CN103597428B - System and method for secure data entry - Google Patents

Abstract

An electronic device comprises a CPU, and a touch-sensitive screen operable to display a plurality of keys. Each of the plurality of keys is associated with and exhibits a predetermined value, where the keys are arranged so that the predetermined values of the keys are displayed in a random manner. The predetermined values of the plurality of keys have different predetermined display characteristics associated therewith so that the plurality of keys have varied appearances.

Description

Systems and methods for secure data entry

technical field

The present disclosure relates to a system and method for secure data entry on a touch sensitive screen.

Background technique

Touch-sensitive screens, or touch screens, are commonly used as user interfaces in countless devices such as smartphones, personal digital assistants, tablet computers, information kiosks, ATM terminals, point-of-sale terminals, and other computing devices. Touch screens enable data entry and display to be combined so that users can enter data and make selections by directly touching displayed elements on the screen. The use of touch screens is especially popular with mobile devices because the removal of the keyboard creates more space for larger displays.

It is often necessary to enter secure data like passwords and PIN data to access certain resources, such as websites, financial accounts, shopping accounts, other protected data, or use of the device itself. When a keypad is displayed on the touch screen to enter such secure data, the user may inadvertently generate fingerprint patterns or finger movement patterns that may be used by malicious criminals to decipher the secure data. Therefore, a solution is needed to substantially reduce or eliminate such unauthorized access to confidential and protected data and resources.

Contents of the invention

Electronic devices and methods have been conceived to increase the security of data entry on touch screens.

The electronic device includes a CPU and a touch sensitive screen that can be used to display a plurality of keys. Each of the plurality of keys is associated with and presented with a predetermined value, wherein the keys are arranged such that the predetermined values of the keys are displayed in a random fashion. The predetermined values of the plurality of keys have different predetermined display characteristics associated therewith such that the plurality of keys have different appearances.

The electronic device includes a CPU and a touch-sensitive screen operable to display a plurality of continuous values arranged in a random manner, wherein the displayed continuous values are operable to be moved to at least one predetermined location on the screen by user input for data entry.

A method for secure data entry on an electronic device, comprising: displaying a plurality of keys on a touch-sensitive screen, wherein the plurality of keys are displayed such that the keys each display a predetermined value and are associated with the predetermined value, the key are arranged such that the predetermined values of the keys are displayed in a random manner, and the keys are each displayed to exhibit a predetermined display characteristic associated with the predetermined value of each key. The method also includes receiving user input through the plurality of displayed keys.

Description of drawings

1 is a simplified block diagram of an exemplary embodiment of an electronic computing device;

2 is a diagram of a touch screen showing an exemplary continuous random keypad for receiving user input of security data; and

3 is a diagram of a touch screen showing an exemplary randomized keypad using various background patterns for the keys;

4 is a diagram of a touch screen showing an exemplary random keypad using various fonts for keys;

5 is a diagram showing a touch screen using an exemplary random keypad of various shapes for keys;

Figure 6 is a diagram showing a touch screen using an exemplary random keypad of three slidable key arrays;

7 is a diagram of a touch screen showing an exemplary random keypad with one of three slidable key arrays in a locked state; and

FIG. 8 is a diagram showing an exemplary touch screen in which keys are randomly arranged in a wheel.

detailed description

FIG. 1 is a simplified block diagram of an exemplary embodiment of an electronic device 10 . The electronic device 10 may be any device or terminal that utilizes a touch screen 12, such as a smartphone, personal digital assistant, personal computer, laptop computer, notebook computer, tablet computer, kiosk, ATM terminal, point-of-sale terminal, and other computing device . Such an electronic device 10 includes a CPU (Central Processing Unit) 14 that executes software that performs processing, calculation, decision, and communication functions. Memory 16 in the form of RAM (Random Access Memory), ROM (Read Only Memory), hard drive and/or any suitable data storage device is used to store information needed for later retrieval and computation. The electronic device 10 may include other peripheral devices as needed.

Electronic device 10 may require a security code, such as a password or PIN, to operate and/or access information, accounts, or other protected resources. For example, a smartphone, personal digital assistant, or tablet may require a passcode to unlock the device so it can be used. As another example, an ATM may require the correct entry of a PIN for the user to access a bank account.

2 is a schematic diagram of a touch screen showing an exemplary sequential random arrangement of keys in a keypad format for receiving user input of security data. The random arrangement indicated by reference numerals 20-24 represents three separate and consecutive times in which the user is requested to enter a security code. As shown in Figure 2, each time a user accesses a protected resource, keys take on shuffled values and are associated with those values. Therefore, because the positions of the security code numbers are different each time, the finger movements of the user and the fingerprints left on the touch screen are also different each time. These random variations can thwart malicious attempts by perpetrators to decipher finger movements and/or fingerprints to obtain security codes.

However, studies have shown that the use of random keypads often confuses users and leads to security data entry errors.

FIG. 3 is a diagram of a touch screen showing an exemplary random keypad 26 using various different background patterns for the keys. Each key is associated with a specific value, such as a numeric or alphanumeric value, which in turn is associated with a specific background pattern. Therefore, as shown in the example in FIG. 3, the numerical value "1" is always displayed with no background pattern, although its position in the keyboard changes each time. Similarly, in the example, the numeric value "3" is always displayed with a grid background pattern, the numeric value "7" is always displayed with a series of horizontal dotted lines, the numeric value "2" is always displayed with a dotted background, etc. When displayed in this manner, although the position of the numeric value in the keypad changes each time, the confusion that would result in an incorrect entry can be greatly reduced since the user has associated the numeric value with the same background pattern over time .

