Authentication method, system and equipment based on keyboard keystroke mode and storage medium

Abstract

The invention provides an authentication method, system and device based on a keyboard keystroke mode and a storage medium, the system comprises a collection module, a first judgment module, a sample establishment module, a calculation module and a second judgment module, the collection module is used for collecting keyboard keystroke information of a user login account; the first judgment module is used for obtaining an input password according to the keyboard keystroke information, and judging that authentication fails when the password is not matched with a preset password; the sample establishing module is used for obtaining a keyboard keystroke mode sample according to the keyboard keystroke information and a composition mode of a preset password; the calculation module is used for calculating a relative disorder degree based on the keyboard keystroke mode sample and the keyboard keystroke mode reference sample; the second judgment module is used for judging whether authentication succeeds or not according to the relative disorder degree and a preset authentication disorder degree threshold value. Two-factor identity authentication is carried out on the user through the password and the keyboard keystroke mode, the safety of the system can be enhanced, the user experience is improved, and the requirement for hardware equipment is low.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to an authentication method, system, device and storage medium based on a keyboard keystroke mode. Background Art

[0002] In recent years, with the increasing attention paid to network information security, the authentication of user identities in various application systems has become increasingly strict. In order to improve security, many systems have put forward increasingly higher complexity requirements for user passwords: for example, passwords must be composed of uppercase and lowercase letters, numbers, special symbols and other elements, and must reach a certain length; at the same time, users are required to change their passwords every once in a while, and the passwords cannot be repeated with previously set passwords.

[0003] Strict password requirements certainly improve the security of the system and greatly reduce the risk of illegal users attacking the system due to password leakage. However, changing complex passwords too frequently can also cause trouble for users, that is, users have to set passwords that they are not familiar with, which leads to forgetting the passwords they set when logging in, or even having to reset the password to set a new password to log in to the system, which is very detrimental to the user experience. Summary of the invention

[0004] In order to solve the above technical problems, the present invention provides an authentication method, system, device and storage medium based on keyboard keystroke mode, which performs dual-factor identity authentication on users through passwords and keyboard keystroke modes, can enhance the security of the system, reduce the burden on users, improve user experience, and have low requirements for hardware devices.

[0005] The technical solution adopted by the present invention is as follows:

[0006] A keyboard keystroke pattern-based authentication system comprises: a collection module, a first judgment module, a sample establishment module, a calculation module, and a second judgment module, wherein the collection module is used to collect keyboard keystroke information of a user logging into an account; the first judgment module is used to obtain a password input by the user based on the keyboard keystroke information collected by the collection module, and judge that the authentication fails when the password input by the user does not match the preset password of the account; the sample establishment module is used to obtain a keyboard keystroke pattern sample of the password input by the user based on the keyboard keystroke information collected by the collection module and the composition mode of the preset password; the calculation module is used to calculate the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample based on the keyboard keystroke pattern sample and the keyboard keystroke pattern benchmark sample corresponding to the preset password of the account when the password input by the user matches the preset password of the account; the second judgment module is used to judge whether the authentication is successful based on the relative disorder and a preset authentication disorder threshold.

[0007] In addition, the authentication system based on keyboard keystroke pattern proposed in the present invention may also have the following additional technical features:

[0008] According to one embodiment of the present invention, the preset password is composed of multiple ordered character sets, the number of elements in each character set is equal, the keyboard keystroke pattern benchmark sample includes the initial sequence number and tapping duration of each character set, and the keyboard keystroke information of the user login account collected by the collection module includes the user's input key value and the interval between two adjacent keystrokes typed continuously.

[0009] According to an embodiment of the present invention, the number of the keyboard keystroke pattern benchmark samples is S, and the calculation formula of the relative disorder is:

[0010]

[0011] Wherein, md(U,X) is the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern reference sample, S i is the i-th keyboard keystroke pattern benchmark sample, X is the keyboard keystroke pattern sample, d(S i ,X) is the normalized disorder of the keyboard keystroke pattern sample and the i-th keyboard keystroke pattern benchmark sample.

[0012] According to one embodiment of the present invention, the calculation formula of the normalized disorder is:

[0013]

[0014] Where N is the number of characters in the password, P ijRepresents the distance between the duration sequence number of the character set with initial sequence number j in the keyboard keystroke pattern sample and the duration sequence number of the corresponding character set in the i-th keyboard keystroke pattern benchmark sample, wherein the duration sequence number of the character set is determined according to the tapping duration of the character set, and N is an integer greater than 2.

