Password resetting method and password verifying method and device

Abstract

The invention provides a password resetting method and a password verifying method and device. The password verifying device is used for a website backstage server, wherein the server comprises a first verification module for carrying out password verification corresponding to a first password verification mode and a second verification module for carrying out password verification corresponding to a second password verification mode. The password verifying device comprises a judging module for judging the password verification mode corresponding to a password verification request when receiving the password verification request carrying a user name and password information and generated in the user login process to obtain a judgment result; and a first processing module used for, when the judgment result shows that the corresponding password verification mode is the first password verification mode, obtaining password information, and generating a first target password abstract corresponding to the first password verification mode and a second target password abstract corresponding to the second password verification mode. When the user logs in with a correct password of the old scheme for one time, update of the password of the new scheme is achieved, thereby reducing user operation and reducing network burden.

Description

technical field [0001] The invention relates to the field of Internet and data services, in particular to a password reset method, a password verification method and a device. Background technique [0002] In modern society, it is more and more important to protect user information through password settings, but due to system upgrades or security reasons, websites need to replace the password encryption scheme for user login. After the user password is processed by the encryption scheme, it is stored in the server that accepts the password in a digested ciphertext different from the plaintext of the password, so as to prevent the password stored in the database from being obtained by a person with administrator authority. Because the user login password is not stored in plaintext, the system cannot obtain the plaintext of the user password from the ciphertext, so the new ciphertext cannot be obtained by calculating the original stored ciphertext. Existing technology solutio...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a password reset method, password verification method and device to solve the problem that when the service provider changes the password encryption scheme, the user's operation is too complicated, and the reason for changing the password needs to be notified to the user, and the amount of information is transmitted during the change process. Large, problems that place a significant burden on the system

Images