Strong password generation method and device based on user personal information, electronic equipment and storage medium

Abstract

The invention discloses a strong password generation method and device based on user personal information, electronic equipment and a storage medium. The method comprises the following steps: in an offline state, acquiring a target website name and personal information of a to-be-generated password input by a user; based on the personal information, obtaining a pinyin full name or an English full name of the personal information; randomly selecting a preset first number of letters from the pinyin full name or the English full name, and carrying out random capital and small case conversion or special character replacement to obtain a first character string; adding a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string; and taking the second character string as the generated strong password. According to the scheme, the strong password is generated and stored in an off-line mode, man-in-the-middle attack and data leakage risks are effectively reduced, personal information of a user is processed randomly, it is ensured that each generated password has a high entropy value and complexity, and various password cracking attacks are effectively resisted.

Description

Technical Field

[0001] The present invention relates to the technical field of password generation, and in particular to a method, device, electronic device and storage medium for generating a strong password based on user personal information. Background Art

[0002] In the digital age, the cybersecurity threats faced by individuals and enterprises are becoming increasingly complex, and people's demand for highly secure passwords has become particularly urgent. Strong password generation algorithms provide users with an effective security protection measure by constructing highly complex and unpredictable passwords. Strong passwords can significantly increase the difficulty of password cracking and effectively resist common network attack methods such as brute force cracking, dictionary attacks, and replay attacks. Strong passwords not only constitute the basic line of defense for network security, but also play a key role in maintaining user privacy and data integrity, and play an indispensable role in the current network security field.

[0003] Currently, large technology companies like Google and Microsoft are recommending the use of automatically generated strong passwords to improve the security of user accounts. These passwords usually contain a combination of uppercase letters, lowercase letters, numbers, and special characters to ensure complexity and unpredictability. Google Chrome browser provides a built-in password generator that automatically suggests a strong password when a user creates a new account. This generator can create complex passwords containing special characters and mixed uppercase and lowercase letters, which users can fill into the password field with one click. The browser's password manager can store these passwords online and automatically fill them in when needed, reducing the risk of forgetting or reusing passwords to a certain extent.

[0004] With the popularization of Internet services, users have a growing need to protect their personal data on multiple platforms. Passwords, as an authentication mechanism, play a significant role in preventing unauthorized access and data leakage. Nevertheless, users often choose easy-to-guess passwords for easy memory, which reduces the security of passwords. Therefore, it is particularly important to study algorithms that can assist users in generating complex and easy-to-remember passwords. Currently, mainstream password management tools such as Microsoft, Google, and LastPass, although they provide convenient password generation services, rely on server-side processing, which may make the system vulnerable to man-in-the-middle attacks. If the server's security measures are not sound, attackers have the opportunity to intercept and tamper with sensitive information including passwords. Summary of the invention

[0005] In order to solve the technical problem that the existing mainstream strong password generation tools rely on server-side participation and have the risk of man-in-the-middle attacks, the embodiments of the present invention provide a method, device, electronic device and storage medium for generating a strong password based on user personal information.

[0006] The technical solution of the embodiment of the present invention is achieved as follows:

[0007] An embodiment of the present invention provides a method for generating a strong password based on user personal information, the method comprising: in an offline state, obtaining a target website name and personal information to be generated input by a user; based on the personal information, obtaining the full pinyin name or English name of the personal information; randomly selecting a preset first number of letters from the full pinyin name or English name, performing random case conversion or special character replacement to obtain a first character string; adding a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string; and using the second character string as a strong password generated for the target website name.

[0008] In one embodiment, obtaining the full pinyin name or English full name of the personal information includes: if the personal information is an ID number, obtaining the first two digits of the ID number; determining the province information based on the first two digits of the ID number; and obtaining the full pinyin name of the province information based on the province information.

[0009] In one embodiment, obtaining the full pinyin name or English full name of the personal information includes: if the personal information is an ID number, obtaining the eleventh to twelfth digits of the ID number; determining the birthday month information based on the eleventh to twelfth digits of the ID number; and obtaining the full English name of the birthday month information based on the birthday month information.

[0010] In one embodiment, before obtaining the target website name and personal information of the password to be generated input by the user, the method further includes: obtaining a master password created by the user; processing the master password using a SHA-256 hash function to obtain a first hash value, and storing the first hash value in a first file; reading the content in the first file in a binary read mode, and encrypting the master password using a custom encryption algorithm to obtain a third character string, using the third character string as an encryption key to encrypt the content in the first file using an AES encryption algorithm, and storing the encryption result in a second file, and deleting the first file.

