environment and the target operating system respectively, so as to prevent the steps of user identity verification and login information saving being maliciously falsified due to malicious attacks on the target operating system, and the present invention can be enhanced. The security of the inventive solution.

It can be understood that the specific implementation of each function module of the login information storage device 70 can also refer to the method in the embodiment of FIG. 1 , and details are not described herein again.

Referring to FIG. 8, FIG. 8 is a schematic structural diagram of a login information input apparatus according to an embodiment of the present invention. As shown in FIG. 8, the login information input device 80 may include a first identification unit 801, a second recognition unit 803, a receiving unit 805, an acquisition unit 807, and a padding unit 809. among them:

The first identifying unit 801 is configured to identify that the current page is a login page of the application;

a second identifying unit 803, configured to identify a target input field for inputting login information in the login page;

The receiving unit 805 is configured to receive biometric information input by the user;

The obtaining unit 807 is configured to: if the biometric information is the preset biometric information, acquire, from the preset database, login information of the user that is characterized by the biometric information and log in to the application;

The filling unit 809 is configured to fill the login information into the target input domain.

Specifically, the first identifying unit 801 needs to identify whether the current page is the login page.

In an implementation manner, the first identifying unit 801 may analyze whether the current page is the login page according to an interface element included in the current page. For example, if the current page contains a "login" control for triggering a login request, the first identifying unit 801 can determine that the current page is the login page.

In another implementation manner, the first identifying unit 801 may determine whether the target input domain exists in the current page, and if the target input domain exists, determine that the current page is the login page.

In the embodiment of the present invention, the second identifying unit 803 may acquire a context corresponding to the login page, and identify the target input domain according to the context.

The context is used to characterize control objects and resources referenced by the login page. Here, the control object includes but is not limited to: an input type control for receiving user input, such as a button, a text input box (such as EditText in Android), and an output type control for displaying information to the user, such as Label, text display box (such as TextView in Android). Here, resources include, but are not limited to, text, images, and the like displayed in the output control.

In a specific implementation, the second identifying unit 803 may preset a context for identifying the target input domain, and identify, according to a preset context for identifying the target input domain, in a context corresponding to the login page. The target input field. The context corresponding to the target input field may include: adjacent controls of the target input field on the page layout, and resources referenced by adjacent controls.

In the embodiment of the present invention, the preset database is used to securely store login information of the user. Before the user accesses the preset database, the user needs to be authenticated, and the passed user can verify: the information is written into the preset database, or the information in the preset database is changed, or the read Preset the information in the database.

In a specific implementation, before the obtaining unit 807 obtains login information of the user from the application, the receiving unit 805 may receive biometric information input by the user, if the biometric information is a preset biometric. The information obtaining unit 807 acquires, from the preset database, login information of the user that is characterized by the biometric information and logs in to the application, and then the filling unit 809 fills the acquired login information into the target input domain. in.

It should be noted that one (or more) preset biometric information can be used to represent a legitimate user.

In practical applications, the user can set preset biometric information (such as a fingerprint) when using (or registering) the scheme of the present invention for the first time.

In the embodiment of the present invention, the target input field may include at least two input fields, such as a username field and a password field. When the filling unit 809 fills the at least two input fields, the obtaining unit 807 may separately acquire attributes of the respective input domains from the login information according to attributes of respective input domains in the at least two input domains. The matching login information, and the trigger padding unit 809 each fills the login information in accordance with the attributes of the respective input fields in the respective input fields.

Optionally, in the embodiment of the present invention, the filling unit 809 may selectively fill the target input domain according to a user's selection operation.

Specifically, the filling unit 809 can receive a selection operation input by the user, and obtain, according to the attribute of the target input field selected by the selection operation, the login information that matches the attribute of the selected target input domain from the login information, and The selected target input field is filled with login information that matches the attribute of the selected target input field.

In order to enhance the security of the preset database, the login information in the preset database may be login information encrypted by a preset encryption rule.

Accordingly, the login information input device 80 needs to decrypt the login information obtained by the acquisition unit 807.

Further, the login information input device 80 includes a first identification unit 801, a second identification unit 803, a receiving unit 805, an obtaining unit 807, and a filling unit 809, and may further include: a decrypting unit, which is used in the filling unit 809 Before the login information is filled in the target input field, the login information is decrypted by using a decryption rule corresponding to the preset encryption rule.

