WO2019165976A1 - Password input method and apparatus - Google Patents

Abstract

A password input method and apparatus, said method comprising: displaying a first icon group including password icons; assigning random character field marks, which are different from one another, to each icon in the first icon group, and displaying the random character field of each icon at a position corresponding to said icon, each random character field containing at least one character; acquiring the currently received character fields inputted by a user; and comparing the currently received input character fields with the random character field marks of the password icons, and determining whether the password input is correct according to a comparison result. In different password input operations, the random character fields corresponding to the password icons are different, and thus the password icons cannot be determined by surreptitiously observing the character fields inputted by the user, enhancing the password security, furthermore, the password icons are easy to memorize, relieving the memory burden of the user.

Description

Password input method and device Technical field

The present invention relates to an interaction technique between a user and a computer, and more particularly to a password input method and an apparatus using the same.

Background technique

With the advent of the information age, in order to protect their identity, property and other security, people usually set passwords for various types of computer equipment, mobile phones and various accounts with personal information. Moreover, once the password is sneaked by the criminals, it will bring irreparable damage to the user. Therefore, how to effectively prevent the user from being sneaked by the criminals when entering the password has become a social problem that needs to be solved urgently.

At present, when users input passwords on various types of computer devices, in order to prevent the input content from being seen by others, the system generally adopts a non-meaningful special character instead of the input password in the password input box on the screen. At the same time, in order to increase the confidentiality intensity, users often set the password to a meaningless long string that is not easy to be accurately and quickly blinded. However, in this way, if only the special character of the substitute password is displayed in the password input box on the screen, It is difficult for users to find errors in the input in time. Moreover, what is hidden is only the password on the screen, but it cannot cover the action when the user inputs the password with the finger on the keyboard at the same time, and the password is still obtained by the others by observing and analyzing the finger action when the user operates the button.

In this regard, a common measure in the banking environment is to set a mask on the keyboard that blocks the finger operation. However, there is a contradiction between the occlusion effect of the mask and the difficulty of the user's operation. The larger the occlusion angle, the better the hidden effect, but the higher the difficulty of operation, affecting the user experience.

At the same time, in the home and office environment, it is obviously not convenient to set the mask on the keyboard of ordinary desktop computers and notebook computers, but there are still frequent password input operations in such environments. On the screen of the mobile phone, it is also more difficult to hide the action of the finger, making it easier to leak the password or the lock screen pattern.

Moreover, in modern society where concealed camera equipment is easily available, it is hard to prevent sneak peeks at the use of high-tech means to peek into passwords. General measures have been difficult to parry. In order to improve the difficulty of cracking, setting various types of passwords is generally required to use long characters, and may also include a combination of uppercase and lowercase characters. But how to remember such complex and abstract passwords has always been a headache for people.

In summary, in the current various password input environments, there is not only a problem that the password is easily leaked. Moreover, it is difficult for the password owner to determine whether his or her password has been sneaked and stolen by criminals during the input operation, and can only be remedied and prevented by frequently changing the password. However, passwords that meet the difficulty of cracking are not easy to remember. The result of frequent replacement will increase people's memory burden and make people more distressed.

technical problem

In view of the above drawbacks of the prior art, the present invention provides a password input method and apparatus, which are convenient for the user to memorize and have high password security.

Technical solution

In order to increase the difficulty of password voyeurism, the present invention has made the following improvements:

According to a first aspect, an embodiment provides a password input method, including:

Displaying a first icon group including a password icon; assigning each of the icons in the first icon group different random character segment marks, and displaying random characters of each icon in each The icon forms a position of the correspondence, and each random character segment contains at least one character;

Get the character segment of the currently received user input;

The currently received input character segment is compared with the random character segment mark of the password icon, and the password input is finally determined according to the comparison result.

