Password updating method

Abstract

The invention discloses a password updating method and system. The method comprises: receiving a user name as well as an original password and a new password corresponding to the user name; separately modifying the original password and the new password to obtain an original modified password and a new modified password; encrypting the new modified password via the original modified password to obtain a new modified password ciphertext; processing the original modified password and the new modified password to generate a first check code; and sending the user name, the new modified password ciphertext and the first check code. According to the method, the new and old passwords are mutually associated for verification to prevent new and old password information from being divulged; the new password is protected by the old password, so that the risk caused by divulgence of the new password can be avoided, and the authentication security can be improved; meanwhile, the accuracy of the new password is ensured by adopting an additional verification code.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to a method and system for updating passwords. Background technique [0002] Information in the computer network world is represented by a specific set of data, including user identity information, which is also represented by data. Since computers can only recognize the user's digital identity, the authorization of the user is also based on the user's digital identity. authorization. [0003] How to ensure that the operator who operates with a digital identity is the legal owner of this digital identity, that is, how to ensure that the physical identity of the operator corresponds to the digital identity? Based on this problem, identity authentication is proposed, which serves as a protection network asset The first pass of the country plays a pivotal role. [0004] At present, in client-server or browser-server applications, the user name / password authentication method...

AI Technical Summary

Problems solved by technology

[0004] At present, in client-server or browser-server applications, the user name / password authentication method is generally supported when performing identity authentication. However, when users modify passwords, many application systems have insufficient security mechanisms Careful, there are problems such as the old and new passwords are irrelevant, and the old and new passwords are not protected, which easily leads to fraudulent use, theft and modification of user identities and passwords

[0005] For the above-mentioned problems in related technologies, no effective solution has been proposed yet

Images