Abstract:
A method for inputting a password and a device thereof are disclosed in the invention, relating to the information security field and solving the problem that a password input by a user is easy to be intercepted. The method includes steps that, a password inputting device acquires an instruction in accordance with ISO/IEC 7816 standard from an upper computer, and determines whether the instruction is a password checking instruction or not, and if it is not, the device sends the instruction to the smart card; or else if it is, the device receives the password input by the user, encloses it to the password checking instruction, sends the instruction enclosed with the password to the smart card, receives the result of executing the password checking instruction from the smart card, and sends the result to the upper computer. The solution of the invention is used for improving the security of inputting a password in avoidance that the password is intercepted when being transmitted.

Description:
FIELD OF THE INVENTION 
       [0001]    The present invention relates to the information security field, in particular to a method for inputting a password and a device therefor. 
       Prior Art 
       [0002]    At present, after a password is input by a user, it is commonly received by a terminal device (e.g. a computer) connected to the networking, and sent to the service center of a bank by the networking and authenticated by a bank service center. During the process of transmitting the password input by the user by the networking, the password input by a user is easy to be intercepted by an illegal user, and therefore the security of the password input by a user is paid more attention. 
         [0003]    In order to eliminate the problem of the lower security of inputting and transmitting the password input by a user, many solutions are provided, such as digital certificates, however they failed to solve the problem completely. The password input by a user is still received by a terminal device (e.g. a computer) connected to the networking, and when the terminal device is illegally controlled or monitored, in the process of the inputting, the illegal user can intercept the password input by a user on a terminal device connected to the networking, which damages security of the password input by a user. 
       SUMMARY OF THE INVENTION 
       [0004]    A method for inputting a password and a device therefor are provided in the invention, making the password uneasy to be intercepted in process of transmission, so that it improves the security of inputting a password. 
         [0005]    In order to realize the above-mentioned object, solutions are applied in the invention. 
         [0006]    A method for inputting a password comprises: 
         [0007]    receiving an instruction in accordance with ISO/IEC 7816 standard from an upper computer; 
         [0008]    determining whether the instruction is a password checking instruction; 
         [0009]    if it is not, sending the instruction to the smart card; and 
         [0010]    if it is, receiving the password input by the user, and enclosing the password input by the user to the password checking instruction, sending the instruction to the smart card, receiving the result of executing the password checking instruction from the smart card, and sending the result to the upper computer. 
         [0011]    A password inputting device comprises 
         [0012]    an instruction acquiring module for acquiring an instruction in accordance with ISO/IEC 7816 standard from an upper computer, 
         [0013]    an instruction determining module for determining whether the instruction is a password checking module, 
         [0014]    an inputting module for receiving the password input by a user after the instruction determining module determines that the instruction is a password checking instruction, 
         [0015]    an instruction modifying module for enclosing the password input by the user to the password checking instruction, 
         [0016]    a second communication module for sending the password checking instruction enclosed with the password input by the user to the smart card, and further for sending the instruction to the smart card after the instruction determining module determines that the instruction is not a password checking instruction, and for receiving the result of executing the password checking instruction from the smart card; 
         [0017]    in which the instruction acquiring module is further used for sending the result of executing the password checking instruction to the upper computer. 
         [0018]    With the solutions, the password input by a user is received on condition of electronic payment and sent to the smart card by the password inputting device, and authenticated by the smart card. In the process of inputting and transmitting a password, the password input by the user is not through a customer terminal (e.g. computer) connected to the internet, lowering the possibility of the password being intercepted, and therefore it improves the security of inputting a password. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0019]    For clear description of the embodiments of the invention or the solution in prior art, a brief description will be given to the drawings of the embodiments or in prior art. Obviously, the drawings are only for part embodiments of the invention, according to which those skilled in the art can get other drawings without an inventive work. 
