Password input device based on computer software and hardware
By generating a decryption sequence in the password input device and binding it with personal identity information, the problem of password leakage in the prior art is solved, and higher password security is achieved.
Patent Information
- Application Number
- CN202411536585.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-31
- Publication Date
- 2025-02-25
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Existing password input devices are prone to password leakage. Once the user's password is leaked, the password can be used even if it is not the user himself.
Through the management center, the user sets the original password and generates a regenerated password. The decryption sequence is generated based on the iterative association of the original password and the regenerated password, and the decryption sequence is bound to personal identity information. When the user enters the password, he only needs to enter the decryption sequence.
This avoids the risk of leakage when users enter passwords. Even if the password is leaked, non-users themselves cannot directly use the decrypted sequence or password.
Smart Images
Figure FT_1
Abstract
Description
Technical Field
[0001] The invention relates to the technical field of password input, in particular to a password input device based on computer software and hardware. Background Art
[0002] The use and transmission of passwords are problematic points for password leakage. We need to control password security at each node, especially during password input and display stages where passwords are most likely to be leaked. We need to increase our efforts to ensure the security of passwords at the source.
[0003] Most of the current password input devices are numeric keys, or virtual numeric keys on touch screens. Such numeric keys are easy for people to steal passwords. Once a user's password is leaked, even someone other than the user can use the password. How to prevent the user's password from being leaked and used by others is a problem we need to solve. A password input device based on computer hardware and software is now provided. Summary of the invention
[0004] The object of the present invention is to provide a password input device based on computer software and hardware.
[0005] The object of the present invention can be achieved by the following technical solutions: A password input device based on computer software and hardware, comprising a management center, the management center being communicatively and / or electrically connected to a data acquisition module, a data processing module, a data analysis module and a verification feedback module; The management center is connected to an information verification port for user identity authentication. The user inputs personal identity information through the information verification port. After the personal identity information input by the user is verified, a password input port is generated, and the user sets a password through the password input port. The data processing module is used to process the password set by the user, generate the original password and the regeneration password, and generate a decryption sequence according to the iterative association of the original password and the regeneration password; The data analysis module is used to analyze the decryption sequence input by the user and verify the decryption sequence input by the user; The verification feedback module provides execution feedback to the user according to the received verification pass information.
[0006] Furthermore, the process of verifying the user's personal identity information by the information verification port includes: According to the set information verification port, the user enters the user's personal identity information through the information verification port; the personal identity information entered by the user is sent to the management center, and the management center reviews the user's personal identity information. After the review is passed, the user's personal identity information is uploaded to the management center for storage, and a login account is generated based on the real-name authenticated mobile phone number entered by the user.
[0007] Furthermore, the user sets a password based on the obtained login account, including: Set the password storage interval linked to the password input port; Obtaining the number of digits of the password input by the user through the data acquisition module, and marking the number of digits of the password input by the user as n, where n≥6, and n is an integer; Obtain a random number for each password entered by the user; Get the input time of each password entered by the user; The passwords entered by the user and the input time and number corresponding to each password are sent to the data processing module.
[0008] Furthermore, the data processing module processes the password set by the user including: The password entered by the user is recorded as the original password; Rearrange and combine each password entered by the user in the order of the numbers to form a new password combination, and mark the new password combination as a regenerated password; Then, according to the input time of each password entered by the user, the new password combination is iteratively associated with the original password to generate a decryption sequence.
[0009] Furthermore, the decryption sequence is composed of a plurality of unit sequence codes, and the number of the unit sequence codes constituting the decryption sequence is obtained according to the original password position set by the user. The process of obtaining the decryption sequence includes: Establishing a sequence code matching table, and setting a first matching column, a second matching column, and a third matching column in the sequence code matching table; Put the unit sequence code into the first matching column, set the first number and the second number corresponding to the unit sequence code, and put the first number and the second number into the second matching column and the third matching column respectively; The unit sequence code in the first matching column is bound to the first number and the second number in the second matching column and the third matching column.