Further, in order to further enhance the security of the solution of the present invention, the obtaining unit 807 can preferably perform user identity authentication and login information acquisition through a Trusted Execution Environment (TEE). step. The trusted execution environment and the target operating system communicate with each other. The target operating system can typically be an open operating system.

In a specific implementation, the obtaining unit 807 can be specifically configured to:

Transmitting the biometric information to the trusted execution environment by the target operating system;

Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, obtaining the preset biometric information from the preset database by using the trusted execution environment. The user characterized by the biometric information logs in to the login information of the application, and sends the login information to the target operating system.

The obtaining unit 807 performs the relevant steps of the solution of the present invention by using the trusted execution environment and the target operating system respectively, so as to prevent the steps of user identity verification and login information acquisition from being maliciously falsified due to malicious attacks on the target operating system, and the present invention may be enhanced. The security of the inventive solution.

It can be understood that the specific implementation of each function module of the login information input device 80 can also refer to the method in the embodiment of FIG. 4, and details are not described herein again.

In order to facilitate the implementation of the embodiments of the present invention, the present invention provides a terminal for implementing the login information saving method described in the embodiment of FIG. Referring to FIG. 9, the terminal 100 may include: a baseband chip 100, a memory 105 (which may include one or more computer readable storage media), a radio frequency (RF) module 106, a peripheral system 107, a display (LCD) 113, a camera 114, and audio. Circuit 115, touch screen 116, and sensor 117 (which may include one or more sensors). The baseband chip 100 can be integrated to include: one or more processors 101, a clock module 102, and a power management module 103. These components can communicate over one or more communication buses 104.

It should be understood that the terminal 100 is only an example of the present invention, and that the terminal 100 may have more or fewer components than those shown, two or more components may be combined, or may have different configurations of components. .

Memory 105 is coupled to processor 101 for storing various software programs and/or sets of instructions. In particular implementations, memory 105 can include high speed random access memory, and can also include non-volatile memory, such as one or more magnetic disk storage devices, flash memory devices, or other non-volatile solid state storage devices.

A radio frequency (RF) module 106 is operative to receive and transmit radio frequency signals. Radio frequency (RF) module 106 communicates with the communication network and other communication devices via radio frequency signals. In the specific implementation, the radio frequency (RF) module 106 may include, but is not limited to, an antenna system, an RF transceiver, one or more amplifiers, a tuner, one or more oscillators, a digital signal processor, a CODEC chip, a SIM card, and a storage medium. In some embodiments, a radio frequency (RF) module 106 can be implemented on a separate chip.

The peripheral system 107 is mainly used to implement the interaction function between the terminal 100 and the user/external environment, and mainly includes the input and output devices of the terminal 200. In a specific implementation, the peripheral system 107 can include a display (LCD) controller 108, a camera controller 109, an audio controller 110, a touch screen controller 111, and a sensor management module 112. Wherein, each controller can be coupled with a corresponding peripheral device. In some embodiments, peripheral system 107 may also include controllers for other I/O peripherals.

The clock module 102 integrated in the baseband chip 100 is primarily used to generate the clocks required for data transfer and timing control for the processor 101. The power management module 103 integrated in the baseband chip 100 is mainly used to provide a stable, high-precision voltage for the processor 101, the radio frequency module 106, and the peripheral system. The processor 101 integrated in the baseband chip 100 is mainly used to call a login information saving program stored in the memory 105, and performs the following steps:

Recognizing that the current page displayed on the display 113 is a login page of the application;

Identifying a target input field for inputting login information in the login page;

Receiving login information input by the user through the touch screen 116 in the target input field;

Receiving biometric information input by the user through the camera 114 or the sensor 117;

And if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

In the embodiment of the present invention, the biometric information may be fingerprint information. The processor 101 can receive a fingerprint input by the user through the fingerprint sensor.

In the embodiment of the present invention, the biometric information may also be voice feature information. The processor 101 can receive voice information input by the user through the audio circuit 115.

In the embodiment of the present invention, the biometric information may also be iris information. The processor 101 can scan and acquire the iris information of the user through the camera 114.

In practical applications, the biometric information may also be other information, such as face information, which is not limited herein. The processor 101 can acquire the face information of the user through the camera 114.