According to a second aspect, an embodiment provides a password input device, including:

a display unit for displaying graphic and character information related to the password input operation;

a data processing unit for analyzing and processing information related to the password input operation;

Input unit for inputting password operation information to the data processing unit

The display unit is further configured to display the first icon group including the password icon, and display a random character segment of each icon at a position corresponding to each icon;

The input unit is configured to obtain a currently received character segment of the user input, and send the input character segment to the data processing unit;

The data processing unit is further configured to allocate each random character segment mark for each icon in the first icon group, and send the random character segment of each icon to the display unit, each random character segment includes at least one The data processing unit is further configured to compare the currently received input character segment with the random character segment mark of the password icon, and finally determine whether the password input is correct according to the comparison result.

Beneficial effect

According to the password input method and apparatus of the above embodiment, the password is set by the icon that is convenient for the user to remember and the random character segment mark corresponding to each icon, and the character corresponding to the password icon is input in the first icon group. The segment is used for password matching, and the security of the password is enhanced by the method, and the memory burden of the user is alleviated.

DRAWINGS

1 is a schematic diagram of a display unit and an input unit of an embodiment;

2 is a schematic diagram of a set password icon of an embodiment;

3 is a schematic diagram of a display unit and an input unit of another embodiment;

FIG. 4 is a schematic diagram showing the position of the icon distribution in the first icon group being randomly changed compared with FIG. 3. FIG.

Embodiments of the invention

Detailed ways

The present invention will be further described in detail below with reference to the accompanying drawings. Similar elements in different embodiments employ associated similar component numbers. In the following embodiments, many of the details are described in order to provide a better understanding of the application. However, those skilled in the art can easily realize that some of the features may be omitted in different situations, or may be replaced by other components, materials, and methods. In some cases, some operations related to the present application have not been shown or described in the specification, in order to avoid that the core portion of the present application is overwhelmed by excessive description, and those skilled in the art will describe these in detail. Related operations are not necessary, they can fully understand the relevant operations according to the description in the manual and the general technical knowledge in the field.

In addition, the features, operations, or characteristics described in the specification may be combined in any suitable manner to form various embodiments. At the same time, the steps or actions in the method description can also be sequentially changed or adjusted in a manner that can be apparent to those skilled in the art. Therefore, the various sequences in the specification and the drawings are only for the purpose of describing a particular embodiment, and are not intended to

The serial numbers themselves for the components herein, such as "first", "second", etc., are only used to distinguish the described objects, and do not have any order or technical meaning. As used herein, "connected" or "coupled", unless otherwise specified, includes both direct and indirect connections.

The present application provides a password input method and apparatus, which set a password by an icon that is convenient for the user to memorize and a random character segment mark corresponding to each icon, by inputting a password icon in the first icon group. The corresponding character segment is used for password matching, and the security of the password is enhanced by the method, which increases the difficulty for the password voyeur to crack the password by observing the random character segment input by the user.

The definitions of terms used in this application include:

The term "icon" as used in this application may be static or dynamic characters, numbers, symbols, icons, logos, graphics, tiles, or a combination thereof, or may be included in dynamic or static images or drawings. Multiple local areas with exact boundaries and shapes but with exact approximate positional features.

The term “icon group” as used in the present application refers to a set of icons including a plurality of icons arranged in an ordered or unordered manner and displayed at the same time; or a static group containing a plurality of virtual regions serving as icons or Dynamic picture, this picture can even be a blank picture, in which each virtual area acting as an icon has a fixed specific position. The virtual area in an icon group can display the same picture, or display different pictures, or display a blank picture, as long as the position of each virtual area serving as an icon is fixed, when the icon is a virtual area, In fact, the location information is used to distinguish different icons.

The "input" referred to in the present application may be input through a physical keyboard or a virtual keyboard, or may be input by a pen, a finger on a touch screen, a stroke drawing or a gesture drawing input, or may be input through a voice. It may be the movement and positioning input of the viewing focus of the human eye on the screen detected by the photoelectric recognition and sensing device.

