CN103107883B - The safety protecting method of PIN code and client - Google Patents

Abstract

The invention discloses a PIN code security protection method and a client. The method includes: loading a PIN code input system by middleware, and setting a PIN code input rule through a data interaction interface when the loading is successful; displaying a PIN code input box for The user enters the PIN code; the PIN code input system records the PIN code entered by the user, encrypts and encodes the PIN code to obtain the PIN code ciphertext, and transmits the PIN code ciphertext to the middleware through the data interaction interface; the middleware obtains the PIN code ciphertext text, to determine whether the PIN code cipher text conforms to the PIN code input rules; if so, decrypt the PIN code cipher text to obtain the PIN code; it has the beneficial effect of strengthening the PIN code at the driver layer, enhancing the security of the PIN code, and effectively It prevents the PIN code interception operation of the driver layer and the application layer, and has a strong ability of anti-keyboard hooking.

Description

Security Protection Method and Client of PIN Code

technical field

The invention relates to the technical field of information security, in particular to a PIN code security protection method and a client.

Background technique

At present, the PIN (Personal Identification Number) box on the commonly used client interface has a very low level of protection for the PIN code, and it is easy to obtain the PIN code through some hacking software or keyboard monitoring methods, which cannot prevent remote hacking and other operations; and Commonly used PIN code protection methods are combined with the realization of application program functions, so it is difficult to implement operations such as transplantation and modification of PIN code protection.

Contents of the invention

The main purpose of the present invention is to provide a PIN code security protection method and a client, aiming at enhancing the security level of the PIN code and making the transmission of the PIN code more secure.

The embodiment of the present invention discloses a security protection method of a PIN code, comprising the following steps:

The middleware loads the PIN code input system. When the loading is successful, set the PIN code input rules through the data interaction interface; display the PIN code input box for the user to enter the PIN code;

The PIN code input system records the PIN code input by the user, encrypts and encodes the PIN code to obtain a PIN code ciphertext, and transmits the PIN code ciphertext to the middleware through the data interaction interface;

The middleware obtains the PIN code ciphertext, and judges whether the PIN code ciphertext complies with the PIN code input rule; if so, decrypts the PIN code ciphertext to obtain the PIN code.

Preferably, the PIN code input system encrypts and encodes the PIN code to obtain a PIN code ciphertext including:

generate one or more random numbers, and use the random numbers or the result of cryptographic operations on the random numbers as encryption keys; or

Using a preset character string or the result of encrypting the character string as the encryption key; or

Generate one or more random numbers, and use the random number and a preset string or the result of encrypting the random number and the string as an encryption key;

Encrypt the PIN code with the encryption key to obtain P1 ciphertext, and encode the P1 ciphertext to obtain the PIN code ciphertext.

Preferably, after the step of judging whether the PIN code ciphertext complies with the PIN code input rules, it also includes:

If not, clear the PIN code input box through the data interaction interface, and return to the execution step: display the PIN code input box for the user to input the PIN code.

Preferably, after the middleware loads the PIN code input system, the steps also include:

The PIN code input system initializes the data interaction interface.

Preferably, it also includes the steps of:

The middleware clears all characters in the PIN code box through the data interaction interface, and releases the PIN code input system.

The embodiment of the invention also discloses a client for PIN code security protection, including middleware and a PIN code input system;

The middleware is used to load the PIN code input system, and when the loading is successful, set the PIN code input rules through the data interaction interface; display the PIN code input box for the user to input the PIN code;

The PIN code input system is used to record the PIN code input by the user, encrypt and encode the PIN code to obtain a PIN code ciphertext, and transmit the PIN code ciphertext to the intermediate through the data interaction interface. pieces;

The middleware is also used to obtain the PIN code ciphertext transmitted by the PIN code input system, and judge whether the PIN code ciphertext conforms to the PIN code input rule; if so, decrypt the PIN code ciphertext to obtain the PIN code.

