A password strength evaluation method based on personal information
An evaluation method and password technology, which is applied in the field of information security, can solve problems such as increasing user information, leaking personal asset losses, and failing to evaluate results of weak passwords, achieving the effect of improving accuracy and security
Active Publication Date: 2020-10-16
EAST CHINA NORMAL UNIV
View PDF2 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
At the same time, if the attacker conducts a targeted password guessing attack based on the user's password construction behavior, that is, using a targeted password guessing attack based on the user's personal information, the risk of user information leakage and personal asset loss will be greatly increased. risk
The current mainstream password strength testers are still unable to give accurate evaluation results for weak passwords in this situation
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment
[0030] like figure 1 As shown, the password strength evaluation method based on personal information is divided into three stages: specifically:
[0031] Personal information collection stage: When the user registers for the website service, extract the personal information impact factor field that may be used to construct the user password.
[0032] Classification and labeling processing stage: respectively classify the extracted password construction influence factor fields and label the influence factor fields according to the actual transformation form;
[0033] Password strength value calculation stage: when the user enters the password, calculate the coverage value of the influence factor in the user's constructed password according to the extracted and collected user information influence factor, and combine the coverage value with the heuristic detection method or pattern detection method to calculate Export order strength value. The target site chooses itself to acc...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a password strength evaluation method based on personal information. The method comprises the following steps that: when a user registers website service, collecting the influence factor field of personal information used for user password construction; independently carrying out classification on the influence factor field, and carrying out tagging processing on the influence factor field according to a practical transformation form; when the user inputs the password, according to an extracted and collected user information influence factor, calculating a coverage degree value which contains the personal information in the influence factor field in the password constructed by a current user, and combining the coverage value with a traditional heuristic method and pattern detection method to calculate a password strength value; and selecting a maximum threshold value which permits to contain the personal identification information in an acceptance password by a target website as an acceptance measurement index of the password strength. The invention puts forward the password strength evaluation method in which a personal identification information measurement factor is added. The method has the characteristics that the password strength value is instantly and effectively fed back, and an influence factor is plug and play and can be easily selected, and a user is assisted in selecting the password with a higher safety degree.
Description
technical field [0001] The invention belongs to the technical field of information security, in particular to a user password strength evaluation method based on personal information. Background technique [0002] With the development of the Internet and the continuous advancement of the informatization process, personal daily life is continuously networked, and assets are continuously digitized. Identity authentication has become a basic means to ensure user information security. Due to the characteristics of simplicity, ease of use, low cost, and ease of deployment, text passwords have gradually become the most widely used identity authentication method in ensuring the security of information systems. But at the same time, due to the user's need for memorability, the password is not composed of random characters in the actual sense, but is directly related to the internal motivation and external environment of the user's behavior. Therefore, users often choose weak passwo...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/46
CPCG06F21/46
Inventor 何道敬叶冉
Owner EAST CHINA NORMAL UNIV