User authority setting method and system for facilitating authority change
By using the arrangement and combination algorithm in the permission system to generate sub-passwords and associate them with permissions, the problem of cumbersome changes in the existing permission system is solved, and flexible switching of user permissions and system security is achieved.
Patent Information
- Application Number
- CN202111487690.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-07
- Publication Date
- 2024-12-24
- Estimated Expiration
- 2041-12-07
AI Technical Summary
The existing permission system is complicated to operate when user permissions are changed, the user experience is poor, and the system management cost is high.
Multiple sub-passwords are generated by an arrangement and combination algorithm based on the original password of the user name, and the sub-passwords are associated with permissions. When the user logs in, the sub-passwords are matched to determine the permissions, and the free switching of permissions is achieved.
It simplifies the permission change process, improves the convenience and user experience of the system, and reduces the cost of permission management and enhances the system security.
Smart Images
Figure CN114297623B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of computer networks, and in particular to a user authority setting method and system that facilitates authority change. Background Art
[0002] With the rapid development of Internet technology, in order to ensure system security and facilitate management, permission management is an indispensable function of every WEB application. At present, the most popular permission design model is the RBAC model, which is based on role-based access control. Its basic idea is that various permissions for system operations are not directly granted to specific users, but a role set is established between the user set and the permission set. Each role corresponds to a set of corresponding permissions. Once a user is assigned an appropriate role, the user has all the operation permissions of this role. The advantage of this is that it is not necessary to assign permissions every time a user is created. It is sufficient to assign the user to the corresponding role. Moreover, the permission change of the role is much less than the permission change of the user, which will simplify the user's permission management and reduce the system overhead. However, the mainstream permission system design generally uses the method of associating roles with user names to achieve permission control, which has no direct connection with the user's password. Once a user is associated with one or more roles, he can only access specific system functions within the set permission range. When a user needs to access an unauthorized function, it is necessary to reallocate permissions to the user. When this function is not needed, it is necessary to reallocate permissions again, which brings a more cumbersome user experience. Summary of the invention
[0003] The embodiment of the present invention provides a user authority setting method and system for facilitating authority change, so as to solve the problem of complicated operation in the process of changing user authority in the prior art.
[0004] A user authority setting method for facilitating authority change according to an embodiment of the present invention includes:
[0005] Based on the characters in the original password corresponding to the user name, a plurality of sub-passwords are constructed using a permutation and combination algorithm, and at least one permission is associated with each of the sub-passwords;
[0006] Obtain the current user login password and the current user name, and obtain multiple sub-passwords corresponding to the current user name based on the current user name;
[0007] The current user login password is matched with a plurality of sub-passwords corresponding to the current user name to determine the authority possessed by the current user login password.
[0008] According to some embodiments of the present invention, the steps of constructing multiple sub-passwords using a permutation and combination algorithm based on characters in the original password corresponding to the user name include:
[0009] Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
[0010] According to some embodiments of the present invention, the steps of constructing multiple sub-passwords using a permutation and combination algorithm based on characters in the original password corresponding to the user name include:
[0011] Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.
[0012] According to some embodiments of the present invention, matching the current user login password with multiple sub-passwords corresponding to the current user name includes:
[0013] If the current user login password contains certain sub-passwords, the current user name matches these sub-passwords.
[0014] According to some embodiments of the present invention, the method further comprises:
[0015] If the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid.
[0016] A user authority setting system for facilitating authority change according to an embodiment of the present invention includes:
[0017] A setting unit, configured to construct a plurality of sub-passwords based on the characters in the original password corresponding to the user name by using a permutation and combination algorithm, and associate at least one permission with each of the sub-passwords;
[0018] The login unit is used to obtain the current user login password and the current user name, and obtain multiple sub-passwords corresponding to the current user name based on the current user name; match the current user login password with the multiple sub-passwords corresponding to the current user name to determine the permissions of the current user login password.
[0019] According to some embodiments of the present invention, the setting unit is used to:
[0020] Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
[0021] According to some embodiments of the present invention, the setting unit is used to:
[0022] Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.
