Method and Apparatus for Ensuring the Security of an Electronic Certificate Tool

• US 20090013180A1
• Filed: 03/06/2008
• Published: 01/08/2009
• Est. Priority Date: 08/12/2005
• Status: Abandoned Application

• Current Assignee: Tendyron Corporation
• Original Assignee: Tendyron Corporation
• Inventors: Li, Dongsheng
• Application Number:
  US12/043,726
• Publication Number:
  US 20090013180A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The present invention discloses a method and apparatus for ensuring the security of an electronic certificate tool, the method comprising: A: inputting business information by using the input or confirmation function set up in the electronic certificate tool; and step B: encrypting, attaching signature to or/and authenticating the inputted business information by the electronic certificate tool and sending the processed business information over the Internet via a computed connected to the Internet to make business dealing or/and payment. The method and apparatus ensure the security of the electronic certificate tool and are convenient and easy to use.

Claims

1. A method for ensuring the security of an electronic certificate tool, comprising:

setting up an input or confirmation function in the electronic certificate tool;

A;

inputting business information by using the input or confirmation function set up in the electronic certificate tool;

B;

encrypting, attaching signature to or/and authenticating the inputted business information by the electronic certificate tool and sending the processed business information over the Internet via a computer connected to the Internet to make business dealing or/and payment.

2. The method according to claim 1, wherein the business information comprises one or any combination of:

business type, bank identification information, account number information, payment amount information, time information, currency type information, dealing password information, account type information and account name information.

3. The method according to claim 1, wherein the step of setting up the input or confirmation function in the electronic certificate tool comprises:

setting up one or multiple keys and key prompt functions on the electronic certificate tool, and the business information in step A is inputted or confirmed with the set up keys;

or

showing a soft keyboard on the display set up on the electronic certificate tool, and the business information in step A is inputted or confirmed with the soft keyboard;

or

setting up a biological recognition and input function, and the business information in step A is inputted or confirmed with the biological recognition and input function;

or

saving the business information, and the business information in step A is directly accessed from the saved business information;

or

setting a keyboard or multi-directional button, and the business information in step A is inputted or confirmed with the keyboard or multi-directional button.

4. The method according to claim 1, wherein the business information is a password;

the step of setting up the input or confirmation function in the electronic certificate tool comprises;

setting up a dynamic password module, and the business information in step A comprising a dynamic password generated directly by the dynamic password module.

5. The method according to claim 1, wherein the step of inputting the business information in step A comprises:

A1;

displaying a character table and a confirming cursor on a display set up on the electronic certificate tool or on the display of a computer to which the electronic certificate tool is connected, and moving the confirming cursor onto a character in the character table to confirm the input of the character;

A2;

repeating step A1 until one or more than one piece of business information is confirmed.

6. The method according to claim 5, wherein the character table comprises at least an input complete indication for confirming one or more than one piece of business information by moving the confirming cursor via the electronic certificate tool onto the input complete indication after step A1 has been repeated in step A2.

7. The method according to claim 5, in step A1 the input of the character is confirmed by showing the inputted character as prompt information.

8. The method according to claim 1, wherein the step of inputting the business information in step A1 comprises showing the inputted business information as prompt information.

9. The method according to claim 7, wherein the step of showing the prompt information comprises:

showing the prompt information on the display of a computer connected to the electronic certificate tool or/and on the display of the electronic certificate tool;

or/and

indicating the prompt information with an indicator light on the computer connected to the electronic certificate tool or/and an indicator light on the electronic certificate tool;

or/and

outputting the prompt information with the audio output device of the computer connected to the electronic certificate tool or/and the audio output device of the electronic certificate tool.

10. The method according to claim 1, before step B, further comprising:

setting up a data confirmation module in the electronic certificate tool, judging whether the business information inputted in step A is valid, proceeding to step B if the business information is valid, otherwise returning to step A to input the business information again.

11. The method according to claim 10, wherein the step of judging whether the business information inputted in step A is valid comprises:

showing the business information or playing an audio version of the business information by the electronic certificate tool or the computer connected to the electronic certificate tool, and regarding the business information valid once the user confirms the business information.

12. The method according to claim 10, further comprising:

starting up the electronic certificate tool, when the business information inputted in step A is confirmed to be valid before step B; and

shutting down the electronic certificate tool after step B.

13. The method according to claim 1, further comprising:

starting up the electronic certificate tool before step B; and

shutting down the electronic certificate tool after step B.

14. The method according to claim 12, further comprising:

notifying the user via a notify function set up in the electronic certificate tool that the business information shall be handled with the electronic certificate tool, sending, via a controller on the electronic certificate tool upon receipt of a confirmation from the user, a control signal for starting up the electronic certificate tool to a control module set in the electronic certificate tool, and starting up the electronic certificate tool by the control module, before starting up the electronic certificate tool.

