A random obfuscation method for user passwords

Abstract

The invention discloses a random confusion method for a user password. The method includes the following steps that 1, a rectangular area is generated in a registration page to serve as a random confused value acquisition area; 2, after an initial password is set by a user, operation is performed in the random confused value acquisition area; 3, data of operation performed in the random confused value acquisition area by the user are acquired to generate an information digest of random confusion information; 4, a server generates random digits; 5, confusion is conducted on the initial password set by the user according to the information digest of the random confusion information and the random digits. The random confusion method cannot be used for generating passwords and can only be used for confusing passwords of users, so that hash values in the server are dispersed greatly, the hash values are prevented from being inverted by an MD5 database, after a user database is cracked, the password information of the users can still be hidden effectively, and therefore the security of the users and the security of website are guaranteed.

Description

technical field [0001] The invention relates to the field of data processing, in particular to a password processing method for user information databases. Background technique [0002] At present, the Internet and mobile Internet applications are developing rapidly, and a large number of traditional businesses are being transplanted to the Internet. People will register personal data in various websites or mobile applications in daily life due to the needs of life or work. ID card, bank account, contact number, address and other private information, the leakage of these information will cause certain troubles to the user's life. What's more serious is that once the user's password is leaked on the mall or trading website, the account balance will be stolen, the order information will be modified, etc., which will bring great economic losses to the user and the website operator. Generally speaking, the leakage of user passwords is caused by the user's improper handling of p...

AI Technical Summary

Problems solved by technology

However, the random salt generated on the website server side is completed by an automatic mechanism, which is largely pseudo-random. Therefore, although it can raise the security threshold, the randomness is still not strong enough to disturb the result of the hash value of the password. not ideal