Server reset password management method, device, equipment and storage medium

Abstract

The present invention relates to the field of servers, and in particular to a server reset password management method, apparatus, device, and storage medium. The method comprises: splitting a key to generate a first key fragment kept by a server, and multiple second key fragments kept by multiple terminals respectively; using the server to generate a random reset password and encrypting it with a key to generate an encrypted reset password kept by the server; in response to the need to reset the server account password, a preset number of terminals send the corresponding second key fragments to the server; the server performs a recovery operation based on the first key fragment and the received part of the second key fragment and decrypts the encrypted reset password using the recovery key to obtain the reset password; the server sends the decrypted reset password to at least one terminal. In the solution of the present invention, the reset password is randomly generated and encrypted and stored, and the key split storage makes reset password management secure and flexible.

Description

Technical Field

[0001] The present invention relates to the field of servers, and in particular to a server password reset management method, device, equipment and storage medium. Background Art

[0002] With the vigorous development of the data center industry around the world and the rapid growth of the social economy, the development and construction of data centers will enter a period of rapid development. In addition, the strong support given to emerging industries by local governments has brought great advantages to the development of the data center industry. Data centers are composed of a large number of servers. During the management and operation of data centers, each server requires an administrator account and account password for equipment operation and maintenance. Different servers have different administrator accounts and account passwords, so it is inevitable to manage the administrator account and account password of each server.

[0003] Currently, existing account passwords and reset passwords need to be kept by specific personnel, and the passwords of different administrator accounts may be inconsistent and easy to lose. On the other hand, the way to recover the password of an administrator account after it is lost is complicated, which may affect the normal operation of system business. Summary of the Invention

[0004] In view of this, it is necessary to provide a server reset password management method, device, equipment and storage medium to address the above technical problems.

[0005] According to a first aspect of the present invention, a server reset password management method is provided, the method comprising:

[0006] Splitting the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals respectively;

[0007] generating a random reset password using the server, and encrypting the reset password using the key to generate an encrypted reset password kept by the server;

[0008] In response to a need to reset the account password of the server, a preset number of terminals send corresponding second key fragments to the server;

[0009] The server performs a key recovery operation on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypts the encrypted reset password using the recovery key to obtain the reset password;

[0010] The server sends the decrypted reset password to at least one terminal.

[0011] In some embodiments, the method further comprises:

[0012] generating a key fingerprint for each second key fragment, the fingerprint being kept by the server;

[0013] The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second fragment is legitimate, and counts the number of legitimate terminals;

[0014] In response to a terminal sending the second key fragment being illegal, the remaining terminals are waited for to send corresponding second key fragments to the server until the number of legal terminals is equal to the preset number.

[0015] In some embodiments, the step of generating a random reset password using the server and encrypting the reset password using the key to generate an encrypted reset password kept by the server includes:

[0016] Importing the key into the server when the server is logged in normally;

[0017] Use the server to generate a random number as the reset password;

[0018] Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password;

[0019] In response to the encryption operation being completed, the key imported into the server is deleted.

[0020] In some embodiments, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0021] The last terminal confirmed to be legitimate is used as the target terminal;

[0022] The reset password obtained by decryption by the server is sent to the target terminal.

[0023] In some embodiments, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0024] All confirmed legitimate terminals are regarded as target terminals;

[0025] The reset password obtained by decryption by the server is sent to the target terminal.

[0026] In some embodiments, the method further comprises:

[0027] In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted;

[0028] Regenerate a random reset password using the server;

[0029] Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password;

[0030] In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

[0031] In some embodiments, the method is applied to at least one server in a large-scale data center.

[0032] According to a second aspect of the present invention, a server password reset management device is provided, the device comprising:

[0033] a key splitting module configured to split the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals respectively;

[0034] a reset password generation module, the reset password generation module being configured to generate a random reset password using the server, and encrypt the reset password using the key to generate an encrypted reset password kept by the server;

[0035] a first sending module configured to, in response to a need to reset the account password of the server, have a preset number of terminals send corresponding second key fragments to the server;

[0036] a key recovery module configured to, by the server, perform a key recovery operation on the key based on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypt the encrypted reset password using the recovery key to obtain the reset password;

[0037] The second sending module is configured to send the reset password obtained by decryption by the server to at least one terminal.

