Preset password detection system and operation method thereof

Abstract

A preset password detection system and its operating method are disclosed. The preset password detection system includes a transceiver, a storage medium, and a processor. The processor is coupled to the transceiver and the storage medium. The storage medium stores a preset password lookup table. The transceiver receives a scan list. The processor establishes connections with multiple Internet of Things (IoT) devices based on the scan list. In response to successfully establishing a connection with a first IoT device among the multiple IoT devices, the processor receives device information from the first IoT device. The processor generates a first detection result based on the preset password lookup table and the device information. The processor generates a scan report based on at least one of the first detection result and a second detection result. The processor outputs the scan report through the transceiver.

Description

[Technical Field]

[0001] This invention relates to the field of Internet of Things (IoT) technology, and more particularly to a preset password detection system and its operating method. [Previous Technology]

[0002] Because the user accounts and default passwords of IoT devices are easily obtained on the Internet, or because IoT device manufacturers widely use user accounts and default passwords that can be easily guessed, botnets can infect IoT devices and further launch attacks on devices connected to IoT devices.

[0003] Generally speaking, the default password of IoT devices is checked by the testing personnel through manual sampling. However, this method has problems such as wasting human resources, time consumption, and insufficient security due to the difficulty in comprehensively checking all IoT devices. [Summary of the Invention]

[0004] In view of this, the present invention provides a preset password detection system and its operation method, which can automatically check whether the preset password of an Internet of Things device has been modified, so as to solve the above-mentioned problems of wasted human resources, time consumption and insufficient security.

[0005] This invention provides a preset password detection system, including a transceiver, a storage medium, and a processor. The processor is coupled to the transceiver and the storage medium. The storage medium stores a preset password lookup table. The transceiver receives a scan list. The processor establishes connections with multiple Internet of Things (IoT) devices based on the scan list. In response to successfully establishing a connection with a first IoT device among the multiple IoT devices, the processor receives device information from the first IoT device. The processor generates a first detection result based on the preset password lookup table and the device information. The processor generates a scan report based on at least one of the first detection result and a second detection result. The processor outputs the scan report.

[0006] In one embodiment of the present invention, in response to the inability to establish a connection with a second Internet of Things device among a plurality of Internet of Things devices, the processor described above is configured to generate a second detection result indicating a failure to establish a connection with the second Internet of Things device.

[0007] In one embodiment of the present invention, the first detection result described above is used to indicate whether the first Internet of Things device uses a preset password.

[0008] In one embodiment of the present invention, the processor is configured to obtain a preset password from a preset password lookup table based on a first device model in the device information. The processor is configured to determine whether the first password in the device information matches the preset password. In response to determining that the first password matches the preset password, the processor is configured to generate a first detection result to instruct the first IoT device to use the preset password.

[0009] In one embodiment of the present invention, in response to determining that the first password does not match the preset password, the processor described above is used to generate a first detection result for instructing the first Internet of Things device not to use the preset password.

[0010] In one embodiment of the present invention, the scan list mentioned above includes multiple Internet Protocol Addresses (IP Addresses) corresponding to multiple Internet of Things devices.

[0011] In one embodiment of the present invention, the above-mentioned preset password lookup table includes multiple device models and multiple preset passwords corresponding to the multiple device models.

[0012] In one embodiment of the present invention, the device information mentioned above includes a first device model corresponding to the first Internet of Things device and a first password corresponding to the first Internet of Things device.

[0013] In one embodiment of the present invention, the above-mentioned scanning report includes a first detection result or a second detection result corresponding to a plurality of Internet of Things devices respectively.

[0014] The present invention provides an operation method for a preset password detection system, comprising: receiving a scan list via a transceiver; establishing a connection with multiple Internet of Things (IoT) devices via a processor based on the scan list; receiving device information from the first IoT device via the processor in response to successfully establishing a connection with a first IoT device among the multiple IoT devices; generating a first detection result via the processor based on a preset password lookup table and the device information; generating a scan report via the processor based on at least one of the first detection result and a second detection result; and outputting the scan report via the processor.

[0015] In one embodiment of the present invention, the above-described operation method further includes: in response to the inability to establish a connection with a second Internet of Things device among a plurality of Internet of Things devices, generating a second detection result by a processor to indicate the failure to connect with the second Internet of Things device.

[0016] In one embodiment of the present invention, the above-mentioned operation method further includes: obtaining a preset password from a preset password lookup table based on a first device model in the device information by a processor; determining whether the first password in the device information matches the preset password by a processor; and generating a first detection result by a processor in response to determining that the first password matches the preset password, thereby instructing the first Internet of Things device to use the preset password.

