KR102118476B1 - Device and method to process password input from user - Google Patents

Abstract

A user terminal according to an embodiment of the present invention includes a display device, a storage medium, and a controller configured to control the display device and the storage medium. The controller displays a random number generator configured to provide a random number and a virtual keypad including a plurality of button areas on a display device, but changes the arrangement of the virtual keypad according to the random number and selects a plurality of button areas as a password A virtual keypad driver configured to determine input values respectively corresponding to the selected button regions in response to the data, and to distribute the first data based on the random number and the second data based on the input values to an external server and a storage medium It includes a configured local controller.

Description

Device and method for processing password input from user {DEVICE AND METHOD TO PROCESS PASSWORD INPUT FROM USER}

The present invention relates to a network system, and more particularly, to an apparatus and methods for processing a password input from a user.

Recently, due to the development of data communication networks, many people use the Internet, and accordingly various services using the Internet are provided. Some of these services require passwords for user authentication, and therefore high security of passwords is required to prevent passwords entered by users from leaking attacks. For example, the password entered by the user according to this request may be encrypted and transmitted.

In order to further improve the security of the password, a virtual keypad can be provided. The arrangement of the virtual keypad changes each time it is created, and data associated with the password is determined (or generated) when the user selects the buttons of the virtual keypad as a password. Data associated with the password may be additionally encrypted, and data associated with the password or additionally encrypted data may be transmitted by replacing the password. Changing the arrangement of the virtual keypad each time it is created may mean that the data associated with the password has more security than the password itself.

The above description is only to assist in understanding the background of the technical ideas of the present invention, and therefore it cannot be understood as the content corresponding to the prior art known to those skilled in the art of the present invention.

Embodiments of the present invention are to provide an apparatus and method for providing improved security for passwords and data associated with passwords input by a user.

A user terminal for processing a password input from a user according to an embodiment of the present invention includes: a display device; Storage media; And a controller configured to control the display device and the storage medium. The controller includes a random number generator configured to provide a random number; The virtual keypad including a plurality of button areas is displayed on the display device, the array of the virtual keypad is changed according to the random number, and the selected is selected in response to user inputs selecting the plurality of button areas as the password. A virtual keypad driver configured to determine input values respectively corresponding to the button regions; And a local controller configured to distributely store the first data based on the random number and the second data based on the input values to an external server and the storage medium.

The local controller includes an encryptor configured to encrypt the random number and encrypt the input values, wherein the first data includes the encrypted random number, and the second data includes the encrypted input values. Can be.

The encryptor may be configured to encrypt the random number and the input values through an RSA algorithm.

A user terminal for processing a password input from a user according to another embodiment of the present invention, a display device; Storage media; And a processor configured to control the display device and the storage medium. The processor displays a virtual keypad including a plurality of button regions on the display device, and changes the arrangement of the virtual keypad according to a random number generated in response to a first command signal; Determine input values respectively corresponding to the selected button regions in response to user inputs selecting the plurality of button regions as the password; It is configured to distribute the first data based on the random number and the second data based on the input values to an external server and the storage medium.

The user terminal further includes a communicator configured to communicate with the external server through a network, wherein the processor stores the first data in the external server through the communicator and stores the second data in the storage medium. Can be configured.

The processor accesses the external server in response to a second command signal to obtain the first data; It may be configured to restore the random number based on the obtained first data and restore the input values based on the second data read from the storage medium.

The processor may be configured to restore the password according to the restored random number and the restored input values.

The processor is configured to decrypt the acquired first data and decrypt the read second data, the decoded first data includes the restored random number, and the decoded second data is the restored data It may include input values.

The user terminal further includes a communicator configured to communicate with the external server through a network, wherein the processor stores the first data in the storage medium and stores the second data in the external server through the communicator. Can be configured.

Another aspect of the present invention relates to a method for processing a password input from a user. The method includes generating a random number in response to a first command signal; Displaying a virtual keypad including a plurality of button regions on a display device, wherein the arrangement of the virtual keypad is changed according to the random number; Determining input values respectively corresponding to the selected button regions in response to user inputs selecting the plurality of button regions as the password; And distributedly storing the first data based on the random number and the second data based on the input values on an external server and an internal storage medium.