The "character" referred to in the present application may be a letter, a number, a symbol typed on a physical keyboard or a virtual keyboard, a sliding track input by a pen or a finger on a touch screen, or a note input by voice. The corresponding letters, numbers, and symbols may also be letters, numbers, and symbols corresponding to and triggered by the observation focus of the human eye input on the screen through the photoelectric recognition and sensing device.

The "character segment" referred to in the present application includes at least one character. Of course, in order to increase the difficulty of voyeur recording, it is best to use multiple characters. The more characters the character segment contains, the higher the security level of the password, but the amount of calculation of the system will also increase. In actual operation, the number of characters contained in the character segment should be selected as needed.

The term "random character segment" as used in the present application refers to a character segment that is randomly assigned and has a corresponding relationship with a specific icon in only one display; when the specific icon is displayed again, it is randomly assigned another one and still only A random segment of a correspondence.

The term "random character segment mark" as used in the present application refers to a random character segment that follows the area of the position where the "icon" is located.

The term "display unit" as used in this application includes an electronic display, or a combination of electronic displays, or a combination of an electronic display and a static graphic display.

In an embodiment of the present invention, a password input device is provided. The device includes a display unit, a data processing unit, and an input unit, wherein the data processing unit display unit and the input unit are signally connected. In some embodiments, the display unit further Connected to the input unit signal.

The input unit is configured to acquire an input character segment currently input by the user, and then send the received input character segment to the data processing unit. In a specific embodiment, the input unit may send the input character segments to the data processing unit in batches, or may send all the input character segments to the data processing unit after the user inputs.

a data processing unit, configured to receive an input character segment sent by the input unit, assign different random segment segments to each icon currently displayed by the display unit, and input the segment and the password icon after receiving the input segment The random character segment mark is compared, and according to the comparison result, it is determined whether the user's password input is correct. It should be noted that the data processing unit can compare each input character segment with the random character segment mark of the password icon in batches, or after inputting all the input character segments together with the password icon. Random character segment marks are used for comparison. In the preferred embodiment, no matter which comparison method is used, the judgment result can be given after all the input is completed, so that the password thief will have difficulty judging that there are several input character segments and that the input character segments have errors. Increased the difficulty of password cracking.

a display unit, the display unit is configured to display a first icon group including an icon, and a random segment label assigned to each icon by the data processing unit, and the random segment mark corresponding to the icon can be displayed beside the icon , can also be displayed in other one-to-one correspondence.

In some embodiments, the method further includes: a setting unit connected to the data processing unit, wherein the setting unit is configured to set the password icon, and send the set password icon to the data processing unit, that is, when the password is set, The setting unit is configured to obtain a set of password icons, and the password icon is at least two icons selected by the user from the second icon group of the plurality of icons currently displayed by the display unit. In some embodiments, the setting unit is further configured to set the number of icons in the first icon group displayed by the display unit; or the setting unit is further configured to set the number of icons in the password icon; The unit can also be used to set the number of random segment markers assigned for each icon.

In one embodiment, as shown in FIG. 1, a display screen 1 as a display unit and a keyboard 2 as an input unit are included. The display screen 1 and the keyboard 2 may be independent electronic components connected to each other by wired or wireless communication, or may be virtual keyboards displayed on the same screen in the same touch screen.

The display screen 1 displays a first icon group including a set number icon 3, wherein the set number may be a system setting, or may be manually set by the user according to requirements, in this embodiment, as shown in FIG. As shown, the first icon group contains 30 icons 3. In the first icon group, a random character segment mark 4 composed of at least one character is displayed next to each icon 3. In the present embodiment, in order to improve the difficulty of observation and recording of the password thief, the random character segment mark 4 includes three characters, and the characters are composed of numbers. In other embodiments, the number of characters in each random segment mark 4 may also be one, two or more. The characters may not be limited to numbers, may be symbols, letters, etc., and are random in a specific embodiment. The more characters in the character segment mark 4, the higher the security of the password. The keyboard 2 includes a plurality of character buttons, wherein the character buttons include all the characters constituting the random character segment marks 4. In some embodiments, the keyboard further includes the function buttons shown in the figure, and the function buttons are used for the reversal when an input error occurs. In the present embodiment, the character button is a ten-digit character button 5 including 0 to 9, and the function button is an enter key 6 and a backspace key 7.