[0017] In one embodiment of the present invention, the above-described operation method further includes: in response to determining that the first password does not match the preset password, generating a first detection result by a processor to indicate that the first Internet of Things device does not use the preset password.

[0018] Based on the above, the preset password detection system and its operation method provided by the present invention can effectively improve the security of IoT devices and reduce the manpower and time costs required in the inspection process by automatically checking whether the preset password of IoT devices has been modified.

Implementation Method

[0020] Some embodiments of the present invention will now be described in detail with reference to the accompanying drawings. The element symbols referenced in the following description are considered to be the same or similar elements when the same element symbols appear in different drawings.

[0021] Figure 1 illustrates a schematic diagram of a preset password detection system, a terminal device, and an Internet of Things (IoT) device according to an embodiment of the present invention. Please refer to Figure 1. The preset password detection system 100 includes a processor 110, a storage medium 120, and a transceiver 130. The processor 110 is coupled to the storage medium 120 and the transceiver 130. The storage medium 120 is used to store a preset password lookup table 121. The terminal device 200 is, for example, an electronic device such as a desktop computer, a laptop computer, or a tablet computer. The IoT devices 300-1 to 300-N are, for example, IoT devices well known to those skilled in the art, such as home appliances, sensors, cameras, wearable devices, or industrial IoT devices, and the present invention does not limit them.

[0022] The terminal device 200 (or IoT device 300-1 to 300-N) may have the necessary components for running the terminal device 200 (or IoT device 300-1 to 300-N), such as a processing unit (e.g., processor, but not limited thereto), a communication unit (e.g., various communication chips, mobile communication chips, Bluetooth chips, WiFi chips, etc., but not limited thereto), and a storage unit (e.g., removable random access memory, flash memory, hard disk, etc., but not limited thereto).

[0023] The processor 110 may be, for example, a central processing unit (CPU), or other programmable general-purpose or special-purpose microcontroller (MCU), microprocessor, digital signal processor (DSP), programmable controller, application-specific integrated circuit (ASIC), graphics processing unit (GPU), image signal processor (ISP), image processing unit (IPU), arithmetic logic unit (ALU), complex programmable logic device (CPLD), field programmable gate array (FPGA), or other similar elements or combinations thereof.

[0024] The storage medium 120 may be, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory, hard disk drive (HDD), solid state drive (SSD), or similar elements or combinations thereof, used to store multiple programs or data executable by the processor 110 to implement the operation method of the preset password detection system 100 of the present invention. In this embodiment, the storage medium 120 is used to store a preset password lookup table 121.

[0025] Transceiver 130 transmits and receives signals wirelessly or via a wired connection. Transceiver 130 may also perform operations such as low-noise amplification, impedance matching, mixing, up or down frequency conversion, filtering, amplification, and similar operations.

[0026] In order to detect whether the preset password of IoT devices 300-1 to 300-N has been modified, the tester may, for example, transmit a scan list SL including multiple Internet Protocol addresses corresponding to IoT devices 300-1 to 300-N to the preset password detection system 100 through the terminal device 200, so that the preset password detection system 100 can automatically detect the password of IoT devices 300-1 to 300-N.

[0027] Figure 2 illustrates a flowchart of the operation method of a preset password detection system according to an embodiment of the present invention. Please refer to Figures 1 and 2 simultaneously. First, in step S201, the transceiver 130 can receive a scan list SL from the terminal device 200. In step S202, the processor 110 can establish a connection with the IoT devices 300-1 to 300-N according to the scan list SL. Specifically, the scan list SL includes multiple Internet Protocol addresses corresponding to the IoT devices 300-1 to 300-N. The processor 110 can establish a connection with the IoT devices 300-1 to 300-N according to the Internet Protocol addresses in the scan list SL.

[0028] Next, in step S203, the processor 110 can determine whether a connection has been successfully established with each IoT device 300-1 to 300-N. Further explanation: if a connection has been successfully established with IoT devices 300-2 to 300-N (also referred to as the first IoT device) among IoT devices 300-1 to 300-N, then the process proceeds to step S204.

[0029] In step S204, the processor 110 can receive device information DI-2 to DI-N from the first Internet of Things devices 300-2 to 300-N via the transceiver 130.

[0030] In this embodiment, the device information DI-2~DI-N may include, but is not limited to, the first device model corresponding to the first IoT device 300-2~300-N and the first password corresponding to the first IoT device 300-2~300-N respectively.

