Host password control method based on zero trust

Abstract

The invention discloses a host password management and control method based on zero trust. The host password management and control method comprises a method for bringing a host into management and control, a method for forcibly resetting a host password after the host password exceeds the validity period and a method for processing login password abnormity. A password generated through a password construction strategy can meet the strength requirement of the host password, the weak password risk of the host is remarkably reduced, management and auditing of the host password are achieved through unified management and control, execution of a regular forced replacement strategy of the host password is ensured, the host password is stored in an entity identity recognition card, the difficulty of password cracking and identity counterfeiting is remarkably improved, meanwhile, a user does not need to record complex host passwords, password-free login can be completed through the identity identification card, and full-life-cycle management of the host password is achieved.

Description

technical field [0001] This application relates to network security host security management, in particular to a zero-trust-based host password management and control method. Background technique [0002] Weak passwords are a typical network and information security problem, which widely exist in various occasions. Once the host passwords involved in the network are cracked by network attackers, identity spoofing, illegal access, privilege theft, etc. will occur, resulting in leakage or loss of important data. Even if the attacker only obtains the password of the non-core system host, he will have the conditions to perform lateral jumps within the network and further escalate privileges, and then pose a threat to the security of the core system. According to the "barrel principle" of network security protection, the overall security level of the system depends on the "short board" of system security protection, and the host password security cannot be ignored. [0003] In ...

AI Technical Summary

Problems solved by technology

[0006] 3. The password of the host computer is usually set by the machine user. When the network security is strengthened, the workload of host security verification and auditing is heavy, and it is difficult to realize automatic auditing and unified management.

Images