[0010] Further, after the processing of the password set by the user is completed, the user enters the password through the password input terminal, including: The user enters the mobile phone number for real-name authentication through the password input terminal. After the input is completed, the management center sends the decryption port link to the terminal corresponding to the mobile phone number; The user enters the decryption sequence input interface through the decryption port link received by the terminal, and the user inputs the decryption sequence held by the user.
[0011] Furthermore, the process of the data analysis module analyzing the decryption sequence input by the user includes: Mark the decryption sequence input by the user, and obtain the unit sequence code of the decryption sequence marked by the user; input the unit sequence code into the sequence code matching table, and output the corresponding first number and second number; combine all the first numbers and second numbers according to the input order of the unit sequence code to form a first password combination and a second password combination respectively, and compare them with the original password and the regenerated password respectively, and output the comparison result; When the first password combination is consistent with the original password, and the second password combination is consistent with the original password, verification pass information is generated.
[0012] Furthermore, the process of the verification feedback module providing execution feedback to the user includes: When the user receives the verification pass information, the user confirms the received verification pass information. After the user completes the confirmation of the verification pass information, the password input is completed. If the user does not confirm the received verification pass, the password input fails.
[0013] Compared with the prior art, the beneficial effects of the present invention are as follows: a regeneration password is generated through an original password set by a user, and the regeneration password, the original password and the corresponding decryption sequence are bound to the user's personal identity information, the decryption sequence is sent to the user, and the user's password is saved in a management center, so that when the user decrypts, the user only needs to input the decryption sequence instead of directly inputting the password, thereby avoiding password leakage when the user inputs the password; when the user's password is leaked, non-users can only obtain a separate decryption sequence or the original password. When non-users use the decryption sequence, the system will automatically send a decryption port link to the user, thereby making it useless for non-users to obtain the decryption sequence, and further making it impossible for non-users to directly use the decryption sequence or password even if the password or decryption sequence is leaked or lost. BRIEF DESCRIPTION OF THE DRAWINGS
[0014] Figure 1 It is a schematic diagram of the present invention. DETAILED DESCRIPTION
[0015] like Figure 1As shown, a password input device based on computer software and hardware includes a management center, and the management center is communicatively and / or electrically connected to a data acquisition module, a data processing module, a data analysis module, and a verification feedback module; The management center is connected to an information verification port for user identity authentication. The user inputs personal identity information through the information verification port. After the personal identity information input by the user is verified, a password input port is generated; It should be further explained that, in the specific implementation process, the process of the information verification port verifying the user's personal identity information includes: According to the information verification port set, the user inputs the user's personal identity information through the information verification port; it should be further explained that in the specific implementation process, the user's personal identity information includes name, age, gender, ID card number and real-name authenticated mobile phone number; The personal identity information entered by the user is sent to the management center, which reviews the user's personal identity information. After the review is passed, the user's personal identity information is uploaded to the management center for storage, and a login account is generated based on the real-name authenticated mobile phone number entered by the user, and the login account is sent to the user.
[0016] The user sets a password based on the login account obtained. It should be further explained that the specific process of password setting includes: A password storage interval is set to be linked to the password input port; it should be further explained that, in a specific implementation process, the password storage interval is used to store the password input by the user; It should be further explained that the password entered by the user consists of at least one of numbers, letters or special symbols; Obtaining the number of digits of the password input by the user through the data acquisition module, and marking the number of digits of the password input by the user as n, where n≥6, and n is an integer; Obtain a random number for each password entered by the user, denoted as i, where i=1, 2, ..., n; Get the input time of each password entered by the user; The passwords entered by the user and the input time and number corresponding to each password are sent to the data processing module.
