WO2016188127A1

WO2016188127A1 - Virtual keyboard-based encryption method and apparatus

Info

Publication number: WO2016188127A1
Application number: PCT/CN2016/071219
Authority: WO
Inventors: 王小松; 卫伟; 张家明
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-05-22
Filing date: 2016-01-18
Publication date: 2016-12-01
Also published as: CN106295314A

Abstract

A virtual keyboard-based encryption method and apparatus. The method comprises: when a user enables a virtual keyboard to execute information input, randomly displaying one of a plurality of pre-set virtual keyboard character information layouts (S102); and encrypting information input by the user on the randomly displayed virtual keyboard character information layout by means of a pre-set rule (S104). The method makes an on-line payment of a user more secure, and solves the problem in the related art that the on-line payment of a mobile client is not secure enough.

Description

Encryption method and device based on virtual keyboard

Technical field

The present invention relates to the field of communications, and in particular to a method and apparatus for encrypting based on a virtual keyboard.

Background technique

With the rapid development of the Internet, online shopping has become the theme of people's lives, such as Taobao, Jingdong and major online shopping sites, and with the popularity of smart phones, people's lives have gradually become a pocket life, mobile payment came into being, this is the right The transformation of traditional face-to-face capital transactions. Therefore, the ability to pay quickly and securely becomes an important issue in the current transfer of funds.

At present, most mobile phone systems are Android and IOS systems, but at present, each client software does not have very strict protection measures, so that users completely rely on their own funds security, thus restricting the vigorous development of mobile payment.

At present, the keyboards used by the mobile payment technology are ordinary keyboards, similar ordinary keyboards or out-of-order virtual keyboards, and then the user-entered payment passwords are encrypted. The ordinary virtual keyboard is easy to cause the password to be peeked by bystanders, and the out-of-order virtual keyboard can be effective. To prevent this, for example, the virtual keyboard of the most cutting-edge order is used. The virtual keyboard tends to be applied to the PC device of the personal device. The processing of the keyboard layout and the numeric keys is not involved, and the original keyboard has one by one. The mapping relationship is formed on the PC side, and the original keyboard is QWER. If the generated out-of-order keyboard is ERPY..., if the character input by the user is Q, it is mapped to E, and then the user is input by using a preset encryption algorithm. Encrypt. This method solves the password security problem to a certain extent, but it is not ideal.

In view of the problem that the online payment of mobile clients in the related art is not sufficiently secure, an effective solution has not been proposed yet.

Summary of the invention

The main purpose of the embodiment of the present invention is to provide a virtual keyboard-based encryption method and apparatus, so as to at least solve the problem that the online payment of the mobile client is not sufficiently secure in the related art.

According to an aspect of the embodiments of the present invention, a virtual keyboard-based encryption method is provided, including: randomly displaying one of a plurality of preset virtual keyboard character information layouts when a user initiates a virtual keyboard to perform information input. And encrypting information input by the user on the randomly displayed virtual keyboard character information layout by a preset rule.

Optionally, the character information includes: alphanumeric information, symbol information, and function key information, Displaying, by the machine, one of the preset virtual keyboard character information layouts comprises: displaying the commonly used symbol information and the function key information in the symbol information on a specified position of the character information layout; The alphanumeric information is randomly displayed on the character information layout.

Optionally, the digital information is Chinese digital information.

Optionally, encrypting information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule includes: inputting, by using an RSA public key encryption algorithm, the user on the randomly displayed virtual keyboard character information layout The information is encrypted.

Optionally, after encrypting the information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule, the method further includes: sending the encrypted information to the third platform for verification.

According to another aspect of the embodiments of the present invention, a virtual keyboard-based encryption device is provided, including: a display module, configured to randomly display a plurality of preset virtual keyboard characters when a user initiates a virtual keyboard to perform information input. One of the information layouts; the encryption module is configured to encrypt the information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule.

Optionally, the character information includes: letter and number information, symbol information, and function key information, where the display module includes: a first display unit, configured to specify common symbol information in the symbol information, and the The function key information is displayed at a specified position of the character information layout; and the second display unit is configured to randomly display the letter and number information on the character information layout.

Optionally, the digital information is Chinese digital information.

Optionally, the encryption module is further configured to encrypt, by using an RSA public key encryption algorithm, information input by the user on the randomly displayed virtual keyboard character information layout.

Optionally, after encrypting the information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule, the apparatus further includes: a sending module, configured to send the encrypted information to the third platform Check it out.