           [0020]      FIG. 1  is a flow chart of the method for inputting a password in an embodiment 1 of the invention; 
           [0021]      FIG. 2  is a structure chart of the method for inputting a password in the embodiment 1 of the invention; 
           [0022]      FIG. 3  is a flow chart of the method for inputting a password in an embodiment 2 of the invention; 
           [0023]      FIG. 4  is a structural frame of the method for inputting a password in the embodiment 2 of the invention; 
           [0024]      FIG. 5  is a flow chart of the method for inputting a password in an embodiment 3 of the invention; 
           [0025]      FIG. 6  is a structural frame of the password inputting device in the embodiment 3 of the invention; 
           [0026]      FIG. 7  is a flow chart of the method of inputting a password in an embodiment 4 of the invention; and 
           [0027]      FIG. 8  is a structural frame of the password inputting device in the embodiment 4 of the invention. 
       
    
    
     DETAILED DESCRIPTION OF THE EMBODIMENTS 
       [0028]    A clear and complete description of the solutions in the embodiments of the invention will be given below with the drawings of the embodiments. Obviously, the embodiments described here are only parts of embodiments of the invention, and any others, accomplished by those skilled in the art without any inventive work, based on the above-mentioned embodiments, will be still in the scope of protection of the invention. 
       Embodiment 1 
       [0029]    A method for inputting a password is given in the embodiment 1 of the invention, as shown in  FIG. 1 , said method includes: 
         [0030]    Step  101 : a password inputting device receives an instruction from a card reader. The instruction received confirms to the 7816 regulation in format, a world-wide acknowledged smart card regulation. The instruction includes fields of CLA, INS, P1, P2, LC, and DATA. 
         [0031]    The CLA field (abbreviation of Class) refers to the type of the instruction, one byte in length. The INS field (abbreviation of Instruction), one byte in length, refers to a designated instruction (an instruction name). The P1 and P2 fields (abbreviations of Parameter 1 and Parameter 2), one byte in length each, are used for checking an INS field or for inputting data. The LC field (abbreviation of length of command parameters), refers to the number of bytes in the instruction field. The DATA field refers to the instruction data, having a length of the value of the LC field. In sum, the CLA, INS, P1 and P2 field are named as the instruction head in all, the LC field refers to the instruction parameter, and the DATA field refers to the instruction. 
         [0032]    Step  102 : after receiving the instruction from the card reader, the password inputting device checks the instruction, and determines whether it is a password checking instruction according to the instruction type in the head of the instruction, if it is not, go to Step  103 ; or else go to Step  104 . 
         [0033]    Step  103 : the password inputting device sends the instruction to a smart card so that the smart card operates according to the instruction, and ends all operations. 
         [0034]    Step  104 : the password inputting device receives a password input by a user with two methods, that is, if it receives the data input by the user with a keyboard of it within a predetermined duration, it uses the data as the password input by the user; or else, if it does not, it generates a random string and uses it as the password input by the user. 
         [0035]    Step  105 : after receiving the password input by the user, the password inputting device encloses the password to the password checking instruction. 
         [0036]    Step  106 : the password inputting device sends the password checking instruction enclosed with the password input by the user to the smart card, so that the smart card authenticates the password input. 
         [0037]    A password inputting device is provided in the embodiment of the invention, as shown in  FIG. 2 , said device includes: 
         [0038]    a card reader communication module  21 , an instruction determining module  22 , an inputting module  23 , an instruction modifying module  24 , and a second communication module  25 . 
         [0039]    The password inputting device receives an instruction from the card reader with the card reader communication module  21 , which includes a head, instruction parameters, and data. The head carries information such as instruction type and instruction name, etc., and the instruction parameters give the number of bytes of the instruction. After the receiving, the password inputting device determines whether the instruction is a password checking instruction according to the instruction type in the head of the instruction, with the instruction determining module  22 , if it is not, the device sends the instruction to the smart card with the second communication module  25 ; or else, the device receives the password input by a user with the inputting module  23  and encloses the password to the password checking instruction with the instruction modifying module  24 , and sends the password checking instruction enclosed with the password input to the smart card with the second communication module  25 . 
         [0040]    There are two methods for the inputting module  24  to receive the password input by the user, that is, if the device receives the data input by the user with a keyboard of it within a predetermined duration, it uses the data as the password input by the user; or else, if the device does not, it generates a random string and uses it as the password input by the user. 
