Patent Application
20140317415
This application also claims priority to Taiwan Patent Application No. 102113985 filed in the Taiwan Patent Office on Apr. 19, 2013, the entire content of which is incorporated herein by reference.
The present disclosure relates to a multi-touch method that is configured for encrypting and decrypting a touch panel.
In this era of information explosion, there are a variety of media available for communication and data transmission in addition to those conventional tools, such as mail and telephone. Among which, the Internet is becoming more and more important for nearly everybody as it is considered one of the newest and most forward-looking media and surely “the medium of the future”. Nowadays, people are used to communicate or making transaction on Internet, which includes the activities of online ticket purchasing, e-mail transaction, and social network blogging. However, there could be plenty of sensitive information, such as personal data and business confidentials, being exchanged through the Internet in those activities, thereby enabling any person with malicious intent to have access to that sensitive information on Internet by any means. Consequently, there are a variety of security mechanisms being developed for protecting users from losing private and sensitive information to hacker attacks, such as a PIN-login system.
Generally, the pin for most web services using PIN-login system is composed of a pure string of numbers or English characters, which are to be inputted sequentially by a specific order as a password for authentication. However, such simple password may not be very effective in resisting attacker using either brute-force attacks or dictionary attack, since a hacker could easily program a computer to automatically and systematically generate and check all possible pin combinations until the correct combination is found. Such methods may be very time consuming but are still reasonably feasible.
The most common way to deal with brute-force attacks is by setting a restriction to the amount of error that a user is allowed to make for logging into a web service. However, although it could effectively prevent the brute-force attacks, the foregoing method also could cause certain inconveniences to a real user, especially when the user forgets his/her password, causing the user's account to be disabled during the try-and-error process. In addition, another way to deal with brute-force attacks is by increasing the amount of possible combinations required to be checked in a brute-force attack and thereby increase the time consumed before the correct password is found. Nevertheless, the increasing of possible combinations not only could be achieved by expanding the key length of the password, but also could be achieved by allowing symbols other than numbers and English characters to be used in the password string. However, asking users to remember a password consisting of a “mix of various symbols and characters” is similar to asking them to remember a sequence of bits, which is hard to remember, and only a little bit harder to crack. Therefore, users generally tend to use one simple password for all their registered web services without having the password to be changed regularly, and even design the password according to his/her personal information, such as birthday or personal ID number. By doing so, the user's privacy and property security are still endangered by hacker attack even when the amount of possible combinations for password checking had been increased exponentially.
In one exemplary embodiment, the present disclosure provides a multi-touch method, configured to a touch panel, which comprises the steps of: applying a first object to touch a first image on the touch panel for inputting a first password; and determining whether or not to touch and select a second image on the touch panel, if not, removing the first object from the touch panel for ending a first round of a password input process while enabling a password confirmation process to be proceeded.
In another exemplary embodiment, the present disclosure provides a multi-touch method, configured to a touch panel, which comprises the steps of: applying a first object to touch a first image on the touch panel for inputting a first password in a first round of a password input process; and determining whether to input a second password in a second round of the password input process, and if not, removing the first object from the touch panel for ending the first round of the password input process while enabling an authentication process to be proceeded.
In further another exemplary embodiment, the present disclosure provides a multi-touch device, which comprises: a touch panel, having a plurality of images displayed thereon; and a process unit, coupled to the touch panel for executing an encryption process and a decryption process.
Further scope of applicability of the present application will become more apparent from the detailed description given hereinafter. However, it should be understood that the detailed description and specific examples, while indicating exemplary embodiments of the disclosure, are given by way of illustration only, since various changes and modifications within the spirit and scope of the disclosure will become apparent to those skilled in the art from this detailed description.
The present disclosure will become more fully understood from the detailed description given herein below and the accompanying drawings which are given by way of illustration only, and thus are not limitative of the present disclosure and wherein:
In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the disclosed embodiments. It will be apparent, however, that one or more embodiments may be practiced without these specific details. In other instances, well-known structures and devices are schematically shown in order to simplify the drawing.
Please refer to
At step S106, an evaluation is made for determining whether or not to proceed with another password input process after the password input process, and if so, the flow proceeds back to step S102 for applying the first object again to touch the first image, otherwise, the flow proceeds to step S107. At step S107, a password confirmation process is enabled by inputting again the password combination achieved from the first and the second rounds of the password input process, and if the password confirmation process passes, i.e. the password combination inputted in step S107 conforms to the password combination achieved from the first and the second rounds of the password input process, the flow proceeds to step 108, otherwise, the password confirmation process fails and thus the flow proceeds back to S101. At step S108, the password combination is stored and registered into a device, such as a mobile phone. It is noted that each of the first object and the second object could be a finger or a touch pen, and each of the first and the second images comprises characters, numbers, or figures.
