Method and device for periodically checking and correcting privileged account

Abstract

The invention discloses a method and a device for periodically checking and correcting a privileged account. The method comprises the following steps of: A) hosting the privileged account to a privileged account security management system; B) associating a high-permission correction account on an account detail page of the privileged account; C) configuring a regular verification password strategyfor the privileged account; D) judging whether a regular password verification strategy is met or not, and if so, executing the step E); otherwise, continuing to judge in the step; executing a privileged account password verification process, judging whether verification succeeds or not, and if so, finishing password verification; otherwise, executing the step F); f) when the password verification fails, triggering a privileged account password correction process, judging whether the password is successfully modified or not, and if so, finishing password correction to enable the new passwordto meet the password strategy requirement; otherwise, exiting. According to the invention, the password of the privileged account can be checked at regular intervals by customizing a strategy, and the password can be automatically corrected when the password fails to be checked, so that the security and availability of the privileged account are improved.

Description

technical field [0001] The invention relates to the field of security management of privileged accounts, in particular to a method and device for regularly checking and correcting privileged accounts. Background technique [0002] Privileged accounts refer to accounts with high risks (such as administrator accounts that can start and stop devices) or high value (such as application accounts that can read business-sensitive data). Privileged accounts are the last line of defense for enterprise data security, and ensuring the security and availability of privileged account passwords is the top priority. To this end, it is necessary to rotate the privileged account password regularly to ensure the security and compliance of the privileged account password. In addition, it is necessary to regularly verify the privileged account password to ensure the availability of the privileged account password and the normal operation and maintenance work of the operation and maintenance pe...

AI Technical Summary

Problems solved by technology

However, because there is no effective periodic verification mechanism, most of the privileged account passwords are found to be inconsistent or lost through manual login failures, and when the privileged account password fails, automatic correction cannot be performed, and the availability of the privileged account cannot be guaranteed. As a result, privileged accounts are not protected in a timely manner, causing great security risks to enterprises in privilege management

Images