[0038] According to a third aspect of the present invention, a computer device is further provided, the computer device comprising:

[0039] at least one processor; and

[0040] The memory stores a computer program that can be run on the processor, and the processor executes the aforementioned server reset password management method when executing the program.

[0041] According to a fourth aspect of the present invention, a computer-readable storage medium is further provided. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the aforementioned server reset password management method is executed.

[0042] In the above-mentioned server reset password management method, the reset password is randomly generated by the server itself and is encrypted with a key to ensure the security of the reset password. The key split storage not only ensures the redundancy of obtaining the reset password, but also avoids the poor flexibility and insecurity caused by a single operation and maintenance personnel mastering all the keys. It can achieve the purpose of resetting the administrator account password of any server in the data center using a preset number of terminal devices while ensuring security. It is suitable for application in large-scale data centers and has better flexibility and security.

[0043] In addition, the present invention also provides a server reset password management device, a computer device and a computer-readable storage medium, which can also achieve the above technical effects and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other embodiments can be obtained based on these drawings without paying any creative work.

[0045] Figure 1 A flowchart of a server password reset management method provided by one embodiment of the present invention;

[0046] Figure 2 A schematic diagram of the operation process of resetting a password using the method provided in another embodiment of the present invention;

[0047] Figure 3 A schematic structural diagram of a server password reset management device provided by another embodiment of the present invention;

[0048] Figure 4 An internal structural diagram of a computer device in another embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the embodiments of the present invention are further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings.

[0050] It should be noted that all expressions using "first" and "second" in the embodiments of the present invention are for distinguishing two non-identical entities with the same name or non-identical parameters. It can be seen that "first" and "second" are only for the convenience of expression and should not be understood as limitations on the embodiments of the present invention. Subsequent embodiments will not explain this one by one.

[0051] In one embodiment, please refer to Figure 1As shown, the present invention provides a server reset password management method 100, specifically, the method includes the following steps

[0052] Step 101: Split the key to generate a first key fragment kept by a server and multiple second key fragments kept by multiple terminals respectively;

[0053] Step 102: Generate a random reset password using the server, and encrypt the reset password using the key to generate an encrypted reset password kept by the server;

[0054] Step 103: In response to the need to reset the account password of the server, a preset number of terminals send the corresponding second key fragments to the server; wherein the preset number is less than or equal to the number of all the second key fragments.

[0055] Step 104: The server performs a key recovery operation based on the first key fragment and the received portion of the second key fragment to generate a recovery key, and uses the recovery key to decrypt the encrypted reset password to obtain the reset password.

[0056] Step 105: The server sends the decrypted reset password to at least one terminal.

[0057] In the above-mentioned server reset password management method, the reset password is randomly generated by the server itself and is encrypted with a key to ensure the security of the reset password. The key split storage not only ensures the redundancy of obtaining the reset password, but also avoids the poor flexibility and insecurity caused by a single operation and maintenance personnel mastering all the keys. It can achieve the purpose of resetting the administrator account password of any server in the data center using a preset number of terminal devices while ensuring security. It is suitable for application in large-scale data centers and has better flexibility and security.

[0058] In some embodiments, to ensure the security of password reset acquisition and further the security of password reset management, the method further includes:

[0059] generating a key fingerprint for each second key fragment, the fingerprint being kept by the server;

[0060] The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second fragment is legitimate, and counts the number of legitimate terminals;

[0061] In response to a terminal sending a second key fragment being illegal, the remaining terminals are waited for to send corresponding second key fragments to the server until the number of legal terminals equals the preset number; wherein the remaining terminals are terminals that have not sent a second key fragment to the server before.