[0015] According to one embodiment of the present invention, it further includes: an authentication configuration module, wherein the authentication configuration module is used to adjust the configuration of the password rules and the configuration of the preset disorder threshold.

[0016] According to one embodiment of the present invention, it also includes: a registration module and a benchmark establishment module, wherein the registration module is used to record the account registered by the user and the keyboard keystroke information input when registering the account; the benchmark establishment module is used to obtain the preset password of the account and the keyboard keystroke pattern benchmark sample of the account based on the keyboard keystroke information corresponding to the account recorded by the registration module.

[0017] According to one embodiment of the present invention, there are M groups of preset passwords for the account, and the number of keyboard keystroke pattern benchmark samples corresponding to each group of the preset passwords is greater than or equal to 2, wherein M is an integer greater than or equal to 2; the first judgment module determines that the authentication fails when the password input by the user does not match all the preset passwords of the account.

[0018] In addition, to achieve the above purpose, the present invention also proposes an authentication method based on keyboard keystroke pattern.

[0019] A keyboard keystroke pattern-based authentication method comprises the following steps: collecting keyboard keystroke information of a user logging into an account; obtaining a password input by the user based on the keyboard keystroke information collected by the collection module, and judging that the authentication fails when the password input by the user does not match the preset password of the account; obtaining a keyboard keystroke pattern sample of the password input by the user based on the composition of the keyboard keystroke information collected by the collection module and the preset password; when the password input by the user matches the preset password of the account, calculating the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample based on the keyboard keystroke pattern sample and the keyboard keystroke pattern benchmark sample corresponding to the preset password of the account; and judging whether the authentication is successful based on the relative disorder and a preset authentication disorder threshold.

[0020] In addition, to achieve the above-mentioned purpose, the present invention also proposes an authentication device based on keyboard keystroke pattern.

[0021] An authentication device based on keyboard keystroke mode includes: a memory, a processor, and an authentication program stored in the memory and executable on the processor. When the authentication program is executed by the processor, the steps of the authentication method based on keyboard keystroke mode described above are implemented.

[0022] In addition, to achieve the above-mentioned purpose, the present invention also provides a storage medium.

[0023] A storage medium stores an authentication program, which, when executed by a processor, implements the steps of the authentication method based on keyboard keystroke mode as described above.

[0024] Beneficial effects of the present invention:

[0025] The keyboard keystroke pattern-based authentication system of the present invention performs dual-factor identity authentication on users through passwords and keyboard keystroke patterns, thereby enhancing the security of the system; it eliminates the need for users to regularly maintain, update, or even reset increasingly complex and unfamiliar system passwords, thereby reducing the user burden and improving the user experience; and it does not require additional biometric recognition hardware, thereby lowering the requirements for hardware devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A block diagram of an authentication system based on a keyboard keystroke pattern according to an embodiment of the present invention;

[0027] Figure 2 It is a schematic diagram of the distance of each character set of the keyboard keystroke pattern sample S2 relative to the keyboard keystroke pattern sample S1 according to a specific embodiment of the present invention. In the figure, the keyboard keystroke pattern samples S1 and S2 are rearranged according to the tapping duration of the character set respectively;

[0028] Figure 3 The figure is a flow chart of an authentication method based on keyboard keystroke pattern according to an embodiment of the present invention. DETAILED DESCRIPTION

[0029] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] In order to improve the security of system login authentication, biometric identification methods can also be added, such as fingerprint recognition, face recognition, voiceprint recognition, etc. The principle behind them is based on a person's unique, non-imitable and non-forged characteristics. People's typing rhythm on the keyboard is actually a unique biometric feature. Therefore, the present invention proposes a new authentication idea: dual-factor identity authentication of users through passwords and keyboard keystroke patterns, thereby achieving a balance between the security of system authentication and user experience friendliness.