Preferably, the PIN code input system is also used for:

generate one or more random numbers, and use the random numbers or the result of cryptographic operations on the random numbers as encryption keys; or

Using a preset character string or the result of encrypting the character string as the encryption key; or

Generate one or more random numbers, and use the random number and a preset string or the result of encrypting the random number and the string as an encryption key;

Encrypt the PIN code with the encryption key to obtain P1 ciphertext, and encode the P1 ciphertext to obtain the PIN code ciphertext.

Preferably, the middleware is also used for:

When it is judged that the PIN code ciphertext does not comply with the PIN code input rules, clear the PIN code input box through the data interaction interface, and return to the execution step: display the PIN code input box for the user to input the PIN code.

Preferably, the PIN code input system is also used for:

Initialize the data interaction interface.

Preferably, the middleware is also used for:

Through the data interaction interface, all characters in the PIN code box are cleared, and the PIN code input system is released.

The present invention loads the PIN code input system through the middleware, and when the loading is successful, sets the PIN code input rules through the data interaction interface; displays the PIN code input box for the user to input the PIN code; the PIN code input system records the PIN code input by the user , the PIN code is encrypted and encoded to obtain a PIN code ciphertext, and the PIN code ciphertext is transmitted to the middleware through the data interaction interface; the middleware obtains the PIN code ciphertext, and judges Whether described PIN code ciphertext accords with described PIN code input rule; If so, then decrypt described PIN code ciphertext, obtain the method for described PIN code, have the ability to reinforce PIN code and enhance the security of PIN code at driver layer Beneficial effects, effectively realize the authentication of the identity of the caller, and prevent the PIN code interception operation of the driver layer and the application layer; at the same time, it has a strong ability to prevent keyboard hooks, and can protect mainstream keyboard hooks and interrupt The transmission of the hook chain effectively prevents the security threat caused by the keyboard hook Trojan horse program to the PIN code. Moreover, the protection of the PIN code is carried out by an independent PIN code input system, which facilitates operations such as transplantation and modification of the PIN code protection.

Description of drawings

Fig. 1 is the schematic flow chart of the first embodiment of the security protection method of PIN code of the present invention;

Fig. 2 is in the security protection method of PIN code of the present invention, when the PIN code input system encrypts the input PIN code, obtains the schematic flow chart of an embodiment of encryption key;

Fig. 3 is the schematic flow chart of the second embodiment of the security protection method of the PIN code of the present invention;

Fig. 4 is the schematic flow chart of the third embodiment of the security protection method of the PIN code of the present invention;

Fig. 5 is the interactive flow diagram of PIN code input system and middleware of the present invention;

FIG. 6 is a schematic structural diagram of an embodiment of a client for PIN code security protection according to the present invention.

The realization of the purpose of the present invention, functional characteristics and advantages will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

detailed description

The client of the present invention is used for the security protection of PIN code adopts the security protection method of PIN code, reaches the purpose that PIN code is carried out security protection; The PIN code input box is for the user to enter the PIN code; after the user enters the PIN code, the PIN code input system encrypts and encodes the PIN code to obtain the PIN code ciphertext, and transmits the PIN code ciphertext to the The middleware, when judging that the ciphertext of the PIN code complies with the input rules of the PIN code, the middleware decrypts the ciphertext of the PIN code to obtain the PIN code conforming to the input rules.

The technical solutions of the present invention will be further described below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

With reference to Fig. 1, Fig. 1 is the schematic flow chart of the first embodiment of the security protection method of PIN code of the present invention; As shown in Fig. 1, the security protection method of PIN code of the present invention comprises the following steps:

Step S01, the middleware loads the PIN code input system, and when the loading is successful, sets the PIN code input rules through the data interaction interface;

Step S02, the middleware displays a PIN code input box for the user to input a PIN code;

After the user starts the middleware and runs the middleware, the middleware loads the PIN code and enters the system; if the loading fails, it gets the error code of the loading failure and prompts the user that the loading failed this time; if the loading is successful, it enters the system through the PIN code The security interface for data interaction sets PIN code input rules; the middleware setting PIN code input rules includes: setting character rules, maximum and minimum characters allowed to be input.

