Touch display device for safely inputting password information and password input method

Abstract

The invention relates to a touch display device for safely inputting password information and a password input method. The touch display device comprises a touch screen, a touch screen driving module, a display module, an on-screen display module and a microprocessor. The microprocessor is connected with the display module through the on-screen display module, and information of a coordinate position touched by a user is sent into the microprocessor by the touch screen through the touch screen driving module. When the user inputs a password, a password input interface image is generated by the microprocessor, the generated image is stacked on a video image output by a system through the on-screen display module, and then the stacked image is output to the display module to be displayed. Input information of the user is intercepted and captured by the microprocessor, and the input password is sent to the system after being encrypted by the microprocessor. Through the device and the method, it is avoided that sensitive information such as the password input by the user is acquired by malicious software operated on the system by intercepting and capturing user input, display output, system memory or file data and the like on a system bottom layer, and high safety is provided for electronic transaction and payment.

Description

technical field [0001] The invention relates to an information security technology, in particular to a touch display device and a password input method for securely inputting password information. Background technique [0002] With the popularity of portable computing devices with touch screens and smart operating systems loaded with Android, Windows, Linux, iOS, etc., the demand for electronic transactions and electronic payments on such devices is increasing day by day, for example: individual users use mobile phones or tablets to complete Online electronic transactions or payments; manufacturers of special financial equipment use Android and other smart operating systems to launch mobile POS products with touch screens on the market; customized mobile business terminals used by insurance salesmen and couriers, etc., need to complete business functions on the device , and the user payment function needs to be completed on the device. [0003] In the above usage scenarios,...

AI Technical Summary

Problems solved by technology

[0003] In the above usage scenarios, the existing equipment has such a security problem: if a malicious program obtains the highest authority of the operating system, it has the ability to intercept all user input information including touch screen operations, intercept images output by the system to the screen, And the ability to read the data stored in the memory and files of any program on the operating system, so on the existing equipment, if the program that realizes the electronic transaction or electronic payment function directly allows the user to enter the password through the virtual keyboard on the touch screen , and draw the dynamic display graphics required by the user on the screen according to the user input information, such as highlighting the pressed button, and storing the password entered by the user in the system memory or file in plain text, all of which are safe Hidden danger

[0008] There are two problems that this method cannot solve: first, the encrypted coordinate value must be restored to the original coordinate value in the program and translated into the key value and password plaintext, which will cause the password plaintext to appear in the memory, and the plaintext can be Second, if the application program redraws the screen according to the coordinate value to provide operation feedback to the user, such as highlighting the virtual button clicked by the user, the malicious program that obtains the highest system privilege can Obtain the password key value pressed by the user by intercepting the screen image and image recognition technology; if the application does not update the image display for security, the user's key operation fails to obtain visual feedback, which is a poor user experience

Images