CN104063643A - Intelligent terminal security authentication method and device based on time interval feature - Google Patents
Intelligent terminal security authentication method and device based on time interval feature Download PDFInfo
- Publication number
- CN104063643A CN104063643A CN201410319778.9A CN201410319778A CN104063643A CN 104063643 A CN104063643 A CN 104063643A CN 201410319778 A CN201410319778 A CN 201410319778A CN 104063643 A CN104063643 A CN 104063643A
- Authority
- CN
- China
- Prior art keywords
- time interval
- password
- user
- authentication
- feature
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2105—Dual mode as a secondary aspect
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
本发明公开了一种基于时间间隔特征的智能终端安全认证方法及装置，该基于时间间隔特征的智能终端安全认证方法包括：用户预设认证口令和预设时间间隔特征，该特征是由认证过程中用户输入相邻口令字符的间隔时间依序组成的时间序列；获取待认证口令以及当前时间间隔特征；若待认证口令与预设认证口令完全一致，且当前时间间隔特征与预设时间间隔特征匹配，则认证成功，否则认证失败。本发明考虑到仅凭单一的认证口令无法准确识别用户身份，因此可以通过人为添加一种输入特征来辨别用户身份的合法性，该方法显著提高了智能终端触屏认证的安全性。
The invention discloses an intelligent terminal security authentication method and device based on a time interval feature. The intelligent terminal security authentication method based on a time interval feature includes: a user preset authentication password and a preset time interval feature. The feature is determined by the authentication process. The time series formed by the interval time of the user inputting adjacent password characters in sequence; obtain the password to be authenticated and the current time interval feature; if the password to be authenticated is completely consistent with the preset authentication password, and the current time interval feature is consistent with the preset time interval feature match, the authentication succeeds, otherwise the authentication fails. The present invention considers that only a single authentication password cannot accurately identify the user's identity, so the legitimacy of the user's identity can be identified by artificially adding an input feature, and the method significantly improves the security of the smart terminal touch screen authentication.
Description
Technical field
The invention belongs to intelligent terminal secure authentication technology field, relate in particular to a kind of intelligent terminal safety certifying method and device based on time interval feature.
Background technology
Nowadays along with the development of intelligent terminal technology, intelligent terminal number of users also sharply increases.In order to ensure the safety of terminal user's privacy and terminal data, terminal generally adopts authentication function protection terminal security.
Common authentication mode can be divided into touch screen certification and non-touch screen certification two large classes at present, and wherein the time of touch screen authentication mode development is long, kind is more, and universal scope is wider.But existing touch screen authentication mode ubiquity is easily left over the defect of authentication information on terminal screen, and this defect causes authentication information to be easily stolen, make terminal there is larger potential safety hazard.
Article in the safe forum of USENIX in 2010 " Smudge Attacks on Smartphone TouchScreens " is pointed out that trace streaks and may be revealed Android password, pointing the residual greasy dirt president time is attached on touch-screen, only needs simple tool can analyze sliding trace.The article " Making Graphic-Based Authentication Secure against SmudgeAttacks " that Emanuel von Zezschwitz in 2013 etc. deliver has been introduced according to residual stain and has been attacked the method for inferring user's input.On mobile device, use to tap input password and also can leave a trace, but input order and multiplicity be difficult to infer, therefore the security of some place input is higher.
The patent that application number is CN201310334345.6 provides a kind of unlocking screen method and apparatus, and it is in the time detecting that tapping of user operates, and the duration that user is touched to operation is added up, and carries out release in the time reaching default lasting duration.The unlock method of above-mentioned patent is too simple, gets final product release, so almost cannot ensure the security of user profile because anyone only needs long-time touch screen.
The patent that application number is CN201010197917.7 provides a kind of mobile phone tripper and method, and it carries out record by the time of user being touched to the first sensing element and the second sensing element, and the time of record is judged and determines whether release.The unlock method of above-mentioned patent is convenient, but the time data of its release time record and judgement is very few, so there is larger potential safety hazard, is easily cracked by people.
Application number is that the patent of CN201310596745.4 has proposed one and knocks control method and terminal, and it is obtained and knocked trigger pip by vibration transducer, carries out different events according to signal type.Above-mentioned patent has solved emphatically the impact that the unconscious operation of user in terminal produces, and it is for the operation control procedure of terminal, and not for safety certification.