[0031] like Figure 1 As shown, the authentication system based on keyboard keystroke pattern of the embodiment of the present invention includes: a collection module 10, a first judgment module 20, a sample establishment module 30, a calculation module 40 and a second judgment module 50, wherein the collection module 10 is used to collect keyboard keystroke information of the user logging into the account; the first judgment module 20 is used to obtain the password input by the user according to the keyboard keystroke information collected by the collection module 10, and when the password input by the user does not match the preset password of the account, it is judged that the authentication fails; the sample establishment module 30 is used to obtain the keyboard keystroke pattern sample of the password input by the user according to the keyboard keystroke information collected by the collection module 10 and the composition mode of the preset password; the calculation module 40 is used to calculate the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample based on the keyboard keystroke pattern sample and the keyboard keystroke pattern benchmark sample corresponding to the preset password of the account when the password input by the user matches the preset password of the account; the second judgment module 50 is used to judge whether the authentication is successful according to the relative disorder and the preset authentication disorder threshold.

[0032] It can be understood that the authentication system based on the keyboard keystroke mode in the embodiment of the present invention is more secure than the traditional password verification mode. In the traditional password verification mode, even if a very complex password is set, it may be leaked for various reasons, thereby causing security risks. The present invention can identify illegal users through the keyboard keystroke mode as a line of defense even if the attacker obtains the user's password information, thereby enhancing the security of the system; the present invention allows users to have sufficient security guarantees without the need to regularly maintain, update or even reset increasingly complex and unfamiliar system passwords, thereby reducing the user's burden and improving the user experience; other existing biometric identification and authentication systems, such as face recognition, fingerprint recognition, voiceprint recognition, etc., all require specific equipment to read user biometrics (such as cameras, microphones, fingerprint reading devices), while the biometric reading based on the keyboard keystroke mode of the present invention only requires the most basic input device, the keyboard, and no additional biometric identification hardware is required, and the hardware requirements are relatively low.

[0033] Specifically, the preset password may be composed of multiple ordered character sets, the number of elements in each character set is equal, the keyboard keystroke pattern benchmark sample may include the initial serial number and tapping duration of each character set, and the keyboard keystroke information of the user login account collected by the collection module 10 may include the user's input key value and the interval between two consecutive keystrokes, so that the sample establishment module 30 can obtain the keyboard keystroke pattern sample of the password entered by the user based on the keyboard keystroke information and the composition of the preset password.

[0034] It should be noted that there are many ways to analyze the keyboard keystroke pattern, the most common of which are two-key combination and three-key combination. The two-key combination records the time between the first key being pressed and the second key being pressed, while the three-key combination records the time between the first key being pressed and the third key being pressed. When the sample establishment module 30 establishes the keyboard keystroke pattern sample, the number of elements in the character set can be 2, 3, etc., which is not limited in this embodiment.

[0035] The following is an example of the three-key combination:

[0036] If the password entered by the user is the eight letters "password", then the input key values ​​collected by the collection module 10 are "p, a, s, s, w, o, r, d"; the first judgment module 20 can obtain the password entered by the user as "password" based on the input key values. When the password entered by the user does not match the preset password of the account, it is judged that the authentication has failed.

[0037] Assume that the keyboard keystroke pattern samples obtained by the sample establishment module 30 according to the keyboard keystroke information collected by the collection module 10 are shown in Table 1 below:

[0038] Table 1

[0039] Character Set pas ass ssw swo wor ord Initial serial number 1 2 3 4 5 6 Tap duration 215ms 230ms 278ms 203ms 315ms 241ms

[0040] The calculation module 40 can reorder the character sets according to the tapping duration of all character sets in the keyboard keystroke pattern sample to obtain the duration sequence number of each character set. Similarly, the duration sequence number of each character set in the keyboard keystroke pattern benchmark sample can also be obtained.

[0041] Considering that people's keyboard typing patterns for the same password should be consistent, it is possible to determine whether the user who enters the password is the user who registered the account based on the degree of deviation (relative disorder) of the time length sequence numbers of all character sets in the keyboard typing pattern sample and each character set in the keyboard typing pattern benchmark sample.