         [0041]    In the embodiment of the invention, the password input by the user is received by the password inputting device, rather than by a customer terminal connected to internet, so that it eliminates the possibility that the password is intercepted by the customer terminal monitored by an invalid user, and therefore improves the security of inputting a password by the user. Moreover, the password input by the user is sent to the smart card by the password inputting device after an enclosure, rather than by a customer terminal connected to an internet, so that it eliminates the possibility that the password input by the user may be intercepted by an invalid user during transmission, and therefore improves the security of the password input by the user. 
       Embodiment 2 
       [0042]    A method for inputting a password in the embodiment of the invention is further provided, as shown in  FIG. 3 , said method includes the following steps. 
         [0043]    Step  301 : the password inputting device establishes a data communication connection separately with a card reader and a smart card before it receives an instruction from the card reader. The step of the connection further includes that, the password inputting device receives a reset signal from the card reader and sends it to the smart card, then receives the answer-to-reset information from the smart card and sends it to the card reader, and then receives the protocol &amp; parameter selection instruction from the card reader and sends it to the smart card, as a result, the device establishes a connection separately with the card and the card reader. 
         [0044]    Step  302 : after connecting separately with the smart card and the card reader, the password inputting device receives an instruction from the card reader in format confirming to the 7816 regulation, a world-wide acknowledged smart card regulation. The instruction includes fields of CLA, INS, P1, P2, LC, and DATA. 
         [0045]    The CLA field (abbreviation of Class) refers to the type of the instruction, one byte in length. The INS field (abbreviation of Instruction), one byte in length, refers to a designated instruction (an instruction name). The P1 and P2 fields (abbreviation of Parameter 1 and Parameter 2), one byte in length each, are used for checking the INS field or for inputting data. The LC field (abbreviation of length of command parameters), refers to the number of bytes of the instruction field. The DATA field refers to the instruction data, having a length of the value of the LC field. In sum, the CLA, INS, P1 and P2 fields are named as the instruction head in all, the LC field refers to the instruction parameter, and the DATA field refers to the instruction. 
         [0046]    Step  303 : after receiving the instruction from the card reader, the password inputting device determines whether the instruction is a password checking instruction according to the instruction type in the head of the instruction, if it is, Step  304  is executed; otherwise, Step  305  is executed. 
         [0047]    Step  304 : the password inputting device sends the instruction to the smart card, so that the smart card operates according to the instruction, then Step  309  is executed. 
         [0048]    Step  305 : the password inputting device broadcasts a prompt of inputting the password to the user by voice or display or a combination of voice and display. 
         [0049]    Step  306 : after the user receives the prompt, if the password is input by the user with a keyboard of the password inputting device within a predetermined duration, the device receives the password input with the keyboard by the user and uses it as a password input by the user; otherwise, the device automatically generates a random string and uses it as password input by the user. 
         [0050]    Step  307 : the password inputting device encloses the password input by the user to the password checking instruction, and prompts status information, such as “processing”, and “wait please”, etc. 
         [0051]    For describing the process of enclosing the password input by the user to the password checking instruction, an example of the instruction being sent by the card reader is taken by 00200000021234, wherein the head of it is 00200000. Analyzing the head, the value of the CLA field is 00, the INS field is 20, the P1 field is 00, and the P2 field is 00, which in all describes the instruction as a password checking instruction. And in the instruction, the value of the LC field is 02, describing the data of the instruction an instruction 2 bytes in length; and the value of the DATA field is 1234. The below is the process of the enclosure, including: the password inputting device deletes fields of LC and DATA, and adds the password input by the user to the blank of the DATA field of the password checking instruction. Taking the password input by the user 112233 as an example, after the addition, the password inputting device adds the parameter, corresponding to the password input by the user, to the blank of the LC field of the password checking instruction for parameter renewal of the password checking instruction, and then encloses the password input by the user to the password checking instruction and gets the result 0020000003112233. 