An application program according to an embodiment of the present invention refers to an application currently opened by a user. The login page according to the embodiment of the present invention refers to the application for the user to input login information. page. The login information related to the embodiment of the present invention refers to information required for the user to log in to the application, such as a username and a password.

In an implementation manner, the processor 101 may analyze whether the current page is the login page according to an interface element included in the current page. For example, if the current page contains a "login" control for triggering a login request, the processor 101 can determine that the current page is the login page.

In another implementation manner, the processor 101 may determine whether the target input domain exists in the current page, and if the target input domain exists, determine that the current page is the login page.

In the embodiment of the present invention, the terminal may obtain a context corresponding to the login page, and identify the target input domain according to the context.

The context is used to characterize control objects and resources referenced by the login page. For example, in Android, the Activity Context is created when the application interface is launched, and is mainly used to save references to current interface controls and resources.

Here, the control object includes but is not limited to: an input type control for receiving user input, such as a button, a text input box (such as EditText in Android), and an output type control for displaying information to the user, such as Label, text display box (such as TextView in Android). Here, resources include, but are not limited to, text, images, and the like displayed in the output control.

In a specific implementation, the processor 101 may preset a context for identifying the target input domain, and in the context corresponding to the login page, identify the context according to a preset context for identifying the target input domain. Target input field. The context corresponding to the target input field may include: adjacent controls of the target input field on the page layout, and resources referenced by adjacent controls.

For example, the adjacent control of the user name field is preset as a text display box, and the text resources referenced by the user include: "user name", "account", "mailbox" and the like. Then, the processor 101 can recognize the input field after the text display box whose content is "user name" in FIG. 2A as the user name field.

In a specific implementation, a preset context for identifying the target input field may be stored in the memory 105.

In the embodiment of the present invention, the preset database is used to securely store login information of the user. The preset database may be located in the memory 105. The data storage form of the preset database may include, but is not limited to, a database, a file, a table, and the like. Before the user accesses the preset database, the processor 101 needs to authenticate the user, verify the passed user: write information to the preset database, or change the information in the preset database, or read Taking the preset database information.

In a specific implementation, before saving the login information input in the target input field to the preset database, the processor 101 may receive biometric information input by the user, if the biometric information is preset biometric information. And the login information is used as the login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database.

It should be noted that one (or more) preset biometric information can be used to represent a legitimate user.

In the embodiment of the present invention, in order to enhance the security of the preset database, when saving the login information input in the target input field, the processor 101 may encrypt the login information according to a preset encryption rule, and after encrypting The login information is saved to the database.

In order to further enhance the security of the solution of the present invention, the steps involved in user identity verification and login information preservation may preferably be performed by a Trusted Execution Environment (TEE), and the steps involving input and output of human-computer interaction are performed by the target operating system. The trusted execution environment and the target operating system communicate with each other. The target operating system can typically be an open operating system.

In a specific implementation, the processor 101 may send the biometric information to the trusted execution environment by using the target operating system, and then the processor 101 may verify, by the trusted execution environment, whether the biometric information is the preset. Biometric information and returning the verification result to the target operating system;

If the biometric information is preset biometric information, the processor 101 may send the login information to the trusted execution environment by using the target operating system;

If the biometric information is the preset biometric information, the processor 101 may save the login information as the login information of the user that is represented by the biometric information to the application through the trusted execution environment, and save the login information. The login information is in a preset database.

The processor 101 performs the relevant steps of the solution of the present invention by using the trusted execution environment and the target operating system respectively, so as to prevent the steps of user identity verification and login information being saved from being maliciously falsified due to malicious attacks on the target operating system, and the present invention may be enhanced. The security of the inventive solution.

It can be understood that the execution steps of the processor 101 can also refer to the content of the embodiment of FIG. 1 , and details are not described herein again.

In order to facilitate the implementation of the embodiments of the present invention, the present invention provides a terminal for implementing the login information input method described in the embodiment of FIG.

Referring to FIG. 10, the terminal 200 may include: a baseband chip 200, a memory 205 (which may include one or more computer readable storage media), a radio frequency (RF) module 206, a peripheral system 207, a display (LCD) 113, a camera 114, and audio. Circuit 115, touch screen 116, and sensor 117 (which may include one or more sensors). The baseband chip 200 can be integrated to include: one or more processors 201, a clock module 202, and a power management module 203. These components can communicate over one or more communication buses 204.