[0062] In some embodiments, the aforementioned step 102, generating a random reset password using the server, and encrypting the reset password using the key to generate an encrypted reset password kept by the server, further includes:

[0063] Importing the key into the server when the server is logged in normally;

[0064] Use the server to generate a random number as the reset password;

[0065] Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password;

[0066] In response to the encryption operation being completed, the key imported into the server is deleted.

[0067] In some embodiments, the aforementioned step 105, wherein the server sends the decrypted reset password to at least one terminal, further includes:

[0068] The last terminal confirmed to be legitimate is used as the target terminal;

[0069] The reset password obtained by decryption by the server is sent to the target terminal.

[0070] In some examples, the aforementioned step 105, wherein the server sends the decrypted reset password to at least one terminal, includes:

[0071] All confirmed legitimate terminals are regarded as target terminals;

[0072] The reset password obtained by decryption by the server is sent to the target terminal.

[0073] In some embodiments, the method further comprises:

[0074] In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted;

[0075] Regenerate a random reset password using the server;

[0076] Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password;

[0077] In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

[0078] In some embodiments, the method is applied to at least one server in a large-scale data center.

[0079] In another embodiment, please combine Figure 2 As shown, the following takes the application of the above-mentioned server reset password management method to a data center composed of large-scale servers as an example. In order to facilitate understanding of the solution of the present invention, the following takes the operation process of performing password reset on a server in the cluster as an example to explain in detail. The specific implementation method is as follows:

[0080] Step 201: The key splitting system splits the key. The main operations are as follows:

[0081] (1) Key import into key splitting system.

[0082] (2) The key splitting system splits the key into four key fragments, including one first key fragment kept by the server and three second key fragments kept by the operation and maintenance personnel. It is assumed that any three of the four key fragments can restore the complete key, and a corresponding key fingerprint is generated for each second key fragment.

[0083] Step 202: The server system imports the key information, logs into the server system, and performs the following operations:

[0084] (1) The server system imports key information, specifically, the key information includes: a key, a first key fragment, and three key fingerprints of a second key fragment.

[0085] (2) The server system generates a random password and uses the imported key to encrypt the random password to generate an encrypted reset password for storage.

[0086] (3) The server system obtains the random password and sets the random password as the reset password of the administrator account.

[0087] (4) The server system deletes the key imported in step (1) from the server system.

[0088] Step 203: Operation and maintenance personnel manage the second key fragment. The specific process is as follows:

[0089] (1) Three different operation and maintenance personnel manage three different second key fragments respectively.

[0090] (2) The operation and maintenance personnel have a terminal program, and after the terminal program imports the second key fragment, the administrator account password of the server can be remotely reset.

[0091] Step 204: The terminal program obtains the reset password. The specific process is as follows:

[0092] (1) The operation and maintenance personnel need to obtain the reset password of the server system administrator account, which requires at least two of the three numbers to execute.

[0093] (2) The first operation and maintenance personnel uses the terminal program to send the second key fragment in their custody to the server. The server receives the second key fragment sent by the first operation and maintenance personnel and uses the key fingerprint to verify whether the second key fragment held by the first operation and maintenance personnel is legitimate.

[0094] (3) If the second key fragment held by the first operation and maintenance personnel is legal, the server saves the second key fragment sent by the first operation and maintenance personnel.

[0095] (4) The second operation and maintenance personnel uses the terminal program to send the second key fragment in their custody to the server. The server receives the second key fragment sent by the second operation and maintenance personnel and uses the key fingerprint to verify whether the second key fragment held by the second operation and maintenance personnel is legal.

[0096] (5) If the second key fragment held by the second operation and maintenance personnel is legal, the server saves the second key fragment sent by the second operation and maintenance personnel, and the server system recovers the key through the first key fragment, the two second key fragments sent by the first operation and maintenance personnel respectively, and obtains the recovery key.

[0097] (6) The server system uses the recovery key to decrypt the encrypted reset password and obtain the reset password of the administrator account.

[0098] (7) The server system returns the reset password of the administrator account to the second operation and maintenance personnel.

[0099] Step 205: Reset the server administrator account password. The specific process is as follows:

[0100] (1) The second operation and maintenance personnel resets the administrator account password using the administrator account reset password.