Therefore, existing intelligent terminal authentication techniques need to improve and development.
Summary of the invention
The object of the embodiment of the present invention is to provide a kind of intelligent terminal safety certifying method and device based on time interval feature, is intended to solve the security that existing intelligent terminal safety certification exists lower, the problem that is left to be desired and develops.
Should comprise the following steps by the intelligent terminal safety certifying method based on time interval feature:
The first step, user preset authenticate password and Preset Time spaced features, feature is inputted the time series sequentially forming interval time of adjacent password character by user in verification process;
Second step, obtains password to be certified and current time interval feature;
The 3rd step, if password to be certified and default authenticate password are in full accord, and current time interval feature mates with Preset Time spaced features, authentication success, otherwise authentification failure.
Further, should specifically comprise the following steps by the intelligent terminal safety certifying method based on time interval feature:
Step 1, user sets in advance the time interval feature of authenticate password default input password;
Step 2, user inputs password to be certified by touch screen mode;
Step 3, terminal is obtained the current time interval feature of password to be certified and verification process extraction thereof;
Step 4, whether terminal judges password to be certified is consistent with default authenticate password, whether the current time interval feature obtaining in determining step three mates with user preset time interval feature, judge whether the matching degree of current time interval feature and user preset time interval feature reaches the safety coefficient of default, if simultaneously meet authentication success of above-mentioned two Rule of judgment, otherwise authentification failure.
Further, the Preset Time spaced features in step 1 refers to: during by user preset authenticate password, input a kind of time series sequentially forming interval time of adjacent password character.
Preferably, user is in the time of default authenticate password, and artificial setting has the time interval feature of certain Special Significance.
Further, the current time interval feature in step 3 refers to: a kind of time series being sequentially made up of the time interval of inputting adjacent two password characters in user's current authentication process.
Further, the safety coefficient in step 3 refers to: the minimum scale that when terminal is judged coupling, in above-mentioned current time interval feature, qualified Xiang Suoying reaches, this coefficient is by user identity identification default.
Further, the matching degree in step 4 refers to: qualified proportion in the current time interval feature of extracting in verification process; Particularly, respective items in the time term of terminal contrast current time interval feature and Preset Time spaced features, if the value of above-mentioned time term in the threshold range of respective items, is thought qualified, otherwise be nonconformance, wherein this threshold value is by user identity identification default.This user identity identification system comprises two parts: whether password identification part is consistent with default authenticate password for detection of input authentication password; Whether feature identification division, meet the demands for detection of the qualified item of the current time interval feature of inputting password; If meet above-mentioned two conditions simultaneously, system judges that active user's identity, by checking, is validated user, otherwise is disabled user.
Another object of the present invention is to provide a kind of device of the intelligent terminal safety certification based on time interval feature, the device that is somebody's turn to do the intelligent terminal safety certification based on time interval feature comprises: module, authentication module, memory module and timing module are set;
Module is set, for user, authenticate password and Preset Time spaced features is set;
Authentication module, is divided into two submodules:
A, obtain submodule, and module is set is connected, for obtaining the password to be certified of user's input and current authentication process user's current time interval feature;
B, processing submodule, with obtain submodule and be connected, for judging that whether the password to be certified and the default authenticate password that obtain be in full accord, judge whether current time interval feature mates with user preset time interval feature simultaneously, whether the matching degree that is current time interval feature and user preset time interval feature reaches the safety coefficient that device arranges, if simultaneously meet authentication success of above-mentioned two Rule of judgment, otherwise authentification failure;
Memory module, and arranges module and is connected, for storing authenticate password, Preset Time spaced features, threshold value and the safety coefficient of user preset;
Timing module, and obtains submodule and is connected, and inputs the interval time of adjacent password character for obtaining user authentication process.
Intelligent terminal safety certifying method and device based on time interval feature provided by the invention, user preset authenticate password and Preset Time spaced features, this feature is inputted the time series sequentially forming interval time of adjacent password character by user in verification process; Obtain password to be certified and current time interval feature; If order to be certified and default authenticate password are in full accord, and current time interval feature mates with Preset Time spaced features, authentication success, otherwise authentification failure; Terminal of the present invention is carried out the safety certification of intelligent terminal by inputting the time interval feature of adjacent password character in statistics verification process; The present invention considers that only the authenticate password of voucher one cannot accurately be identified user identity, therefore can in verification process, artificially add a kind of input feature vector and distinguish user identity, current time interval feature and the user preset time interval feature obtained by contrast verification process, judge whether authentication success, therefore the present invention has significantly improved the security of touch screen certification.
