Method for customizing interval combination password based on eavesdropping prevention

Abstract

The invention discloses an anti-eavesdropping-based self-defined interval combination password method, which specifically comprises the following steps of: recording a time interval of adjacent keys in a password input process of a user by adopting a sliding window mechanism, and storing the time interval as a rhythm interval sequence; in the password input process, random jitter and rhythm speed scaling are applied to the rhythm interval sequence to generate a disturbed rhythm sequence; constructing a basic camouflage event comprising a camouflage sound source and a volume parameter, and randomly inserting an interference camouflage event into the basic camouflage event; combining the basic camouflage events and the interference camouflage events into an event queue, and performing sorting and anti-congestion adjustment according to a time sequence to form an interruptible camouflage event queue; and based on the camouflage event queue, playing corresponding camouflage sound according to event triggering time so as to carry out acoustic masking on a real key pressing rhythm.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of password generation and security protection, in particular to a method for self-defined interval combination password based on anti-eavesdropping. BACKGROUND

[0002] The password setting with text password that we see in traditional real scene application is the most common authentication way now. But due to the limitation of text password, there are many natural defects, such as poor secrecy, easy to be stolen, password generation process is stolen, user password is generated, and password is too much to be forgotten and confused.

[0003] In most application scenarios, in order to increase the security of password, most applications require users to change password every certain period of time. Such requirement, although improves the security to some extent, increases the password maintenance cost of users and affects the user experience, because frequent password change is not conducive to users to remember their own password.

[0004] In order to further improve the secrecy of text password, some people have proposed two encryption, hardware intervention, SMS verification and other ways for text password in some existing technical applications to strengthen the password secrecy.

[0005] And like the reading way of people can reflect the physiological law of people, the password input way of each person also reflects the physiological law of a person to a great extent. SUMMARY

[0006] According to the defects of the above-mentioned prior art, the present application discloses a method for self-defined interval combination password based on anti-eavesdropping, which specifically comprises:

[0007] Record the time interval of adjacent keys in the process of inputting password, and store the time interval as rhythm interval sequence, the time interval of adjacent keys is realized by sliding window mechanism, specifically including: calculating the time difference between the current key and the last key, when the time difference is in the preset effective interval, it is inserted into the head of the rhythm interval sequence, when the length of the rhythm interval sequence exceeds the preset window size, the time interval at the end of the sequence is deleted;

[0008] In the input password process, random jitter and rhythm speed scaling are applied to the rhythm interval sequence to generate a disturbed rhythm sequence; based on the disturbed rhythm sequence, a basic disguise event including a disguised sound source and a volume parameter is constructed, and a disturbance disguise event is randomly inserted in the basic disguise event; the basic disguise event and the disturbance disguise event are combined into an event queue, which is sorted in time sequence and adjusted for congestion prevention to form an interruptable disguise event queue; based on the disguise event queue, the corresponding disguise sound is played according to the event trigger time to acoustically mask the real key rhythm.

[0009] Preferably, the time interval is stored as a rhythm interval sequence, and specifically further includes:

[0010] The first password, the second password, the third password and the last n-th password input by the user in sequence are received and saved;

[0011] The time point T1 of the release of the key corresponding to the first password, the time point T2 of the release of the key corresponding to the second password, the time point T3 of the release of the key corresponding to the third password, and the time point Tn of the release of the key corresponding to the last n-th password are received and saved;

[0012] The time points of the release of each key are extracted, and if the adjacent two dwell time points are less than 0.5 seconds, it is judged that the input of the two time points is the same password, and the password of the latter position is spliced to the tail of the password paragraph of the former password. The dwell time point difference value from T1 to T2, the dwell time point difference value from T2 to T3, and the dwell time point difference value from the last two positions TN-1 to TN are calculated in sequence to obtain the password paragraph S1, the password paragraph S2, the password paragraph S3, and the last password paragraph Sn.

[0013] The database records the first password ciphertext C1, the second password ciphertext C2, the third password ciphertext C3, and the last password ciphertext Cm in sequence.

[0014] Preferably, the password ciphertext is generated by symmetric encryption and asymmetric encryption, and specifically includes:

[0015] An IV ciphertext is generated based on the password paragraph by symmetric encryption, and the IV ciphertext is further encrypted by asymmetric encryption to generate an asymmetric IV ciphertext;

[0016] A communication data subject is generated based on the password paragraph, and the data includes: interference code, timestamp and business data;

[0017] The communication data subject is encrypted by symmetric encryption to generate a communication data subject ciphertext;

[0018] The integrated communication data is formatted as: APP_KEY + asymmetric IV ciphertext + main body ciphertext of communication data; the integrated data is used as the ciphertext data for database input.