15. The method according to claim 14, wherein the step of sending the control signal for starting up the electronic certificate tool to the control module comprises:

sending the control signal for starting up the electronic certificate tool to the control module by manually turning on the controller which is a hardware switch or a button;

or

sending the control signal for starting up the electronic certificate tool to the control module by clicking the controller, which is a software button set on the electronic certificate tool or shown on the display of the computer, by using the input or confirmation function set in the electronic certificate tool;

or

sending the control signal for starting up the electronic certificate tool to the control module by recognizing a biological feature or electronic feature by the controller which is a biological recognition switch or an electronic recognition switch, the biological recognition switch being a finger print recognition switch, a voice recognition switch or an iris recognition switch, the electronic recognition switch being a magnetic card recognition switch or an identification card (IC) recognition switch.

16. The method according to claim 12, wherein the step of shutting down the electronic certificate tool comprises:

sending a control signal for shutting down the electronic certificate tool to the control module of the electronic certificate tool via a controller set on the electronic certificate tool, and shutting down the electronic certificate tool by the control module;

or

sending a control signal for shutting down the electronic certificate tool from a timer to the control module of the electronic certificate tool when the elapsed operation time of the electronic certificate tool recorded by the timer exceeds a preset time limit, and shutting down the electronic certificate tool by the control module.

17. The method according to claim 16, wherein the step of sending the control signal for shutting down the electronic certificate tool to the control module comprises:

sending the control signal for shutting down the electronic certificate tool to the control module by manually turning off the controller which is a hardware switch or a button;

or

sending the control signal for shutting down the electronic certificate tool to the control module by clicking the controller, which is a software button set on the electronic certificate tool or shown on the display of the computer, by using the input or confirmation function set in the electronic certificate tool;

or

sending the control signal for shutting down the electronic certificate tool to the control module by recognizing a biological feature or electronic feature by the controller which is a biological recognition switch or an electronic recognition switch, the biological recognition switch being a finger print recognition switch, a voice recognition switch or an iris recognition switch, the electronic recognition switch being a magnetic card recognition switch or an identification card (IC) recognition switch.

31. The method according to claim 8, wherein the step of showing the prompt information comprises:

showing the prompt information on the display of a computer connected to the electronic certificate tool or/and on the display of the electronic certificate tool;

or/and

indicating the prompt information with an indicator light on the computer connected to the electronic certificate tool or/and an indicator light on the electronic certificate tool;

or/and

outputting the prompt information with the audio output device of the computer connected to the electronic certificate tool or/and the audio output device of the electronic certificate tool.

32. The method according to claim 13, further comprising:

notifying the user via a notify function set up in the electronic certificate tool that the business information shall be handled with the electronic certificate tool, sending, via a controller on the electronic certificate tool upon receipt of a confirmation from the user, a control signal for starting up the electronic certificate tool to a control module set in the electronic certificate tool, and starting up the electronic certificate tool by the control module, before starting up the electronic certificate tool.

33. The method according to claim 32, wherein the step of sending the control signal for starting up the electronic certificate tool to the control module comprises:

sending the control signal for starting up the electronic certificate tool to the control module by manually turning on the controller which is a hardware switch or a button;

or

sending the control signal for starting up the electronic certificate tool to the control module by clicking the controller, which is a software button set on the electronic certificate tool or shown on the display of the computer, by using the input or confirmation function set in the electronic certificate tool;

or

sending the control signal for starting up the electronic certificate tool to the control module by recognizing a biological feature or electronic feature by the controller which is a biological recognition switch or an electronic recognition switch, the biological recognition switch being a finger print recognition switch, a voice recognition switch or an iris recognition switch, the electronic recognition switch being a magnetic card recognition switch or an identification card (IC) recognition switch.

34. The method according to claim 13, wherein the step of shutting down the electronic certificate tool comprises:

sending a control signal for shutting down the electronic certificate tool to the control module of the electronic certificate tool via a controller set on the electronic certificate tool, and shutting down the electronic certificate tool by the control module;

or

sending a control signal for shutting down the electronic certificate tool from a timer to the control module of the electronic certificate tool when the elapsed operation time of the electronic certificate tool recorded by the timer exceeds a preset time limit, and shutting down the electronic certificate tool by the control module.

35. The method according to claim 34, wherein the step of sending the control signal for shutting down the electronic certificate tool to the control module comprises:

sending the control signal for shutting down the electronic certificate tool to the control module by manually turning off the controller which is a hardware switch or a button;

or

sending the control signal for shutting down the electronic certificate tool to the control module by clicking the controller, which is a software button set on the electronic certificate tool or shown on the display of the computer, by using the input or confirmation function set in the electronic certificate tool;

or

sending the control signal for shutting down the electronic certificate tool to the control module by recognizing a biological feature or electronic feature by the controller which is a biological recognition switch or an electronic recognition switch, the biological recognition switch being a finger print recognition switch, a voice recognition switch or an iris recognition switch, the electronic recognition switch being a magnetic card recognition switch or an identification card (IC) recognition switch.