[0011] In one embodiment, after the encryption result is stored in the second file and the first file is deleted, the method further includes: obtaining a master password to be verified input by a user; encrypting the master password to be verified using a custom encryption algorithm to obtain a fourth character string, using the fourth character string as a decryption key, decrypting the data in the second file using an AES decryption algorithm to obtain a first decryption result; processing the master password to be verified using a SHA-256 hash function to obtain a second hash value; comparing the second hash value with the first decryption result, and if the comparison results are the same, executing subsequent operations.

[0012] In one embodiment, after using the second character string as a strong password generated for the target website name, the method further includes: processing the target website name using an MD5 hash operation to obtain a third hash value; reading the content in the third file in a binary read mode, and encrypting the master password using a custom encryption algorithm to obtain a fifth character string, using the fifth character string as an encryption key to perform AES encryption on the content in the third file, storing the encryption result in a fourth file, and deleting the third file.

[0013] In one embodiment, after the encryption result is stored in the fourth file and the third file is deleted, the method further includes: after receiving a password search instruction initiated by the user, obtaining a website name input by the user; processing the website name input by the user using an MD5 hash operation to obtain a fourth hash value; encrypting the master password using a custom encryption algorithm to obtain a sixth character string, using the sixth character string as a decryption key to perform AES decryption on the data in the fourth file to obtain a second decryption result; traversing the second decryption result line by line to search for a line containing the fourth hash value; after searching for a line containing the fourth hash value, searching for a strong password in the line, and feeding back the strong password as the search result of the password search instruction.

[0014] An embodiment of the present invention also provides a strong password generation device based on user personal information, and the strong password generation device based on user personal information includes: an input module, which is used to obtain the target website name and personal information to be generated of the password input by the user in an offline state; an acquisition module, which is used to obtain the pinyin full name or English full name of the personal information based on the personal information; a conversion module, which is used to randomly select a preset first number of letters from the pinyin full name or English full name, perform random case conversion or special character replacement, and obtain a first character string; an adding module, which is used to add a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string; a generation module, which is used to use the second character string as a strong password generated for the target website name.

[0015] An embodiment of the present invention further provides an electronic device, comprising: a processor and a memory for storing a computer program that can be run on the processor; wherein the processor executes the steps of any one of the above methods when running the computer program.

[0016] An embodiment of the present invention further provides a storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above methods are implemented.

[0017] The strong password generation method, device, electronic device and storage medium based on user personal information provided by the embodiment of the present invention, in an offline state, obtains the target website name and personal information to be generated of the password input by the user; based on the personal information, obtains the pinyin full name or English full name of the personal information; randomly selects a preset first number of letters from the pinyin full name or English full name to perform random case conversion or special character replacement to obtain a first string; adds a preset second number of random digital characters before the first character or after the last character of the first string to generate a second string; uses the second string as a strong password generated for the target website name. The solution provided by the present invention generates and stores strong passwords in an offline manner, effectively reducing the risks of man-in-the-middle attacks and data leakage, and improving account security. And the solution provided by this embodiment ensures that each generated password has a high entropy value and complexity by randomly processing the user's personal information, thereby effectively resisting various types of password cracking attacks and enhancing the security of the password. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A flowchart of a method for generating a strong password based on user personal information according to an embodiment of the present invention;

[0019] Figure 2 This is a schematic diagram of a user login interface according to an embodiment of the present invention;

[0020] Figure 3 This is a schematic diagram of the main interface of the tool according to an embodiment of the present invention;

[0021] Figure 4 This is a schematic diagram of a strong password generation interface according to an embodiment of the present invention;

[0022] Figure 5 A schematic diagram of a password search interface according to an embodiment of the present invention;

[0023] Figure 6 A schematic diagram of a password modification interface according to an embodiment of the present invention;

[0024] Figure 7 This is a schematic diagram of the strong password generation algorithm flow in an embodiment of the present invention;

[0025] Figure 8 It is a structural schematic diagram of a device for generating a strong password based on user personal information according to an embodiment of the present invention;

[0026] Fig. 9 1 is a diagram showing the internal structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] Before introducing this embodiment, the following contents are introduced:

[0028] PII: Personally Identifiable Information (PII) is any data that can be used to identify, distinguish, or track an individual. This includes direct identifiers such as name, social security number, email address, phone number, passport number, driver's license number, and biometric data.