In a similar manner, changes to other display characteristics of keys, such as background color and/or foreground color, may also be used to reduce the amount of user confusion. For example, the numeric value "5" is always displayed with a red background color, the numeric value "7" is always displayed with a yellow background color, the numeric value "6" is always displayed with a blue background color, etc. In another example of changing the foreground color, the numeric value "2" is always displayed in the red foreground color, the numeric value "6" is always displayed in the blue foreground color, and the numeric value "6" is always displayed in the green foreground color" 8" etc. Color combinations of foreground and background colors can also be effectively used in the same way.

FIG. 4 is a diagram of a touch screen showing an exemplary random keypad 28 using various fonts for the keys. As shown in Figure 4, each key is associated with a specific value, such as a numeric or alphanumeric value, which in turn is associated with a specific font type, thereby further distinguishing the keys and reducing confusion.

FIG. 5 is a diagram of a touch screen showing an exemplary random keypad 30 using various shapes for the keys. In another embodiment shown in Figure 5, each key is associated with a specific value, such as a numeric or alphanumeric value, which in turn is associated with a specific shape, thereby further distinguishing the keys and reducing the risk of security data errors. Input user confusion. Therefore, as shown in FIG. 5, the numerical value "2" is always displayed with the triangular key, the numerical value "7" is always displayed with the circular key, the numerical value "8" is always displayed with the pentagonal key, and so on.

Various display characteristics including foreground color, background color, background pattern, font and shape can be used in combination to distinguish the appearance of keys from one another.

FIG. 6 is a diagram of a touch screen showing an exemplary random keypad using three slidable key arrays 32-36. In the embodiment shown in FIG. 6, each array includes numerical values arranged in a random manner, and the numerical values in the three arrays are arranged in different orders. Each array acts as a virtual rotary dial that receives movement of the user's finger along the axis of the array to effect displacement of the displayed numeric value. For example, moving the user's finger to the right on the array causes the displayed digits to shift to the right, while moving the user's finger to the left on the array causes the displayed digits to shift to the left. Thus, data entry may be accomplished by placing or shifting the digits such that the desired digit is moved to a predetermined location in the array, such as the center point of the array marked by vertical marker 38 . Thus, for the example shown in FIG. 6, the three arrays may be used to receive user input for a three-digit security code.

FIG. 7 is a diagram of a touch screen showing an exemplary random keypad with one of the three slidable key arrays 32-36 in a locked state. As shown in Figure 7, the array 32 displays predetermined characters, such as an asterisk "*", which indicate that entry of the first digit of the security data has been accepted and locked into place. In this way, an inadvertent swiping across the touch screen will not change the first digit which has been correctly entered. After locking, the user can still change already entered digits by some other predetermined input, for example by clicking on the displayed asterisk.

FIG. 8 is a diagram of a touch screen showing an exemplary random arrangement of keys in a wheel formation 42 . Similar to the array format in Figures 6 and 7, on-wheel data entry can be made by sliding keys with numeric values. For example, movement of a user's finger on a selected key towards the center 44 of the wheel 42 will result in the entry of the number displayed on the displayed key. Asterisks or other suitable symbols may be displayed to indicate how many digits have been entered. As shown in the example of Figure 8, one digit of the security code has already been entered and the remaining three digits remain to be entered.

As described above, security codes required to unlock a device or access resources can be entered in a more secure manner on a touchscreen without revealing compromised finger movements or fingerprints that can be used to determine a security code.

What is believed to be novel in the invention is set forth with particularity in the appended claims. However, modifications, variations, and changes to the above-described exemplary embodiments will be apparent to those skilled in the art, and thus the electronic device and method of secure data entry include such modifications, variations, and changes, and do not limited to the specific embodiments described herein.

Claims (12)

1. An electronic device, comprising: CPU; and a touch-sensitive screen operable to display a plurality of keys, each key of the plurality of keys being associated with and presenting a predetermined value, the keys being arranged such that the predetermined values of the keys are randomly assigned and the predetermined value of each of the plurality of keys has a different predetermined fixed display characteristic associated therewith such that the plurality of keys have different appearances. 2. The electronic device of claim 1, wherein the different predetermined display characteristics of the keys are selected from the group consisting of: foreground color, background color, background pattern, shape and font. 3. The electronic device as claimed in claim 1 , wherein each key of the plurality of keys has a predetermined fixed numerical value characteristic associated with a predetermined fixed display characteristic such that a specific number is displayed with the fixed display characteristic value key. 4. The electronic device of claim 1 , wherein each key of the plurality of keys has a predetermined fixed alphanumeric value characteristic associated with a predetermined fixed display characteristic, thereby displaying a specific key with the fixed display characteristic. Alphanumeric value key. 5. The electronic device of claim 1, further comprising a memory operable to store predetermined fixed value characteristics and associated key display characteristics. 6. The electronic device of claim 1, wherein the CPU is operable to randomize an arrangement of keys in a keypad format. 7. A method for secure data entry on an electronic device, comprising: Displaying a plurality of keys on the touch sensitive screen, wherein the plurality of keys are displayed such that: the keys each display a predetermined value and are associated with the predetermined value; the keys are arranged such that predetermined values for the keys are displayed in a random fashion; and the keys are each displayed to assume a predetermined fixed display characteristic associated with a predetermined value for each key; User input is received through the plurality of keys displayed. 8. The method of claim 7, wherein the keys are arranged in a keypad format in a random manner. 9. The method of claim 7, wherein the keys are arranged in a wheel format in a random manner. 10. The method of claim 7, wherein the user input touches randomly arranged keys to effect data input. 11. The method of claim 7, wherein the user input moves a random arrangement of keys to effectuate data entry. 12. The method of claim 7, wherein the predetermined display characteristics of the keys are selected from the group consisting of: foreground color, background color, background pattern, shape and font.