The distributed storage may include storing the first data in the external server through a network; And storing the second data in the internal storage medium.

The method comprises: in response to a second command signal, accessing the external server through the network to obtain the first data; Restoring the random number based on the obtained first data; Reading the second data from the storage medium; And restoring the input values based on the read second data.

The method may further include restoring the password according to the restored random number and the restored input values.

Another aspect of the invention relates to a client server that provides program codes to a user terminal. The client server includes a communicator; A processor configured to communicate with a user terminal through the communicator; And a database storing program codes to be executed by the user terminal. The program codes include first instructions for displaying a virtual keypad including a plurality of button regions on a display device of the user terminal, and changing the arrangement of the virtual keypad according to a random number; Second commands for determining input values respectively corresponding to the selected button areas in response to user inputs selecting the plurality of button areas as a password; And third commands for distributedly storing the first data based on the random number and the second data based on the input values on an external server of the user terminal and an internal storage medium of the user terminal.

The third instructions may include instructions for storing the first data in the external server and storing the second data in the internal storage medium.

The program codes access the external server to obtain the first data; Restore the random number based on the obtained first data; Reading the second data from the storage medium; Further, fourth instructions for restoring the input values based on the read second data may be further included.

The program codes may further include fifth instructions for restoring the password according to the restored random number and the restored input values.

According to embodiments of the present invention, an apparatus and method are provided that provide improved security for passwords and data associated with passwords entered by a user.

1 is a block diagram showing a network system according to an embodiment of the present invention.
2 is a block diagram showing a user terminal according to an embodiment of the present invention.
3 is a view showing an embodiment of a screen including a virtual keypad displayed on a user terminal.
4 is a table showing input values respectively corresponding to character buttons of a virtual keypad.
5 is a block diagram illustrating a method of storing a set of random numbers and input values.
6 is a flowchart illustrating a method of processing a password input from a user in a user terminal according to an embodiment of the present invention.
7 is a flowchart illustrating a method of providing a password according to an embodiment of the present invention.
8 is a block diagram showing a user terminal according to another embodiment of the present invention.
9 is a block diagram illustrating a client server capable of communicating with the user terminal of FIG. 8.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. It should be noted that in the following description, only parts necessary for understanding the operation according to the present invention are described, and descriptions of other parts will be omitted so as not to obscure the subject matter of the present invention. In addition, the present invention is not limited to the embodiments described herein and may be embodied in other forms. However, the embodiments described herein are provided to explain in detail that the technical spirit of the present invention can be easily carried out to a person having ordinary knowledge in the technical field to which the present invention pertains.

Throughout the specification, when a part is "connected" to another part, this includes not only "directly connected" but also "indirectly connected" with another element in between. . The terminology used herein is for describing specific embodiments and is not intended to limit the present invention. Throughout the specification, when a part “includes” a certain component, this means that other components may be further included rather than excluding other components unless specifically stated to the contrary. "At least one of X, Y, and Z" and "at least one selected from the group consisting of X, Y, and Z" are X one, one Y, one Z, or two of X, Y, and Z, or Any further combination (eg, XYZ, XYY, YZ, ZZ) can be interpreted. Here, “and/or” includes all combinations of one or more of the configurations.

1 is a block diagram showing a network system according to an embodiment of the present invention.

Referring to FIG. 1, the network system 1 includes a network 5, a user terminal 10, a web server 20, and a storage server 30.

The network system 1 may include a plurality of devices, servers, and/or software configurations operative to perform various methods according to embodiments of the invention described herein. The devices and/or servers shown in FIG. 1 can be configured in different ways, and the operations and services provided by the devices and/or servers can be combined or separated for the embodiments described herein. And may be performed by more or fewer devices and/or servers. One or more devices and/or servers may be run and/or maintained by the same or different enterprises.