18. An apparatus for ensuring the security of an electronic certificate tool, comprising an encryption, signature or/and authentication module and a data output module, wherein the encryption, signature or/and authentication module and the data output module are connected to each other;

a data input module, and an input confirmation module, which is connected to the encryption, signature or/and authentication module and connected to the data input module;

the apparatus is adapted to acquire the inputted business information, confirm the business information, send the business information to the encryption, signature or/and authentication module for encryption, signature attachment or/and authentication, and send the business information to a computer connected to the Internet via the data output module.

19. The apparatus according to claim 18, wherein the data input module comprises:

a keyboard, a single button or a multi-directional button, and a prompt module, adapted to output prompt information on the display or an audio notification to notify the user to input the business information via the keyboard, the single button or the multi-directional button, and to input the business information via the keyboard, the single button or the multi-directional button;

or

a soft keyboard and a control device, adapted to control the soft keyboard shown on the display with the control device to input the business information;

or

a biological recognition module, adapted to recognize a biological feature and input the biological feature as the business information;

or

a dynamic password module, adapted to generate a dynamic password directly and input the dynamic password as the business information;

or

a storage module, adapted to store business information and to directly input the stored business information upon the starting up of the electronic certificate;

or

a cursor input module, adapted to move the confirming cursor, shown on the display, repeatedly onto characters in the character table shown on the display to confirm the input of the characters, so as to obtain the business information to be inputted.

20. The apparatus of claim 19, wherein the biological recognition module comprises:

a finger print recognition module, adapted to recognize finger print and input recognized finger print as the business information;

or

a voice recognition module, adapted to recognize voice and input recognized voice as the business information;

or

an iris recognition module, adapted to recognize iris and input recognized iris as the business information.

21. The apparatus according to claim 18, further comprising an information prompt module, connected to the data confirmation module and adapted to receive the business information confirmed by the data confirmation module or to receive via the data confirmation module the business information inputted through the data input module, and to process the received business information as the prompt information.

22. The apparatus according to claim 21, further comprising a primary display module, connected to the information prompt module and adapted to show the prompt information received from the information prompt module.

23. The apparatus according to claim 21, wherein the information prompt module comprises:

a prompt information display module, adapted to send the prompt information to the primary display module of the apparatus so as to show the prompt information on a display connected to the apparatus;

or

a prompt information indication module, adapted to indicate the prompt information with an indicator light on a computer connected to the apparatus or with a standalone indicator light;

or

a prompt information audio output module, adapted to output an audio version of the prompt information with the audio output device of a computed connected to the apparatus or with a standalone audio output device.

24. The apparatus according to claim 18, further comprising a control module, connected to the encryption, signature or/and authentication module and adapted to control, according to a received control signal for starting up or shutting down the apparatus, whether the confirmed business information should be encrypted, attached signature to or/and authenticated;

and

the apparatus further comprising a controller, connected to the control module and adapted to send the control signal for starting up or shutting down the apparatus.

25. The apparatus according to claim 24, further comprising a timer, connected to the control module and adapted to time the operation of the apparatus and to stop the operation of the apparatus via the control module when the elapsed operation time of the apparatus exceeds preset time limit.

26. The apparatus according to claim 25, further comprising a time limit setting module, connected to the timer and adapted to setting up the preset time limit for the timer.

27. The apparatus according to claim 24, further comprising a notification module, connected to the control module and adapted to notify the user to send via the controller the control signal for starting up or shutting down the apparatus.

28. The apparatus according to claim 24, wherein the controller comprises:

a hardware switch or a button, adapted to send the control signal for starting up or shutting down the apparatus to the control module by turning on/off the switch or by pushing the button;

or

a software button shown on the display of a computed connected to the apparatus or on a standalone display, wherein the control signal for starting up or shutting down the apparatus is sent to the control module by clicking the software button;

or

an identity recognition switch, adapted to recognize the identity of the user by using the biological recognition switch or the electronic recognition switch and to send the control signal for starting up or shutting down the apparatus to the control module.

29. The apparatus according to claim 28, wherein the biological recognition switch in the identity recognition switch comprises a finger print recognition switch, a voice recognition switch or/and an iris recognition switch;

and

the electronic recognition switch in the identity recognition switch comprises an IC card recognition switch or/and a magnetic card recognition switch.

30. The apparatus according to claim 18, wherein the business information comprises one or any combination of:

business type, bank identification information, account number information, payment amount information, time information, currency type information, dealing password information, account type information and account name information.