         [0052]    Further, before the password inputting device encloses the password input by the user to the password checking instruction, the password can be computed with algorithm, and then the password computed is enclosed to the password checking instruction. The password can be computed with any encryption algorithm or Hash algorithm in prior art. Taken 4321 as an example of the password received by the password inputting device, the password can be computed with SHA1 (Secure Hash Algorithm 1), and a result of abcd5678 is gotten. Analyzing the result, the LC field is 04 and the DATA field is abcd5678, and therefore the password checking instruction gotten from the result is 0020000004abcd5678. 
         [0053]    Step  308 : after the enclosure, the password inputting device sends the password checking instruction enclosed with the password input by the user to the smart card, so that the smart card authenticates the password input by the user. 
         [0054]    Step  309 : the password inputting device receives the result, gotten from executing the instruction, from the smart card. If the password received by the smart card is the password checking instruction, the result is a result of authenticating the password input by the user, including the information whether the password input by the user is correct or not; if the password received by the smart card is not the password checking instruction, the result is a result of executing the instruction. 
         [0055]    Step  310 : the password inputting device sends the result of executing the instruction, received from the smart card, to the card reader, so that the card reader operates according to the result of executing the instruction. 
         [0056]    A password inputting device is further provided in the embodiment of the invention, as shown in  FIG. 4 , said device includes a card reader communication module  41 , a second communication module  42 , an instruction determining module  43 , a broadcasting module  44 , an inputting module  45 , an instruction modifying module  46 , and an algorithm computing module  47 . 
         [0057]    Before the password inputting device receives the instruction from the card reader, the card reader and the smart card are required to establish a communication connection separately with the password inputting device. The card reader communication module  41  is used for establishing a communication connection between the card reader and the password inputting device. The second communication module  42  is used for establishing a communication connection between the smart card and the password inputting device. The card reader communication module  41  is further used for receiving an instruction from the card reader including a head, a LC field, and a DATA field, after the communication connection is established between the card reader and the password inputting device, and between the smart card and the device. 
         [0058]    The instruction determining module  43  is used for determining whether the instruction is a password checking instruction or not, according to the instruction type in the head of the instruction after the password inputting device receives the instruction from the card reader. The broadcasting module  44  is used for broadcasting a prompt of the user inputting a password by voice or display or a combination of voice and display. After the broadcasting, the password inputting device receives the password input by the user with the inputting module  45 , and encloses the password to the password checking instruction with the instruction modifying module  46  while broadcasting the password processing status information, with the broadcasting module  44 , such as “processing”, and “wait please”, etc. After the enclosure, the password inputting device sends the password checking instruction enclosed with the password input to the smart card with the second communication module  42 . 
         [0059]    The smart card authenticates the received password input by the user, and returns the authentication result to the password inputting device. The device receives the result of executing the password checking instruction sent by the smart card, with the second communication module  42 , and sends it to the card reader, with the card reader communication module  41 , so that the card reader operates according to the result. 
         [0060]    If the instruction is not a password checking instruction, the password inputting device sends the instruction to the smart card with the second communication module  42 , so that the smart card operates according to the instruction. After the smart card executes the instruction, the password inputting device receives the result of executing the instruction with the second communication module  42 , and sends the result, with the card reader communication module  41 , to the card reader, so that the card reader operates according to the result. 
         [0061]    There are two methods for the user inputting the password, that is, after the user receives the prompt of inputting a password from the password inputting device, if he/she inputs the password with a keyboard in the password inputting device within a predetermined duration, the device receives the data input through the keyboard with the inputting module  45  and uses it as the password input by the user; if he/she does not, the device generates a random string, and receives it with the inputting module, and uses it as the password input by the user. 
         [0062]    The step of the card reader and the smart card separately establishing a data communication connection with the password inputting device includes that, firstly, the password inputting device receives a reset signal, with the card reader communication module, from the card reader and sends it, with the second communication module  42 , to the smart card; and secondly, the device receives an ATR (answer to reset) signal, with the second communication module  42 , from the smart card, and sends the signal, with the card reader communication module  41 , to the card reader; and thirdly, the device receives the protocol &amp; parameter selection instruction, with the card reader communication module  41 , from the card reader, and sends it, with the second communication module  42 , to the smart card. As a result, the card reader and the smart card establish a data communication connection separately with the password inputting device. The instruction modifying module  46  is used for enclosing the password input to the password checking instruction. The step of the enclosure includes that the password inputting device deletes the LC and DATA field of the password checking instruction, sent from the card reader, and adds the password input, to the DATA field, and modifies the LC field to the parameter corresponding to the password input by the user, with the instruction modifying module  46 . 