It should be understood that the terminal 200 is only one example of the present invention, and that the terminal 200 may have more or fewer components than those shown, two or more components may be combined, or may have different configurations of components. .

Memory 205 is coupled to processor 201 for storing various software programs and/or sets of instructions. In particular implementations, memory 205 can include high speed random access memory, and can also include non-volatile memory, such as one or more magnetic disk storage devices, flash memory devices, or other non-volatile solid state storage devices.

A radio frequency (RF) module 206 is used to receive and transmit radio frequency signals. Radio frequency (RF) module 206 communicates with the communication network and other communication devices via radio frequency signals. In a specific implementation, the radio frequency (RF) module 206 can include, but is not limited to: an antenna system, an RF transceiver, one or more amplifiers, a tuner, one or more oscillators, a digital signal processor, a CODEC chip, a SIM card, and Storage media, etc. In some embodiments, a radio frequency (RF) module 206 can be implemented on a separate chip.

The peripheral system 207 is mainly used to implement the interaction function between the terminal 200 and the user/external environment, and mainly includes the input and output devices of the terminal 200. In a specific implementation, the peripheral system 207 can include a display (LCD) controller 208, a camera controller 209, an audio controller 210, a touch screen controller 111, and a sensor management module 112. Wherein, each controller can be coupled with a corresponding peripheral device. In some embodiments, peripheral system 207 may also include controllers for other I/O peripherals.

The clock module 202 integrated in the baseband chip 200 is primarily used to generate the clocks required for data transfer and timing control for the processor 201. The power management module 203 integrated in the baseband chip 200 is mainly used to provide a stable, high-precision voltage for the processor 201, the radio frequency module 206, and the peripheral system. The processor 201 integrated in the baseband chip 200 is mainly used to call a login information saving program stored in the memory 205, and performs the following steps:

Recognizing a login page displayed on the current page of the display (LCD) 213 as an application;

Identifying a target input field for inputting login information in the login page;

Receiving biometric information input by the user through the camera 214 or the sensor 217;

And if the biometric information is the preset biometric information, obtaining, by using the preset database, the login information of the user that is characterized by the biometric information and logging in to the application;

The login information is populated into the target input domain.

In the embodiment of the present invention, the biometric information may be fingerprint information. The processor 201 can receive a fingerprint input by the user through the fingerprint sensor.

In the embodiment of the present invention, the biometric information may also be voice feature information. The processor 201 can receive voice information input by the user through the audio circuit 215.

In the embodiment of the present invention, the biometric information may also be iris information. The processor 201 can scan and acquire the iris information of the user through the camera 214.

In practical applications, the biometric information may also be other information, such as face information, which is not limited herein. The processor 201 can acquire the face information of the user through the camera 214.

In an implementation manner, the processor 201 may analyze whether the current page is the login page according to an interface element included in the current page. For example, if the current page contains a "login" control for triggering a login request, the processor 201 can determine that the current page is the login page.

In another implementation manner, the processor 201 may determine whether the target input domain exists in the current page, and if the target input domain exists, determine that the current page is the login page.

The context is used to characterize control objects and resources referenced by the login page. Here, the control object includes but is not limited to: an input type control for receiving user input, such as a button, a text input box (such as EditText in Android), and an output type control for displaying information to the user, such as Label, text display box (such as TextView in Android). Here, resources include, but are not limited to, text, images, and the like displayed in the output control.

In a specific implementation, the processor 201 may preset a context for identifying the target input domain, and in the context corresponding to the login page, identify the context according to a preset context for identifying the target input domain. Target input field. The context corresponding to the target input field may include: adjacent controls of the target input field on the page layout, and resources referenced by adjacent controls.

In the embodiment of the present invention, the preset database is used to securely store login information of the user. The preset database may be located in the memory 205, and the data storage form of the preset database may include But not limited to: databases, documents, tables, etc. Before the user accesses the preset database, the processor 201 may need to authenticate the user, verify the passed user: write information into the preset database, or change the information in the preset database, or Reading the information in the preset database.

