The invention discloses a
password leakage detection method for protecting an account from large-scale
voucher filling
attack, which comprises the following steps: a
client selects a prefix of a hash value of a to-be-detected
voucher and a blind value corresponding to the prefix to form a request report, and sends the request report to a
service provider; after receiving the request report, the
service provider performs modular exponential operation on the blind value in the request report; searching a corresponding block from a
database by using prefixes of all hash values in the request report, forming a reply report by a modular exponent operation result and the block, and feeding back the reply report to the
client; and after the
client receives the reply report, performing modular index operation on a modular index operation result in the reply report, if the modular index operation result is equal to the blind value in the
database establishment stage, outputting that the
voucher of the to-be-detected voucher is leaked, and otherwise, outputting that the voucher is not leaked. The
password security of the account is effectively protected.