[0101] (2) After the administrator account password is successfully reset, the server system generates a new random password and resets the newly generated random password to the administrator account reset password. At the same time, the new administrator account reset password is encrypted using the recovery key to generate a new encrypted reset password, and the recovery key, the first operation and maintenance personnel's second key fragments, and the second operation and maintenance personnel's second key fragments are deleted from the server system.

[0102] It should be noted that the number of second key fragments and the minimum number of second key fragments required for recovering the key fragments in the above embodiments are only for illustration. In the specific implementation process, various other possible combinations can also be adopted. For example, a strategy of recovering the key by taking three out of five second key fragments can be adopted, or a strategy of recovering the key by taking any four out of seven second key fragments can be adopted, and so on.

[0103] The server reset password management method of this embodiment can reset the administrator account password of any device in the data center while ensuring security. The reset password of the server administrator account is randomly generated by the server and encrypted with a key. The reset passwords of different servers are different and can only be decrypted and obtained using the key. At the same time, the key is split into four key fragments using a key splitting strategy, one of which is kept by the server and the other three are kept by three different terminals. Only the key fragments of any two of the terminals are needed to restore the complete key. The restored key is then used to decrypt the encrypted reset password to obtain the reset password, and the reset password is then used to obtain the permission to modify the account password. The reset password of the administrator account is randomly generated by the server itself and encrypted with a key to ensure the security of the reset password. The key splitting storage not only ensures the redundancy of obtaining the reset password, but also avoids the poor security and inflexibility caused by a single operation and maintenance personnel mastering all the keys. At the same time, the use of a set of key management can support remote reset of multiple sets of devices through an interactive protocol to ensure ease of use.

[0104] In yet another embodiment, the present invention further provides a server password reset management device 300, the device comprising:

[0105] A key splitting module 301 configured to split a key to generate a first key fragment kept by a server and multiple second key fragments kept by multiple terminals respectively;

[0106] a reset password generation module 302 configured to generate a random reset password using the server, and encrypt the reset password using the key to generate an encrypted reset password kept by the server;

[0107] A first sending module 303, configured to, in response to a need to reset the account password of the server, have a preset number of terminals send corresponding second key fragments to the server;

[0108] a key recovery module 304 configured to perform, by the server, a key recovery operation on the key based on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypt the encrypted reset password using the recovery key to obtain the reset password;

[0109] The second sending module 305 is configured to send the decrypted reset password obtained by the server to at least one terminal.

[0110] The above-mentioned server reset password management device, in which the reset password is randomly generated by the server itself and encrypted with a key to ensure the security of the reset password, the key split storage not only ensures the redundancy of obtaining the reset password, but also avoids the poor flexibility and insecurity caused by a single operation and maintenance personnel mastering all the keys. It can achieve the goal of resetting the administrator account password of any server in the data center using a preset number of terminal devices while ensuring security. It is suitable for application in large-scale data centers and has better flexibility and security.

[0111] In some embodiments, the apparatus further comprises a module configured to perform the following steps:

[0112] generating a key fingerprint for each second key fragment, the fingerprint being kept by the server;

[0113] The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second fragment is legitimate;

[0114] In response to a terminal sending the second key fragment being illegal, the remaining terminals are waited for to send corresponding second key fragments to the server until the number of legal terminals is equal to the preset number.

[0115] In some embodiments, the reset password generation module 302 is further configured to:

[0116] Importing the key into the server when the server is logged in normally;

[0117] Use the server to generate a random number as the reset password;

[0118] Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password;

[0119] In response to the encryption operation being completed, the key imported into the server is deleted.

[0120] In some embodiments, the second sending module 305 is further configured to:

[0121] The last terminal confirmed to be legitimate is used as the target terminal;

[0122] The reset password obtained by decryption by the server is sent to the target terminal.

[0123] In some embodiments, the second sending module 305 is further configured to:

[0124] All confirmed legitimate terminals are regarded as target terminals;

[0125] The reset password obtained by decryption by the server is sent to the target terminal.