In a specific implementation, before acquiring the login information of the user from the preset database, the processor 201 may receive biometric information input by the user, and if the biometric information is preset biometric information, Acquiring login information of the user that is characterized by the biometric information to log in to the application, and filling the acquired login information into the target input domain.

It should be noted that one (or more) preset biometric information can be used to represent a legitimate user.

In the embodiment of the present invention, the target input field may include at least two input fields, such as a username field and a password field. When filling the at least two input fields, the processor 201 may respectively obtain, from the login information, the attributes of the respective input domains according to the attributes of the respective input fields in the at least two input fields. Login information, and each of the input fields is filled with login information that matches the attributes of the respective input fields.

Optionally, in the embodiment of the present invention, the processor 201 may selectively fill the target input domain according to a user's selection operation.

Specifically, the processor 201 may receive a selection operation input by the user, and obtain, according to the attribute of the target input field selected by the selection operation, the login information that matches the attribute of the selected target input domain from the login information, and The selected target input field is filled with login information that matches the attribute of the selected target input field.

In the embodiment of the present invention, the login information in the preset database may be login information encrypted by using a preset encryption rule. Correspondingly, the processor 201 needs to decrypt the login information. The decryption rule may be a pre-set decryption rule corresponding to the preset encryption rule.

In order to further enhance the security of the inventive solution, the steps involved in user authentication and login information acquisition may preferably be performed by a Trusted Execution Environment (TEE), and the steps involving input and output of human-computer interaction are performed by the target operating system. The trusted execution environment and the target operating system communicate with each other. The target operating system can typically be an open operating system.

In a specific implementation, the processor sends the biometric information through a target operating system. Send to a trusted execution environment;

The processor 101 may verify, by the trusted execution environment, whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, may be from the trusted execution environment. Obtaining login information of the user that is characterized by the biometric information and logging in to the application, and sending the login information to the target operating system by using the trusted execution environment.

The processor 101 performs the relevant steps of the solution of the present invention by using the trusted execution environment and the target operating system respectively, so as to prevent the steps of user identity verification and login information acquisition from being maliciously falsified due to malicious attacks on the target operating system, and the present invention can be enhanced. The security of the inventive solution.

It can be understood that the execution steps of the processor 201 can also refer to the content of the embodiment of FIG. 4, and details are not described herein again.

In summary, the embodiment of the present invention implements the target input field for inputting login information in the login page of the application, and verifies the biometric information input by the user. If the verification succeeds, the current database is obtained from the preset database. The login information of the user logging in to the application, and populating the login information into the target input domain, can automatically fill the target input domain in the login page, simplifying the login operation of the user, and the scope of application Wide, not limited by the application development platform.

A person skilled in the art can understand that all or part of the process of implementing the above embodiment method can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above disclosure is only a part of the embodiments of the present invention, and the scope of the present invention is not limited thereto, and those skilled in the art can understand all or part of the process of implementing the above embodiments, and according to the claims of the present invention. Equivalent changes are still within the scope of the invention.

Claims (30)