Brief description of the drawings
Fig. 1 is the intelligent terminal safety certifying method process flow diagram based on time interval feature that the embodiment of the present invention provides;
Fig. 2 is the process flow diagram of the intelligent terminal safety certifying method embodiment 1 based on time interval feature that provides of the embodiment of the present invention;
Fig. 3 is the process flow diagram of the intelligent terminal safety certifying method embodiment 2 based on time interval feature that provides of the embodiment of the present invention;
Fig. 4 is the structural representation of the intelligent terminal safety certification device based on time interval feature that provides of the embodiment of the present invention;
In figure: 1, module is set; 2, authentication module; 2-1, obtain submodule; 2-2, processing submodule; 3, memory module; 4, timing module.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearer, below in conjunction with embodiment, the present invention is further elaborated.Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
Below in conjunction with drawings and the specific embodiments, application principle of the present invention is further described.
As shown in Figure 1, the intelligent terminal safety certifying method based on time interval feature of the embodiment of the present invention comprises the following steps:
S101: user preset authenticate password and Preset Time spaced features, feature is inputted the time series sequentially forming interval time of adjacent password character by user in verification process;
S102: obtain password to be certified and current time interval feature;
S103: if order to be certified and default authenticate password are in full accord, and current time interval feature mates with Preset Time spaced features, authentication success, otherwise authentification failure.
Specific embodiments of the invention:
Embodiment 1:
Fig. 2 is an embodiment process flow diagram of a kind of intelligent terminal safety certifying method based on time interval feature of the present invention, and user completes the work of setting, needs to implement following steps:
S201, authenticate password and Preset Time spaced features are set, authenticate password is made as 6 characters, and user can artificially arrange the time interval feature with certain Special Significance, for example, using 6 beats of certain snatch of music as this Preset Time spaced features;
S202: the default authenticate password of storage, storage Preset Time spaced features.
Embodiment 2:
Fig. 3 is the embodiment process flow diagram of a kind of intelligent terminal safety certifying method based on time interval feature of the present invention, and user's triggering terminal certification mode needs authentication success just can carry out mobile payment operation, specifically needs following operation:
S301: enter certification mode;
S302: password to be certified and the current time interval feature of obtaining user's touch-screen input; In 6 password characters that current time interval feature is inputted by user, 5 time intervals sequentially form;
S303: judge that whether password to be certified and default authenticate password be in full accord, judge whether current time interval feature mates with user preset time interval feature simultaneously; In the present embodiment, user identity identification default safety coefficient is 50%, whether terminal judges password to be certified is in full accord with default authenticate password, judge in the current time interval feature of extracting in verification process, whether qualified proportion reaches 50%, if meet above-mentioned two Rule of judgment, perform step 204, otherwise execution step 205; In the present embodiment, qualified threshold value is set is 20% to user identity identification system, described qualified item refer in current time interval feature, meet in user preset time interval feature respective items ± time term in 20% scope.Specifically can regulate above-mentioned safety coefficient and threshold value according to actual conditions, when making user easy to operate, also can strengthen security;
S304: authentication success, agree to user's payment request.
S305: authentification failure.Refusal user's payment request.
As shown in Figure 4, the present invention also provides a kind of device of the intelligent terminal safety certification based on time interval feature, mainly by: module 1, authentication module 2, memory module 3 and timing module 4 are set;
Module 1 is set, the authenticate password and the Preset Time spaced features that arrange for user; Authenticate password is made as 6 characters, and user can artificially arrange the time interval feature with certain Special Significance, for example, using 6 beats of certain snatch of music as this Preset Time spaced features;
Authentication module 2, can be divided into two submodules:
Obtain submodule 2-1, in the present embodiment, current time interval feature is the time series sequentially forming according to 5 time intervals inputting in user's current authentication process in 6 password characters.