[0042] Assume that there are two sets of keyboard keystroke pattern samples S1 and S2 as shown in Tables 2 and 3 below respectively:

[0043] Table 2

[0044] Character Set pas ssw ord ass swo wor Duration serial number 1 2 3 4 5 6 Initial serial number 1 3 6 2 4 5 Tap duration 201ms 212ms 223ms 234ms 245ms 256ms

[0045] Table 3

[0046] Character Set ord ssw pas ass wor swo Duration serial number 1 2 3 4 5 6 Initial serial number 6 3 1 2 5 4 Tap duration 188ms 191ms 203ms 242ms 321ms 345ms

[0047] Then the disorder of S2 relative to S1 can be determined by calculating the sum of the distances between the duration sequence number of each character set in S2 and the duration sequence number of the same character set in S1. When the order of S2 and S1 is exactly the same, the disorder is 0; when the order of S2 and S1 is completely opposite, the disorder is the largest, which is 18. In this case, if Figure 2 As shown, it can be calculated that the disorder degree of S2 relative to S1 is: (2+0+2+0+1+1)=6.

[0048] Generally speaking, the maximum disorder dmax is calculated as:

[0049]

[0050] Where N is the number of characters in the password.

[0051] For a sample containing a set of N characters, its disorder can be normalized by dividing its disorder by the maximum disorder value of the N-element array. This allows the disorder of arrays of different sizes to be compared. After this normalization, the disorder between any two samples will be between 0 (if the two samples are in order) and 1 (if the two samples are in reverse order).

[0052] Specifically, the calculation formula of normalized disorder is:

[0053]

[0054] Where N is the number of characters in the password, P ij Represents the distance between the duration sequence number of the character set with initial sequence number j in the keyboard keystroke pattern sample and the duration sequence number of the corresponding character set in the i-th keyboard keystroke pattern benchmark sample, wherein the duration sequence number of the character set is determined according to the tapping duration of the character set, and N is an integer greater than 2.

[0055] by Figure 2 For example, the disorder degree of S2 after normalization relative to S1 is:

[0056] (2+0+2+0+1+1) / (6^(2) / 2)=0.3333.

[0057] In one embodiment of the present invention, there are S keyboard keystroke pattern benchmark samples, and the relative disorder can be calculated based on the normalized disorder of the keyboard keystroke pattern samples relative to the keyboard keystroke pattern benchmark samples. The calculation formula of the relative disorder is:

[0058]

[0059] Among them, md(U,X) is the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample, S i is the i-th keyboard keystroke pattern benchmark sample, X is the keyboard keystroke pattern sample, d(S i , X) is the normalized disorder of the keyboard keystroke pattern sample and the i-th keyboard keystroke pattern benchmark sample. To improve the accuracy of authentication, the keyboard keystroke pattern benchmark samples can be 3 or more.

[0060] It should be noted that the relative disorder can be the average value of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern benchmark samples, or it can be the maximum value, minimum value, etc. of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern benchmark samples, and this embodiment does not limit this.

[0061] When the relative disorder is the average value of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern reference samples, the second judgment module 50 may judge that the authentication is successful when the relative disorder is less than or equal to a preset disorder threshold.

[0062] In one embodiment of the present invention, the authentication system may further include an authentication configuration module for adjusting the configuration of password rules and the configuration of preset disorder thresholds, so that the administrator can configure the password rules and preset disorder thresholds according to actual needs, wherein the preset disorder threshold interval is 0 to 1, and the closer to 0, the higher the system's requirements for the consistency between the keystroke rhythm of the user when entering the password and the keyboard keystroke pattern benchmark sample saved by the system. It can be understood that the more complex the password rules are and the lower the preset disorder threshold is set, the higher the security of the system, and at the same time, the higher the probability of the user being rejected due to improper input. On the contrary, the simpler the password rules are and the higher the preset disorder threshold is set, the higher the keystroke freedom of the user when entering the password, but the security of the system will also decrease accordingly.

[0063] In one embodiment of the present invention, the authentication system may further include a registration module and a benchmark establishment module, wherein the registration module is used to record the account registered by the user and the keyboard keystroke information entered when registering the account; the benchmark establishment module is used to obtain the preset password of the account and the keyboard keystroke pattern benchmark sample of the account according to the keyboard keystroke information corresponding to the account recorded by the registration module. When the user registers an account, the registration module can record the keyboard keystroke information when the user repeatedly enters the password, so that the benchmark establishment module can obtain multiple sets of keyboard keystroke pattern benchmark samples, thereby improving the accuracy of the sample.

[0064] In one embodiment of the present invention, the account has M groups of preset passwords, and the number of keyboard keystroke pattern benchmark samples corresponding to each group of preset passwords is greater than or equal to 2, where M is an integer greater than or equal to 2; the first judgment module 20 determines that the authentication fails when the password entered by the user does not match all the preset passwords of the account.