Through the embodiment of the present invention, when the user initiates the virtual keyboard to perform information input, the layout of the virtual keyboard character information is randomly displayed on the interface of the terminal, that is, the keyboard character information displayed on the terminal has only one layout manner. Then, the information input by the user is encrypted on the randomly displayed virtual keyboard character information layout. In this embodiment, the user is more secure in online payment, and the problem that the online payment of the mobile client is not sufficiently secure in the related art is solved.

DRAWINGS

The drawings described herein are provided to provide a further understanding of the invention and constitute a part of the present application. The illustrative embodiments and the description thereof are intended to explain the present invention and are not intended to limit the invention. In the drawing:

1 is a flow chart of a virtual keyboard based encryption method in accordance with an embodiment of the present invention;

2 is a structural block diagram of a virtual keyboard-based encryption device according to an embodiment of the present invention;

3 is a block diagram 1 of an optional structure of a virtual keyboard-based encryption device according to an embodiment of the present invention;

4 is a block diagram 2 of an optional structure of a virtual keyboard-based encryption device according to an embodiment of the present invention;

5 is a block diagram showing the system structure of a secure keyboard for implementing fast payment according to an alternative embodiment of the present invention;

Figure 6 is a layout diagram 1 of a security keyboard in accordance with an alternative embodiment of the present invention;

7 is a layout view 2 of a security keyboard according to an alternative embodiment of the present invention;

8 is a flow chart of a method of implementing a secure keyboard for fast payment, in accordance with an alternative embodiment of the present invention;

9 is a flow diagram of operational procedures within a cryptographic processing module in accordance with an alternate embodiment of the present invention.

detailed description

It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The invention will be described in detail below with reference to the drawings in conjunction with the embodiments.

The embodiment provides a virtual keyboard-based encryption method. FIG. 1 is a flowchart of a virtual keyboard-based encryption method according to an embodiment of the present invention. As shown in FIG. 1 , the steps of the method include:

Step S102: randomly display one of a plurality of preset virtual keyboard character information layouts when the user initiates the virtual keyboard to perform information input;

Step S104: Encrypt the information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule.

In this embodiment, when the user initiates the virtual keyboard to perform information input, the layout of the virtual keyboard character information is randomly displayed on the interface of the terminal, that is, the keyboard character information displayed on the terminal has only one layout mode, and then The information input by the user is encrypted on the randomly displayed virtual keyboard character information layout. In this embodiment, the user is more secure in online payment, and the problem that the online payment of the mobile client is not sufficiently secure in the related art is solved.

The character information related to the embodiment may include: alphanumeric information, symbol information, and function key information. Based on this, in step S102, multiple preset virtual keyboard character information layouts are randomly displayed in step S102. One of the ways can be achieved by:

Step S11: displaying commonly used symbol information and function key information in the symbol information on a specified position of the character information layout;

Step S12: Randomly display the letter and number information on the character information layout.

For the above-mentioned step S11 and step S12, in an application scenario of the embodiment, the layout of the virtual keyboard may be: the layout of the conventional keyboard includes 49 buttons, and in the embodiment, the top is a stow button (function button), commonly used 6 character keys (specify commonly used symbol keys) and delete keys (function keys), followed by a row of numbers from zero to nine, the middle area is 26 letter keys, the lower left side of the uppercase switch and lowercase switch Key (function key), the lower right side of the distribution symbol switching and confirmation key (function key), the bottom right side is the space bar (function key). It can be seen that in the present embodiment, the function keys and the designated common symbol keys are distributed at a fixed position, and the letter and character keys are only in the fixed area, and the order of the letters and the character keys is random in this fixed area.

In another optional implementation manner of this embodiment, the digital information related to the embodiment is optional Chinese digital information. Although the numeric keys are indicated by the Chinese key, the input password is still processed according to the Arabic numerals 0-9 in the background. The purpose of this is to ensure the security of the user input. The input seen by others is different from the actual stored input in the background. At the same time, the input on the keyboard and the background storage are related, which is easy for the user to understand their input, which not only facilitates the user's input but also ensures the security of the user input.

In the step S104 of the embodiment, the information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by using a preset rule. In an optional implementation manner of this embodiment, the following manner can be adopted. Implementation: The information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by the RSA public key encryption algorithm. It should be noted that the RSA public key encryption algorithm is an RSA public key cryptosystem, and the public key cryptographic prompt uses different encryption keys and decryption keys, which is a kind of "derivation of a decryption key by a uniform encryption key. The cryptosystem is not computationally feasible. In addition, the RSA algorithm is for illustrative purposes only and does not constitute a limitation of the present invention. Other algorithms that can be used for encryption are also within the scope of the present invention.