In a specific embodiment, the icon is preferably a variety of graphics, icons that have unique features that are easy to identify, distinguish, and remember, and may be static or dynamic.

Based on the above password input device, the present application also provides a password input method.

Before the password is entered, the password is first set by the setting unit. First, at least two icons are obtained as a set of password icons in a displayed second set of icons containing multiple icons.

Referring to FIG. 2, the figure shows a password icon set by the user in advance through the setting unit, which includes four optional icons. The four icons are selected by the user from the second icon group in FIG. 1. After the password is set, when the user needs to enter the password protection device or view related information, the user needs to input a password to open the device or information page. The process of the password input method is as follows:

The display unit will display a set of the first icon group including the password icon, and display the different random segment marks assigned to each icon, and display the random character segments of each icon in the Each icon forms a position of a correspondence, and each random character segment contains at least one character.

The user observes and determines the random segment mark corresponding to the four password icons preset in the first icon group, and types four random segment marks of the four password icons on the input unit, and then presses Enter. . After receiving the character segment input by the user, the input unit sends the corresponding character segment to the data processing unit.

In an embodiment, the icon in the first icon group displayed by the display unit and the icon in the second icon group in the password setting step may be completely identical, and the icon in the first icon group may also be Only part of the icon in the second icon group, as long as all the password icons are included in the first icon group. In addition, the icons in the first icon group may be different or partially repeated, and the same group of random segment marks are shared for the repeated icons.

After the data processing unit obtains the input character segment, the input character segment is compared with the random character segment mark of the password icon, and the current password input is determined according to the comparison result. The data processing unit can compare each input character segment with the random character segment mark of the password icon in batches, or mark all the input character segments together with the random character segment of the password icon after the input is completed. Compared. In a preferred embodiment, for the two comparison methods, it is preferable to wait until all the inputs are completed to give a judgment result, so that the password thief will have difficulty judging that there are errors in several input segments and which input segments have errors. , increased the security of the password.

If the character segment entered by the user and the password icon all match successfully, the system will determine that the user password is entered correctly and enter the normal program afterwards. If the character segment input by the user does not completely match the password icon, the system will send a prompt message to the user that the password input is incorrect. The prompt may be a prompt mode for indicating a voice, a text or a pattern.

In this embodiment, the user may be allowed to select a sequence rule for typing a random character segment mark. At this time, when the password is input, only the random character segment mark corresponding to the password icon is input according to the specified order rule, and the password matching succeeds, and the password is added. The difficulty of the thief to crack the password by voyeurism or other means. If the application environment does not require a high level of encryption, you can not limit the order in which random character segments are typed. In this case, the random segment identifier corresponding to the password icon is entered in any order. Such an operation, although lowering the encryption level, is more convenient for the user to remember the password and password input operations, because the user only needs to remember the four password icons, without having to remember the order.

With the above method, the user can input the correct password input result to the data processing unit simply by inputting the random character segment mark of each password icon observed by the user. Throughout the process, although each random character segment typed by the user during the password input operation is easily observed and recorded by the person next to it, since these random character segments are only valid once, it is useless to write down. The next time the user performs a password input operation, the other set of random character segment marks corresponding to each of the previous password icons that are observed by the user can be input in the public view, and there is no need to worry about the voyeur record of others.

However, if the password peeper quickly observes and records the random segment mark of the icon on the current screen by means of a tool such as a camera, and simultaneously observes and records each random segment mark typed by the user, it is still possible to know the password.