[0031] In step S205, the processor 110 can generate a first detection result based on the preset password lookup table 121 and device information DI-2 to DI-N. In this embodiment, the first detection result can, for example, be used to indicate whether the first IoT devices 300-2 to 300-N use a preset password. Here, please refer to Figures 1 to 3 simultaneously, where Figure 3 illustrates a flowchart of generating the first detection result according to an embodiment of the present invention.

[0032] In step S2051, the processor 110 can obtain a preset password from the preset password lookup table 121 based on the first device model in the device information DI-2~DI-N. Specifically, the preset password lookup table 121 includes multiple device models and multiple preset passwords corresponding to the multiple device models. That is to say, the preset password lookup table 121 can store preset passwords for multiple IoT devices of different brands and / or different models.

[0033] Accordingly, the processor 110 can obtain a preset password corresponding to the first device model from the preset password lookup table 121 based on the first device model in the device information DI-2 to DI-N. That is, the processor 110 can obtain multiple preset passwords corresponding to the first IoT devices 300-2 to 300-N respectively from the preset password lookup table 121 based on the first device model in the device information DI-2 to DI-N.

[0034] Next, in step S2052, the processor 110 can determine whether the first passwords in the device information DI-2~DI-N match the preset passwords. Specifically, the multiple first passwords in the device information DI-2~DI-N are the passwords currently used by the first IoT devices 300-2~300-N. Accordingly, the processor 110 can determine whether the preset passwords of the first IoT devices 300-2~300-N have been modified by determining whether the multiple preset passwords obtained from the preset password lookup table 121 corresponding to the first IoT devices 300-2~300-N match the multiple first passwords in the device information DI-2~DI-N corresponding to the first IoT devices 300-2~300-N.

[0035] If the first password matches the preset password, proceed to step S2053. In step S2053, the processor 110 can generate a first detection result to instruct the first IoT devices 300-2 to 300-N to use the preset password. For example, assuming that the first password corresponding to the first IoT device 300-2 matches the preset password, the first detection result corresponding to the first IoT device 300-2 can be used to instruct the first IoT device 300-2 to use the preset password. That is, the preset password of the first IoT device 300-2 has not been modified.

[0036] Conversely, if the first password does not match the preset password, then proceed to step S2054. In step S2054, the processor 110 can generate a first detection result to indicate that the first IoT devices 300-2 to 300-N do not use the preset password. For example, assuming that the first password corresponding to the first IoT device 300-N does not match the preset password, the first detection result corresponding to the first IoT device 300-N can be used to indicate that the first IoT device 300-N has not used the preset password. That is to say, the preset password of the first IoT device 300-N has been modified.

[0037] On the other hand, please refer again to Figures 1 and 2. If a connection cannot be established with IoT device 300-1 (also referred to as the second IoT device) among IoT devices 300-1 to 300-N, proceed to step S206. In this embodiment, the second IoT device 300-1 may fail to connect to the processor 110 (preset password detection system 100), for example. In another embodiment, the second IoT device 300-1 may also be unable to provide information such as its device model and currently used password to the preset password detection system 100, for example.

[0038] In step S206, the processor 110 may generate a second detection result. In this embodiment, the second detection result may be used to indicate that the processor 110 has failed to connect with the second IoT device 300-1. In another embodiment, the second detection result may be used to indicate that the second IoT device 300-1 has not transmitted information to the preset password detection system 100.

[0039] After steps S205 and S206 are completed, in step S207, the processor 110 may generate a scan report SR based on the first detection result and / or the second detection result. In this embodiment, the processor 110 may generate the scan report SR based on a plurality of first detection results corresponding to the first IoT devices 300-2 to 300-N and a second detection result corresponding to the second IoT device 300-1. For example, the scan report SR may include, but is not limited to, the first detection results and / or the second detection results corresponding to the IoT devices 300-1 to 300-N.

[0040] Finally, in step S208, the processor 110 can output a scan report SR. Specifically, the processor 110 can transmit the scan report SR to the terminal device 200 of the inspector via the transceiver 130. Accordingly, the inspector can use the scan report SR to determine whether the default passwords of IoT devices 300-1 to 300-N have been modified, and perform password modification operations and / or other security-enhancing operations on IoT devices still using the default passwords (e.g., the first IoT device 300-2). Therefore, the default password detection system 100 can significantly reduce the manpower and time costs required during the inspection process.

