METHOD AND DEVICE FOR SECURING AN INFORMATION INTERACTION PROCESS

• US 20140074716A1
• Filed: 11/15/2013
• Published: 03/13/2014
• Est. Priority Date: 08/15/2012
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: NI, Yihan
• Granted Patent: US 10,055,731 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 20/401 Transaction verification

Abstract

An electronic device with one or more processors, memory, and a display detects a user interaction with a user interface of a first application and, in response to detecting the user interaction with the user interface of the first application, determines whether one or more security parameters are satisfied, where a first security parameter is satisfied when a network access point being used by the electronic device satisfies predefined criteria. In accordance with a determination that the one or more security parameters are satisfied, the device: displays a security keyboard on the display corresponding to a second application different from the first application; and receives user information input via the security keyboard by a user of the electronic device. The device transmits the user information to a target terminal.

Claims

1. A method of securing an information interaction process, comprising:

at an electronic device with one or more processors, memory, and a display;

detecting a user interaction with a user interface for a first application;

in response to detecting the user interaction with the user interface for the first application, determining whether one or more security parameters are satisfied, wherein a first security parameter is satisfied when a network access point being used by the electronic device satisfies predefined criteria;

in accordance with a determination that the one or more security parameters are satisfied;

displaying a security keyboard on the display corresponding to a second application different from the first application; and

receiving user information input via the security keyboard by a user of the electronic device; and

transmitting the user information to a target terminal.

2. The method of claim 1, wherein a second security parameter of the one or more security parameters is satisfied when a Uniform Resource Locator (URL) associated with the user interface for the first application is secure.

3. The method of claim 1, wherein a third security parameter of the one or more security parameters is satisfied when web page information associated with the user interface for the first application is secure.

4. The method of claim 1, wherein a fourth security parameter of the one or more security parameters is satisfied when an application signature for the first application matches a locally stored application signature for the first application.

5. The method of claim 1, further comprising, verifying an address associated with the target terminal;

and

transmitting the user information to the target terminal comprises transmitting the user information to the target terminal after the address associated with the target terminal is verified.

6. The method of claim 1, further comprising, in accordance with a determination that the one or more security parameters are verified, encrypting, by the second application, the user information after receiving the user information input via the security keyboard.

7. The method of claim 1, wherein:

the first application is a payment application;

the user interface for the first application corresponds to an information interaction process; and

the second application is a security application.

8. An electronic device, comprising:

one or more processors; and

memory;

a display; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions that when executed by the one or more processors cause the device to;

detect a user interaction with a user interface for a first application;

in response to detecting the user interaction with the user interface for the first application, determine whether one or more security parameters are satisfied, wherein a first security parameter is satisfied when a network access point being used by the electronic device satisfies predefined criteria;

in accordance with a determination that the one or more security parameters are satisfied;

display a security keyboard on the display corresponding to a second application different from the first application; and

received user information input via the security keyboard by a user of the electronic device; and

transmit the user information to a target terminal.

9. The electronic device of claim 8, wherein a second security parameter of the one or more security parameters is satisfied when a Uniform Resource Locator (URL) associated with the user interface for the first application is secure.

10. The electronic device of claim 8, wherein a third security parameter of the one or more security parameters is satisfied when web page information associated with the user interface for the first application is secure.

11. The electronic device of claim 8, wherein a fourth security parameter of the one or more security parameters is satisfied when an application signature for the first application matches a locally stored application signature for the first application.

12. The electronic device of claim 8, wherein the instructions further cause the device to verify an address associated with the target terminal;

and

transmitting the user information to the target terminal comprises transmitting the user information to the target terminal when the address associated with the target terminal is verified.

13. The electronic device of claim 8, wherein the instructions further cause the device to encrypt, by the second application, the user information, in accordance with a determination that the one or more security parameters are verified and after receiving the user information input via the security keyboard.

14. The electronic device of claim 8, wherein:

the first application is a payment application;

the user interface for the first application corresponds to an information interaction process; and

the second application is a security application.

15. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with one or more processors, memory, and a display, cause the device to:

detect a user interaction with a user interface for a first application;

in response to detecting the user interaction with the user interface for the first application, determine whether one or more security parameters are satisfied, wherein a first security parameter is satisfied when a network access point being used by the electronic device satisfies predefined criteria;

in accordance with a determination that the one or more security parameters are satisfied;

display a security keyboard on the display corresponding to a second application different from the first application; and

received user information input via the security keyboard by a user of the electronic device; and

transmit the user information to a target terminal.

16. The non-transitory computer readable storage medium of claim 15, wherein a second security parameter of the one or more security parameters is satisfied when a Uniform Resource Locator (URL) associated with the user interface for the first application is secure.

17. The non-transitory computer readable storage medium of claim 15, wherein a third security parameter of the one or more security parameters is satisfied when web page information associated with the user interface for the first application is secure.

18. The non-transitory computer readable storage medium of claim 15, wherein a fourth security parameter of the one or more security parameters is satisfied when an application signature for the first application matches a locally stored application signature for the first application.

19. The non-transitory computer readable storage medium of claim 15, wherein the instructions further cause the device to verify an address associated with the target terminal;

and

transmitting the user information to the target terminal comprises transmitting the user information to the target terminal when the address associated with the target terminal is verified.

20. The non-transitory computer readable storage medium of claim 15, wherein the instructions further cause the device to encrypt, by the second application, the user information, in accordance with a determination that the one or more security parameters are verified and after receiving the user information input via the security keyboard.