In order to further increase the technical difficulty of the voyeur peeping the password, in another embodiment of the present invention, the data processing unit may further assign at least 2 random character segment marks for each icon, the same first icon group. All random character segment marks of all icons are different, and each random character segment mark of each icon is randomly rotated. For example, 30 random character segment marks are assigned to each icon, and the display is randomly rotated at intervals of about 1 second. The user can input any random character segment mark of each password icon seen at any time.

In this way, since each icon has a plurality of random character segment marks displayed by random rotation, only a small part of all the random character segment marks are displayed at the same time, and the user inputs the random character segments in the display unit. The random segment markers for each icon are alternated in a non-stop rotation. Thus, even if this small portion is sneaked by the voyeur with the camera, it is difficult to determine which icons are randomly pointed to by each random character segment typed by the user.

In the first icon group and the second icon group in this embodiment, a static image with a fixed position may be used to display each icon, and a small display screen is used to display a random character segment mark of the icon, such as a small The digital tube realizes random rotation display of random character segment marks by replacing the display content of the small display screen.

When the user types a random character segment mark, it is necessary to observe the random character segment mark corresponding to the password icon that he finds on the display unit, and it is possible that the eyeball rotation observation and positioning process may be peeped by others and guess the approximate screen position. Moreover, after the voyeur has noticed, recorded and tried it many times, it is possible to obtain the password content.

In order to overcome this drawback and further increase the technical difficulty of others to peek into the password, and to enhance the security of the password, the distribution position of the icon in the first icon group can be randomly changed during the process of receiving the character segment input by the user.

After adopting the measure of the distribution position of the random change icon, since the position of the icon in the first icon group is not fixed, the user and the voyeur will find the first icon group whenever the user performs the next password input operation. All of the icon positions have been reordered randomly. The user can search for the password icon in the public view, and enter the other set of random character segment marks of the previously observed password icon, and still do not have to worry about the guess of the password icon position according to the user's eyes.

Referring to FIG. 3 and FIG. 4, the icon 3 constituting the first icon group is represented by 25 English letters. During the user input of the password, the distribution position of the set of letter icons displayed by the display unit is randomly changed at intervals of, for example, about 2 seconds. FIG. 4 is a diagram showing the state of the first icon group after a random change of the first icon group in FIG. 3. This further increases the technical difficulty of others to peep into the password, making it more difficult to implement the means of narrowing the location of the guessing password by recording the direction of the eye gaze when the user observes the search for the password icon.

In some embodiments, in order to reduce the difficulty of the user searching for the password icon, the icons in the first icon group can be distinguished by a few background colors, and there are only a few icons having the same background color. In this way, when the user searches for the password icon, the password icon can be found only in the icon with a specific background color.

Similarly, other easily distinguishable shape features such as special contours can be used to distinguish between icons, such as square, diamond, circle, and star outlines to distinguish multiple sets of icons. Due to the limitation of the physiological ability of the human eye, the same person cannot simultaneously observe and record the finger movements when the user inputs the password and all the random character segment marks of each first icon group on the screen, so that the user cannot be accurately observed and recorded. Which of the icons on the screen corresponds to the random character segment input twice. In particular, when each of the icons has a plurality of random character segment marks alternately displayed, and/or the distribution position of the icons randomly changes, it is difficult to crack the password even if the screen is sneaked.

Descriptions are made herein with reference to various exemplary embodiments. However, it will be appreciated by those skilled in the art that changes and modifications may be made to the exemplary embodiments without departing from the scope of the invention. For example, various operational steps and components for performing the operational steps can be implemented in different ways depending on the particular application or any number of cost functions associated with the operation of the system.