[0126] In some embodiments, the apparatus further comprises a module configured to perform the following steps:

[0127] In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted;

[0128] Regenerate a random reset password using the server;

[0129] Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password;

[0130] In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

[0131] In some embodiments, the apparatus is applied to at least one server in a large-scale data center.

[0132] It should be noted that the specific limitations of the server password reset management device can be found in the limitations of the server password reset management method described above and will not be repeated here. Each module in the aforementioned server password reset management device can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the aforementioned modules can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in a computer device in software form, so that the processor can call and execute the corresponding operations of each of the aforementioned modules.

[0133] According to another aspect of the present invention, a computer device is provided. The computer device may be a server. Figure 4 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, the server reset password management method described above is implemented. Specifically, the method includes the following steps:

[0134] Splitting the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals respectively;

[0135] generating a random reset password using the server, and encrypting the reset password using the key to generate an encrypted reset password kept by the server;

[0136] In response to a need to reset the account password of the server, a preset number of terminals send corresponding second key fragments to the server;

[0137] The server performs a key recovery operation on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypts the encrypted reset password using the recovery key to obtain the reset password;

[0138] The server sends the decrypted reset password to at least one terminal.

[0139] In some embodiments, the method further comprises:

[0140] generating a key fingerprint for each second key fragment, the fingerprint being kept by the server;

[0141] The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second fragment is legitimate;

[0142] In response to a terminal sending the second key fragment being illegal, the remaining terminals are waited for to send corresponding second key fragments to the server until the number of legal terminals is equal to the preset number.

[0143] In some embodiments, the step of generating a random reset password using the server and encrypting the reset password using the key to generate an encrypted reset password kept by the server includes:

[0144] Importing the key into the server when the server is logged in normally;

[0145] Use the server to generate a random number as the reset password;

[0146] Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password;

[0147] In response to the encryption operation being completed, the key imported into the server is deleted.

[0148] In some embodiments, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0149] The last terminal confirmed to be legitimate is used as the target terminal;

[0150] The reset password obtained by decryption by the server is sent to the target terminal.

[0151] In some examples, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0152] All confirmed legitimate terminals are regarded as target terminals;

[0153] Send the reset password obtained by server decryption to the target terminal

[0154] In some embodiments, the method further comprises:

[0155] In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted;

[0156] Regenerate a random reset password using the server;

[0157] Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password;

[0158] In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

[0159] In some embodiments, the method is applied to at least one server in a large-scale data center.

[0160] According to another aspect of the present invention, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the server password reset management method described above is implemented. Specifically, the method includes performing the following steps:

[0161] Splitting the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals respectively;

[0162] generating a random reset password using the server, and encrypting the reset password using the key to generate an encrypted reset password kept by the server;

[0163] In response to a need to reset the account password of the server, a preset number of terminals send corresponding second key fragments to the server;

[0164] The server performs a key recovery operation on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypts the encrypted reset password using the recovery key to obtain the reset password;

[0165] The server sends the decrypted reset password to at least one terminal.

[0166] In some embodiments, the method further comprises:

[0167] generating a key fingerprint for each second key fragment, the fingerprint being kept by the server;

[0168] The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second fragment is legitimate;

[0169] In response to a terminal sending the second key fragment being illegal, the remaining terminals are waited for to send corresponding second key fragments to the server until the number of legal terminals is equal to the preset number.

[0170] In some embodiments, the step of generating a random reset password using the server and encrypting the reset password using the key to generate an encrypted reset password kept by the server includes:

[0171] Importing the key into the server when the server is logged in normally;

[0172] Use the server to generate a random number as the reset password;

[0173] Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password;

[0174] In response to the encryption operation being completed, the key imported into the server is deleted.

[0175] In some embodiments, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0176] The last terminal confirmed to be legitimate is used as the target terminal;

[0177] The reset password obtained by decryption by the server is sent to the target terminal.