         [0063]    Before the device encloses the password input by the user to the password checking instruction with the instruction modifying module  46 , the password input by the user can be computed with algorithm, such as encryption algorithm or HASH algorithm. Referring to  FIG. 4 , the algorithm computing module  47  in dotted line is used for computing the password input by the user, with algorithm, such as encryption algorithm or HASH algorithm. After the computing, the instruction modifying module  46  deletes the LC field and DATA field of the password checking instruction sent by card reader and adds the computed password, input by the user, to the DATA field of the instruction, and modifies the LC field to the parameter corresponding to the computed password input by the user. 
         [0064]    In this embodiment of the invention, the password inputting device separately establishing a data communication connection with a card reader and a smart card, before receiving the instruction from the card reader, ensures the timely and exact transmission of the password input, between the card reader and the smart card. And the password input by the user is received by the password inputting device, rather than by a customer terminal connected to internet, so that it eliminates the possibility of an invalid user monitoring the customer terminal and intercepting the password input by a valid user, and therefore it improves the security of the user inputting a password. Moreover, the password input by the user is sent to the smart card by the password inputting device after the enclosure, rather than by a customer terminal connected to an internet, so that it eliminates the possibility of the password input by the user being intercepted by an invalid user during transmission, and therefore improves the security of the password input by the user. Moreover, the password input by the user, being sent to the smart card by the password inputting device, rather than by a customer terminal connected to the internet, eliminates the possibility of an invalid user intercepting the password input by a valid user through internet, and therefore it improves the security of a user inputting a password. 
       Embodiment 3 
       [0065]    A method for inputting a password is provided in the embodiment 3 of the invention, as shown in  FIG. 1 , said method includes the following steps. 
         [0066]    Step  501 : a password inputting device receives a data package with instruction sent by a server. 
         [0067]    Step  502 : after the receiving, the password inputting device parses the data package and gets the instruction, which in format confirms to the 7816 regulation, a world-wide acknowledged regulation and includes fields of CLA, INS, P1, P2, LC, and DATA. 
         [0068]    The CLA field (abbreviation of Class) refers to the type of the instruction, one byte in length. The INS field (abbreviation of Instruction), one byte in length, refers to a designated instruction (an instruction name). The P1 and P2 fields (abbreviations of Parameter 1 and Parameter 2), one byte in length each, are used for checking an INS field or for inputting data. The LC field (abbreviation of length of command parameters), refers to the number of bytes in the instruction field. The DATA field refers to the data field, with the value of the LC field in length. In sum, the CLA, INS, P1 and P2 field are named as the instruction head in all, the LC field refers to the instruction parameter, and the DATA field refers to the instruction. 
         [0069]    The step of the data parsing includes sub-steps as followings. 
         [0070]    If the password inputting device is connected to the server with a USB interface, it parses the data package, confirmed to the CCID protocol (Chip/Smart Card Interface Devices), received with the USB interface, and gets the instruction confirming to the 7816 regulation; if the device is connected to the server with a 1394 interface or other interface, it parses the data package and gets the instruction confirming to the 7816 regulation. 
         [0071]    Step  503 : after the password inputting device receives the instruction parsed, it determined whether the instruction is a password checking instruction according to the instruction type in the head of the instruction, if it is, go to Step  105 ; or else, go to Step  104 . 
         [0072]    Step  504 : the password inputting device sends the instruction to the smart card, so that the smart card operates according to the instruction. 
         [0073]    Step  505 : the password inputting device receives the password input by the user with two methods, that is, if the device receives the data input by the user with a keyboard of it within a predetermined duration, it uses the data as the password input by the user; or else, if the device does not, it generates a random string and uses it as the password input by the user. 