Process submodule 2-2, be used for judging that whether password to be certified and default authenticate password be in full accord, judge whether current time interval feature mates with the Preset Time spaced features in memory module 3 simultaneously, if meet above-mentioned two Rule of judgment simultaneously, authentication success, agrees to user's payment request; Otherwise, authentification failure, refusal user's payment request.In the present embodiment, user identity identification default safety coefficient is 50%, and in the current time interval feature of extracting in verification process, qualified proportion reaches 50%, thinks that current time interval feature mates with Preset Time spaced features.In the present embodiment, qualified threshold value is set is 20% to user identity identification system, described qualified item refer in current time interval feature, meet in user preset time interval feature respective items ± time term in 20% scope.Specifically can regulate above-mentioned safety coefficient and threshold value according to actual conditions, when making user easy to operate, also can strengthen security.
Memory module 3, for storing default authenticate password, Preset Time spaced features, threshold value and safety coefficient.
Timing module 4, inputs interval time of adjacent password character for obtaining user authentication process.
Module is set, for user, authenticate password and Preset Time spaced features is set;
Authentication module, is divided into two submodules:
A, obtain submodule, and module is set is connected, for obtaining the password to be certified of user's input and current authentication process user's current time interval feature;
B, processing submodule, with obtain submodule and be connected, for judging that whether the password to be certified and the default authenticate password that obtain be in full accord, judge whether current time interval feature mates with user preset time interval feature simultaneously, whether the matching degree that is current time interval feature and user preset time interval feature reaches the safety coefficient that device arranges, if simultaneously meet authentication success of above-mentioned two Rule of judgment, otherwise authentification failure;
Memory module, and arranges module and is connected, for storing authenticate password, Preset Time spaced features, threshold value and the safety coefficient of user preset;
Timing module, and obtains submodule and is connected, and inputs the interval time of adjacent password character for obtaining user authentication process.
In sum, the invention provides a kind of intelligent terminal safety certifying method and device based on time interval feature.The present invention considers that only the authenticate password of voucher one cannot accurately be identified user identity, therefore can in verification process, artificially add a kind of input feature vector and distinguish user identity, current time interval feature and the user preset time interval feature obtained by contrast verification process, judge whether authentication success.The present invention also can be according to active user's touch-screen input feature person's that accurately picks out current operation identity when disabled user steals correct authenticate password, and therefore the present invention has significantly improved the security of touch screen certification.
Principle of work of the present invention:
The present invention, using the time interval feature of the time interval composition of the adjacent password character of input as input feature vector,, by current time interval feature and the user preset time interval feature obtained in contrast verification process, judges whether authentication success.The present invention is intended to strengthen the security of existing touch screen authentication techniques, even in the time that disabled user steals correct authenticate password, the time interval feature that still can input password by user is judged operator's illegal property, thus protection terminal security.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any amendments of doing within the spirit and principles in the present invention, be equal to and replace and improvement etc., within all should being included in protection scope of the present invention.
Claims (9)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410319778.9A CN104063643A (en) | 2014-07-07 | 2014-07-07 | Intelligent terminal security authentication method and device based on time interval feature |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410319778.9A CN104063643A (en) | 2014-07-07 | 2014-07-07 | Intelligent terminal security authentication method and device based on time interval feature |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN104063643A true CN104063643A (en) | 2014-09-24 |
Family
ID=51551353
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410319778.9A Pending CN104063643A (en) | 2014-07-07 | 2014-07-07 | Intelligent terminal security authentication method and device based on time interval feature |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104063643A (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105577692A (en) * | 2016-02-03 | 2016-05-11 | 杭州朗和科技有限公司 | Website login authentication method and device |
