System for amending single point password

Abstract

The invention discloses a one-point password modifying system. The system comprises two modules of a password strategy module and a password modifying module. The password strategy module defines the validity period of the password, and modifies the interface visit address. The password modifying module reminds the user to modify the password when the validity period of the password is expired, and a new password is automatically generated. The prior password and the new password are filled into the corresponding domain in the modification interface of the password. If other information which needs the user to fill manually does not exist in the modification interface of the password, the password modifying module can automatically finish the password modification, or else, the user is reminded to continue to finish the modification work of the password.

Description

technical field [0001] The invention relates to a password management technology, in particular to a single-point password modification system, which can be used to automatically modify passwords regularly or remind users to modify passwords, and automatically generate new passwords to help users complete password modification work, thereby improving password security. Background technique [0002] Password is the most commonly used user authentication method. For example, when logging into an e-mail, we need to provide a user name and password to enter the e-mail, view or send e-mails. For example, when engaging in electronic transactions on the Internet, we also need to provide Only user name and password can be used to enter one's own account and carry out trading activities. However, password authentication is very insecure in practical applications. The main reason is that users generally choose easy-to-remember passwords for the convenience of memory. In addition, beca...

AI Technical Summary

Problems solved by technology

[0002] Password is the most commonly used user authentication method. For example, when logging into an e-mail, we need to provide a user name and password to enter the e-mail, view or send e-mails. For example, when engaging in electronic transactions on the Internet, we also need to provide Only user name and password can be used to enter one's own account and carry out trading activities. However, password authentication is very insecure in practical applications. The main reason is that users generally choose easy-to-remember passwords for the convenience of memory. In addition, because most Most Internet service providers do not require users to change their passwords regularly, so many users never change their passwords for a long time. This provides enough time for password attackers to decipher passwords, such as using dictionary attacks or BRUTE-FORCE attack.

[0003] In order to reduce the possibility of passwords being deciphered by these attacks and reduce the risk of passwords being deciphered, users should regularly change the passwords of each account. One way is to let all network service providers implement password security policies and require users to change passwords regularly. First of all, this kind of solution is not realistic, because no organization has the authority to force all network service providers to do this. Second, even if all network service providers do this, they cannot meet the needs of users , because everyone has different needs for security. For the same service, such as e-mail, different users have different views on its security. If no distinction is made, all users are required to modify it in a fixed cycle Passwords cannot fully meet the different needs of users for security. Another solution is to let users decide when to change their passwords. As mentioned above, if there is no reminder or mandatory, most users will forget to change their passwords .Especially for users with multiple passwords, for the sake of convenience, they are generally reluctant to take the initiative to change their passwords regularly.

[0004] Currently, there is no system to help users change their passwords periodically.

Images