Security Chip Verification Code Input Switching Circuit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart terminals, such as those using the Android platform, are vulnerable to data leaks during verification code input, leading to potential economic losses due to stolen verification codes and tampered transaction amounts.
Innovation Solution
A method involving a security chip, switching circuit, touching and inputting module, and displaying module, where the security chip controls the inputting and displaying processes to encrypt verification codes, ensuring secure input by generating and displaying a keyboard and obtaining coordinate information for encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the general platform (e.g., Android) is used for smart terminal operations, then the device complexity is reduced and ease of operation is improved, but the reliability deteriorates due to security vulnerabilities that allow verification code theft and data leakage
Solution Approach 1:
The system is divided into two independent control domains: the general platform for normal operations and the security chip for verification code operations. The switching circuit segments the control paths, allowing the verification code input interface to be exclusively controlled by the security chip, isolating it from the vulnerable general platform while maintaining ease of operation for users.
Solution Approach 2:
The security chip acts as an intermediary between the user input and the general platform. It captures verification codes directly from the input interface through the switching circuit, encrypts them, and transmits only encrypted data to the general platform, preventing the platform from accessing plain verification codes while maintaining system functionality.
2Productivity
If the verification code is transmitted in plain text through the general platform, then the processing speed is improved and device complexity is reduced, but the loss of information increases due to potential verification code theft and tampering
Solution Approach 1:
Encryption is performed preliminarily at the source (security chip) before the verification code enters the general platform transmission channel. This preliminary encryption action ensures that even if the code traverses the platform quickly, the information is already protected, preventing theft and tampering while maintaining processing speed.
Solution Approach 2:
The verification code undergoes a parameter change from plain text to encrypted text through cryptographic transformation in the security chip. This parameter change (encryption) preserves the compact form and transmission speed characteristics while fundamentally altering the information state to be secure against interception and tampering.
3Reliability
If the security chip controls the inputting and displaying modules exclusively, then the reliability is improved by preventing verification code theft, but the device complexity increases due to the switching circuit and dual control architecture
Solution Approach 1:
The control architecture is made dynamic through the switching circuit, which can flexibly switch control of the inputting and displaying modules between the security chip and the general platform based on operational requirements. This dynamic control enables exclusive security chip control during verification code input while allowing general platform control during normal operations, balancing reliability improvement with acceptable complexity.
Data Source
AI summary
A method for secure interaction on a universal platform. The method comprises: when a verification code needs to be inputted, a universal platform transmits a switching notification to a security chip via a secure interface; when the security chip receives the switching notification, same controls a switching circuit to switch a touch input module and a display module to be controlled by the security chip, controls the display module to prompt a user to input the verification code, controls, on the basis of coordinate data, the display module to generate and display a keyboard, acquires from the touch input module verification code coordinate information generated by the touch input module on the basis of screen-touching information of the user, produces the verification code on the basis of the verification code coordinate information and of the coordinate data, encrypts the produced verification code to produce a verification code ciphertext, outputs the verification code ciphertext via a preset interface, and controls the switching circuit to switch the touch input module and the display device to be controlled by the universal platform. The present invention prevents losses incurred by a verification code leakage.