[0019] Preferably, the system also includes a rhythm verification algorithm for validation when inputting more than once. This validation uses a prefix matching method; each time the user inputs a step, the system immediately verifies whether it matches the initial rhythm. If an incorrect input is detected, the system immediately clears the input to prevent the user from continuing to input along the wrong path. The specific steps of the rhythm verification algorithm include:

[0020] Check if the master password's rhythm string rhythmPassword.value begins with the current input string value;

[0021] If a match is found, set the correct flag.

[0022] If there is a mismatch, set an error flag, trigger an animation effect, and clear the current input.

[0023] Preferably, the random jitter is specifically a random factor within the range of ±J% superimposed on the key interval.

[0024] Preferably, the interference spoofing event is triggered at random intervals and inserted into the spoofing event queue with a preset probability.

[0025] Preferably, the preset probability is inserted into the spoofing event queue as a dynamic interference value, specifically including: within the time interval [0, T], the number of interference events inserted by the system is K, and the corresponding probability distribution is:

[0026]

[0027] Λ(t)=λ0·(1+αsin(ωt))+β·σ(Δr)+γ·N(0,1)

[0028] Where k is a natural number starting from 0, Λ(t) represents a multi-factor random factor, λ0 represents the baseline average interference rate, αsin(ωt) represents a sinusoidal periodic perturbation, σ(Δr) represents an activation function based on the user's most recent key press interval Δr, N(0,1) represents noise from a standard normal distribution, and α, β, and γ represent weight parameters.

[0029] Preferably, the spoofing event queue adopts a segmented generation and rolling renewal mechanism to continuously output spoofed sounds and support interruption at any time.

[0030] According to a second aspect of the present invention, a computer program product is provided, on which one or more computer programs are stored, which, when executed by a computer processor, implement the method described above.

[0031] The above-described one or more technical solutions in the embodiments of this application have at least one of the following technical effects:

[0032] This invention uses a sliding window mechanism to record the time intervals between adjacent keystrokes during user input, combined with perturbation techniques such as random jitter and speed scaling, effectively preventing the direct exposure of rhythmic features. Compared to traditional fixed-interval or simple masking methods, this invention can improve the randomness and unpredictability of rhythmic sequences while ensuring the reproducibility of rhythmic features, thereby enhancing the anti-inference capability of the password input process.

[0033] Furthermore, this invention constructs a basic spoofing event and randomly inserts interference events to form a spoofing event queue that has been sorted and adjusted to prevent congestion, giving the spoofed sound dynamic and multi-layered characteristics. This not only obscures the true rhythmic patterns in acoustic side-channel attacks but also ensures that the user experience is not significantly affected, thus achieving a balance between security and usability and significantly improving the overall protection capability of the password input process. Attached Figure Description

[0034] The accompanying drawings are included to provide a further understanding of the embodiments and are incorporated in and constitute a part of this specification. The drawings illustrate embodiments and, together with the description, serve to explain the principles of the invention. Other embodiments and many anticipated advantages of the embodiments will be readily recognized as they become better understood through reference to the following detailed description. Elements in the drawings are not necessarily to scale. The same reference numerals refer to corresponding similar parts.

[0035] Figure 1 A flowchart illustrating a method for a custom interval combination cipher based on anti-eavesdropping according to an embodiment of the present invention is shown.

[0036] Figure 2 A schematic diagram of a cryptographic encryption process according to an embodiment of the present invention is shown.

[0037] Figure 3 This is a schematic diagram of the structure of a computer system suitable for implementing the electronic devices of the present application embodiments. Detailed Implementation

[0038] The present application will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, only the parts relevant to the invention are shown in the accompanying drawings.

[0039] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0040] This invention, based on real-world observations, reveals that individuals generally exhibit specific physiological patterns when reading long strings of numbers or passwords. For instance, when reciting an 11-digit phone number, each person has their own interval habits for reading these 11 seemingly random numbers (e.g., 00000000000, 00000000000, 00000000000, etc.). Addressing this unique physiological pattern, this invention proposes a method that combines traditional text passwords with user-defined interval combinations based on individual physiological habits, effectively enhancing password security.