[0029] Strong password: A highly secure password that usually contains at least 12 characters, combines uppercase and lowercase letters, numbers and special symbols, has a high entropy value, has no obvious pattern, is difficult to predict and crack, and can effectively resist common password attacks such as dictionary attacks, brute force attacks, rainbow table cracking, keyboard pattern cracking, social engineering, time attacks and phishing.

[0030] The present invention will be described in further detail below with reference to the accompanying drawings and embodiments.

[0031] The embodiment of the present invention provides a method for generating a strong password based on user personal information, such as Figure 1 As shown, the method includes:

[0032] Step 101: In an offline state, obtaining the target website name and personal information input by the user for generating a password;

[0033] Step 102: Based on the personal information, obtain the pinyin full name or English full name of the personal information;

[0034] Step 103: randomly selecting a preset first number of letters from the pinyin full name or the English full name, performing random uppercase and lowercase conversion or special character replacement to obtain a first character string;

[0035] Step 104: Add a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string;

[0036] Step 105: Use the second character string as a strong password generated for the target website name.

[0037] This embodiment scheme is based on the personal information input by the user, identifies the personal information, and generates a strong password through character conversion, special character insertion, and digital mixing. This scheme does not rely on the server, and the generated strong password is saved on the user's host, reducing the risk of man-in-the-middle attacks and data leakage, and improving account security.

[0038] Compared with the prior art, this embodiment has the following differences:

[0039] (1) The implementation logic of the strong password generation algorithm is different.

[0040] (2) Generate and store strong passwords offline to effectively reduce the risk of man-in-the-middle attacks and data leakage, and improve account security.

[0041] The present embodiment will be described below with reference to a specific example.

[0042] join Figure 2 , this embodiment requires the user to pass identity authentication before performing any operation. The master password created by the user when using it for the first time will be encrypted by the Advanced Encryption Standard (AES) algorithm and stored in a file named mp.txt.aes (i.e., the second file). During subsequent use, the user must enter the master password to complete identity authentication, thereby ensuring the security of the tool and the confidentiality of user data.

[0043] like Figure 3 As shown, this embodiment consists of four core modules: a password generation module, a password search module, a password modification module, and a file modification record module. The core function of the password generation module is to generate a customized password with high security based on the personal information entered by the user; the password search module allows the user to quickly search and obtain the strong password corresponding to a specific website by entering the name of the website; the password modification module is used to enable the user to modify the password; and the file modification record module is responsible for tracking the modification history of the password storage file and the specific time point of each modification.

[0044] like Figure 4 As shown in the figure, the strong password contains two main text input areas. The user first enters the name of the target website for which they want to generate a password in the first text box, and in the second text box, the user enters their personal identity information. The algorithm in this embodiment can automatically generate a strong password that meets security standards based on the personal information entered by the user.

[0045] In order to further enhance security, this embodiment combines the generated strong password with the target website name input by the user and processes it using the MD5 hash function. The specific processing process will be described in detail later.

[0046] The password search interface of this embodiment is as follows Figure 5 As shown, the user only needs to enter the target website name and the system will automatically retrieve the password information related to the website.

[0047] The password modification interface of this embodiment is as follows Figure 6 As shown, the user needs to enter the target website name and provide personal information, and the system will automatically modify the password information related to the website.

[0048] The password construction algorithm proposed in this embodiment is as follows: Figure 7 As shown. The algorithm is designed to generate personalized and complex passwords, combining the user's personal information and randomization technology to improve the security and unpredictability of the password. The following are the detailed steps of the algorithm:

[0049] (1) Determination and conversion of province information: The algorithm first extracts the first two digits from the user's ID number to determine the user's province. Taking Shanghai as an example, the first two digits of the ID number are "31". Then, the name of the province is converted into pinyin form, namely "shanghai", which is used as the basic element for password construction.

[0050] (2) English representation of birthday information: The user's birthday month information is converted to its corresponding English month name. For example, if the user was born in February, the number "2" is converted to "February".