After the information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by the preset rule in this embodiment, the method in this embodiment may further include: sending the encrypted information to the third platform for verification. .

In the embodiment, a virtual keyboard-based encryption device is also provided, which is used to implement the above-mentioned embodiments and optional embodiments, and has not been described again. As used below, the term "module" "unit" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

2 is a structural block diagram of a virtual keyboard-based encryption device according to an embodiment of the present invention, as shown in FIG. 2, The device includes: a display module 22 configured to randomly display one of a plurality of preset virtual keyboard character information layouts when the user initiates the virtual keyboard to perform information input; the encryption module 24 is coupled to the display module 22 and configured to be The information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by a preset rule.

3 is a block diagram of an optional structure of a virtual keyboard-based encryption device according to an embodiment of the present invention. As shown in FIG. 3, the character information includes: alphanumeric information, symbol information, and function key information, and the display module 22 includes: The first display unit 32 is configured to display the commonly used symbol information and the function key information in the symbol information in a specified position of the character information layout; the second display unit 34 is coupled to the first display unit 32 and configured to set the letters. And digital information is randomly displayed on the character information layout.

Optionally, the digital information related to the embodiment is Chinese digital information.

Optionally, the encryption module 24 is further configured to encrypt information input by the user on the randomly displayed virtual keyboard character information layout by using an RSA public key encryption algorithm.

4 is a block diagram of an optional structure of a virtual keyboard-based encryption device according to an embodiment of the present invention. After encrypting information input by a user on a randomly displayed virtual keyboard character information layout by a preset rule, the device further includes The sending module 42 is coupled to the encryption module 24 and configured to send the encrypted information to the third platform for verification.

The invention is exemplified below in conjunction with an alternative embodiment of the invention;

The optional embodiment provides a secure keyboard method for implementing fast payment, wherein the security keyboard layout portion includes 49 buttons, the top is a stow button, the commonly used 6 character button and the delete button, and then the row is Chinese. From zero to nine buttons, the middle area is 26 letters or character keys, the upper left side is distributed with uppercase switching and lowercase switching keys, the lower right side is distributed with symbol switching and confirmation keys, and the bottom right side is the space bar.

In this alternative embodiment, the security keyboard has numeric keys that are always in the second row and are randomly distributed. The alphabetic keys and the character keys are rearranged each time or the layout is switched, and only the fold, delete, uppercase, lowercase, symbols, and spaces are arranged. And the confirmation key layout does not change.

It should be noted that the stow button is used to put away the security soft keyboard, the delete key is used to delete a single character in the input password, the uppercase key is used to switch the lowercase letters on the keyboard to uppercase letters, and the lowercase key is used to switch the keyboard. Uppercase letters to lowercase letters. The symbol keys are used to switch the lowercase letters on the soft keyboard to the character area. The space key is used to enter a single space character. The confirmation key is used to encrypt the password and transfer it to the server.

The present optional embodiment also provides a system for implementing a secure keyboard for fast payment, the system comprising the following parts:

1) Provide a unique virtual keyboard layout on the terminal, the layout contains letters, Chinese numerals, characters and The necessary function buttons; wherein the function button is used to provide out-of-order letters, Chinese numerals and character keyboards, each time the virtual keyboard layout is partially changed, the background randomly sorts letters, Chinese numerals and characters and is performed in different areas of the keyboard. Show

2) Provide a password input module, set to input the user password input by *, and input the password in the input box and perform encryption processing. During the period, the case switching and symbol switching can be performed to meet the needs of the user input. The password collection module passes. The keyboard is monitored to obtain the value of each keyboard and the input password is obtained. After the out-of-order keyboard, each button of the keyboard has a code value, and the code value is unique and corresponds to the buttons one by one, and each button is monitored to obtain the user's input;

3) The Chinese digital processing module is set to use the corresponding Arabic numerals as the user input when the Chinese numeric keypad operation is monitored;

4) The function button processing module is set as the monitor function button, and when the function button is operated, the corresponding function is triggered, for example, when the case switching function is triggered, the uppercase and lowercase letters of the letter area are switched;

5) The password encryption module is set to encrypt the input password and encrypt using RSA;

6) a transmission module, configured to transmit the generated ciphertext to a third-party platform for verification;

It can be seen that the optional embodiment is mainly divided into four major modules: a security keyboard layout module, a security keyboard input module, a password processing module, and a ciphertext transmission module. The security keyboard layout module displays a reasonable button layout. The security keyboard input module mainly handles password input and various switching. The password processing module encrypts the password, and the ciphertext transmission module implements the ciphertext to interface with the third-party platform.