[0041] Research has found that the physiological patterns expressed by the input can be recorded and utilized as a physiological code to generate a biological code unique to each individual.

[0042] Therefore, the core feature of rhythmic ciphers is not the characters themselves, but the length of the intervals and the combination pattern.

[0043] Modern acoustic side-channel attacks often combine with deep learning, utilizing trained neural networks to classify or regress collected sound samples. This invention, during its research, discovered that when acoustic shielding is lacking during password creation, attackers can efficiently recover the user's input rhythm pattern in a short time, thereby bypassing password verification mechanisms.

[0044] Without background noise or disguised sounds, the rhythmic intervals of user input will be highly discernible, allowing attackers to accurately deduce the rhythmic structure of the password.

[0045] Therefore, this invention provides a method for using a custom interval combination cipher based on anti-eavesdropping, such as... Figure 1 As shown, the specific steps are as follows:

[0046] Record the time interval between adjacent keys during the user's password input process and store the time interval as a rhythm interval sequence. The time interval between adjacent keys is implemented using a sliding window mechanism, specifically including: calculating the time difference between the current key and the previous key; when the time difference is within a preset valid range, inserting it at the beginning of the rhythm interval sequence; when the length of the rhythm interval sequence exceeds the preset window size, deleting the time interval at the end of the sequence.

[0047] During the password input process, random jitter and rhythm speed scaling are applied to the rhythm interval sequence to generate a perturbed rhythm sequence. Based on the perturbed rhythm sequence, a basic masquerading event including a masquerading sound source and volume parameters is constructed, and interference masquerading events are randomly inserted into the basic masquerading events. The basic masquerading events and interference masquerading events are merged into an event queue, and sorted and adjusted for congestion prevention according to time order to form an interruptible masquerading event queue. Based on the masquerading event queue, the corresponding masquerading sound is played according to the event trigger time to acoustically mask the real key press rhythm.

[0048] The step of storing the time interval as a rhythmic interval sequence further includes:

[0049] Receive and save the first, second, third, and so on of the user's password, up to the last nth character.

[0050] Receive and save the time point T1 corresponding to the release of the first digit of the password, the time point T2 corresponding to the release of the second digit of the password, the time point T3 corresponding to the release of the third digit of the password, and so on, until the time point Tn corresponding to the release of the last digit of the password (nth digit).

[0051] Extract the release time of each key. If two adjacent pause times are less than 0.5 seconds, it is determined that the input at the two time points is the same password. The password of the following digit is appended to the end of each password segment of the preceding digit. The pause time difference between T1 and T2 is calculated in turn, and the pause time difference between T2 and T3 is calculated in turn, until the pause time difference between the last two digits TN-1 and TN is calculated, to obtain password segment S1, password segment S2, password segment S3, and so on until the last password segment Sn.

[0052] The database records the first ciphertext C1, the second ciphertext C2, the third ciphertext C3, and so on, up to the last ciphertext Cm.

[0053] The password is set and entered by the user according to the instructions and training method, such as "0000000000". The system receives this password. It records and extracts the user's active biometric password, generated from the permutations and combinations of the user-input training text and the interval features between adjacent text units. This user-defined interval combination password is stored in the corresponding user data in the server database.

[0054] The ciphertext is generated using symmetric and asymmetric encryption, such as... Figure 2 As shown, it specifically includes:

[0055] Based on the ciphertext segment, generate a symmetric encrypted IV ciphertext, and then perform asymmetric encryption on the IV ciphertext again to generate an asymmetric IV ciphertext.

[0056] The main body of communication data is generated based on the cipher segment, and the data includes: interference code, timestamp and business data;

[0057] The main body of the communication data is encrypted using symmetric cryptography to generate ciphertext of the main body of the communication data;

[0058] The integrated communication data is formatted as: APP_KEY + asymmetric IV ciphertext + main body ciphertext of communication data; the integrated data is used as the ciphertext data for database input.

[0059] The time in the data can be used to verify the timeliness of the data; expired data will not be accepted, making the data unplayable.

[0060] It generates two pairs of asymmetric encryption public and private keys. The data provider uses the other party's public key to encrypt the data, and the data receiver uses its own private key to decrypt the data. Each app can have its own independent key, making the data more secure.