The network 5 connects various components in the network system 1 such as the user terminal 10, the web server 20, and the storage server 30. The network 5 may include at least one of a public network, at least one private network, a wired network, a wireless network, other suitable types of networks, and combinations thereof.

The user terminal 10 may communicate with the web server 20 and the storage server 30 through the network 5. The user terminal 10 is configured to access the web server 20 to register a user ID and perform operations for using services provided by the web server 20.

In embodiments, the user terminal 110 is a computer, a UMPC (Ultra Mobile PC), a workstation, a netbook (net-book), PDA (Personal Digital Assistants), portable (portable) computer, a web tablet (web tablet), wireless It may be a computer device capable of transmitting and receiving information in a wired and/or wireless environment, such as a wireless phone, mobile phone, and smart phone.

The web server 20 may communicate with the user terminal 10 through the network 5 to provide various services. The web server 20 may request data for user authentication from the user terminal 10 before providing some of the services. The user terminal 10 may process the entered password when the user enters the password, and transmit the processed data to the web server 20 as data associated with the password. The web server 20 may perform user authentication using the transmitted data.

In order to improve security for a password input by a user, the user terminal 10 may provide a virtual keypad as a user interface. When the command signal for calling the virtual keypad is generated internally, the user terminal 10 generates a random number in response to the generated command signal, and generates and displays a virtual keypad having an arrangement that varies according to the generated random number. Can be. When receiving user inputs for selecting button regions included in the virtual keypad as a password, the user terminal 10 may determine input values respectively assigned to the selected buttons. Random numbers and input values may be provided as data associated with a password.

Random numbers and input values may be further processed according to various methods, and embodiments of the present invention are not limited thereto. For example, random numbers and input values can be encrypted. For example, when the web server 20 requests a digitally signed public certificate, the digital server can digitally sign the public certificate using random numbers and input values and transmit the digitally signed public certificate to the web server 20.

The storage server 30 can communicate with the user terminal through the network 5. The storage server 30 provides a storage space for the user terminal 10 to access and store data.

2 is a block diagram showing a user terminal according to an embodiment of the present invention. 3 is a view showing an embodiment of a screen including a virtual keypad displayed on a user terminal. 4 is a table showing input values respectively corresponding to character buttons of a virtual keypad. 5 is a block diagram illustrating a method of storing a set of random numbers and input values.

Referring to FIG. 2, the user terminal 100 includes first to third interfaces 101, 102, 103, a controller 110, a display device 120, a storage medium 130, and a communicator 140. It can contain.

The controller 110 may communicate with the display device 120, the storage medium 130, and the communicator 140 through the first to third interfaces 101 to 103, respectively. In embodiments, the first to third interfaces 101 to 103 may be provided as components of the system bus included in the user terminal 100. The first interface 101 provides a communication interface between the controller 110 and the display device 120. The second interface 102 provides a communication interface between the controller 110 and the storage medium 130. The third interface 103 provides a communication interface between the controller 110 and the communicator 140.

The controller 110 includes a local controller 111, a random number generator 112, and a virtual keypad driver 113. The local controller 111 may communicate with other components in the user terminal 100 through a channel (CH). The local controller 111 may operate in response to command signals received through the channel CH. The local controller 111 controls the random number generator 112 to output a random number by outputting the first control signal CTRL1 when the first command signal for calling the virtual keypad is received through the channel CH. Can be. The local controller 110 may control the virtual keypad driver 113 to generate a virtual keypad by outputting a second control signal CTRL2.

The random number generator 112 is configured to generate a random number in response to the first control signal CTRL1. In FIG. 2, the random number generator 112 is shown as being included in the controller 110. However, this is exemplary, and the random number generator 112 may be disposed outside the controller 110 and included in other components of the user terminal 100.

The random number can be generated according to various methods. For example, the random number may be a time stamp. As another example, the random number may be an output value calculated using a time stamp as an input value. The random number generator 112 transmits the generated random number RD to the virtual keypad driver 113.