The following describes the optional embodiment in combination with the method of the optional embodiment and the foregoing module;

First, the keyboard in the optional embodiment includes: a personalized virtual keyboard, the package system has a keyboard, re-layout the keyboard, and the security keyboard in the alternative embodiment is divided into Chinese character numbers, alphabet keys, symbol keys, and Function key.

Among them, the implementation of rewriting or custom function keys, customizing the folding keyboard method, realizing the click-safe keyboard to collect the security key, rewriting the uppercase and lowercase switching keys, realizing the switch uppercase key to randomly display the uppercase alphabet keyboard, and switching The lowercase key randomly displays the lowercase alphabet keyboard, rewrites the symbol key, realizes the click symbol key to randomly display the symbol keyboard, customizes the delete key, realizes clicking the delete key to delete a password in the password box, and customizes the confirmation key to realize the click confirmation key. Implement password encryption and transfer.

Then, when the password is input into Chinese digital processing, the Chinese digital input is monitored, and the Chinese numeric key is processed in the background in Arabic numerals. After the password is entered, the password encryption algorithm is called to complete the encryption of the password. After the encryption is completed, the ciphertext is transmitted to the third-party platform.

Compared with the related technology, the optional embodiment can effectively identify the user who operates the fund and protect the user. The funds are safe and convenient for users to pay online. The security risks of mobile payment in the related art are solved, thereby ensuring the security of user funds.

The optional embodiment can be applied to: (1) Alipay, Alipay's password payment can use the method of the present invention, when the user is on the Internet Taobao or transfer, the security keyboard with the invention can be used to secure your funds and achieve convenience. Use, quick use and safe and secure effects. (2) Mobile online banking, mobile online banking can call the security keyboard of the present invention when the password is input, and the user can use the security keyboard to input the password when using the mobile phone for capital operation, to prevent the password from being viewed and leaked by others, and at the same time encrypting the password, double protection . (3) Financial application, the financial application on the mobile phone can use the security keyboard for the login password and the payment password to ensure the security of funds. (4) Train tickets, mobile phone login password when logging in 12306 can use the security keyboard, which can protect the user's password from being leaked, and protect the user's ticket purchase information and personal information security.

The optional embodiments of the present invention are described in detail below with reference to the accompanying drawings;

5 is a system block diagram of a security keyboard for implementing fast payment according to an optional embodiment of the present invention. As shown in FIG. 5, the system of the optional implementation includes: a security keyboard layout module, a security keyboard input module, a password processing module, and Password transmission module. The security keyboard layout module is designed for the virtual keyboard layout. The top row is a common character, followed by a row of Chinese digital layouts. The middle area is a letter display area that can be switched to uppercase letters or characters, and the surrounding layout functions are practical; the keyboard input is safe. The module is set to complete various operations of input, including switching case, switching characters, re-layout of the contents of the keyboard each time, and a function of closing the security keyboard and deleting the input; the password processing module mainly completes the password input by the user for RSA The encryption operation obtains the encrypted user password; the password transmission module completes the transmission of the ciphertext to the third-party server.

6 is a layout view of a security keyboard according to an alternative embodiment of the present invention, FIG. 7 is a layout view of a security keyboard according to an alternative embodiment of the present invention, FIG. 6 shows a layout of an alphabetic keyboard, and FIG. 7 shows a symbol. The layout of the keyboard, this layout in the Android platform by using xml file to write the layout file, create two new xml files under Res, qwerty.xml and symbols.xml, qwerty.xml is the layout file of Figure 6, symbols. Xml is the layout file of Figure 7. The layout file implements the layout of the soft keyboard, and each button has a code value, that is, each keyboard button in the layout has a code code value corresponding to one of the ones, for example, the code value corresponding to the button a is 97, and the code value is passed. To monitor each button, the code needs to encapsulate the keyBoard of the existing Android platform, using the original keyBoard method, for the special needs of the function needs to re-implement some methods or customize some methods to achieve, for the IOS platform, through Get the view of the system keyboard, then customize a view to cover the system keyboard view, and then add a personalized implementation.

FIG. 8 is a flowchart of a method for implementing a secure keyboard for fast payment according to an alternative embodiment of the present invention. As shown in FIG. 8, the steps of the process include:

Step S802: Start a security keyboard;

Step S804: password input processing;

Step S806: encrypting the password;

Step S808: password transmission;

Step S810: determining whether the password is correct; when the determination is yes, step S812 is performed, and if the determination is no, step S814 is performed;

Step S812: the payment is successful;

Step S814: The payment fails.