         [0074]    Step  506 : after the password inputting device receives the password input by the user, it encloses the password to the password checking instruction. 
         [0075]    Step  507 : after the enclosure, the password inputting device sends the password checking instruction enclosed with the password to the smart card, so that the smart card authenticates the password input by the user. 
         [0076]    A password inputting device is further provided in this embodiment, as shown in  FIG. 2 , said device includes a first communication module  61 , a data parsing module  62 , a determining module  63 , an inputting module  64 , an instruction modifying module  65 , and a second communication module  66 . 
         [0077]    The password inputting device receives the data package with the instruction from the server with the first communication module  61 , and parses the instruction from the data package with the data parsing module  62 . The parsed instruction includes a head, parameters and data, wherein the head includes information such as type and name of the instruction, etc., and the parameters refer to the number of bytes of the instruction. In the step of the parsing, if the password inputting device is connected to the server with a USB interface, it parses the data package, confirmed to the CCID protocol (Chip/Smart Card Interface Devices), received with the USB interface, and gets the instruction confirming to the 7816 regulation; and if the device is connected to the server with a 1394 interface or other interface, it parses the data package and gets the instruction confirming to the 7816 regulation. 
         [0078]    After the parsing, the password inputting device determines whether the instruction is a password checking instruction or not, according to the instruction type in the head of the instruction, if it is not, the device sends the instruction to the smart card with the second communication module  66 , so that the smart card operates according to the instruction; if it is, the device receives the password input by the user with the inputting module  64 , and encloses the password, received by the inputting module  64 , to the password checking instruction with the instruction modifying module  65 , and sends the password checking instruction to the smart card, so that the smart card authenticates the password input by the user. 
         [0079]    In the embodiment of the invention, the password input by the user is received by the password inputting device, rather than by a customer terminal (e.g. computer) connected to internet, so that it eliminates the possibility that the password is intercepted by the customer terminal monitored by an invalid user, and therefore improves the security of inputting a password by the user. Moreover, the password input by the user is sent to the smart card by the password inputting device after an enclosure, rather than by a customer terminal connected to an internet, so that it eliminates the possibility that the password input by the user may be intercepted by an invalid user during transmission, and therefore improves the security of the password input by the user. 
       Embodiment 4 
       [0080]    A method for inputting a password is provided, as shown in  FIG. 7 , said method includes the following steps. 
         [0081]    Step  701 : the password inputting device receives a data package from the server, in which an instruction is included. 
         [0082]    Step  702 : after the receiving, the password inputting device parses the data package and gets the instruction, which confirms to the 7816 regulation, a world-wide acknowledged regulation, in format and includes fields of CLA, INS, P1, P2, LC, and DATA. 
         [0083]    The CLA field (abbreviation of Class) refers to the type of the instruction, one byte in length. The INS field (abbreviation of Instruction), one byte in length, refers to a designated instruction (an instruction name). The P1 and P2 fields (abbreviations of Parameter 1 and Parameter 2), one byte in length each, are used for checking an INS field or for inputting data. The LC field (abbreviation of length of command parameters), refers to the number of bytes in the instruction field. The DATA field refers to the instruction data, having a length of the value of the LC field. In sum, the CLA, INS, P1 and P2 field are named as the instruction head in all, the LC field refers to the instruction parameter, and the DATA field refers to the instruction. 
         [0084]    In the step of the parsing, if the password inputting device is connected to the server with a USB interface, it parses the data package, confirming to the CCID protocol (Chip/Smart Card Interface Devices), received with the USB interface, and gets the instruction confirming to the 7816 regulation; and if the device is connected to the server with a 1394 interface or other interface, it parses the data package and gets the instruction confirming to the 7816 regulation. 
         [0085]    Step  703 : after the password inputting device receives the instruction, it determines whether the instruction is a password checking instruction or not, according to the instruction type in the head of the instruction, if it is not, go to Step  704 ; or else, go to Step  705 . 
         [0086]    Step  704 : the password inputting device sends the instruction to the smart card, so that the smart card operates according to the instruction. After Step  704 , a Step  709  is followed. 