A login information input method, comprising: Identifying that the current page is the login page of the application; Identifying a target input field for inputting login information in the login page; Receiving biometric information input by the user; And if the biometric information is the preset biometric information, obtaining, by using the preset database, the login information of the user that is characterized by the biometric information and logging in to the application; The login information is populated into the target input domain. The method of claim 1, wherein the target input field comprises at least two input fields; the filling the login information into the target input domain comprises: Analyzing an attribute of each input field in the at least two input fields; And acquiring login information that matches the attributes of the respective input domains from the login information according to the attributes of the input fields; Login information corresponding to the attributes of the respective input fields is filled in each of the input fields. The method of claim 1, wherein the filling the login information into the target input field comprises: receiving a selection operation input by a user, the selecting operation for selecting a login information to be filled a target input field; analyzing an attribute of the target input field selected by the selecting operation; obtaining, according to the attribute of the selected target input field, the login information that matches the attribute of the selected target input field from the login information Filling in the selected target input field with the login information that matches the attribute of the selected target input field. The method according to claim 1, wherein if the biometric information is preset biometric information, acquiring a user characterized by the biometric information from a preset database to log in to the application Login information, including: The target operating system transmits the biometric information to a trusted execution environment; The trusted execution environment verifies whether the biometric information is the preset biometric information, and if the biometric information is preset biometric information, the trusted execution environment is pre- And obtaining, by the database, login information of the user that is characterized by the biometric information and logging in to the application, and sending the login information to the target operating system. The method according to any one of claims 1-4, wherein the login information in the preset database is login information encrypted by a preset encryption rule; the filling the login information into the location Before the target input field, the method further includes: decrypting the login information by using a decryption rule corresponding to the preset encryption rule. The method according to any one of claims 1 to 3, wherein the identifying a target input field for inputting login information in the login page comprises: Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page; In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain. A method for saving login information, comprising: Identifying that the current page is the login page of the application; Identifying a target input field for inputting login information in the login page; Receiving login information input by the user in the target input field; Receiving biometric information input by the user; And if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database. The method according to claim 7, wherein if the biometric information is preset biometric information, the login information is used as a user characterized by the biometric information to log in to the application. The login information is saved to the preset database, including: The target operating system transmits the biometric information to a trusted execution environment; Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system; If the biometric information is preset biometric information, the target operating system sends the login information to the trusted execution environment; If the biometric information is preset biometric information, the trusted execution environment uses the login information as login information of the user that is characterized by the biometric information to log in to the application, and saves the login information to In the default database. The method according to claim 7 or 8, wherein before the saving the login information to the preset database, the method further comprises: encrypting the login information according to a preset encryption rule. The method according to claim 7, wherein the identifying a target input field for inputting login information in the login page comprises: Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page; In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain. A login information input device, comprising: a first identifying unit, configured to identify that the current page is a login page of the application; a second identifying unit, configured to identify a target input field for inputting login information in the login page; a receiving unit, configured to receive biometric information input by the user; And an obtaining unit, configured to: if the biometric information is preset biometric information, acquire, from a preset database, login information of a user that is characterized by the biometric information and log in to the application; a padding unit, configured to fill the login information into the target input domain. The device according to claim 11, wherein the target input field comprises at least two input fields, and the filling unit is configured to: analyze attributes of each input domain in the at least two input fields And acquiring, according to the attributes of the respective input fields, login information that matches the attributes of the respective input domains from the login information; filling the respective input domains separately Login information that matches the attributes of each input field. The device according to claim 11, wherein the filling unit is specifically configured to: receive a user input selection operation, the selection operation is used to select a target input field that needs to be filled with login information; and the selection is analyzed Manipulating the attribute of the selected target input field; obtaining, according to the attribute of the selected target input field, the login information that matches the attribute of the selected target input field; and the selected target input field The fill information matches the login information of the selected target input domain. The device according to claim 11, wherein the obtaining unit is specifically configured to: Transmitting the biometric information to the trusted execution environment by the target operating system; Verifying, by the trusted execution environment, whether the biometric information is the preset biometric information And if the biometric information is preset biometric information, obtaining, by using the trusted execution environment, the login information of the user that is characterized by the biometric information and logging in to the application, and The login information is sent to the target operating system. The device according to any one of claims 11 to 14, wherein the login information in the preset database is login information encrypted by a preset encryption rule; the device further comprises: a decryption unit, And before the filling unit fills the login information into the target input domain, decrypting the login information by using a decryption rule corresponding to the preset encryption rule. The device according to any one of claims 11 to 13, wherein the second identifying unit is configured to: acquire a context corresponding to the login page; and the context is used to represent the login page The referenced control object and the resource; in the context corresponding to the login page, the target input field is identified according to a preset context for identifying the target input field. A login information storage device, comprising: a first identifying unit, configured to identify that the current page is a login page of the application; a