[0041] Figure 4 illustrates a flowchart of the operation method of a preset password detection system according to an embodiment of the present invention. Please refer to Figures 1 and 4 simultaneously. In step S401, a scan list SL is received by transceiver 130. In step S402, a connection is established between processor 110 and multiple IoT devices 300-1 to 300-N according to the scan list SL. In step S403, in response to successfully establishing a connection with the first IoT devices 300-2 and 300-N among the multiple IoT devices 300-1 to 300-N, device information DI-2 and DI-N are received by processor 110 from the first IoT devices 300-2 and 300-N. In step S404, a first detection result is generated by processor 110 based on a preset password lookup table 121 and device information DI-2 and DI-N. In step S405, a scan report SR is generated by processor 110 based on at least one of the first detection result and a second detection result. In step S406, the scan report SR is output by processor 110. The implementation details of steps S401 to S406 have been clearly explained in the foregoing embodiments, and therefore will not be repeated here.

[0042] In summary, the preset password detection system and its operating method of the present invention can automatically check whether the preset password of an IoT device has been modified and provide a scan report to the testing personnel. This allows the testing personnel to perform password modification operations and / or other security-enhancing operations on IoT devices whose preset passwords have not been modified. In this way, the preset password detection system and its operating method of the present invention can significantly reduce the manpower and time costs required during the inspection process and effectively improve the security of IoT devices.

[0043] Although the present invention has been disclosed above by way of embodiments, it is not intended to limit the present invention. Anyone skilled in the art can make some modifications and refinements without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the present invention shall be determined by the appended claims. [Simplified Explanation of the Diagram]

[0019] Figure 1 illustrates a schematic diagram of a preset password detection system, a terminal device, and an Internet of Things device according to an embodiment of the present invention. Figure 2 illustrates a flowchart of the operation method of the preset password detection system according to an embodiment of the present invention. Figure 3 illustrates a flowchart of generating a first detection result according to an embodiment of the present invention. Figure 4 illustrates a flowchart of the operation method of the preset password detection system according to an embodiment of the present invention.

Claims

1. A preset password detection system, comprising: A transceiver used to receive the scanned list; Storage media for storing a preset password lookup table; The transceiver and the storage medium are coupled to a processor, wherein the processor is configured to: establish connections with a plurality of IoT devices based on the scan list; receive device information from a first IoT device in response to a successful connection being established with a first IoT device; generate a first detection result based on the preset password lookup table and the device information, wherein the first detection result indicates whether the first IoT device uses a preset password; generate a scan report based on at least one of the first detection result and a second detection result; and output the scan report.

2. The preset password detection system as claimed in claim 1, wherein the processor is further configured to: generate a second detection result indicating a failure to connect to the second IoT device in response to the inability to establish a connection with the second IoT device.

3. The preset password detection system as claimed in claim 1, wherein the processor is further configured to: obtain the preset password from the preset password lookup table based on the first device model in the device information; determine whether the first password in the device information matches the preset password; and, in response to determining that the first password matches the preset password, generate the first detection result for instructing the first IoT device to use the preset password.

4. The preset password detection system as claimed in claim 3, wherein the processor is further configured to: generate the first detection result indicating that the first password does not match the preset password in response to determining that the first password does not match the preset password.

5. The preset password detection system as described in claim 1, wherein the scan list includes multiple Internet Protocol addresses corresponding to the IoT devices.

6. The preset password detection system as described in claim 1, wherein the preset password lookup table includes multiple device models and multiple preset passwords corresponding to the device models respectively.

7. The preset password detection system as described in claim 1, wherein the device information includes a first device model corresponding to the first IoT device and a first password corresponding to the first IoT device.

8. The preset password detection system as described in claim 1, wherein the scan report includes the first detection result or the second detection result respectively corresponding to the IoT devices.

9. A method for operating a preset password detection system, comprising: Receive the scan list via transceiver; The processor establishes connections with multiple IoT devices based on this scan list; In response to a successful connection established with a first IoT device among the IoT devices, the processor receives device information from the first IoT device; the processor generates a first detection result based on the preset password lookup table and the device information, wherein the first detection result indicates whether the first IoT device uses a preset password; the processor generates a scan report based on at least one of the first detection result and a second detection result; and the processor outputs the scan report.

10. The operating method as described in claim 9 further includes: In response to the inability to establish a connection with a second IoT device among these IoT devices, the processor generates a second detection result indicating that the connection with the second IoT device has failed.

11. The operating method as described in claim 9, further comprising: The processor retrieves the preset password from the preset password lookup table based on the first device model in the device information; the processor determines whether the first password in the device information matches the preset password; and in response to determining that the first password matches the preset password, the processor generates the first detection result to instruct the first IoT device to use the preset password.

12. The operating method as described in claim 11 further includes: In response to the determination that the first password does not match the preset password, the processor generates a first detection result to indicate that the first IoT device does not use the preset password.

Images