In this embodiment, the storing and registering of the established password combination is enabled according to a storage algorithm. It is noted that for those passwords inputted using multi-touch methods, different figures or characters in the same password combination could be inputted in any order at will, i.e. they are not required to be inputted one after another according to a specific order. Therefore, a specific storage algorithm without sorting order is required. In this disclosure, each pin selected in each round of a password input process is stored and registered in a bitwise manner, whereas each pin is converted to a 32-bit integer on a bit-by-bit basis. Taking a numerical password for instance, the digits 0˜9 are used for representing the bit positions from left to right in a 32-bit integer, and the bit whose corresponding number is selected is registered as “1”, and on the other hand, the bit whose corresponding number is not selected is registered as “0”. For example, when the numbers “3” and “5” are selected, the third and the fifth bits is registered as “1”, while allowing all the other bits to be “0”, as shown in the Table 1 hereinafter.
As shown in Table 1, the number “00000000000000000000000000101000” of a binary system could be converted into a number “40” of a decimal system, so that the pins selected in this round of password input process could be stored in a storage device in a form of number “40”. Moreover, when a password is selected to be composed of four pins, four 32-bit integers are required for storing such password. Similarly, if a password is composed of symbols and figures, each of such symbols and figures could first be define to correspond and map to a specific number, which could be ranged between 0 to 31 in a 32-bit integer space in a one-on-one manner. However, if there are more than 32 pins in a password, it is always possible to use more than one 32-bit integer for storing such password and thus there is never a problem that a password is too large to be stored. Consequently, it could be relative easy in password authentication and confirmation, as the authentication or confirmation could be passed when a password combination currently inputted is compared and conformed to a password combination previously registered; otherwise, the authentication or confirmation is determined to be failed.
Please refer to
At step S206, an evaluation is made for determining whether or not the password combination inputted by the previous steps is confirmed to be correct, and if not, the flow proceeds back to step S201, otherwise, the flow proceeds to step S207. At step S207, an evaluation is made to determine whether or not to proceed with another password input process, and if so, the flow proceeds back to step S202, otherwise, the flow proceeds to step S208. At step S208, an authentication process is enabled for authenticating whether or not the password combination inputted from the previous steps is conforming to a registered password combination, and if so, the flow proceeds to step S209, otherwise, the flow proceeds to step S210. At step S209, the authentication process is passed. At step s210, the authentication process is failed. Similarly, each of the first object and the second object could be a finger or a touch pen, and each of the first and the second images comprises characters, numbers, or figures.
Generally, for a user to establish a password combination on a device using the method shown in
Please refer to
Please refer to
Please refer to
In addition, during the executing of the decryption process by a user, a first object is applied to touch a first image displayed on the touch panel 31 for inputting a first password while simultaneously making an evaluation to determine whether or not to enable a second image on the touch panel 31 to be touched, and if not, removing the first object from the touch panel 31 for ending a first round of a password input process. However, when it is determined to have the second image to be touched, the first object is kept to engage with the touch panel 31 while enabling a second round of the password input process to be proceeded for applying a second object to touch the second image on the touch panel 31 for inputting a second password in a second round of the password input process. After ending the second round of the password input process, the first and the second passwords obtained respectively from the first and the second rounds of the password input process are combined into a password combination, whereas each of the first and the second images comprises characters, numbers, or figures. Thereafter, the process unit 32 is enable to perform an authentication process on the password combination for authenticating and checking whether the password combination is conformed to a registered password combination stored in the multi-touch device, and if so, the password combination is determined to be correct and passes the authentication process for allowing the user to successfully log into the multi-touch device.
To sum up, the multi-touch methods provided in the present disclosure increases the amount of possible password combinations for a multi-touch device using existing pin symbols that are already familiar to its users, without having the users to use another new pin symbols that may be difficult to memorize. Taking a device supporting two-point touch for example, when the device is configured to be set with a password combination with four-digit number, e.g. 9876, and thus there could be five different ways of different amount of rounds to be used for setting such password combination, as following:
It is noted that any conventional password input method is performed in a way similar to the foregoing first way (1). On the other hand, by only enabling a two-point touch, there are four additional password combinations available, as indicated in (2), (3), (4) and (5). Thus, it is clear that the multi-touch methods provided in the present disclosure could increase the amount of possible password combinations for a multi-touch device using only existing pin symbols that are already familiar to its users, without having the users to use another new pin symbols.
With respect to the above description then, it is to be realized that the optimum dimensional relationships for the parts of the disclosure, to include variations in size, materials, shape, form, function and manner of operation, assembly and use, are deemed readily apparent and obvious to one skilled in the art, and all equivalent relationships to those illustrated in the drawings and described in the specification are intended to be encompassed by the present disclosure.
| Number | Date | Country | Kind |
|---|---|---|---|
| 102113985 | Apr 2013 | TW | national |