[0023] According to some embodiments of the present invention, the login unit is used to:
[0024] If the current user login password contains certain sub-passwords, the current user name matches these sub-passwords.
[0025] According to some embodiments of the present invention, the login unit is further used to:
[0026] If the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid.
[0027] By adopting the embodiment of the present invention, the characters in the original password are arranged and combined, and each combination corresponds to a different system permission. When the user needs to switch permissions, he only needs to reselect the sub-password combination to construct the user login password to log in, so as to achieve free switching, avoiding the tedious configuration of adjusting permissions each time, and can provide the system with a more convenient and friendly user experience while ensuring the security of system information.
[0028] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS
[0029] Various other advantages and benefits will become apparent to those skilled in the art by reading the detailed description of the embodiments below. The accompanying drawings are only used to illustrate the preferred embodiments and are not to be considered as limiting the present invention. In the accompanying drawings:
[0030] Figure 1 is a flow chart of a method for setting user rights that facilitates rights change in an embodiment of the present invention;
[0031] Figure 2 Schematic diagram of the principle of a method for setting user authority to facilitate authority change in an embodiment of the present invention;
[0032] Figure 3 It is a partial step flow chart of a method for setting user authority to facilitate authority change in an embodiment of the present invention;
[0033] Figure 4 It is a partial step flow chart of a method for setting user authority that facilitates authority change in an embodiment of the present invention. DETAILED DESCRIPTION
[0034] Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art. In addition, in some instances, known methods and techniques are not shown in detail so as not to obscure the understanding of this specification.
[0035] The embodiment of the present invention proposes a user authority setting method that is convenient for authority change. A sub-password is generated based on the original password, and the sub-password is associated with the system authority. Then, through the combination of different sub-passwords, the corresponding authority is freely combined, and finally a method for users to flexibly and quickly change account authority is realized.
[0036] Specifically, refer to Figure 1 As shown, the user authority setting method for facilitating authority change according to an embodiment of the present invention includes:
[0037] S1, constructing multiple sub-passwords based on the characters in the original password corresponding to the user name using a permutation and combination algorithm, and associating at least one permission with each of the sub-passwords;
[0038] It should be noted that the original password here refers to the string password entered for the first time when adding a user, and the user name and the original password correspond one to one.
[0039] The sub-password is a string of characters. All characters in the sub-password are within the range of all characters in the original password, and the length of the sub-password is less than or equal to the original password. For example, when the original password is 123456, a 3-character sub-password can be formed, including: 123, 234, 456, 134, 156, etc.; a 4-character sub-password can also be formed, including: 1234, 2345, 3456, 1345.
[0040] S2, obtaining the current user login password and the current user name, and obtaining multiple sub-passwords corresponding to the current user name based on the current user name; for example, the original password corresponding to the current user name can be obtained first, and then multiple sub-passwords constructed based on the original password can be obtained.
[0041] S3, matching the current user login password with multiple sub-passwords corresponding to the current user name to determine the authority possessed by the current user login password.
[0042] It can be understood that if the current user login password matches several sub-passwords, all permissions corresponding to these sub-passwords can be obtained.
[0043] By adopting the embodiment of the present invention, the characters in the original password are arranged and combined, and each combination corresponds to a different system permission. When the user needs to switch permissions, he only needs to reselect the sub-password combination to construct the user login password to log in, so as to achieve free switching, avoiding the tedious configuration of adjusting permissions each time, and can provide the system with a more convenient and friendly user experience while ensuring the security of system information.
[0044] On the basis of the above-mentioned embodiments, various variant embodiments are further proposed. It should be noted that, in order to make the description concise, only the differences from the above-mentioned embodiments are described in each variant embodiment.
[0045] According to some embodiments of the present invention, associating at least one permission for each sub-password includes:
[0046] At least one role is associated with each of the sub-passwords, and each of the roles corresponds to at least one permission.