[0017] The data processing module is used to process the password set by the user, and the specific process includes: The password entered by the user is recorded as the original password; Rearrange and combine each password entered by the user in the order of the numbers to form a new password combination, and mark the new password combination as a regenerated password; Then, according to the input time of each password entered by the user, the new password combination is iteratively associated with the original password; For example: Set the password entered by the user to a total of six digits, each digit is a, 2, 3, d, 4 and 7; After randomly labeling each password, the password labeled i is recorded as F(i), and i is 1 to n, which can be F(1)=2, F(2)=d, F(3)=a, F(4)=3, F(5)=7 and F(6)=4; Then the new password combination is 2, d, a, 3, 7, 4; Then the original password {a, 2, 3, d, 4, 7} is iteratively associated with the new password combination {2, d, a, 3, 7, 4}, i.e. a→2, 2→d, 3→a, d→3, 4→7 and 7→4; Generate a decryption sequence according to the iterative association between the new password combination and the original password; The decryption sequence is sent to the user, and the decryption sequence is simultaneously bound to the personal identity information corresponding to the user in the management center.
[0018] It should be further explained that, in the specific implementation process, the decryption sequence is composed of a number of unit sequence codes. The number of unit sequence codes constituting the decryption sequence is obtained according to the original password position set by the user. The process of obtaining the decryption sequence specifically includes: Establishing a sequence code matching table, and setting a first matching column, a second matching column, and a third matching column in the sequence code matching table; Put the unit sequence code into the first matching column, set the first number and the second number corresponding to the unit sequence code, and put the first number and the second number into the second matching column and the third matching column respectively; Bind the unit sequence code in the first matching column to the first number and the second number in the second matching column and the third matching column; it should be further explained that in the specific implementation process, the first number and the second number bound to each unit sequence code are different; It should be further explained that, in the specific implementation process, after the processing of the password set by the user is completed, the user enters the password through the password input terminal. The specific process includes: The user enters the mobile phone number for real-name authentication through the password input terminal. After the input is completed, the management center sends the decryption port link to the terminal corresponding to the mobile phone number; The user enters the decryption sequence input interface through the decryption port link received by the terminal, and the user inputs the decryption sequence held by the user; After the user completes inputting the decryption sequence, the decryption sequence inputted by the user is sent to the data analysis module.
[0019] It should be further explained that, in the specific implementation process, after the new password combination is iteratively associated with the original password, the new password combination after iterative association and the original password and the corresponding decryption sequence are uploaded to the management center for storage, and the new password combination and the original password and the corresponding decryption sequence are bound to the user's personal identity information, the decryption sequence is sent to the user, and the user's password is stored in the management center, so that when the user decrypts, the user only needs to enter the decryption sequence instead of directly entering the password, thereby avoiding the leakage of the password when the user enters the password; It should be further explained that, in the specific implementation process, when the user's password is leaked, such as when the user inputs the decryption sequence or sets the password, resulting in the decryption sequence or password being leaked, then the non-user can only obtain a separate decryption sequence or the original password. When the non-user obtains the original password, the password obtained has no practical effect. When the non-user obtains the decryption sequence, when the non-user uses the decryption sequence, the system will automatically send a decryption port link to the user, thereby making it useless for the non-user to obtain the decryption sequence. Therefore, even if the user leaks or loses the password or decryption sequence, the non-user cannot directly use the decryption sequence or password. The data analysis module is used to analyze the decryption sequence input by the user. The specific analysis process includes: Marking the decryption sequence input by the user, and obtaining the unit sequence code of the decryption sequence marked by the user; Input the unit sequence code into the sequence code matching table, and output the corresponding first number and second number; Combining all the first numbers according to the input order of the unit sequence code to form a first password combination; combining all the second numbers according to the input order of the unit sequence code to form a second password combination; Compare the first password combination and the second password combination with the original password and the regenerated password respectively, and output the comparison results; When the first password combination is consistent with the original password, and the second password combination is consistent with the original password, it means that the unit sequence code is correct, and a verification pass message is generated; When at least one of the first password combination and the original password is inconsistent or the second password combination and the regenerated password is inconsistent exists, it indicates that the unit sequence code is wrong and the password input fails; The generated verification pass information or warning information is sent to the verification feedback module.
[0020] The verification feedback module provides execution feedback to the user according to the received verification pass information, and the specific process includes: When the user receives the verification pass information, the user confirms the received verification pass information. After the user completes the confirmation of the verification pass information, the password input is completed. If the user does not confirm the received verification pass, the password input fails.
