Mobile Terminal Password Protection via Input Event Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for protecting application program passwords on mobile terminals are insecure due to compatibility issues with customized keyboards and vulnerabilities in key input event processing, making them susceptible to password theft.
Innovation Solution
A method and apparatus that position and determine the activated application interface view, acquire and replace key input events with fake password characters, using both soft and hard keyboard input methods, and dynamically encrypt characters to prevent theft, ensuring secure password processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a customized keyboard is used to take over key input event processing, then password security is improved, but compatibility problems occur and the keyboard becomes non-functional after malicious code injection
Solution Approach 1:
The patent introduces an intermediary component that sits between the user and the system's key input event processing. Instead of directly taking over the system's key event processing (which causes compatibility issues), the invention creates a intermediate layer that can intercept and process key events while maintaining compatibility with the system's existing mechanisms. This intermediary approach allows the solution to function without requiring full customization of the keyboard system.
2Reliability
If the system uses a key input event callback function to intercept input characters, then encryption processing can be performed, but the intercepting point is easily used by destructors since it is a public interface
Solution Approach 1:
The patent inverts the traditional approach by not relying on the system's public callback interface. Instead of using the system's key input event callback function (which is vulnerable to destruction), the invention reverses the architecture so that the application layer defines its own private event processing mechanism. This inversion makes the intercepting point private and protected from external destruction, as it no longer depends on public system interfaces.
3Reliability
If processing is performed on key input events in an application, then password security is limited, but processing complexity increases
Solution Approach 1:
The patent implements self-service by having the application layer autonomously handle its own key input event processing without requiring complex system-level modifications. The invention creates self-contained event processing logic within the application that can independently intercept, process, and protect password input. This self-service approach reduces overall system complexity by eliminating the need for complex interactions between multiple system components.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
A method and an apparatus for protecting an application program password of a mobile terminal are described. The method includes: positioning an application interface view in an application program of a mobile terminal, so as to obtain a currently activated application interface view; determining whether the currently activated application interface view is an input box; and if yes, acquiring a key input event triggered in the input box and obtaining an input character by using the key input event; and replacing the character with a fake password character. A related apparatus is also described.