The virtual keypad driver 113, in response to the second control signal CTRL2, generates a virtual keypad according to the random number RD and generates the generated virtual keypad to the display device 120 through the first interface 101. It is configured to display. The virtual keypad driver 113 changes the arrangement of the virtual keypad according to the received random number (RD).

Referring to FIG. 3 together with FIG. 2, a screen displayed on the user terminal 100 includes a password display area 210 and a virtual keypad 220. The virtual keypad 220 includes a password input area 230, and the password input area 230 includes a plurality of button areas. Each of the button regions may be filled with a letter 221 or provided as an inactive symbol 222. Whenever a user input for selecting a button area of the password input area 230 is received, a character 221 corresponding to the selected button area may be displayed in the password display area 210. Alternatively, in order to prevent the password from being recognized by someone other than the user, an appropriate symbol may be displayed in the password display area 210 instead of a letter corresponding to the selected button area. The button area provided as the inactive symbol 222 may not be selected as a password. In FIG. 3, the button regions provided as the inactive symbol 222 are patterned diagonally.

The arrangement of characters 221 and inactive symbols 222 filled in the button areas of the password input area 230 is changed according to the random number RD. The arrangement of the characters 221 and the inactive symbols 222 may be determined in various ways, and embodiments of the present invention are not limited thereto. For example, the number and/or positions of the inactive symbols 222 may be determined according to the random number RD, and characters 221 may be filled in the remaining button regions. The arrangement of the button regions in which the characters 221 are filled may likewise be changed according to the random number RD.

The virtual keypad 220 may further include a rearrange button 223, an enter button 224, and other necessary buttons. In response to a user input selecting the rearrange button 223, the first command signal described above may be regenerated. The controller 110 outputs the first control signal CTRL1 in response to the regenerated first command signal, and the random number generator 112 regenerates the random number RD in response to the first control signal CTRL1. Can be. The virtual keypad driver 113 provides a virtual keypad 220 including a password input area 230 having a different arrangement according to the regenerated random number RD. In response to a user input for selecting the enter button 224, characters 221 of the selected button areas of the password input area 230 may be determined as a password.

The virtual keypad driver 113 responds to a user input for selecting a password using the virtual keypad 220, and inputs values corresponding to selected button areas of the password input area 230 as local input values (INVS). Transfer to the controller 111. Referring to FIG. 4, the first to mth button areas BTN1 to BTNm included in the password input area 230 correspond to first to mth input values INV1 to INVm, respectively (m is 1). Integer greater than or equal to). When at least some of the first to mth button regions BTN1 to BTNm are selected as a password, corresponding input values may be specified. The virtual keypad driver 113 may output the specified input values as an input value set (INVS).

Referring to FIG. 2 again, the local controller 111 receives the random number RD generated by the random number generator 112 and the input value set INVS generated by the virtual keypad driver 113.

The local controller 111 generates the first data based on the random number RD, generates the second data based on the input value set INVS, and stores the generated first data and the second data in a storage medium ( 130) and an external storage server (30, see FIG. 1). The local controller 111 may include an encryption/decryptor 114 configured to encrypt a random number RD and an input value set INVS, for example, through a Rivest Shamir Adleman (RSA) algorithm. In addition, the local controller 111 may distribute and store the encrypted random number and the encrypted input value set in the storage medium 130 and the storage server 30. In embodiments, as shown in FIG. 5, the local controller 111 stores a set of input values (EINVS) encrypted by the encryptor/decryptor 114 on the storage medium 130, and encrypt/decryptor 114 The random number (ERD) encrypted by may be stored in the storage server 30 through the network 105. The local controller 111 communicates with the storage medium 130 and the communicator 140 through the second and third interfaces 102 and 103, respectively. The local controller 111 writes a set of encrypted input values (EINVS) through the second interface 102 to the storage medium 130 and controls the communicator 140 through the third interface 103. The encrypted random number (ERD) may be stored in the storage server 30.

The user terminal 100 may require operations using a previously inputted password or data associated with the password without having to re-enter the password from the user. For example, the user terminal 100 may perform operations for user authentication by communicating with the web server 20 without a user input receiving a password. In this case, restoration of the password or data associated with the password is required.