         [0087]    Step  705 : the password inputting device broadcasts the prompt of the user inputting a password by voice or display or a combination of voice and display. 
         [0088]    Step  706 : after the user receives the prompt of inputting a password broadcast by the device, if the password is input by the user with a keyboard of the password inputting device within a predetermined duration, the device receives the data input with the keyboard by the user and uses it as a password input by the user; otherwise, the device automatically generates a random string and uses it as password input by the user. 
         [0089]    Step  707 : the password inputting device encloses the password input by the user to the password checking instruction, and broadcasts status information, such as “processing”, and “wait please”, etc. 
         [0090]    For describing the process of enclosing the password input by the user to the password checking instruction, an example of the instruction being sent by the server is taken by 00200000021234, wherein the head of it is 00200000. Analyzing the head, the value of the CLA field is 00, the INS field is 20, the P1 field is 00 and the P2 field is 00, which in all describes the instruction as a password checking instruction. And in the instruction, the value of the LC field is 02, describing the data of the instruction as an instruction 2 bytes in length; and the value of the DATA field is 1234. The below is the process of the enclosure, including: 
         [0091]    the password inputting device deletes fields of LC and DATA, and adds the password input by the user to the blank of the DATA field of the password checking instruction. Taking the password input by the user 112233 as an example, after the addition, the password inputting device adds the parameter, corresponding to the password input by the user, to the blank of the LC field of the password checking instruction for a parameter renew of the password checking instruction, and then encloses the password input by the user to the password checking instruction and gets the result 0020000003112233. 
         [0092]    Further, before the password inputting device encloses the password input by the user to the password checking instruction, the password can be computed with algorithm, and then the password computed is enclosed to the password checking instruction. The password can be computed with any encryption algorithm or Hash algorithm in prior art. Taken 4321 as an example of the password received by the password inputting device, the password can be computed with MD5 algorithm (Message-digest Algorithm 5), and a result of abcd5678 is gotten. Analyzing the result, the LC field is 04 and the DATA field is abcd5678, and therefore the password checking instruction gotten from the result is 0020000004abcd5678. 
         [0093]    Step  708 : after the enclosure, the password inputting device sends the password checking instruction, enclosed with the password input by the user, to the smart card, so that the smart card authenticates the password input by the user. 
         [0094]    Step  709 : the password inputting receives the result of executing the instruction from the smart card, if in the previous step, the instruction received by the smart card is a password checking instruction, the result is a result from authenticating the password input by the user, including the information whether the password input by the user is correct or not; and if it is not, the result is a result from executing the instruction. 
         [0095]    Step  710 : the password inputting device packages the result of executing the instruction which confirms to the 7816 regulation, according to the interface-related transmission protocol, and generates a data package transmitted through the USB interface, 1394 interface or others, so that the result of executing the instruction returned from the smart card is sent to the server. 
         [0096]    Step  711 , the password inputting device sends the data package, including the result of executing the instruction sent by the smart card, to the server, so that the server operates according to the result. 
         [0097]    A password input device is provided in the embodiment of the invention, as shown in  FIG. 8 , said device includes a first communication module  81 , a data parsing module  82 , a second communication module  83 , a determining module  84 , a broadcasting module  85 , an inputting module  86 , an instruction modifying module  87 , and an algorithm computing module  88 . 
         [0098]    The password inputting device receives the data package from the server with the first communication module  81 , and parses it, and gets the instruction with the data parsing module  82 , in which a head, a LC and a DATA field are included. The step of the data parsing includes sub-steps as followings. If the password inputting device is connected to the server with a USB interface, it parses the data package, confirming to the CCID protocol (Chip/Smart Card Interface Devices), received with the USB interface, and gets the instruction confirming to the 7816 regulation; and if the device is connected to the server with a 1394 interface or others, it parses the data package and gets the instruction confirming to the 7816 regulation. 