[0047] According to some embodiments of the present invention, characters in the original password can be freely combined to generate a sub-password, and the sub-password can be generated randomly or specified by the user. The free combination mentioned here can be understood as no mandatory requirement for the input order of the sub-passwords, and no distinction is made between the order of precedence.
[0048] In some embodiments of the present invention, the lengths of any two sub-passwords may be the same. For example, when the original password is 123456, the sub-passwords may be: 123, 234, 456, 134, 156.
[0049] In other embodiments of the present invention, the lengths of any two sub-passwords may be different. For example, when the original password is 123456, the sub-passwords may be: 12, 3456.
[0050] In order to improve usability, security and facilitate user memory, in some embodiments of the present invention, the characters in the original password corresponding to the username are used to construct multiple sub-passwords using a permutation and combination algorithm, including:
[0051] Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
[0052] In some other embodiments of the present invention, the characters in the original password corresponding to the user name are used to construct multiple sub-passwords using a permutation and combination algorithm, including:
[0053] Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.
[0054] According to some embodiments of the present invention, matching the current user login password with multiple sub-passwords corresponding to the current user name includes:
[0055] If the current user login password contains certain sub-passwords, the current user name matches these sub-passwords.
[0056] It can be understood that if the character string corresponding to the current user login password or a part of the character segment in the character string is consistent with the character string corresponding to a sub-password, it means that the current user name matches the sub-password and has all the permissions corresponding to the sub-password. For example, if the sub-passwords corresponding to the current user name are 123 and 456, and the current user login password is 123456, it means that the current user login password has the permissions corresponding to sub-password 123 and the permissions corresponding to sub-password 456.
[0057] In some embodiments of the present invention, when permission switching is required, it is only necessary to verify the correctness of the corresponding sub-password input, and then obtain the corresponding permission according to the sub-password.
[0058] The correctness of the sub-password verification mentioned here means that the current login password entered by the user may be one or more of the sub-passwords, and then it is compared one by one with the generated sub-passwords corresponding to the user name. If the current login password matches one or some of them, all matching sub-password permissions are assigned to it. For example, two sub-passwords can be generated based on the original password, the first one corresponds to some basic permissions A of the system, and the second one corresponds to some high-level permissions B. When the user only needs permission A, he only needs to enter the sub-password corresponding to permission A. When the user needs permission B, he only needs to enter the sub-password corresponding to permission B. When both are needed, enter the combination of the sub-passwords of permissions A and B at the same time to obtain all permissions.
[0059] In the embodiment of the present invention, as long as a character string in the current user's login password matches the sub-password, the user is assigned the authority corresponding to the sub-password. Thus, the usability of the method in the embodiment of the present invention can be improved.
[0060] For example, in some embodiments of the present invention, when multiple sub-passwords are freely combined as the current user login password, the permissions corresponding to different sub-passwords are combined, and finally all permissions of the combined multiple sub-passwords can be obtained as the permissions of the current user login password.
[0061] In some embodiments of the present invention, sub-passwords and roles or permissions may be in a many-to-many association relationship.
[0062] According to some embodiments of the present invention, the method further comprises:
[0063] If the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid. Thus, the security of the embodiment of the present invention can be improved.
[0064] It can be understood that if after matching the current user login password with multiple sub-passwords corresponding to the current user name, there are still unmatched parts in the current user login password, it means that the input current user login password is an invalid password and cannot log in. For example, if the multiple sub-passwords corresponding to the current user name are 123, 456, and the current user login password is 12345678, after matching the current user login password with multiple sub-passwords, there is still a character string of 78, and 78 does not match any of the multiple sub-passwords, then the current user login password is determined to be an invalid password.
[0065] Refer to the following Figure 2-Figure 4 The user authority setting method for facilitating authority change according to an embodiment of the present invention is described in detail with a specific embodiment. It is worth noting that the following description is only an exemplary description and is not a specific limitation of the present invention. All similar structures and similar variations of the present invention should be included in the protection scope of the present invention.