A second command signal requesting a password or data associated with the password may be received by the controller 110 through the channel CH. The local controller 111 may obtain a set of distributed randomly encrypted encrypted numbers and encrypted input values from the storage medium 130 and the storage server 30. In embodiments, the local controller 111 reads the encrypted set of input values from the storage medium 130 through the second interface 102 and controls the communicator 140 through the third interface 103 to store the storage server. From 30, an encrypted random number can be obtained.

The encryption/decryptor 114 is configured to decrypt a set of encrypted random numbers and encrypted input values, for example, through a Rivest Shamir Adleman (RSA) algorithm to restore a set of random numbers and input values. Furthermore, the local controller 111 provides the restored random number (RD) and the restored set of input values (INVS) to the virtual keypad driver 113, and the virtual keypad driver 113 provides the restored random number (RD) and The password can be restored using the restored set of input values (INVS). For example, the virtual keypad driver 113 determines the button areas of the password input area 230 that was selected as the password according to the restored input value set (INVS), and the button area that was selected according to the restored random number (RD). By determining the characters corresponding to the fields, the password can be restored.

The restored random number RD and the restored input value set INVS or the restored password may be provided as a feedback signal for the second command signal. For example, the restored random number RD and the restored input value set INVS or the restored password may be provided to other components in the user terminal 100 connected through the channel CH.

In embodiments, each of the local controller 111, the random number generator 112, the virtual keypad driver 113, and the encryptor/decryptor 114 is at least one of a hardware module, a software module, a firmware module, and combinations thereof. Can be provided.

According to an embodiment of the present invention, the user terminal 100 may include first data (eg, an encrypted random number) based on a random number (RD) and second data (eg, an encrypted value) based on an input value set (INVS). , A set of encrypted input values) is distributed to the storage medium 130 and the external storage server 30. As described above, since the arrangement of the virtual keypad 220 (see FIG. 3) varies according to the random number RD, it is very difficult to restore the password using the input value set INVS without the random number RD. Likewise, it is very difficult to restore a password using a random number RD without an input value set INVS. Accordingly, even if data of any one of the storage medium 130 and the storage server 30 is leaked, the password can be safely protected as long as the data of both the storage medium 130 and the storage server 30 are not leaked. Considering that the user terminal 100 receiving a password through the virtual keypad 220 is configured to provide a random number RD and an input value set INVS as data associated with the password, the virtual keypad 220 It may mean that it provides improved security to the user terminal 100 that supports) and the network system 1 including the same. Accordingly, a user terminal 100 having improved security for a user password and a network system 1 including the same can be provided.

6 is a flowchart illustrating a method of processing a password input from a user in a user terminal according to an embodiment of the present invention.

1 and 6, in step S110, in response to the first command signal to call the virtual keypad, a random number is generated. For example, the application application installed in the user terminal 10 may generate a first command signal to generate a virtual keypad 220 (see FIG. 3 ).

In step S120, the virtual keypad 220 is generated and displayed according to the random number. The arrangement of the virtual keypad 220 is changed according to the random number.

In step S130, it is determined whether another virtual keypad 220 is requested. If so, steps S110 to S120 are performed again. For example, when a user input for selecting a rearrange button 223 of the virtual keypad 220 is received, a first command signal is generated again, and step S110 in response to the generated first command signal. And step S120 may be performed again. If not, step S140 is performed.

In step S140, user inputs for selecting a plurality of button regions of the virtual keypad 220 as a password are detected. For example, at least some of the button regions filled with characters 221 (see FIG. 3) may be selected by user inputs, and button regions filled with inactive symbols 222 (see FIG. 3) may be selected. none. In step S150, input values respectively corresponding to the selected button regions are determined.

In step S160, each of the random number and the input value set is encrypted. For example, a random number and a set of input values may be encrypted through a Rivest Shamir Adleman (RSA) algorithm. In step S170, the encrypted random number and the encrypted input value set are distributedly stored in the internal storage medium 130 (see FIG. 2) and the external storage server 30. In embodiments, the set of encrypted input values may be stored in the internal storage medium 130, and the encrypted random number may be stored in the external storage server 30.