After the setting is completed, the middleware displays the PIN code input box, prompting the user to enter the corresponding PIN code.

Step S03, the PIN code input system records the PIN code input by the user, encrypts and encodes the PIN code to obtain a PIN code ciphertext, and transmits the PIN code ciphertext to the middleware through the data interaction interface.

After the user enters the corresponding PIN code in the PIN code input box, the PIN code input system immediately records the PIN code entered by the user, and at the same time, counts the number of characters of the PIN code, and encrypts the PIN code at the driver layer. The PIN code input system obtains the encryption key according to the random number and the preset hard-coded character string, and encrypts the PIN code at the driver layer.

The way for the PIN code input system to obtain the encryption key includes: the PIN code input system generates one or more random numbers, directly uses the random number as the encryption key, or performs an encryption operation on the random number, and encrypts the encrypted random number As an encryption key; use the preset character string as the encryption key, or perform an encryption operation on the preset character string, and use the encrypted preset character string as the encryption key; use the generated random number and the preset The character string is used as the encryption key, or the random number and the preset character string are encrypted, and the result of the encryption operation is used as the encryption key. A 3DES encryption algorithm may be used to perform encryption operations on the above-mentioned relevant data. Please refer to Fig. 2, Fig. 2 is in the security protection method of PIN code of the present invention, when the PIN code input system encrypts the input PIN code, obtains the flow diagram of an embodiment of encryption key; As shown in Fig. 2, PIN code input The system calls the relevant function required for PIN code encryption, and performs SHA1 (Secure Hash Algorithm, secure hash algorithm) hash on a random number passed in by the relevant function, that is, uses the secure hash algorithm to hash the incoming random number Process to obtain the first hash data, that is, Hash data 1, take the first 6 bits of Hash data 1, and save it as S1. The PIN code input system performs SHA1 hash on the preset hard-coded string, that is, uses the secure hash algorithm to process the preset hard-coded string to obtain the second hash data, namely Hash data 2, and take the last 4 of Hash data 2 bit, save it as S2. According to S1 and S2, obtain a new string S1+S2+S1, and use it as S3; at this time, take the last 3 digits of the string S1 as the string S4; use the string M1 composed of S3 and S4 as the encryption key Encrypt the PIN code entered by the user, where "M1=S3+S4+S3". The PIN code input system uses the encryption key M1 to encrypt the input PIN code to obtain the P1 ciphertext, and then encodes the P1 ciphertext to obtain the PIN ciphertext. The PIN code input system transmits the PIN code ciphertext to the middleware through a specific data interaction interface.

Since the encryption key is dynamically generated by the PIN code input system, the uniqueness of the encryption key is guaranteed; and the P1 ciphertext written into the shared memory is encoded to make the transmission of the PIN code more secure.

In the embodiment of the present invention, the method for encoding the P1 ciphertext by the PIN code input system may adopt BASE64 encoding.

Step S04, the middleware acquires the PIN code ciphertext, and judges whether the PIN code ciphertext conforms to the PIN code input rule; if yes, execute step S05; if not, return to execute step S02.

Step S05, decrypting the ciphertext of the PIN code to obtain the PIN code.

The middleware obtains the PIN code ciphertext sent by the PIN code input system, and at the same time obtains the number of characters of the PIN code ciphertext, and judges whether the number of characters of the PIN code ciphertext complies with the PIN code input rules. If the number of characters of the PIN code cipher text does not meet the PIN code input rules, the middleware clears the characters in the PIN code box through a specific data interaction interface, and returns to step S02, the middleware displays the PIN code input box, and requires the user Re-enter the PIN code. If the middleware judges that the number of characters of the PIN code ciphertext conforms to the PIN code input rule, it parses the PIN code ciphertext. The middleware analyzes the PIN code ciphertext and adopts a decryption algorithm compatible with the PIN code input system, and the decryption algorithm can be a secure hash algorithm; if the PIN code input system adopts the 3DES encryption algorithm, then the middleware encrypts the PIN code. When decrypting the text, the 3DES decryption algorithm is also used.