[0061] Asymmetric encryption requires significant computational resources but offers high security; symmetric encryption, compared to asymmetric encryption, requires far fewer computational resources but is relatively less secure. This invention utilizes a combination of these two methods to encrypt data: asymmetric encryption simply encrypts the IV of symmetric encryption, and because its data volume is relatively small, the consumption of computational resources can be controlled; symmetric encryption encrypts the actual communication data, allowing for the encryption of relatively large amounts of data, and because the IV is dynamic, its security is enhanced.

[0062] The IV of symmetric encryption is dynamically generated, and each piece of data is different, which can ensure that the data is difficult to crack.

[0063] Based on the generation of the above-mentioned ciphertext, this invention also provides a corresponding method for storing rhythmic ciphers, specifically including:

[0064] The received plaintext password is a list of passwords segmented according to rhythm; the format is: [[segment 1 number, segment 1 password], [segment 2 number and segment 2 password], [segment n number, segment n password]], for example: [[2312,"ABC"], [115,"yyaab"], [2766,"14"], [344,"abc"]];

[0065] Upon receiving a new password (for registration and password modification), the system generates an equal number of high-strength asymmetric encryption keys based on the number of password segments. These keys are generated using a dedicated set of servers designed for scientific computing, which maintains high efficiency while producing highly secure and strong keys. The server set also employs a fault-tolerance mechanism: if a server is too busy to generate keys correctly, another server takes over the generation task until all keys are generated. This information is ultimately stored in the user's password asymmetric key field.

[0066] When the system receives a new password (registering or changing password), it generates an equal number of encryption salts as interference codes based on the number of password segments; this part will eventually be stored in the user's encryption salt field.

[0067] Next, a hash list of passwords is generated, and a hash value is generated for each password segment in turn. The calculation method is: HASH algorithm (password plaintext + segment number + encryption salt of the corresponding sequence of this password segment);

[0068] Click to generate the final ciphertext list, which in turn generates the final ciphertext from the password hash list. The calculation method is as follows: use an asymmetric encryption algorithm and the public key of the corresponding sequence of the password segments to encrypt the password hash.

[0069] Finally, the storage is completed. The final ciphertext list is generated into a ciphertext string using serialization and stored in the user's ciphertext field.

[0070] When performing password verification, the ciphertext is retrieved from the database, deserialized into a ciphertext list, and then the hash list of the password is decrypted using the private key of this segment in sequence. Finally, the hash list generated from the input password is compared one by one to verify the correctness of the password.

[0071] Furthermore, it also includes a rhythm verification algorithm for validation when inputting more than once. This validation uses a prefix matching method; each time the user inputs a step, the system immediately verifies whether it matches the initial rhythm. If an incorrect input is detected, it is immediately cleared to prevent the user from continuing to input along the wrong path. The specific steps of the rhythm verification algorithm include:

[0072] Check if the master password's rhythm string rhythmPassword.value begins with the current input string value;

[0073] If a match is found, set the correct flag.

[0074] If there is a mismatch, set an error flag, trigger an animation effect, and clear the current input.

[0075] Furthermore, random jitter is specifically achieved by adding a random factor within the range of ±J% to the key press interval. The range of J can be preset in advance according to the network environment.

[0076] Interference spoofing events are triggered at random intervals and inserted into the spoofing event queue with a preset probability.

[0077] The preset probability is inserted into the spoofed event queue in a dynamic interference value manner, specifically including: within the time interval [0,T], the number of interference events inserted by the system is K, and the corresponding probability distribution is:

[0078]

[0079] Λ(t)=λ0·(1+αsin(ωt))+β·σ(Δr)+γ·N(0,1)

[0080] Where k is a natural number starting from 0, Λ(t) represents a multi-factor random factor, λ0 represents the baseline average interference rate, αsin(ωt) represents a sinusoidal periodic perturbation, σ(Δr) represents an activation function based on the user's most recent key press interval Δr, N(0,1) represents noise from a standard normal distribution, and α, β, and γ represent weight parameters.

[0081] The probability distribution of the interference is determined by the key variable Λ(t), which is determined by multiple factors. λ0 represents the basic spoofing sound emission rate, the average interference intensity when there are no interference factors. λ0·αsin(ωt) superimposes periodic fluctuations on the baseline intensity, making the interference events unevenly distributed and presenting a rhythm, simulating the natural typing habits of humans. α controls the fluctuation amplitude, ω controls the fluctuation frequency, β·σ(Δr) simulates the user's real input rhythm, making the pseudo-sound closer to the input pattern. γ·N(0,1) introduces unpredictable random perturbations into the overall distribution, preventing the interference sound from being reproduced by attackers through statistical learning. During modeling, it is ensured that the units are consistent; for example, the unit used in the experiment of this invention is times / second.