7 is a flowchart illustrating a method of providing a password according to an embodiment of the present invention.

1 and 7, in step S210, in response to a second command signal requesting a password or data associated with a password, the external storage server 30 is accessed to obtain an encrypted random number. In step S220, the encrypted input value set is read from the internal storage medium 130 (see FIG. 2).

In step S230, each of the encrypted random number and the encrypted input value set is decrypted to restore the random number and input value set. According to an implementation example, a restored random number and a set of restored input values as a feedback signal for the second command signal may be provided as data associated with a password.

According to an implementation example, it may be required to provide a password as a feedback signal for the second command signal. In this case, step S240 may be further performed. In step S240, the password is restored according to the decrypted random number and the set of decrypted input values. For example, the button regions of the password input region 230 (see FIG. 3) that were selected as the password according to the decrypted input value set INVS are determined and correspond to the button regions that were selected according to the decrypted random number RD. The characters (221, see FIG. 3) are determined and the password can be restored. The restored password can be provided as a feedback signal for the second command signal.

According to an embodiment of the present invention, the first data (eg, encrypted random number) based on the random number and the second data (eg, encrypted input value set) based on the input value set are stored on the storage medium 130. ) And externally stored in the storage server 30. Accordingly, even if data of any one of the storage medium 130 and the storage server 30 is leaked, the password can be safely protected as long as the data of both the storage medium 130 and the storage server 30 are not leaked. Therefore, a method for processing a user password having improved security for the user password can be provided.

8 is a block diagram showing a user terminal according to another embodiment of the present invention.

Referring to FIG. 8, the user terminal 1000 includes a communicator 1100, an audio/video (A/V) input device 1200, a user interface 1300, a display device 1400, and a nonvolatile storage medium 1500. Processor 1600, and system memory 1700.

The communicator 1100 is configured to transmit a radio signal with at least one of a base station, an external server, and an external terminal on a mobile communication network. In this case, the wireless signal may include a voice call signal, a video call signal, or various types of data according to transmission/reception of text/multimedia messages. Further, the communicator 1100 is configured to access the wireless Internet. Further, the communicator 1100 is configured to perform short-range communication, and short-range such as Bluetooth, Radio Frequency Identification (RFID), Infrared Data Association (IrDA), Ultra Wideband (UWB), ZigBee, etc. Communication technologies can be used. The communicator 1100 can be provided as the communicator 140 described with reference to FIG. 2.

The A/V input device 1200 is for input of an audio signal and a video signal, and may include a camera. The camera processes the image obtained by the image sensor. The image processed by the camera may be stored in the system memory 1700 or transmitted to the outside through the communicator 1100.

The user interface 1300 receives a user input for controlling operations of the user terminal 1000 or the processor 1600. The user interface 1300 may include a key pad, a dome switch, a touch pad (static pressure/blackout), a jog wheel, a jog switch, a finger mouse, and the like. In particular, when the touch pad is integrally formed with the display device 1400, it may be referred to as a touch screen. In this case, the user interface 1300 may be visualized by the display device 1400.

The display device 1400 operates in response to the control of the processor 1600. The display device 1400 displays information processed by the user terminal 1000 or the processor 1600. For example, the display device 1400 may display an image under the control of the processor 1600. When the display device 1400 is formed integrally with the touch pad to form a touch screen, the display device 1400 may visualize the user interface 1300. The display device 1400 may be provided as the display device 120 of FIG. 2.

The display device 1400 may include at least one of various types of display devices such as a liquid crystal display, an organic light-emitting diode display, and a flexible display.

The nonvolatile storage medium 1500 may be at least one of a flash memory type, a hard disk type, and a multimedia card. The non-volatile storage medium 1500 is configured to write and read data in response to control of the processor 1600. The nonvolatile storage medium 1500 may be provided as the storage medium 130 of FIG. 2.

