Semantic transformation-based password enhancing method

Abstract

The invention discloses a semantic transformation-based password enhancing method. The method comprises the following steps of: command blacklist matching: matching a password submitted by a user withan existing password blacklist; password strength assessment: assessing the strength of the password through comparing a generation probability for calculating user passwords with a set probability threshold value; password segmentation: segmenting the password into a plurality of fragments after carrying out semantic analysis on weak password; and password semantic transformation and enhancement: transforming the password fragments through a predefined transformation algorithm to ensure that the enhanced password and the original password has certain similarity. According to the method, theusers are fundamentally enabled to use fewer weak passwords through using a blacklist technology, and algorithms such as password strength assessment and semantic analysis and segmentation are used, so that the password availability is ensured, the password strength is improved, the guessing attack defensing ability of the passwords is strengthened and the password safety is improved.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a password strengthening method based on semantic transformation. Background technique [0002] With the in-depth advancement of the informatization process, passwords are widely used in various current computer systems as a basic identity authentication method to ensure user information security. In the foreseeable future, passwords will still be the most important identity authentication method. [0003] The user's password needs to meet the requirements of both usability and security. Usability is used to measure the memorability of the password, and security is used to measure the guessability of the password. However, most users do not have enough information to ensure that the passwords they use are secure enough. In order to ensure the security of user passwords, mainstream services or websites provide password creation policies (Password Creation Policies, PC...

AI Technical Summary

Problems solved by technology

In 2007, Vu et al found that a strict password generation strategy can effectively resist password guessing attacks, but it also increases the difficulty for users to create and use passwords.

In 2013, Mazurek et al. found that high-strength passwords are likely to be mistyped by users

In 2015, Ur et al. found that inappropriate password generation strategies adopted by many services caused a heavy burden on users.

Images