[0051] (3) Randomization: To increase the complexity of the password, the algorithm will randomize the English string of the above combination. This includes randomly selecting some letters to convert the uppercase and lowercase letters, and replacing specific letters with special characters. For example, "shanghai" may be randomly converted to "$Han9_ha!", and "february" may be converted to "43bru@rY".

[0052] (4) Addition of random numbers: Finally, the algorithm appends a randomly generated four-digit number to the randomized string to further enhance the randomness and security of the password. For example, the final recommended passwords may be "$Han9_ha!6462" and "43bru@rY5964".

[0053] Through this series of steps, the constructed password not only incorporates the user's personal information, but also increases its complexity through randomization technology, thus achieving a balance between memorability and security. This algorithm provides an effective method for users to generate strong passwords, which helps to improve the security of personal accounts.

[0054] In addition, based on the above content, the encryption and decryption process of this embodiment will be introduced below.

[0055] First, regarding the master password, this embodiment uses a custom encryption process, denoted as E transformation

[0056] The second file mp.txt.aes is only used for user authentication.

[0057] Creation process (first login)

[0058] 1. When the user uses the program for the first time, he is required to create a master password (eg.123456), and the password is protected by the SHA-256 hash function, and the hash value is written to a file named mp.txt (i.e. the first file). (Only the hash value of the master password is saved in mp.txt).

[0059] 2. Open mp.txt in binary read mode, use the master password (eg.123456) through a custom encryption process, transform it into E, use it as the encryption key, and encrypt it using the AES algorithm to get the mp.txt.aes file (i.e. the second file).

[0060] 3. Delete the original mp.txt and keep only mp.txt.aes.

[0061] Identity authentication process (normal login)

[0062] 1. Enter the master password (eg.123456), perform E transformation on the master password, and use it as the decryption key of mp.txt.aes. The decrypted result is placed in a temporary file tmp.txt.

[0063] 2. Then perform SHA-256 hash function processing on the master password (eg.123456), recorded as Hash1.

[0064] 3. Read the data in tmp.txt and compare it with Hash1. If they match, the identity authentication is passed and the subsequent functions can be used. Otherwise, the program terminates.

[0065] 4. Delete the temporary file tmp.txt.

[0066] Generate and find passwords

[0067] In this process, all operations related to the master password do not interact with mp.txt.aes. When the user enters the master password for identity authentication, the computer will allocate a memory space for the user's input data. This space stores the plaintext master password (eg.123456). All the following operations are based on the data in this memory space.

[0068] Generate Password

[0069] 1. Get the website name and the first 10 digits of the ID number from the input box.

[0070] 2. Perform E transformation on the master password (eg.123456) and use it as the decryption key to decrypt the file secret.txt.aes. The decrypted content is saved in the temporary file secret.txt.

[0071] 3. Check if you have already created a password for the website.

[0072] 4. For the destination website, if no password has been created, a new password will be automatically generated based on the ID card information.

[0073] 5. Write the generated password and website name together into the temporary file secret.txt (the third file) in a specific format, which is website+"\t"+password, and then rename and encrypt the file.

[0074] 6. Open secret.txt in binary read mode, perform E transformation on the master password (eg.123456), use it as the encryption key, encrypt it using the AES algorithm, and obtain the secret.txt.aes file (the fourth file).

[0075] 7. Delete the temporary file secret.txt.

[0076] Find Password

[0077] 1. Get the website entered by the user.

[0078] 2. Calculate the MD5 hash value of the website name.

[0079] 3. Perform E transformation on the master password (eg.123456) and use it as the decryption key to decrypt the file secret.txt.aes. The decrypted content is saved in the temporary file temp.txt.

[0080] 4. Search for the password that matches the hash value in the decrypted temporary file temp.txt.

[0081] 5. Delete the decrypted temporary file temp.txt.

[0082] In addition, the process of changing the user password is as follows:

[0083] 1. The user enters the target URL for password modification and the personal information required to generate the password;

[0084] 2. Use the master password after E transformation as the decryption key to decrypt secret.txt.aes, and save the decryption result in the temporary file secret.txt;

[0085] 3. Traverse secret.txt to find out if the target website already has a password and delete the old password line;

[0086] 4. Regenerate password based on the user’s personal information obtained;

[0087] 5. Write the modified password information into the secret.txt file in a fixed format (website+"\t"+password);

[0088] 6. Use the master password after E transformation as the encryption key to encrypt the temporary file secret.txt to obtain secret.txt.aes;

[0089] 7. Delete the temporary file secret.txt;

[0090] 8. Prompt the user that the password has been changed, and display the comparison of the password before and after the change.