[0066] The user authority setting method for facilitating authority changes in an embodiment of the present invention generates multiple sub-passwords by freely combining input password characters according to specific rules, and associates each sub-password with a corresponding role or authority, thereby realizing password-based authority control, effectively reducing the cost of authority changes, and improving the security of the system.
[0067] Specifically, refer to Figure 2 As shown, Figure 2 The password 123456 of account A is divided into sub-passwords 123 and 456 through the sub-password generation rule, and the first sub-password 123 is associated with permission A, and the second sub-password 456 is associated with permission B. When the user enters 123, the permission A corresponding to 123 can be obtained through the password-permission association relationship identification layer. When 456 is entered, the permission B corresponding to 456 can be obtained. When 123456 is entered at the same time, permissions A and B can be obtained. In this way, the purpose of dynamically changing permissions based on passwords is achieved.
[0068] The second is the implementation process of the password permission association relationship identification layer. Its core processing process is as follows: Figure 3 As shown, the following steps are included:
[0069] Step 1: Preferably, when a user logs into the system, all sub-passwords are obtained according to the user name.
[0070] Step 2: Match the sub-password set with the input password. The specific matching rule is to check whether the input password string contains a sub-password. If it does, store the corresponding sub-password in the new password set, that is, the set of all matched sub-passwords.
[0071] Step 3: Based on the matched sub-password or sub-passwords, since the corresponding relationship between the user name, sub-password and authority has been established in advance, all corresponding authority information can be found by matching the sub-password segment set.
[0072] The registration process of sub-password and permission association is as follows: Figure 4 The basic principle is to use the password characters entered by the user to generate a sub-password, and then configure the permissions or roles corresponding to the sub-password to establish the corresponding relationship between the user, password segment, and permissions.
[0073] The embodiments of the present invention have the following advantages:
[0074] The sub-password generated by the password characters can quickly switch permissions according to the password, solving the problem of cumbersome operations when permissions need to be changed frequently;
[0075] The configuration of the corresponding permissions of the sub-password segment is flexible and can be applied to different scenarios. While enhancing system security, it can also bring a good user experience;
[0076] Improve usability and security. When the password characters entered cover the sub-password characters, authentication can be passed. Add a sub-password matching protection mechanism to improve security.
[0077] It should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
[0078] A user authority setting system for facilitating authority change according to an embodiment of the present invention includes:
[0079] A setting unit, configured to construct a plurality of sub-passwords based on the characters in the original password corresponding to the user name by using a permutation and combination algorithm, and associate at least one permission with each of the sub-passwords;
[0080] It should be noted that the original password here refers to the string password entered for the first time when adding a user, and the user name and the original password correspond one to one.
[0081] The sub-password is a string of characters. All characters in the sub-password are within the range of all characters in the original password, and the length of the sub-password is less than or equal to the original password. For example, when the original password is 123456, a 3-character sub-password can be formed, including: 123, 234, 456, 134, 156, etc.; a 4-character sub-password can also be formed, including: 1234, 2345, 3456, 1345.
[0082] The login unit is used to obtain the current user login password and the current user name, and obtain multiple sub-passwords corresponding to the current user name based on the current user name; for example, the original password corresponding to the current user name can be obtained first, and then multiple sub-passwords constructed based on the original password can be obtained.
[0083] The login unit is also used to match the current user login password with multiple sub-passwords corresponding to the current user name to determine the permissions owned by the current user login password. It can be understood that if the current user login password matches several sub-passwords, all permissions corresponding to these sub-passwords can be obtained.
[0084] By adopting the embodiment of the present invention, the characters in the original password are arranged and combined, and each combination corresponds to a different system permission. When the user needs to switch permissions, he only needs to reselect the sub-password combination to construct the user login password to log in, so as to achieve free switching, avoiding the tedious configuration of adjusting permissions each time, and can provide the system with a more convenient and friendly user experience while ensuring the security of system information.
[0085] On the basis of the above-mentioned embodiments, various variant embodiments are further proposed. It should be noted that, in order to make the description concise, only the differences from the above-mentioned embodiments are described in each variant embodiment.