[0082] Furthermore, the fake event queue adopts a segmented generation and rolling renewal mechanism to continuously output fake sounds and support interruption at any time.

[0083] By employing a segmented generation and rolling renewal mechanism, efficient resource utilization and low-latency response can be achieved. Segmented generation avoids one-time computational load, while rolling renewal dynamically updates content to ensure the naturalness and continuity of output. At the same time, it supports interruption at any time, improving system flexibility and real-time control capabilities, enhancing the concealment and anti-detection of the camouflage effect, and possessing the reliability of fault isolation and smooth recovery. Ultimately, it achieves highly realistic and scalable camouflage output while ensuring low resource consumption.

[0084] The following is for reference. Figure 3It shows a schematic diagram of the structure of a computer system 300 suitable for implementing electronic devices according to embodiments of the present application. Figure 3 The electronic device shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of this application.

[0085] like Figure 3 As shown, the computer system 300 includes a central processing unit (CPU) 301, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 302 or programs loaded from storage section 308 into random access memory (RAM) 303. The RAM 303 also stores various programs and data required for the operation of the system 300. The CPU 301, ROM 302, and RAM 303 are interconnected via a bus 304. An input / output (I / O) interface 305 is also connected to the bus 304.

[0086] The following components are connected to I / O interface 305: an input section 306 including a keyboard, mouse, etc.; an output section 307 including a liquid crystal display (LCD) and speakers, etc.; a storage section 308 including a hard disk, etc.; and a communication section 309 including a network interface card such as a LAN card and a modem, etc. The communication section 309 performs communication processing via a network such as the Internet. A drive 310 is also connected to I / O interface 305 as needed. A removable medium 311, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 310 as needed so that computer programs read from it can be installed into storage section 308 as needed.

[0087] Specifically, according to embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable storage medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 309, and / or installed from removable medium 311. When the computer program is executed by central processing unit (CPU) 301, it performs the functions defined in the methods of this application. It should be noted that the computer-readable storage medium of this application can be a computer-readable signal medium or a computer-readable storage medium or any combination thereof. The computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in connection with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium can also be any computer-readable storage medium other than a computer-readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. Program code contained on a computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0088] Computer program code for performing the operations of this application can be written in one or more programming languages ​​or a combination thereof. Programming languages ​​include object-oriented programming languages—such as Java, Smalltalk, and C++—as well as conventional procedural programming languages—such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0089] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0090] The modules described in the embodiments of this application can be implemented in software or in hardware.

[0091] In another aspect, this application also provides a computer-readable storage medium, which may be included in the electronic device described in the above embodiments; or it may exist independently and not assembled into the electronic device. The aforementioned computer-readable storage medium carries one or more programs. When the electronic device executes one or more of these programs, the electronic device causes the following: Records the time intervals between adjacent key presses during password input and stores these time intervals as a rhythm interval sequence. The time intervals between adjacent key presses are implemented using a sliding window mechanism, specifically including: calculating the time difference between the current key press and the previous key press; inserting the time difference at the beginning of the rhythm interval sequence when it falls within a preset valid range; deleting the time intervals at the end of the sequence when the length of the rhythm interval sequence exceeds a preset window size; applying random jitter and rhythm speed scaling to the rhythm interval sequence during password input to generate a perturbed rhythm sequence; constructing a basic masquerading event including a masquerading sound source and volume parameters based on the perturbed rhythm sequence, and randomly inserting interference masquerading events into the basic masquerading events; merging the basic masquerading events and interference masquerading events into an event queue, and sorting and adjusting for congestion prevention according to time order to form an interruptible masquerading event queue; and playing the corresponding masquerading sound according to the event trigger time based on the masquerading event queue to acoustically mask the real key press rhythm.

[0092] The above description is merely a preferred embodiment of this application and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of the invention involved in this application is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described inventive concept. For example, technical solutions formed by substituting the above features with (but not limited to) technical features with similar functions disclosed in this application.