The communicator 1100, the audio/video (A/V) input device 1200, the user interface 1300, the display device 1400, the nonvolatile storage medium 1500, the processor 1600, and the system memory 1700 A system bus that connects with each other to provide a communication interface may be further provided. In this case, the system bus may be provided as the first to third interfaces 101 to 103 of FIG. 2.

The processor 1600 may include either a general purpose or dedicated processor, a communicator 1100, an A/V input device 1200, a user interface 1300, a display device 1400, and a nonvolatile storage medium 1500 , And controls the operations of system memory 1700.

The processor 1600 is configured to load program codes, including instructions that provide various functions when executed, from the nonvolatile storage medium 1500 to the system memory 1700 and execute the loaded program codes. When the processor 1600 is executed by the processor 1600, the virtual keypad module 1710 performing the functions of the controller 110 described with reference to FIG. 2 is loaded into the system memory 1700, and the loaded virtual keypad module (1710) can be executed. For example, the virtual keypad module 1710, when executed by the processor 1600, instructions for performing the functions of the local controller 111, instructions for performing the functions of the random number generator 112, And it may include instructions for performing the functions of the virtual keypad driver 113. The virtual keypad module 1710, when executed by the processor 1600, displays (or visualizes) the virtual keypad as an additional user interface on the display device 140, and uses the user interface 1300 to button areas of the virtual keypad. User inputs to select them.

In embodiments, system memory 1700 may be provided as a working memory of processor 1600. In FIG. 8, the system memory 1700 is shown as a separate component from the processor 1600, but this is exemplary and at least a portion of the system memory 1700 may be integrated into the processor 1600. In embodiments, system memory 1700 may be provided as a buffer memory.

The system memory 1700 may include at least one of random access memory (RAM), read only memory (ROM), and other types of computer-readable storage media.

9 is a block diagram illustrating a client server capable of communicating with the user terminal of FIG. 8.

According to an embodiment of the present invention, program codes executed by the user terminal 1000 of FIG. 8 may be provided from the client server 2000. Referring to FIG. 9, the client server 2000 may include a communicator 2100, a processor 2200, and a database 2300. The communicator 2100 may communicate with the user terminal 1000 through a network 5 (see FIG. 1 ). The database 2300 includes program codes that can be executed by the user terminal 1000 and/or the processor 1600 of FIG. 8, for example, the virtual keypad module 1710 or virtual keypad module 1710 of FIG. 8. The application application can be stored. The processor 2200 may provide the program codes stored in the database 2300 to the user terminal 1000 through the communicator 2100 in response to a request from the user terminal 1000. The program codes may be installed and executed in the user terminal 1000.

Although specific embodiments and application examples have been described herein, this is provided only to assist in a more general understanding of the present invention, and the present invention is not limited to the above embodiments and has ordinary knowledge in the field to which the present invention pertains. Various modifications and variations are possible from this description when grown.

Accordingly, the spirit of the present invention should not be limited to the described embodiments, and should not be determined, and all claims that are equivalent or equivalent to the scope of the claims as well as the claims to be described later belong to the scope of the spirit of the invention. .

10: user terminal
20: Web server
30: storage server
110: controller
120: display device
130: storage medium
140: communicator

Claims (17)