         [0099]    After the instruction is gotten by data parsing, the password inputting device determines whether the instruction is a password checking instruction or not, according to the instruction type in the head of the instruction, with the determining module  84 ; and if it is, a password is input, commonly beginning with a prompt of the user inputting the password. The prompt is broadcast by the password inputting device with the broadcasting module  85  by voice or display or a combination of voice and display. After the prompt broadcast is received by the user, the password is input with the keyboard of the password inputting device, such as a key-pressed keyboard or a touching keyboard, and is received by the inputting module  86 . If the broadcast prompt of inputting the password is received by the user and the password is not input by the user with the keyboard within a predetermined duration, the password inputting device automatically generates a random string and the inputting module  86  is used for receiving the random string and using it as the password input by the user. 
         [0100]    After the inputting module  86  receives the password input by the user, the password inputting device encloses the password, received by the inputting module  86 , to the password checking instruction with the instruction modifying module  87 . During the enclosure, the broadcasting module  85  is used for broadcasting the processing status of the password inputting device, such as “processing”, “wait please” for prompt of the user waiting for minutes. After the enclosure, the password inputting device sends the password checking instruction enclosed with the password, to the smart card with the second communication module  83 . 
         [0101]    The smart card authenticates the password input by the user, and sends the authentication result to the password inputting device. The device receives the result of executing the password checking instruction from the smart card with the second communication module  83 , and packages the result of executing the instruction, confirming to the 7816 regulation, according to the interface-related transmission protocol with the data parsing module  82 , and generates a data package, able to being transmitted with a USE interface or a 1394 interface or others, and sends the result with the first communication module  81  to the server, so that it communicates with the server in accordance with the result. 
         [0102]    If the instruction is not a password checking instruction, the password inputting device sends the instruction to the smart card with the second communication module  83 , so that the smart card operates according to the instruction. 
         [0103]    After the smart card processes the instruction received, it sends the result of executing the instruction to the password inputting device and the device receives the result with the second communication module  83 . For sending the result to the server, the device packages the result, confirming to the 7816 regulation according to the interface-related transmission protocol with the data parsing module  82 , and generates a data package able to be transmitted with a USB interface, or a 1394 interface or others, and sends the result with the first communication module  81  to the server, so that it communicates with the server in accordance with the result. 
         [0104]    In the step of enclosing the password input to the password checking instruction by the password inputting device with the instruction modifying module, firstly, the instruction modifying module  87  deletes the LC and DATA fields of the instruction sent by the server, and adds the password input by the user to the DATA field of the instruction, and then modifies the LC field to the password-related parameter. 
         [0105]    Before the instruction modifying module  87  encloses the password input by the user, to the password checking instruction, the password can be computed with the computing module  88  in dotted line in  FIG. 4 , by algorithm, such as encryption algorithm and HASH algorithm. The computing module  88  is further used for deleting the LC and DATA field of the password checking instruction sent by the card reader, and for adding the password input by the user to the DATA field of the instruction, and for renewal of the parameters of the instruction to the parameters relating to the password input by the user. 
         [0106]    In the embodiments of the invention, the password input by the user is received by the password inputting device, rather than by a terminal (e.g. computer) connected to the internet, so that it eliminates the possibility of an invalid user monitoring the terminal and intercepting the password input by the valid user, and therefore it improves the security of a user inputting a password. Moreover, the password input by the user is enclosed and sent to the smart card by the password inputting device, rather than by a terminal connected to the internet, so that it eliminates the possibility of the password input by the user being intercepted by an invalid user in process of transmission, and therefore improves the security of the user inputting a password. 
         [0107]    With description in the above-mentioned embodiments, those skilled in the art should get clear that the invention can be executed by software and necessary hardware, or only by hardware. And therefore, the solution of the invention in essence, or the part different from that solution in prior art, can be executed by software which can be stored in a readable storage medium, such as a software disk, a hard disk or a disc, etc., including some instructions run in a computer, such as a personal computer, a server, or a device connected to the Internet, to execute the methods in the embodiments of the invention. 
         [0108]    The above-mentioned are only preferred embodiments of the invention, not a limit to the invention. Any change, substitution easy to be gotten by those skilled in the art will be protected by the invention, and therefore, the scope of protection of the invention is based on the claims.