[0065] It is understandable that since each set of preset passwords has a corresponding keyboard keystroke pattern benchmark sample, users do not need to frequently update or create various complex passwords. Instead, they only need to enter one of their commonly used sets of preset passwords to log in to the system, thereby achieving a good balance between the system's account security and user-friendly experience.

[0066] In one embodiment of the present invention, the authentication system can be applied to various intelligent terminals such as PC, laptop, tablet, and mobile phone. The registration module can record the keyboard keystroke information corresponding to the account on the intelligent terminal according to the intelligent terminal used by the user to register the account. When the user tries to log in on other intelligent terminals for the first time, the first judgment module 20 can prompt the user to use other methods for authentication (such as SMS verification code, etc.) when the password entered by the user matches the preset password of the account. After the user authentication is successful, the registration module can further record the keyboard keystroke information corresponding to the account on the current device according to the user's input.

[0067] According to the authentication system based on keyboard keystroke pattern in the embodiment of the present invention, dual-factor identity authentication is performed on users through passwords and keyboard keystroke patterns, thereby enhancing the security of the system; users no longer need to regularly maintain, update, or even reset increasingly complex and unfamiliar system passwords, thereby reducing the user burden and improving the user experience; compared with other biometric identification and authentication systems, there is no need to set up additional biometric identification hardware, and the requirements for hardware equipment are relatively low.

[0068] In addition, to achieve the above purpose, the present invention also proposes an authentication method based on keyboard keystroke pattern.

[0069] like Figure 3As shown, the authentication method based on keyboard keystroke mode of an embodiment of the present invention includes the following steps:

[0070] S1, collect the keyboard keystroke information of the user's login account.

[0071] S2, according to the keyboard keystroke information collected by the collection module, the password input by the user is obtained. When the password input by the user does not match the preset password of the account, it is determined that the authentication fails; when the password input by the user matches the preset password of the account, step S3 can be continued. It can be understood that when it is determined that the authentication fails in step S2, the subsequent steps may not be executed.

[0072] In one embodiment of the present invention, the account has M groups of preset passwords, and the number of keyboard keystroke pattern benchmark samples corresponding to each group of preset passwords is greater than or equal to 2, where M is an integer greater than or equal to 2; when the password entered by the user does not match all the preset passwords of the account, it is judged that the authentication has failed.

[0073] It is understandable that since each set of preset passwords has a corresponding keyboard keystroke pattern benchmark sample, users do not need to frequently update or create various complex passwords. Instead, they only need to enter one of their commonly used sets of preset passwords to log in to the system, thereby achieving a good balance between the system's account security and user-friendly experience.

[0074] S3, obtaining a keyboard keystroke pattern sample of the password input by the user according to the keyboard keystroke information collected by the collection module and the composition of the preset password.

[0075] Specifically, the preset password may be composed of multiple ordered character sets, the number of elements in each character set is equal, the keyboard keystroke pattern benchmark sample may include the initial serial number and tapping duration of each character set, and the keyboard keystroke information of the user login account collected by the collection module may include the user's input key value and the interval between two adjacent keystrokes typed continuously, so that the sample establishment module can obtain the keyboard keystroke pattern sample of the password entered by the user based on the keyboard keystroke information and the composition of the preset password.

[0076] It should be noted that there are many ways to analyze the keyboard keystroke pattern, the most common of which are two-key combination and three-key combination. The two-key combination records the time between the first key being pressed and the second key being pressed, while the three-key combination records the time between the first key being pressed and the third key being pressed. When the sample establishment module establishes the keyboard keystroke pattern sample, the number of elements in the character set can be 2, 3, etc., and this embodiment does not limit this.

[0077] S4, when the password input by the user matches the preset password of the account, based on the keyboard keystroke pattern sample and the keyboard keystroke pattern benchmark sample corresponding to the preset password of the account, calculate the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample.

[0078] Specifically, the character sets can be reordered according to the duration of the tapping of all character sets in the keyboard keystroke pattern sample to obtain the duration serial number of each character set. Similarly, the duration serial number of each character set in the keyboard keystroke pattern benchmark sample can also be obtained. Considering that people's keyboard keystroke patterns for the same password should remain consistent, it is possible to determine whether the user who enters the password is the user who registered the account based on the degree of deviation (relative disorder) between the duration serial numbers of all character sets in the keyboard keystroke pattern sample and each character set in the keyboard keystroke pattern benchmark sample.