[0178] In some examples, the step of sending the decrypted reset password to at least one terminal by the server includes:

[0179] All confirmed legitimate terminals are regarded as target terminals;

[0180] Send the reset password obtained by server decryption to the target terminal

[0181] In some embodiments, the method further comprises:

[0182] In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted;

[0183] Regenerate a random reset password using the server;

[0184] Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password;

[0185] In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

[0186] In some embodiments, the method is applied to at least one server in a large-scale data center.

[0187] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0188] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0189] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that a person skilled in the art could make various modifications and improvements without departing from the spirit of the present application, all of which fall within the scope of protection of the present application. Therefore, the scope of protection of the present patent application shall be determined by the appended claims.

Claims

1. A server reset password management method, characterized in that: Applied to at least one server in a large-scale data center, the method comprises: Splitting the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals respectively, and generating a key fingerprint kept by the server for each second key fragment; generating a random reset password using the server, and encrypting the reset password using the key to generate an encrypted reset password kept by the server; In response to a need to reset the account password of the server, a preset number of terminals send corresponding second key fragments to the server; The server verifies each received second key fragment in sequence based on the key fingerprint to confirm whether each terminal sending the second key fragment is legitimate, and counts the number of legitimate terminals; In response to a terminal sending the second key fragment being illegal, waiting for the remaining terminals to send corresponding second key fragments to the server until the number of legal terminals equals the preset number; The server performs a key recovery operation on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypts the encrypted reset password using the recovery key to obtain the reset password; The server sends the decrypted reset password to at least one terminal.

2. The server reset password management method according to claim 1, characterized in that: The step of generating a random reset password using the server and encrypting the reset password using the key to generate an encrypted reset password kept by the server includes: Importing the key into the server when the server is logged in normally; Use the server to generate a random number as the reset password; Performing an encryption operation on the reset password using the key imported into the server to generate an encrypted reset password; In response to the encryption operation being completed, the key imported into the server is deleted.

3. The server reset password management method according to claim 1, characterized in that: The step of sending the decrypted reset password to at least one terminal by the server includes: The last terminal confirmed to be legitimate is used as the target terminal; The reset password obtained by decryption by the server is sent to the target terminal.

4. The server reset password management method according to claim 1, characterized in that: The step of sending the decrypted reset password to at least one terminal by the server includes: All confirmed legitimate terminals are regarded as target terminals; The reset password obtained by decryption by the server is sent to the target terminal.

5. The server reset password management method according to claim 1, characterized in that: The method further comprises: In response to the server completing the reset of the account password, the encrypted reset password currently kept by the server is deleted; Regenerate a random reset password using the server; Performing an encryption operation on the regenerated random reset password using the recovery key to regenerate the encrypted reset password; In response to regenerating the encryption reset password, the server deletes the recovery key and the received second key fragment.

6. A server reset password management device, characterized in that: Applied to at least one server in a large-scale data center, the device comprises: a key splitting module configured to split the key to generate a first key fragment kept by the server and multiple second key fragments kept by multiple terminals, and generate a key fingerprint kept by the server for each second key fragment; a reset password generation module, the reset password generation module being configured to generate a random reset password using the server, and encrypt the reset password using the key to generate an encrypted reset password kept by the server; a first sending module configured to, in response to a need to reset the account password of the server, have a preset number of terminals send corresponding second key fragments to the server; a verification module configured to sequentially verify, by the server, each received second key fragment based on the key fingerprint to confirm whether each terminal sending the second key fragment is legitimate, and to count the number of legitimate terminals; and in response to a terminal sending the second key fragment being illegitimate, wait for the remaining terminals to send corresponding second key fragments to the server until the number of legitimate terminals reaches a predetermined number; a key recovery module configured to, by the server, perform a key recovery operation on the key based on the first key fragment and the received portion of the second key fragment to generate a recovery key, and decrypt the encrypted reset password using the recovery key to obtain the reset password; The second sending module is configured to send the reset password obtained by decryption by the server to at least one terminal.

7. A computer device, characterized in that: include: at least one processor; as well as A memory storing a computer program executable in the processor, wherein the processor executes the method according to any one of claims 1 to 5 when executing the program.

8. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 5 is performed.

Images