Method for inputting a password and a device therefor

摘要

A method for inputting a password and a device thereof are disclosed in the invention, relating to the information security field and solving the problem that a password input by a user is easy to be intercepted. The method includes steps that, a password inputting device acquires an instruction in accordance with ISO/IEC 7816 standard from an upper computer, and determines whether the instruction is a password checking instruction or not, and if it is not, the device sends the instruction to the smart card; or else if it is, the device receives the password input by the user, encloses it to the password checking instruction, sends the instruction enclosed with the password to the smart card, receives the result of executing the password checking instruction from the smart card, and sends the result to the upper computer. The solution of the invention is used for improving the security of inputting a password in avoidance that the password is intercepted when being transmitted.

主权项

1. A method for inputting a password, wherein it comprises
receiving, by a password inputting device, an instruction in accordance with ISO/IEC 7816 standard sent by an upper computer wherein the instruction comprises class field, parameter field and data field; and determining whether the instruction is a password checking instruction by a password inputting device; if it is not, sending the instruction to a smart card by the password inputting device; and if it is, receiving the password input by a user, enclosing the password input by the user to the password checking instruction by the password inputting device, sending the instruction to the smart card by the password inputting device, receiving the result of executing the password checking instruction from the smart card by the password inputting device, and sending the result to the upper computer by the password inputting device; wherein the step of enclosing the password input by the user to the password checking instruction comprises following sub-steps of deleting the parameters field and data field of the password checking instruction, adding the password input by the user to the data field of the password checking instruction, and renewing the parameters field of the password checking instruction as the parameters of the current instruction.