If the middleware fails to parse the ciphertext of the PIN code, it sends a prompt message of parsing failure, prompting the user to fail to obtain the PIN code.

The middleware analyzes the PIN code ciphertext, and after obtaining the PIN code, judges whether the PIN code complies with the PIN code input rules. If so, clears all the characters in the PIN code box through the data interaction interface of the PIN code input system, and releases the PIN code Input system; if the middleware judges that the PIN code after analysis does not meet the PIN code input rules, then through the data interaction interface of the PIN code input system, clear all the characters in the PIN code box, and return to execute step S02, and the middleware displays the PIN code Input box that requires the user to re-enter the PIN code.

Further, please refer to FIG. 3, which is a schematic flow chart of the second embodiment of the PIN code security protection method of the present invention; the difference between this embodiment and the embodiment described in FIG. 1 is that only:

Step S00, the PIN code input system initializes the data interaction interface.

After the middleware successfully loads the PIN code input system and sets the PIN code input rules, in order to ensure the security of PIN code transmission, the interaction between the PIN code input system and the middleware adopts a specific data interaction interface. The PIN code input system initializes the specific described data interaction interface according to the PIN code input rules set by the middleware-the specific implementation process is as follows:

<1>, void Clear(void)

[Function] Clear the characters in the PIN code box.

<2>, void GetLen(LONG *nLen)

[Function] Get the length of the input characters in the PIN code box.

<3>, void GetVerCtrl (BSTR *szVer)

[Function] Get the PIN code system, the version number of the control.

<4>, void GetVerDrv (BSTR *szVer)

[Function] Obtain the PIN code system and the version number of the driver file.

<5>, void GetPin (LPCTSTR bstrRand, LPCTSTR bstrContent, BSTR *szPin)

[Function] Obtain the ciphertext data of the PIN code box.

<6>, void GetLastError(LONG *nCode)

[Function] Get the last error code value of the Pin code control.

<7>, void InitPinInput(LONG minLength, LONG maxLength, LPCTSTR strRand, LPCTSTR strRule)

[Function] PIN code input control system initialization interface.

<8>, void FocusOnOrNot(LONG *pRet)

[Function] Determine whether the current input focus is in the pin code input box control.

The PIN code input system makes the PIN code protection module independent by initializing the data interaction interface, making the call of the PIN code protection module more convenient.

Further, please refer to FIG. 4, which is a schematic flow chart of the third embodiment of the PIN code security protection method of the present invention; the difference between this embodiment and the embodiment in FIG. 3 is that only:

Step S06, the middleware clears all characters in the PIN code box through the data interaction interface, and releases the PIN code input system.

The middleware analyzes the ciphertext of the PIN code, obtains the PIN code that conforms to the PIN code input rules, checks all the characters in the PIN code box through a specific data interaction interface, and releases the PIN code input system.

In this embodiment, the middleware can be a commonly used USB-shield program; taking the USB-shield program as an example, please refer to Fig. 5 for the interaction process between the middleware and the PIN code input system, and Fig. Schematic diagram of the interaction process of the software; as shown in Figure 5, after the user runs the USB-shield program, the USB-shield program calibrates the PIN code input system, sets the PIN code input rules including character rules, maximum and minimum input characters, and displays the PIN code input box for the user to enter the PIN code; after the user completes the input, click the <Submit> button, the PIN code input system will obtain the PIN code entered by the user, encrypt and encode the entered PIN code, and return the PIN code cipher text to the USB-Shield program, the U-shield program receives the PIN code ciphertext, judges that the number of characters in the PIN code ciphertext conforms to the PIN code input rules, analyzes the PIN code ciphertext, obtains the PIN code after the analysis is successful, and judges the PIN code When the PIN code input rules are met, clear all the characters in the PIN code box through a specific data interaction interface, and release the PIN code input system; If the text analysis fails or the obtained PIN code does not comply with the PIN code input rules, a prompt message will be sent to the user.