[0079] In one embodiment of the present invention, there are S keyboard keystroke pattern benchmark samples, and the relative disorder can be calculated based on the normalized disorder of the keyboard keystroke pattern samples relative to the keyboard keystroke pattern benchmark samples. The calculation formula of the relative disorder is:

[0080]

[0081] Among them, md(U,X) is the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample, S i is the i-th keyboard keystroke pattern benchmark sample, X is the keyboard keystroke pattern sample, d(S i , X) is the normalized disorder of the keyboard keystroke pattern sample and the i-th keyboard keystroke pattern benchmark sample. To improve the accuracy of authentication, the keyboard keystroke pattern benchmark samples can be 3 or more.

[0082] Among them, the calculation formula of normalized disorder is:

[0083]

[0084] Where N is the number of characters in the password, P ij Represents the distance between the duration sequence number of the character set with initial sequence number j in the keyboard keystroke pattern sample and the duration sequence number of the corresponding character set in the i-th keyboard keystroke pattern benchmark sample, wherein the duration sequence number of the character set is determined according to the tapping duration of the character set, and N is an integer greater than 2.

[0085] It should be noted that the relative disorder can be the average value of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern benchmark samples, or it can be the maximum value, minimum value, etc. of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern benchmark samples, and this embodiment does not limit this.

[0086] S5, judging whether the authentication is successful according to the relative disorder degree and the preset authentication disorder degree threshold.

[0087] When the relative disorder is the average value of the normalized disorder of the keyboard keystroke pattern sample relative to all keyboard keystroke pattern benchmark samples, the authentication is judged to be successful when the relative disorder is less than or equal to the preset disorder threshold. The administrator can configure the password rules and the preset disorder threshold according to actual needs, where the preset disorder threshold ranges from 0 to 1. The closer to 0, the higher the system's requirements for the consistency between the user's keystroke rhythm when entering the password and the keyboard keystroke pattern benchmark sample saved by the system.

[0088] It is understandable that the more complex the password rules are and the lower the preset disorder threshold is, the higher the security of the system is, but at the same time, the higher the probability that the user will be rejected due to improper input. Conversely, the simpler the password rules are and the higher the preset disorder threshold is, the higher the keystroke freedom of the user when entering the password is, but the security of the system will also be reduced.

[0089] According to the authentication method based on keyboard keystroke pattern in the embodiment of the present invention, dual-factor identity authentication is performed on users through passwords and keyboard keystroke patterns, thereby enhancing the security of the system; users no longer need to regularly maintain, update, or even reset increasingly complex and unfamiliar system passwords, thereby reducing the user burden and improving the user experience; compared with other biometric identification and authentication systems, there is no need to set up additional biometric identification hardware, and the requirements for hardware equipment are relatively low.

[0090] Based on the authentication method based on keyboard keystroke pattern of the above embodiment, the present invention also proposes an authentication device based on keyboard keystroke pattern.

[0091] The keyboard keystroke mode-based authentication device of an embodiment of the present invention comprises: a memory, a processor, and an authentication program stored in the memory and executable on the processor. When the authentication program is executed by the processor, the steps of the keyboard keystroke mode-based authentication method described above are implemented.

[0092] The authentication device of the embodiment of the present invention also has the above-mentioned beneficial effects because the authentication program implements the steps of the authentication method based on the keyboard keystroke pattern as described above when executed by the processor.

[0093] Based on the authentication method based on keyboard keystroke pattern in the above embodiment, the present invention further proposes a storage medium.

[0094] The storage medium of the embodiment of the present invention stores an authentication program, and when the authentication program is executed by the processor, the steps of the authentication method based on the keyboard keystroke pattern as described above are implemented.

[0095] The storage medium of the embodiment of the present invention also has the above-mentioned beneficial effects because the authentication program implements the steps of the authentication method based on the keyboard keystroke pattern as described above when the authentication program is executed by the processor.

[0096] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. "Multiple" means two or more, unless otherwise clearly and specifically defined.

[0097] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0098] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.

[0099] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a specific logical function or process, and the scope of the preferred embodiments of the present invention includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by those skilled in the art to which the embodiments of the present invention belong.