[0091] The strong password generation algorithm of this embodiment is intended to realize offline password generation by running it locally by the user. The strong password generation tool of this embodiment runs on the user's local device, effectively avoiding the security risks that may be caused by the participation of the server. By generating a strong password on the user side, the tool can not only resist man-in-the-middle attacks, but also reduce the risk of data leakage, thereby significantly improving the security of the user account.

[0092] The technical effects and advantages of this embodiment are as follows:

[0093] 1. This proposal uses a strong password generation algorithm based on user personal information to effectively resist common password attack methods such as dictionary attacks, brute force cracking, rainbow table cracking, keyboard pattern cracking, social engineering, time attacks and phishing.

[0094] 2. All functions of this proposal are completed offline, which effectively avoids server-side involvement, reduces the risk of man-in-the-middle attacks and data leakage, and thus improves the overall security of user accounts.

[0095] The protection points of this embodiment are:

[0096] 1. Propose a strong password generation algorithm that randomly processes the user's personal information to ensure that each generated password has high entropy and complexity, thereby effectively resisting various password cracking attacks and enhancing the security of the password.

[0097] 2. All its functions are realized in an offline manner. All data is processed on the user's local device without relying on external servers, which significantly reduces the risk of privacy leakage and data security, improves the reliability of the system and the autonomy of user data, and provides users with a more secure and private password generation environment.

[0098] In order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides a strong password generation device based on user personal information, such as Figure 8 As shown, the strong password generation device 800 based on user personal information includes: an input module 801, an acquisition module 802, a conversion module 803, an adding module 804 and a generation module 805; wherein,

[0099] Input module 801, used to obtain the target website name and personal information input by the user to generate a password in an offline state;

[0100] An acquisition module 802 is used to acquire the pinyin full name or English full name of the personal information based on the personal information;

[0101] A conversion module 803 is used to randomly convert uppercase and lowercase letters or replace special characters in the pinyin full name or the English full name to obtain a first character string;

[0102] An adding module 804 is used to add a random number of numeric characters before the first character or after the last character of the first character string to generate a second character string;

[0103] The generating module 805 is configured to use the second character string as a strong password generated for the target website name.

[0104] In actual application, the input module 801, the acquisition module 802, the conversion module 803, the adding module 804 and the generation module 805 can be implemented by a processor in the device for generating a strong password based on user personal information.

[0105] It should be noted that: when the above-mentioned device provided in the above-mentioned embodiment is executed, only the division of the above-mentioned program modules is used as an example. In actual application, the above-mentioned processing can be assigned to different program modules as needed, that is, the internal structure of the terminal is divided into different program modules to complete all or part of the above-mentioned processing. In addition, the above-mentioned device provided in the above-mentioned embodiment belongs to the same concept as the above-mentioned method embodiment. The specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0106] In order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides a computer program product, which includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the steps of the above method.

[0107] Based on the hardware implementation of the above program modules, and in order to implement the method of the embodiment of the present invention, the embodiment of the present invention also provides an electronic device (computer device). Specifically, in one embodiment, the computer device can be a terminal, and its internal structure diagram can be as follows: Fig. 9 As shown. The computer device includes a processor A01, a network interface A02, a display screen A04, an input device A05 and a memory (not shown in the figure) connected through a system bus. Among them, the processor A01 of the computer device is used to provide computing and control capabilities. The memory of the computer device includes an internal memory A03 and a non-volatile storage medium A06. The non-volatile storage medium A06 stores an operating system B01 and a computer program B02. The internal memory A03 provides an environment for the operation of the operating system B01 and the computer program B02 in the non-volatile storage medium A06. The network interface A02 of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor A01, the method of any one of the above embodiments is implemented. The display screen A04 of the computer device can be a liquid crystal display or an electronic ink display, and the input device A05 of the computer device can be a touch layer covered on the display screen, or a button, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0108] Those skilled in the art will understand that Fig. 9 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0109] The device provided by the embodiment of the present invention includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, the method of any one of the above embodiments is implemented.

[0110] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0111] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0112] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0113] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0114] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0115] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0116] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0117] It can be understood that the memory of the embodiment of the present invention can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAM bus random access memory (DRRAM, Direct Rambus Random Access Memory).The memories described in the embodiments of the present invention are intended to include, but are not limited to, these and any other suitable types of memories.