In addition, as will be appreciated by those skilled in the art, the principles herein may be embodied in a computer program product on a computer readable storage medium preloaded with computer readable program code. Any tangible, non-transitory computer readable storage medium may be utilized, including magnetic storage devices (hard disks, floppy disks, etc.), optical storage devices (CD-ROM, DVD, Blu Ray disks, etc.), flash memory, and/or the like. . These computer program instructions can be loaded onto a general purpose computer, special purpose computer or other programmable data processing device to form a machine such that the instructions executed on the computer or other programmable data processing device can generate means for performing the specified function. The computer program instructions can also be stored in a computer readable memory, which can instruct the computer or other programmable data processing device to operate in a particular manner such that the instructions stored in the computer readable memory can form a single piece Manufacturing, including implementations that implement specified functions. Computer program instructions can also be loaded onto a computer or other programmable data processing device to perform a series of operational steps on a computer or other programmable device to produce a computer-implemented process for execution on a computer or other programmable device. Instructions can provide steps for implementing a given function.

Although the principles of the present invention have been shown in the various embodiments, various modifications of the structures, arrangements, ratios, components, materials and components that are particularly suitable for the specific environment and operational requirements may be made without departing from the principles and scope of the disclosure. use. The above modifications and other changes or modifications are intended to be included within the scope of the disclosure.

The foregoing detailed description has been described with reference to various embodiments. However, those skilled in the art will recognize that various modifications and changes can be made without departing from the scope of the disclosure. Therefore, the present disclosure is intended to be illustrative, and not restrictive, and all such modifications are included. Also, solutions to the advantages, other advantages, and problems of the various embodiments have been described above. However, benefits, advantages, solutions to problems, and any solution that produces these elements, or makes them more explicit, should not be construed as critical, necessary, or necessary. The term "comprise" and any other variants thereof, as used herein, are meant to be non-exclusive, such that a process, method, article, or device that includes a list of elements includes not only those elements but also those not explicitly listed or not , methods, systems, articles, or other elements of the device. Furthermore, the term "coupled" and any other variants thereof, as used herein, refers to physical, electrical, magnetic, optical, communication, functional, and/or any other connection.

It will be appreciated by those skilled in the art that many changes may be made in the details of the embodiments described above without departing from the basic principles of the invention. Therefore, the scope of the invention should be determined according to the following claims.

Claims (8)

A password input method, comprising: Displaying a first icon group including a password icon; assigning each of the icons in the first icon group different random character segment marks, and displaying random characters of each icon in each The icon forms a position of the correspondence, and each random character segment contains at least one character; Get the character segment of the currently received user input; The currently received input character segment is compared with the random character segment mark of the password icon, and the password input is determined to be correct according to the comparison result. The method of claim 1 wherein: Each icon is assigned at least 2 random character segment marks, and each random character segment mark of each icon is randomly rotated and displayed. The method according to claim 1 or 2, wherein the distribution position of each of the icons in the first icon group randomly changes during the process of receiving the character segments input by the user. The method according to claim 1, further comprising a password setting step, comprising: displaying a second icon group including a plurality of icons, and selecting at least two pictures selected by the user in the second icon group. As a set of password icons. A password input device comprising: a display unit for displaying graphic and character information related to the password input operation; a data processing unit for analyzing and processing information related to the password input operation; An input unit, configured to input password operation information to the data processing unit; It is characterized by: The display unit is further configured to display the first icon group including the password icon, and display a random character segment of each icon at a position corresponding to each icon; The input unit is configured to obtain a currently received character segment of the user input, and send the input character segment to the data processing unit; The data processing unit is further configured to allocate each random character segment mark for each icon in the first icon group, and send the random character segment of each icon to the display unit, each random character segment includes at least one The data processing unit is further configured to compare the currently received input character segment with the random character segment mark of the password icon, and determine whether the password input is correct according to the comparison result. The device of claim 5 wherein: The data processing unit is further configured to allocate at least 2 random character segment marks for each icon, and each random character segment mark of each icon is randomly rotated and displayed. The apparatus according to claim 5 or 6, wherein the distribution position of each of the icons in the first icon group is randomly changed during the process of receiving the character segments input by the user. The apparatus according to claim 5, wherein said data processing unit is further configured to send a second icon group including a plurality of icons to the display unit display, and select the user in the second icon group At least two icons are used as a set of password icons.