Since the U-shield program and the PIN code input system of the middleware as shown in Figure 5 both use a specific data interaction interface, and the security level of the PIN code input system is consistent with the client login control, therefore, the encryption and decryption of the client is reduced. Time of use; meanwhile, since the PIN code input system adopts the method of dynamically generating an encryption key, the uniqueness of the encryption key is ensured and the security of the PIN code is improved.

In this embodiment, by reinforcing the PIN code at the driver layer, the authentication of the caller's identity is effectively realized, and the PIN code interception operation of the driver layer and the application layer is prevented; at the same time, it has a strong ability to reverse keyboard hooks, and can Protect the mainstream keyboard hooks, interrupt the transmission of the hook chain, effectively prevent the security threat to the PIN code caused by the keyboard hook Trojan horse program, and enhance the security of the PIN code.

Referring to FIG. 6 , FIG. 6 is a structural diagram of an embodiment of a client terminal for PIN code security protection according to the present invention. As shown in FIG. 6 , the client for PIN code security protection in the present invention includes: middleware 01 and PIN code input system 02 .

The middleware 01 is used to load the PIN code input system 02, and when the loading is successful, set the PIN code input rules through the data interaction interface; display the PIN code input box for the user to input the PIN code;

The PIN code input system 02 is used to record the PIN code input by the user, encrypt and encode the PIN code to obtain a PIN code ciphertext, and transmit the PIN code ciphertext to the middleware through the data interaction interface 01;

The middleware 01 is also used to obtain the PIN code ciphertext transmitted by the PIN code input system 02, and judge whether the PIN code ciphertext conforms to the PIN code input rule; if so, decrypt the PIN code ciphertext to obtain the PIN code.

Specifically, referring to FIG. 5 again, the interaction process between the middleware 01 and the PIN code input system 02 is as follows:

After the middleware 01 successfully loads the PIN code input system and sets the PIN code input rules, in order to ensure the security of PIN code transmission, the interaction between the PIN code input system 02 and the middleware 01 adopts a specific data interaction interface. The PIN code input system 02 initializes the specific data interaction interface according to the PIN code input rules set by the middleware 01. The specific implementation process is as follows:

<1>, void Clear(void)

[Function] Clear the characters in the PIN code box.

<2>, void GetLen(LONG *nLen)

[Function] Get the length of the input characters in the PIN code box.

<3>, void GetVerCtrl (BSTR *szVer)

[Function] Get the PIN code system, the version number of the control.

<4>, void GetVerDrv (BSTR *szVer)

[Function] Obtain the PIN code system and the version number of the driver file.

<5>, void GetPin (LPCTSTR bstrRand, LPCTSTR bstrContent, BSTR *szPin)

[Function] Obtain the ciphertext data of the PIN code box.

<6>, void GetLastError(LONG *nCode)

[Function] Get the last error code value of the Pin code control.

<7>, void InitPinInput(LONG minLength, LONG maxLength, LPCTSTR strRand, LPCTSTR strRule)

[Function] PIN code input control system initialization interface.

<8>, void FocusOnOrNot(LONG *pRet)

[Function] Determine whether the current input focus is in the pin code input box control.

The PIN code input system 02 makes the PIN code protection module independent through the initialization of the data interaction interface, making the call of the PIN code protection module more convenient.

After the user starts the middleware 01 and runs the middleware 01, the middleware 01 loads the PIN code and enters the system 02; if the loading fails, it will get the error code of the loading failure, and prompt the user that the loading failed this time; if the loading is successful, then pass and The security interface of the PIN code input system 02 for data interaction sets the PIN code input rules; the middleware 01 sets the PIN code input rules including: setting character rules, maximum and minimum characters allowed to be input.

After the setting is completed, the middleware 01 displays a PIN code input box, prompting the user to input the corresponding PIN code.