[0086] According to some embodiments of the present invention, associating at least one permission for each sub-password includes:
[0087] At least one role is associated with each of the sub-passwords, and each of the roles corresponds to at least one permission.
[0088] According to some embodiments of the present invention, characters in the original password can be freely combined to generate a sub-password, and the sub-password can be generated randomly or specified by the user. The free combination mentioned here can be understood as no mandatory requirement for the input order of the sub-passwords, and no distinction is made between the order of precedence.
[0089] In some embodiments of the present invention, the lengths of any two sub-passwords may be the same. For example, when the original password is 123456, the sub-passwords may be: 123, 234, 456, 134, 156.
[0090] In other embodiments of the present invention, the lengths of any two sub-passwords may be different. For example, when the original password is 123456, the sub-passwords may be: 12, 3456.
[0091] In order to improve usability, safety and facilitate user memory, in some embodiments of the present invention, the setting unit is used to:
[0092] Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
[0093] In some embodiments of the present invention, the setting unit is used to:
[0094] Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.
[0095] According to some embodiments of the present invention, the login unit is used to:
[0096] If the current user login password contains certain sub-passwords, the current user name matches these sub-passwords.
[0097] It can be understood that if the character string corresponding to the current user login password or a part of the character segment in the character string is consistent with the character string corresponding to a sub-password, it means that the current user name matches the sub-password and has all the permissions corresponding to the sub-password. For example, if the sub-passwords corresponding to the current user name are 123 and 456, and the current user login password is 123456, it means that the current user login password has the permissions corresponding to sub-password 123 and the permissions corresponding to sub-password 456.
[0098] In some embodiments of the present invention, when permission switching is required, it is only necessary to verify the correctness of the corresponding sub-password input, and then obtain the corresponding permission according to the sub-password.
[0099] The correctness of the sub-password verification mentioned here means that the current login password entered by the user may be one or more of the sub-passwords, and then it is compared one by one with the generated sub-passwords corresponding to the user name. If the current login password matches one or some of them, all matching sub-password permissions are assigned to it. For example, two sub-passwords can be generated based on the original password, the first one corresponds to some basic permissions A of the system, and the second one corresponds to some high-level permissions B. When the user only needs permission A, he only needs to enter the sub-password corresponding to permission A. When the user needs permission B, he only needs to enter the sub-password corresponding to permission B. When both are needed, enter the combination of the sub-passwords of permissions A and B at the same time to obtain all permissions.
[0100] In the embodiment of the present invention, as long as a character string in the current user's login password matches the sub-password, the user is assigned the authority corresponding to the sub-password. Thus, the usability of the method in the embodiment of the present invention can be improved.
[0101] For example, in some embodiments of the present invention, when multiple sub-passwords are freely combined as the current user login password, the permissions corresponding to different sub-passwords are combined through the password permission identification module, and finally all permissions of the combined multiple sub-passwords can be obtained as the permissions of the current user login password.
[0102] In some embodiments of the present invention, sub-passwords and roles or permissions may be in a many-to-many association relationship.
[0103] According to some embodiments of the present invention, the login unit is further used to:
[0104] If the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid. Thus, the security of the embodiment of the present invention can be improved.
[0105] It can be understood that if after matching the current user login password with multiple sub-passwords corresponding to the current user name, there are still unmatched parts in the current user login password, it means that the input current user login password is an invalid password and cannot log in. For example, if the multiple sub-passwords corresponding to the current user name are 123, 456, and the current user login password is 12345678, after matching the current user login password with multiple sub-passwords, there is still a character string of 78, and 78 does not match any of the multiple sub-passwords, then the current user login password is determined to be an invalid password.
[0106] It should be noted that the description with reference to the terms "one embodiment", "some embodiments", "illustrative embodiments", "examples", "specific examples", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Although some of the embodiments described herein include certain features included in other embodiments but not other features, the combination of features of different embodiments is meant to be within the scope of the present invention and form different embodiments. The specific features, structures, materials or characteristics described may be combined in any suitable manner in any one or more embodiments or examples. For example, in the claims, any one of the claimed embodiments may be used in any combination.