Claims

1. A method for a custom interval combination cipher based on anti-eavesdropping and rhythm encryption, characterized in that, include: Record the time interval between adjacent key presses during password input and store the time interval as a rhythm interval sequence; During the input password process, random jitter and rhythm speed scaling are applied to the rhythm interval sequence to generate a perturbed rhythm sequence; based on the perturbed rhythm sequence, a basic spoofing event including a spoofed sound source and volume parameters is constructed, and interference spoofing events are randomly inserted into the basic spoofing event; The basic masquerading events and interference masquerading events are merged into an event queue, and sorted and adjusted according to time order to form an interruptible masquerading event queue. Based on the masquerading event queue, the corresponding masquerading sound is played according to the event trigger time to acoustically mask the real key press rhythm.

2. The method according to claim 1, characterized in that, The time interval between adjacent keys is implemented using a sliding window mechanism, which specifically includes: calculating the time difference between the current key and the previous key; when the time difference is within a preset valid range, inserting it at the beginning of the rhythm interval sequence; and when the length of the rhythm interval sequence exceeds the preset window size, deleting the time interval at the end of the sequence.

3. The method according to claim 1, characterized in that, The step of storing the time interval as a rhythmic interval sequence further includes: Receive and save the first, second, third, and so on of the user's password, up to the last nth character. Receive and save the time point T1 corresponding to the release of the first digit of the password, the time point T2 corresponding to the release of the second digit of the password, the time point T3 corresponding to the release of the third digit of the password, and so on, until the time point Tn corresponding to the release of the last digit of the password (nth digit). Extract the release time of each key. If two adjacent pause times are less than 0.5 seconds, it is determined that the input at the two time points is the same password. The password of the following digit is appended to the end of each password segment of the preceding digit. The pause time difference between T1 and T2 is calculated in turn, and the pause time difference between T2 and T3 is calculated in turn, until the pause time difference between the last two digits TN-1 and TN is calculated, to obtain password segment S1, password segment S2, password segment S3, and so on until the last password segment Sn. The database records the first ciphertext C1, the second ciphertext C2, the third ciphertext C3, and so on, up to the last ciphertext Cm.

4. The method according to claim 3, characterized in that, The ciphertext is generated using symmetric and asymmetric encryption, specifically including: Based on the ciphertext segment, generate a symmetric encrypted IV ciphertext, and then perform asymmetric encryption on the IV ciphertext again to generate an asymmetric IV ciphertext. The main body of communication data is generated based on the cipher segment, and the data includes: interference code, timestamp and business data; The main body of the communication data is encrypted using symmetric cryptography to generate ciphertext of the main body of the communication data; The integrated communication data is formatted as: APP_KEY + asymmetric IV ciphertext + main body ciphertext of communication data; the integrated data is used as the ciphertext data for database input.

5. The method according to claim 1, characterized in that, It also includes a rhythm verification algorithm for validation when inputting more than once. This validation uses a prefix matching method; with each step the user inputs, the system immediately verifies whether it matches the initial rhythm. If an incorrect input is detected, it is immediately cleared to prevent the user from continuing to input along the wrong path. The specific steps of the rhythm verification algorithm include: Check if the master password's rhythm string rhythmPassword.value begins with the current input string value; If a match is found, set the correct flag. If there is a mismatch, set an error flag, trigger an animation effect, and clear the current input.

6. The method according to claim 1, characterized in that, The random jitter is specifically achieved by adding a random factor within the range of ±J% to the key press interval.

7. The method according to claim 1, characterized in that, The interference spoofing events are triggered at random intervals and inserted into the spoofing event queue with a preset probability.

8. The method according to claim 7, characterized in that, The preset probability is inserted into the spoofed event queue as a dynamic interference value. Specifically, within the time interval [0, T], the system inserts K interference events, with the corresponding probability distribution as follows: Λ(t)=λ0·(1+αsin(ωt))+β·σ(Δr)+γ·N(0,1) Where k is a natural number starting from 0, Λ(t) represents a multi-factor random factor, λ0 represents the baseline average interference rate, αsin(ωt) represents a sinusoidal periodic perturbation, σ(Δr) represents an activation function based on the user's most recent key press interval Δr, N(0,1) represents noise from a standard normal distribution, and α, β, and γ represent weight parameters.

9. The method according to claim 1, characterized in that, The spoofing event queue adopts a segmented generation and rolling renewal mechanism to continuously output spoofed sounds and supports interruption at any time.

10. A computer program product, characterized in that, It stores a computer program that, when executed by a processor, implements the method as described in any one of claims 1-9.

Images