After the user enters the corresponding PIN code in the PIN code input box, the PIN code input system 02 immediately records the PIN code entered by the user, and at the same time, counts the number of characters of the PIN code, and encrypts the PIN code at the driver layer. The PIN code input system 02 obtains the encryption key according to the random number and the preset hard-coded character string, and encrypts the PIN code at the driver layer.

When the PIN code input system 02 encrypts the input PIN code, the way to obtain the encryption key includes: the PIN code input system generates one or more random numbers, directly uses the random number as the encryption key, or the random number Perform encryption operation, use the encrypted random number as the encryption key; use the preset character string as the encryption key, or perform encryption operation on the preset character string, and use the encrypted preset character string as the encryption key ; Use the generated random number and the preset character string as an encryption key, or perform an encryption operation on the random number and the preset character string, and use the result of the encryption operation as the encryption key. A 3DES encryption algorithm may be used to perform encryption operations on the above-mentioned relevant data. For the specific process of obtaining the encryption key by the PIN code input system 02 , please refer to the specific description of the embodiment shown in FIG. 2 , which will not be repeated here. The PIN code input system 02 encrypts the input PIN code with an encryption key to obtain the P1 ciphertext, and then encodes the P1 ciphertext to obtain the PIN ciphertext. The PIN code input system 02 transmits the PIN code ciphertext to the middleware 01 through a specific data interaction interface. Since the encryption key is dynamically generated by the PIN code input system 02, the uniqueness of the encryption key is guaranteed; and the PIN code input system 02 encodes the P1 ciphertext written into the shared memory, making the transmission of the PIN code more efficient. There is security.

In the embodiment of the present invention, the method for encoding the P1 ciphertext by the PIN code input system 02 may adopt the BASE64 encoding method.

The middleware 01 obtains the PIN code ciphertext sent by the PIN code input system 02, and at the same time obtains the number of characters of the PIN code ciphertext, and judges whether the number of characters of the PIN code ciphertext complies with the PIN code input rules. If the number of characters in the ciphertext of the PIN code does not comply with the PIN code input rules, the middleware 01 clears the characters in the PIN code box through a specific data interaction interface, and displays the PIN code input box, requiring the user to re-enter the PIN code. If the middleware 01 judges that the number of characters of the PIN code cipher text conforms to the PIN code input rule, then analyze the PIN code cipher text. The middleware 01 analyzes the PIN code ciphertext and adopts a decryption algorithm compatible with the PIN code input system 02, and the decryption algorithm can be a secure hash algorithm; if the PIN code input system 02 adopts the 3DES encryption algorithm, then the middleware 01 When decrypting the PIN code ciphertext, the 3DES decryption algorithm is also used. If the middleware 01 fails to parse the ciphertext of the PIN code, it will send a prompt message of parsing failure, prompting the user to fail to obtain the PIN code.

Middleware 01 analyzes the PIN code ciphertext, and after obtaining the PIN code, judges whether the PIN code complies with the PIN code input rules. PIN code input system 02; if the middleware 01 judges that the analyzed PIN code does not conform to the PIN code input rules, clear all the characters in the PIN code box through the data interaction interface of PIN code input system 02, and display the PIN code input box , requiring the user to re-enter the PIN.

Since the middleware 01 and the PIN code input system 02 both adopt a specific data interaction interface, and the security level of the PIN code input system 02 is consistent with the client login control, therefore, the use time of client encryption and decryption is reduced; at the same time, due to The PIN code input system 02 adopts the method of dynamically generating an encryption key, thus ensuring the uniqueness of the encryption key and improving the security of the PIN code.

In this embodiment, by reinforcing the PIN code at the driver layer, the authentication of the caller's identity is effectively realized, and the PIN code interception operation of the driver layer and the application layer is prevented; at the same time, it has a strong ability to reverse keyboard hooks, and can Protect the mainstream keyboard hooks, interrupt the transmission of the hook chain, effectively prevent the security threat to the PIN code caused by the keyboard hook Trojan horse program, and enhance the security of the PIN code.