[0118] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0119] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A method for generating a strong password based on user personal information, characterized in that: The method comprises: In an offline state, obtaining the target website name and personal information input by the user to generate a password; Based on the personal information, obtain the full pinyin name or English name of the personal information; Randomly select a preset first number of letters from the pinyin full name or the English full name, perform random uppercase and lowercase conversion or special character replacement, and obtain a first character string; Adding a preset second number of random numeric characters before the first character or after the last character of the first character string to generate a second character string; The second character string is used as a strong password generated for the target website name.

2. The method for generating a strong password based on user personal information according to claim 1, characterized in that: Obtain the full pinyin or English name of the personal information, including: If the personal information is an ID number, obtain the first two digits of the ID number; Determine the province information based on the first two digits of the ID number; Obtain the full pinyin name of the province information according to the province information.

3. The method for generating a strong password based on user personal information according to claim 1, characterized in that: Obtain the full pinyin or English name of the personal information, including: If the personal information is an ID card number, obtain the eleventh to twelfth digits of the ID card number; Determine birthday month information based on the eleventh and twelfth digits of the ID number; The full English name of the birthday month information is obtained according to the birthday month information.

4. The method for generating a strong password based on user personal information according to claim 1, characterized in that: Before obtaining the target website name and personal information input by the user to generate the password, the method further includes: Get the master password created by the user; Process the master password using a SHA-256 hash function to obtain a first hash value, and store the first hash value in a first file; Read the content in the first file in binary read mode, and encrypt the master password using a custom encryption algorithm to obtain a third character string, use the third character string as an encryption key to encrypt the content in the first file using an AES encryption algorithm, store the encryption result in a second file, and delete the first file.

5. The method for generating a strong password based on user personal information according to claim 4, characterized in that: After storing the encryption result in the second file and deleting the first file, the method further includes: Get the master password to be verified entered by the user; Encrypt the master password to be verified using a custom encryption algorithm to obtain a fourth character string, use the fourth character string as a decryption key, and decrypt the data in the second file using an AES decryption algorithm to obtain a first decryption result; Processing the master password to be verified using the SHA-256 hash function to obtain a second hash value; The second hash value is compared with the first decryption result, and if the comparison results are the same, subsequent operations are performed.

6. The method for generating a strong password based on user personal information according to claim 5, characterized in that: After using the second character string as a strong password generated for the target website name, the method further includes: Process the target website name using MD5 hash operation to obtain a third hash value; The content in the third file is read in binary reading mode, and the master password is encrypted by a custom encryption algorithm to obtain a fifth character string, the fifth character string is used as an encryption key to perform AES encryption on the content in the third file, and the encryption result is stored in a fourth file, and the third file is deleted.

7. The method for generating a strong password based on user personal information according to claim 6, characterized in that: After storing the encryption result in the fourth file and deleting the third file, the method further includes: After receiving the password search instruction initiated by the user, obtaining the website name input by the user; Process the website name input by the user using MD5 hash operation to obtain a fourth hash value; The master password is encrypted using a custom encryption algorithm to obtain a sixth character string, and the sixth character string is used as a decryption key to perform AES decryption on the data in the fourth file to obtain a second decryption result; Traversing the second decryption result row by row, searching for a row containing the fourth hash value; After searching for a row containing the fourth hash value, a strong password is searched for in the row, and the strong password is fed back as a search result of the password search instruction.

8. A strong password generation device based on user personal information, characterized in that: The strong password generation device based on user personal information includes: An input module is used to obtain the target website name and personal information input by the user to generate a password in an offline state; An acquisition module, used to acquire the pinyin full name or English full name of the personal information based on the personal information; A conversion module, used for randomly selecting a preset first number of letters from the pinyin full name or the English full name, performing random uppercase and lowercase conversion or special character replacement to obtain a first character string; An adding module, used for adding a preset second number of random digital characters before the first character or after the last character of the first character string to generate a second character string; A generating module is used to use the second character string as a strong password generated for the target website name.

9. An electronic device, characterized in that: include: A processor and a memory for storing a computer program capable of running on the processor; wherein, When the processor is used to run the computer program, the steps of the method according to any one of claims 1 to 7 are performed.

10. A storage medium storing a computer program, wherein: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images