| CN105718427A (en) * | 2016-01-15 | 2016-06-29 | 联想(北京)有限公司 | Information processing method and electronic equipment |
| CN106817221A (en) * | 2015-11-27 | 2017-06-09 | 阿里巴巴集团控股有限公司 | A kind of command identifying method and device |
| CN107808075A (en) * | 2016-09-09 | 2018-03-16 | 赖德伦 | Input verification method |
| CN108270790A (en) * | 2018-01-29 | 2018-07-10 | 佳木斯大学附属第医院 | A kind of radiotherapy information management system and management method |
| WO2019014905A1 (en) * | 2017-07-20 | 2019-01-24 | 深圳市汇顶科技股份有限公司 | Fingerprint authentication method, device and electronic apparatus |
| WO2020122968A1 (en) * | 2018-12-14 | 2020-06-18 | Didi Research America, Llc | Password authentication with input pattern analysis |
| CN112417404A (en) * | 2020-11-30 | 2021-02-26 | 掌阅科技股份有限公司 | User identity recognition method, computing device and computer storage medium |
| CN114912088A (en) * | 2021-12-20 | 2022-08-16 | 天翼数字生活科技有限公司 | Method and system for information security protection |
-
2014
- 2014-07-07 CN CN201410319778.9A patent/CN104063643A/en active Pending
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106817221A (en) * | 2015-11-27 | 2017-06-09 | 阿里巴巴集团控股有限公司 | A kind of command identifying method and device |
| CN105718427A (en) * | 2016-01-15 | 2016-06-29 | 联想(北京)有限公司 | Information processing method and electronic equipment |
| CN105718427B (en) * | 2016-01-15 | 2019-12-24 | 联想(北京)有限公司 | Information processing method and electronic equipment |
| CN105577692A (en) * | 2016-02-03 | 2016-05-11 | 杭州朗和科技有限公司 | Website login authentication method and device |
| CN107808075A (en) * | 2016-09-09 | 2018-03-16 | 赖德伦 | Input verification method |
| WO2019014905A1 (en) * | 2017-07-20 | 2019-01-24 | 深圳市汇顶科技股份有限公司 | Fingerprint authentication method, device and electronic apparatus |
| CN108270790A (en) * | 2018-01-29 | 2018-07-10 | 佳木斯大学附属第医院 | A kind of radiotherapy information management system and management method |
| CN108270790B (en) * | 2018-01-29 | 2020-07-10 | 佳木斯大学附属第一医院 | Radiotherapy information management system and management method |
| WO2020122968A1 (en) * | 2018-12-14 | 2020-06-18 | Didi Research America, Llc | Password authentication with input pattern analysis |
| US11036839B2 (en) | 2018-12-14 | 2021-06-15 | Beijing Didi Infinity Technology And Development Co., Ltd. | Password authentication with input pattern analysis |
| CN112417404A (en) * | 2020-11-30 | 2021-02-26 | 掌阅科技股份有限公司 | User identity recognition method, computing device and computer storage medium |
| CN114912088A (en) * | 2021-12-20 | 2022-08-16 | 天翼数字生活科技有限公司 | Method and system for information security protection |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104063643A (en) | Intelligent terminal security authentication method and device based on time interval feature | |
| US10635054B2 (en) | Authentication system and method thereof | |
| TWI543012B (en) | Identity verification method for mobile communication device and apparatus thereof | |
| CN103135792B (en) | A kind of utilize gravity sensing principle to carry out terminal unlocking method and device | |
| CN102819721B (en) | NFC (near field communication)-based information interaction method and device | |
| WO2017113380A1 (en) | Fingerprint recognition method and apparatus, and touch-screen terminal | |
| CN105760736B (en) | The method and tripper of application program unlock | |
| CN103745148B (en) | An information protection method and mobile terminal based on fingerprint identification | |
| CN104933339B (en) | One kind solution lock control method and mobile terminal | |
| CN104063642A (en) | Intelligent terminal safety authentication method and device based on pressure sensor | |
| CN105320864A (en) | A processing method and device for event operation | |
| CN105678147B (en) | Touch operation method and device | |
| CN103957107A (en) | Identity authentication method and device | |
| CN107145772A (en) | Terminal equipment security control method, device and terminal equipment | |
| CN105469024A (en) | Wearable device and control method thereof | |
| TWI668586B (en) | Data communication method and system, client and server | |
| CN103995572B (en) | Computer unlocking method and the computer with unlocked state | |
| CN102667797B (en) | Security keyboard and authorization usage method thereof | |
| CN105160274B (en) | A kind of guard method of user data and terminal | |
| CN105653918B (en) | Method for safely carrying out, safe operating device and terminal | |
| CN108052269A (en) | Unlocking screen optimization method, terminal device and computer-readable medium | |
| CN105653993B (en) | A kind of cipher-code input method, device and electronic equipment | |
| JP2019512786A (en) | Authorization authorization method, authorization device and authorization system | |
| CN106503997A (en) | A kind of method of payment authorization and mobile terminal | |
| JP6177729B2 (en) | Electronics |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20140924 |
|
| RJ01 | Rejection of invention patent application after publication |