The above is only a preferred embodiment of the present invention, and does not limit the scope of its patents. Any equivalent structure or equivalent process transformation made by using the description of the present invention and the contents of the accompanying drawings is directly or indirectly used in other related technical fields. All are included in the scope of patent protection of the present invention in the same way.

Claims (10)

1. the safety protecting method of a PIN code, it is characterised in that comprise the following steps:

Middleware loads PIN code input system, when loading successfully, arranges PIN by data interaction interface Code input rule；Described middleware display PIN code input frame, inputs PIN code for user；

The PIN code of described PIN code input system record user input, adds described PIN code driving layer Close and coded treatment obtains PIN code ciphertext, by described PIN code ciphertext by described data interaction interface transmission To described middleware；

Described middleware obtains described PIN code ciphertext, it is judged that whether described PIN code ciphertext meets described PIN Code input rule；The most then decipher described PIN code ciphertext, obtain described PIN code.

2. the method for claim 1, it is characterised in that described PIN code input system is to described PIN Code is encrypted and obtains PIN code ciphertext with coded treatment and include:

Generate one or more random number, be encrypted computing by described random number or to described random number Result is as encryption key；Or

It is encrypted the result of computing as encryption key using a preset character string or to described character string； Or

Generate one or more random number, by described random number and a preset character string or to described at random Number and character string are encrypted the result of computing as encryption key；

With described encryption key, described PIN code is encrypted, obtains P1 ciphertext, described P1 ciphertext is carried out Coding, obtains described PIN code ciphertext.

3. the method for claim 1, it is characterised in that described whether judge described PIN code ciphertext Also include after meeting the step of described PIN code input rule:

If it is not, then empty described PIN code input frame by described data interaction interface, and return execution step: Display PIN code input frame, inputs PIN code for user.

4. the method for claim 1, it is characterised in that described middleware loads PIN code input and is Further comprise the steps of: after system

Described PIN code input system initializes described data interaction interface.

5. the method for claim 1, it is characterised in that further comprise the steps of:

Described middleware, by described data interaction interface, empties all characters in described PIN code frame, releases Put described PIN code input system.

6. the client for PIN code security protection, it is characterised in that include middleware and PIN Code input system；

Described middleware is used for, and loads PIN code input system, when loading successfully, passes through data interaction Interface arranges PIN code input rule；Display PIN code input frame, inputs PIN code for user；

Described PIN code input system is used for, the PIN code of record user's input, is driving layer to described PIN Code is encrypted and obtains PIN code ciphertext with coded treatment, described PIN code ciphertext is handed over by described data Described middleware is delivered in mutual connection oral instructions；

Described middleware is additionally operable to, and obtains the described PIN code ciphertext that described PIN code input system transmits, Judge whether described PIN code ciphertext meets described PIN code input rule；The most then decipher described PIN Code ciphertext, obtains described PIN code.

7. client as claimed in claim 6, it is characterised in that described PIN code input system is also used In:

Generate one or more random number, be encrypted computing by described random number or to described random number Result is as encryption key；Or

It is encrypted the result of computing as encryption key using a preset character string or to described character string； Or

Generate one or more random number, by described random number and a preset character string or to described at random Number and character string are encrypted the result of computing as encryption key；

With described encryption key, described PIN code is encrypted, obtains P1 ciphertext, described P1 ciphertext is carried out Coding, obtains described PIN code ciphertext.

8. client as claimed in claim 6, it is characterised in that described middleware is additionally operable to:

When judging that described PIN code ciphertext does not meets described PIN code input rule, by described data interaction Interface empties described PIN code input frame, and returns execution step: display PIN code input frame, defeated for user Enter PIN code.

Client the most as claimed in claims 6 or 7, it is characterised in that described PIN code input system It is additionally operable to:

Initialize described data interaction interface.

10. the client as described in claim 6 or 8, it is characterised in that described middleware is additionally operable to:

By described data interaction interface, empty all characters in described PIN code frame, discharge described PIN Code input system.