[0100] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic devices), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0101] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0102] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0103] In addition, each functional unit in each embodiment of the present invention may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0104] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. An authentication system based on keyboard keystroke pattern, characterized in that: include: A collection module, which is used to collect keyboard keystroke information of a user logging into an account; a first judgment module, the first judgment module being used to obtain the password input by the user according to the keyboard keystroke information collected by the collection module, and to judge that the authentication fails when the password input by the user does not match the preset password of the account; A sample establishment module, the sample establishment module is used to obtain a keyboard keystroke pattern sample of the password input by the user according to the keyboard keystroke information collected by the collection module and the composition mode of the preset password; a calculation module, configured to calculate a relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern reference sample based on the keyboard keystroke pattern sample and a keyboard keystroke pattern reference sample corresponding to the preset password of the account when the password input by the user matches the preset password of the account; The second judgment module is used to judge whether the authentication is successful according to the relative disorder degree and a preset authentication disorder degree threshold.

2. The authentication system according to claim 1, characterized in that: The preset password is composed of multiple ordered character sets, the number of elements in each character set is equal, the keyboard keystroke pattern benchmark sample includes the initial sequence number and tapping duration of each character set, and the keyboard keystroke information of the user login account collected by the collection module includes the user's input key value and the interval between two adjacent keystrokes typed continuously.

3. The authentication system according to claim 2, characterized in that: The number of the keyboard keystroke pattern benchmark samples is S, and the calculation formula of the relative disorder is: Wherein, md(U,X) is the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern reference sample, S i is the i-th keyboard keystroke pattern benchmark sample, X is the keyboard keystroke pattern sample, d(S i ,X) is the normalized disorder of the keyboard keystroke pattern sample and the i-th keyboard keystroke pattern benchmark sample.

4. The authentication system according to claim 3, characterized in that: The calculation formula of the normalized disorder is: Where N is the number of characters in the password, P ij Represents the distance between the duration sequence number of the character set with initial sequence number j in the keyboard keystroke pattern sample and the duration sequence number of the corresponding character set in the i-th keyboard keystroke pattern benchmark sample, wherein the duration sequence number of the character set is determined according to the tapping duration of the character set, and N is an integer greater than 2.

5. The authentication system according to claim 1, characterized in that: Also includes: An authentication configuration module, wherein the authentication configuration module is used to adjust the configuration of the password rules and the configuration of the preset disorder threshold.

6. The authentication system according to claim 1, characterized in that: Also includes: A registration module, the registration module is used to record the account registered by the user and the keyboard keystroke information entered when registering the account; A benchmark establishment module, the benchmark establishment module is used to obtain a preset password of the account and a keyboard keystroke pattern benchmark sample of the account according to the keyboard keystroke information corresponding to the account recorded by the registration module.

7. The authentication system according to claim 6, characterized in that: There are M groups of preset passwords for the account, and the number of keyboard keystroke pattern benchmark samples corresponding to each group of preset passwords is greater than or equal to 2, where M is an integer greater than or equal to 2; the first judgment module determines that the authentication fails when the password entered by the user does not match all the preset passwords of the account.

8. An authentication method based on keyboard keystroke pattern, characterized in that: The following steps are involved: Collect keyboard keystroke information of user login account; Obtaining the password input by the user according to the keyboard keystroke information collected by the collection module, and determining that the authentication fails when the password input by the user does not match the preset password of the account; Obtaining a keyboard keystroke pattern sample of the password input by the user according to the keyboard keystroke information collected by the collection module and the composition of the preset password; When the password input by the user matches the preset password of the account, based on the keyboard keystroke pattern sample and the keyboard keystroke pattern benchmark sample corresponding to the preset password of the account, calculating the relative disorder of the keyboard keystroke pattern sample relative to the keyboard keystroke pattern benchmark sample; Whether the authentication is successful is determined based on the relative disorder and a preset authentication disorder threshold.

9. An authentication device based on a keyboard keystroke pattern, characterized in that: include: A memory, a processor, and an authentication program stored in the memory and executable on the processor, wherein the authentication program implements the steps of the keyboard keystroke pattern-based authentication method as claimed in claim 8 when executed by the processor.

10. A storage medium, characterized in that: The storage medium stores an authentication program, and when the authentication program is executed by the processor, the steps of the authentication method based on keyboard keystroke pattern as claimed in claim 8 are implemented.

Images