[0107] The terms "comprises", "includes" or any other variation thereof are intended to cover non-exclusive inclusion, such that a process, method, article or apparatus that includes a list of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus that includes the element.
Claims
1. A method for setting user rights that facilitates rights changes, characterized in that: include: Based on the characters in the original password corresponding to the user name, a permutation and combination algorithm is used to construct multiple sub-passwords, and at least one permission is associated with each sub-password, the original password is a string password entered for the first time when adding a user, and the sub-password is a string formed by freely combining part or all of all the characters of the original password according to the permutation and combination algorithm, the free combination representation does not distinguish the order of character input, all the characters of the sub-password are within all the characters of the original password, and the length of the sub-password is less than or equal to the original password; Obtain the current user login password and the current user name, and obtain multiple sub-passwords corresponding to the current user name based on the current user name; Matching the current user login password with multiple sub-passwords corresponding to the current user name to determine the permissions possessed by the current user login password; The matching of the current user login password with multiple sub-passwords corresponding to the current user name to determine the permissions possessed by the current user login password includes: In the case where all characters of the current user login password include all characters of any one of the multiple sub-passwords corresponding to the current user name, determining that there is a matching sub-password for the current user login password; According to the matched sub-password and the pre-established correspondence between the user name, the sub-password and the authority, searching for corresponding authority information; When the current user login password matches multiple sub-passwords, obtain the permissions corresponding to each of the multiple sub-passwords; combine the permissions corresponding to different sub-passwords, and obtain all the permissions of the combined multiple sub-passwords as the permissions of the current user login password; If the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid; The associating at least one permission for each sub-password includes: At least one role is associated with each of the sub-passwords, and each of the roles corresponds to at least one permission.
2. The method according to claim 1, characterized in that The characters in the original password corresponding to the user name are used to construct multiple sub-passwords using a permutation and combination algorithm, including: Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
3. The method according to claim 1, characterized in that The characters in the original password corresponding to the user name are used to construct multiple sub-passwords using a permutation and combination algorithm, including: Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.
4. A user authority setting system that facilitates authority changes, characterized in that: include: A setting unit, configured to construct a plurality of sub-passwords by using a permutation and combination algorithm based on characters in an original password corresponding to a user name, and associate at least one permission with each of the sub-passwords, wherein the original password is a character string password input for the first time when adding a user, and the sub-password is a character string formed by freely combining part or all of all characters of the original password according to the permutation and combination algorithm, wherein the free combination representation does not distinguish the order in which characters are input, all characters of the sub-password are within all characters of the original password, and the length of the sub-password is less than or equal to the original password; A login unit, used to obtain a current user login password and a current user name, and based on the current user name, obtain a plurality of sub-passwords corresponding to the current user name; match the current user login password with the plurality of sub-passwords corresponding to the current user name to determine the permissions possessed by the current user login password; The login unit is specifically configured to determine that a matching sub-password exists in the current user login password when all characters of the current user login password include all characters of any one of the multiple sub-passwords corresponding to the current user name; search for corresponding permission information according to the matching sub-password and a pre-established correspondence between the user name and the sub-password and the permission; obtain the permissions corresponding to each of the multiple sub-passwords when the current user login password matches the multiple sub-passwords; combine the permissions corresponding to different sub-passwords, and obtain all permissions of the combined multiple sub-passwords as the permissions of the current user login password; if the current user login password contains a part that does not match any of the multiple sub-passwords corresponding to the current user name, the current user login password is invalid; The setting unit is specifically used to associate at least one role with each sub-password, and each role corresponds to at least one permission.
5. The system according to claim 4, characterized in that The setting unit is used to: Based on all the characters in the original password corresponding to the username, multiple sub-passwords are constructed using a permutation and combination algorithm.
6. The system according to claim 4, characterized in that The setting unit is used to: Randomly select some characters in the original password, and based on these characters, use the permutation and combination algorithm to construct multiple sub-passwords.