[0021] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.
Claims
1. A password input device based on computer hardware and software, including a management center, characterized in that: The management center is communicatively and / or electrically connected to a data acquisition module, a data processing module, a data analysis module and a verification feedback module; The management center is connected to an information verification port for user identity authentication. The user inputs personal identity information through the information verification port. After the personal identity information input by the user is verified, a password input port is generated, and the user sets a password through the password input port. The data processing module is used to process the password set by the user, generate the original password and the regeneration password, and generate a decryption sequence according to the iterative association of the original password and the regeneration password; The data analysis module is used to analyze the decryption sequence input by the user and verify the decryption sequence input by the user; The verification feedback module provides execution feedback to the user according to the received verification pass information.
2. A password input device based on computer software and hardware according to claim 1, characterized in that: The process of verifying the user's personal identity information by the information verification port includes: According to the set information verification port, the user enters the user's personal identity information through the information verification port; the personal identity information entered by the user is sent to the management center, and the management center reviews the user's personal identity information. After the review is passed, the user's personal identity information is uploaded to the management center for storage, and a login account is generated based on the real-name authenticated mobile phone number entered by the user.
3. A password input device based on computer software and hardware according to claim 2, characterized in that: The user sets the password based on the login account obtained, including: Set the password storage interval linked to the password input port; The number of digits of the password input by the user is obtained through the data acquisition module, and the number of digits of the password input by the user is marked as n, where n≥6 and n is an integer; Obtain a random number for each password entered by the user; Get the input time of each password entered by the user; The passwords entered by the user and the input time and number corresponding to each password are sent to the data processing module.
4. A password input device based on computer software and hardware according to claim 3, characterized in that: The data processing module processes the password set by the user including: The password entered by the user is recorded as the original password; Rearrange and combine each password entered by the user in the order of the numbers to form a new password combination, and mark the new password combination as a regenerated password; Then, according to the input time of each password entered by the user, the new password combination is iteratively associated with the original password to generate a decryption sequence.
5. A password input device based on computer software and hardware according to claim 4, characterized in that: The decryption sequence is composed of a number of unit sequence codes. The number of unit sequence codes constituting the decryption sequence is obtained according to the original password position set by the user. The process of obtaining the decryption sequence includes: Establishing a sequence code matching table, and setting a first matching column, a second matching column, and a third matching column in the sequence code matching table; Put the unit sequence code into the first matching column, set the first number and the second number corresponding to the unit sequence code, and put the first number and the second number into the second matching column and the third matching column respectively; The unit sequence code in the first matching column is bound to the first number and the second number in the second matching column and the third matching column.
6. A password input device based on computer software and hardware according to claim 5, characterized in that: After the processing of the password set by the user is completed, the user enters the password through the password input terminal, including: The user enters the mobile phone number for real-name authentication through the password input terminal. After the input is completed, the management center sends the decryption port link to the terminal corresponding to the mobile phone number; The user enters the decryption sequence input interface through the decryption port link received by the terminal, and the user inputs the decryption sequence held by the user.
7. A password input device based on computer software and hardware according to claim 6, characterized in that: The process of the data analysis module analyzing the decryption sequence input by the user includes: Mark the decryption sequence input by the user, and obtain the unit sequence code of the decryption sequence marked by the user; input the unit sequence code into the sequence code matching table, and output the corresponding first number and second number; combine all the first numbers and second numbers according to the input order of the unit sequence code to form a first password combination and a second password combination respectively, and compare them with the original password and the regenerated password respectively, and output the comparison result; When the first password combination is consistent with the original password, and the second password combination is consistent with the original password, verification pass information is generated.
8. A password input device based on computer software and hardware according to claim 7, characterized in that: The process of the verification feedback module providing execution feedback to the user includes: When the user receives the verification pass information, the user confirms the received verification pass information. After the user completes the confirmation of the verification pass information, the password input is completed. If the user does not confirm the received verification pass, the password input fails.