second identifying unit, configured to identify a target input field for inputting login information in the login page; a first receiving unit, configured to receive login information input by the user in the target input field; a second receiving unit, configured to receive biometric information input by the user; a saving unit, configured to: if the biometric information is preset biometric information, use the login information as login information of a user that is represented by the biometric information to log in to the application, and save the login information to a pre Set in the database. The device according to claim 17, wherein the saving unit is specifically configured to: Transmitting the biometric information to the trusted execution environment by the target operating system; Verifying, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system; And if the biometric information is preset biometric information, sending the login information to the trusted execution environment by using the target operating system; If the biometric information is preset biometric information, the login information is used as login information of the user that is represented by the biometric information to log in to the application by the trusted execution environment, and the login information is saved. Go to the default database. The device according to claim 17 or 18, further comprising: an encryption unit, configured to encrypt the login information according to a preset encryption rule before the saving unit saves the login information to a preset database . The device according to claim 17, wherein the second identifying unit is configured to: acquire a context corresponding to the login page; and the context is used to represent a control object and a resource referenced by the login page. In the context corresponding to the login page, the target input field is identified according to a preset context for identifying the target input field. A terminal, comprising: an input device, an output device, a memory, and a processor coupled to the memory, wherein: The processor reads instructions stored in the memory for performing the following steps: Recognizing that the current page displayed in the output device is a login page of the application; Identifying a target input field for inputting login information in the login page; Receiving biometric information input by a user through the input device; And if the biometric information is the preset biometric information, obtaining, by using the preset database, the login information of the user that is characterized by the biometric information and logging in to the application; The login information is populated into the target input domain. The terminal according to claim 21, wherein the target input field comprises at least two input fields; and the step of filling the login information into the target input field comprises: The processor analyzes attributes of respective input fields in the at least two input fields; And the processor respectively acquires login information that matches the attributes of the respective input domains from the login information according to attributes of the respective input domains; The processor fills each of the input fields with login information that matches the attributes of the respective input fields. The terminal according to claim 21, wherein the step of filling the login information into the target input domain comprises: Receiving, by the input device, a selection operation input by a user, the selecting operation is for selecting a target input field that needs to be filled with login information; analyzing an attribute of the target input field selected by the selecting operation; The attribute of the target input field, obtaining login information that matches the attribute of the selected target input field from the login information; filling the selected target input field with the attribute of the selected target input field Meet the login information. The terminal according to claim 21, wherein if the biometric information is preset biometric information, acquiring a user characterized by the biometric information from a preset database to log in to the application Steps to log in to the information, including: Transmitting, by the target operating system, the biometric information to a trusted execution environment; The processor verifies whether the biometric information is the preset biometric information by using the trusted execution environment, and if the biometric information is preset biometric information, The trusted execution environment acquires, from the preset database, login information of the user that is characterized by the biometric information and logs in to the application, and sends the login information to the target operating system by using the trusted execution environment. The terminal according to any one of claims 21 to 24, wherein the login information in the preset database is login information encrypted by a preset encryption rule; the processor is further configured to: Before the login information is filled in the target input field, the login information is decrypted by using a decryption rule corresponding to the preset encryption rule. The terminal according to any one of claims 21 to 23, wherein the step of identifying a target input field for inputting login information in the login page comprises: The processor acquires a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page; The processor identifies the target input domain according to a preset context for identifying the target input domain in a context corresponding to the login page. A terminal, comprising: an input device, an output device, a memory, and a processor coupled to the memory, wherein: The processor reads instructions stored in the memory for performing the following steps: Recognizing that the current page displayed in the output device is a login page of the application; Identifying a target input field for inputting login information in the login page; Receiving login information input by the user in the target input field by the input device; Receiving biometric information input by a user through the input device; And if the biometric information is preset biometric information, the login information is used as login information of the user that is characterized by the biometric information to log in to the application, and the login information is saved in a preset database. The terminal according to claim 27, wherein if the biometric information is preset biometric information, the login information is used as a user characterized by the biometric information to log in to the application. Login information, save the login information to the step in the default database Steps, including: Transmitting, by the target operating system, the biometric information to a trusted execution environment; Determining, by the trusted execution environment, whether the biometric information is the preset biometric information, and returning the verification result to the target operating system; And if the biometric information is preset biometric information, the processor sends the login information to the trusted execution environment by using the target operating system; If the biometric information is preset biometric information, the processor saves the login information as login information of the user that is represented by the biometric information to the application through the trusted execution environment, and saves the login information. The login information is in a preset database. The terminal according to claim 27 or 28, wherein the processor is further configured to: encrypt the login information according to a preset encryption rule before saving the login information to the preset database. The terminal according to claim 27, wherein the step of identifying a target input field for inputting login information in the login page comprises: Obtaining a context corresponding to the login page; the context is used to represent a control object and a resource referenced by the login page; In the context corresponding to the login page, the target input domain is identified according to a preset context for identifying the target input domain.

Images