That is to say, the whole process of the above steps S802 to S814 is: starting the security keyboard, at this time, the customized security keyboard layout of the present invention is popped up, the operation is performed on the security keyboard, and the password is entered, because the keyboard of the security keyboard is popped each time. The layout of the content is different, so as to avoid the leakage of the input password. The background monitors according to the code of each button. When the Chinese digit is clicked, the background is judged according to the Arabic numeral, and then the system encrypts the password input by the user using the RSA method. And using the algorithm to encrypt the result, after the key and ciphertext are given on the java platform, the plaintext can be decrypted, and the encrypted ciphertext is transmitted to the server database for comparison, and the correctness of the password is determined. The direct payment fails to return. If the password is correct, jump to the payment success interface, prompting the user's payment operation to complete successfully.

FIG. 9 is a flowchart of an operation process inside a cryptographic processing module according to an alternative embodiment of the present invention. As shown in FIG. 9, the steps of the process include:

Step S902: input a password;

Step S904: encrypting the RSA;

Step S906: Output the encrypted password.

The detailed process of the process is as follows: the 1024-bit RSA algorithm is used for cryptographic processing. The public key and the private key are first generated. The user's password is encrypted into a ciphertext output according to the public key. When transmitted to the server, the server uses the private key and ciphertext. Decryption, if the result of the decryption is consistent with the result stored in the database, the password is entered correctly, otherwise the password is entered incorrectly.

In another embodiment, software is also provided for performing the technical solutions described in the above embodiments and preferred embodiments.

In another embodiment, a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.

Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be used universally. Implemented by computing devices, which may be centralized on a single computing device or distributed over a network of computing devices, optionally implemented in program code executable by the computing device, such that they may be The storage is performed by the computing device in a storage device, and in some cases, the steps shown or described may be performed in an order different than that herein, or they may be separately fabricated into individual integrated circuit modules, or Multiple modules or steps are made into a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above is only an alternative embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

In the virtual keyboard-based encryption process of the embodiment of the present invention, when the user initiates the virtual keyboard to perform information input, the layout of the virtual keyboard character information is randomly displayed on the interface of the terminal, that is, the keyboard character information displayed on the terminal. There is only one layout mode, and then the information input by the user is encrypted on the randomly displayed virtual keyboard character information layout. According to the embodiment, the user is more secure in online payment, and the online payment of the mobile client in the related technology is solved. Not safe enough.

Claims

A virtual keyboard based encryption method, comprising:

When the user initiates the virtual keyboard to perform information input, randomly display one of a plurality of preset virtual keyboard character information layouts;

The information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by a preset rule.
The method according to claim 1, wherein the character information comprises: alphanumeric information, symbol information, and function key information, and randomly displaying one of the plurality of preset virtual keyboard character information layouts comprises:

Displaying commonly used symbol information and the function key information in the symbol information on a specified position of the character information layout;

The alphanumeric information is randomly displayed on the character information layout.
The method of claim 2 wherein said digital information is Chinese digital information.
The method according to claim 1, wherein the encrypting the information input by the user on the randomly displayed virtual keyboard character information layout by using a preset rule comprises:

The information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by the RSA public key encryption algorithm.
The method according to claim 1, wherein after the information input by the user on the randomly displayed virtual keyboard character information layout is encrypted by a preset rule, the method further includes:

The encrypted information is sent to the third platform for verification.
A virtual keyboard based encryption device, comprising:

a display module, configured to randomly display one of a plurality of preset virtual keyboard character information layouts when the user initiates the virtual keyboard to perform information input;

The encryption module is configured to encrypt, by using a preset rule, information input by the user on the randomly displayed virtual keyboard character information layout.
The apparatus according to claim 6, wherein the character information comprises: alphanumeric information, symbol information, and function key information, and the display module comprises:

a first display unit, configured to display the commonly used symbol information and the function key information in the symbol information on a specified position of the character information layout;

And a second display unit configured to randomly display the alphanumeric information on the character information layout.
The apparatus of claim 7, wherein the digital information is Chinese digital information.
The apparatus according to claim 6, wherein

The encryption module is further configured to encrypt information input by the user on the randomly displayed virtual keyboard character information layout by using an RSA public key encryption algorithm.
The device according to claim 6, wherein after the information input by the user on the virtual keyboard character information layout that is randomly displayed is encrypted by a preset rule, the device further includes:

The sending module is configured to send the encrypted information to the third platform for verification.