In the user terminal for processing the password input from the user:
Display device;
Storage media; And
A controller configured to control the display device and the storage medium,
The controller,
A random number generator configured to provide a random number;
A virtual keypad including a plurality of button areas is displayed on the display device, the array of the virtual keypad is changed according to the random number, and the selected button is selected in response to user inputs selecting the plurality of button areas as the password. A virtual keypad driver configured to determine input values respectively corresponding to the button regions; And
It is configured to transmit and store any one of the first data based on the random number and the second data based on the input values to an external server, and to store the other of the first data and the second data on the storage medium. Includes a local controller,
The local controller accesses the external server to obtain the one of the first data and the second data in response to a command signal, and obtains the other one of the first data and the second data from the storage medium. A user terminal configured to read. According to claim 1,
The local controller includes an encryptor configured to encrypt the random number and encrypt the input values,
The first data includes the encrypted random number,
The second data is a user terminal including the encrypted input values. According to claim 2,
The encrypter is a user terminal configured to encrypt the random number and the input values through a Rivest Shamir Adleman (RSA) algorithm. In the user terminal for processing the password input from the user:
Display device;
Storage media;
A communicator configured to communicate with an external server; And
A processor configured to control the display device, the storage medium, and the communicator,
The processor,
Displaying a virtual keypad including a plurality of button regions on the display device, and changing the arrangement of the virtual keypad according to a random number generated in response to a first command signal;
Determine input values respectively corresponding to the selected button regions in response to user inputs selecting the plurality of button regions as the password;
Any one of the first data based on the random number and the second data based on the input values is transmitted to and stored in an external server through the communicator, and the other of the first data and the second data is stored in the storage medium. Is configured to store in,
The processor, in response to a second command signal, accesses the external server to obtain the one of the first data and the second data, and the other one of the first data and the second data from the storage medium. User terminal is configured to read. The method of claim 4,
The processor is a user terminal configured to transmit the first data to the external server through the communicator and to store the second data on the storage medium. The method of claim 5,
The processor,
Accessing the external server in response to the second command signal to obtain the first data and read the second data from the storage medium,
A user terminal configured to restore the random number based on the obtained first data and restore the input values based on the read second data. The method of claim 6,
The processor,
A user terminal configured to restore the password according to the restored random number and the restored input values. The method of claim 6,
The processor is configured to decrypt the acquired first data and decrypt the read second data,
The decrypted first data includes the restored random number,
The decrypted second data includes the restored input values. The method of claim 4,
The processor is configured to store the first data in the storage medium in response to the second command signal and to transmit the second data to the external server through the communicator. In the method for handling the password entered from the user:
Generating a random number in response to the first command signal;
Displaying a virtual keypad including a plurality of button areas on a display device, wherein the arrangement of the virtual keypad is changed according to the random number;
Determining input values respectively corresponding to the selected button regions in response to user inputs selecting the plurality of button regions as the password;
Transmitting and storing any one of the first data based on the random number and the second data based on the input values to an external server, and storing the other one of the first data and the second data on an internal storage medium ; And
In response to a second command signal, the external server is accessed to obtain the first one of the first data and the second data and read the other one of the first data and the second data from the storage medium. How to include the steps. The method of claim 10,
The storing step,
Transmitting and storing the first data to the external server through a network; And
And storing the second data in the internal storage medium. The method of claim 11,
The reading step,
Acquiring the first data by accessing the external server through the network; And
Reading the second data from the storage medium,
The above method,
Restoring the random number based on the obtained first data; And
And restoring the input values based on the read second data. The method of claim 12,
And restoring the password according to the restored random number and the restored input values. Communicator;
A processor configured to communicate with a user terminal through the communicator; And
A database storing program codes to be executed by the user terminal,
The program codes are:
First commands for displaying a virtual keypad including a plurality of button regions on a display device of the user terminal, and changing the arrangement of the virtual keypad according to a random number;
Second commands for determining input values respectively corresponding to the selected button areas in response to user inputs selecting the plurality of button areas as a password;
Any one of the first data based on the random number and the second data based on the input values is transmitted to and stored in an external server of the user terminal, and the other of the first data and the second data is transferred to the user terminal. Instructions for storing on the internal storage medium of the; And
A client including fourth instructions for accessing the external server to obtain the one of the first data and the second data and to read the other of the first data and the second data from the storage medium server. The method of claim 14,
The third instructions,
A client server comprising instructions for transmitting and storing the first data to the external server and for storing the second data in the internal storage medium. The method of claim 15,
The fourth instructions,
Accessing the external server to obtain the first data;
Restore the random number based on the obtained first data;
Reading the second data from the storage medium;
And instructions for restoring the input values based on the read second data. The method of claim 16,
The program codes are:
And a fifth command for restoring the password according to the restored random number and the restored input values.

Images