Password recommendation method, device, computer equipment and storage medium
The method enhances password security by generating complex passwords from a standard library and filtering out matching historical patterns, reducing the likelihood of password cracking.
Patent Information
- Application Number
- CN202210596223.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-05-30
- Publication Date
- 2024-12-24
- Estimated Expiration
- 2042-05-30
AI Technical Summary
Traditional password change methods based on personal habits result in easily crackable passwords due to regularity between old and new passwords, leading to low security.
A method that generates initial passwords from a standard password library, applies non-standardization processing, and filters out matching passwords against a password blacklist constructed from historical passwords to recommend new passwords with reduced correlation to previous ones.
Improves password security by generating complex passwords with lower regularity to historical ones, making them harder to crack.
Smart Images
Figure CN115037460B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of information security technology, and in particular to a cryptographic recommendation method, apparatus, computer equipment, storage medium, and computer program product. Background Technology
[0002] With the development of internet technology, identity authentication technology has emerged to ensure the security of users accessing internet resources. This technology uses a combination of username and password for authentication. If the username and password are entered correctly, the user is allowed to access the corresponding internet resources. To improve password security, users need to change their passwords regularly.
[0003] In traditional technology, when users change their passwords, they often do so based on personal habits for ease of remembering, resulting in a certain pattern between the old and new passwords. For example, a user might simply change the first lowercase letter of their old password to an uppercase letter to obtain a new password.
[0004] It's easy to understand that using traditional techniques, modified passwords are easily cracked, resulting in low password security. Summary of the Invention
[0005] Therefore, it is necessary to provide a password recommendation method, apparatus, computer device, computer-readable storage medium, and computer program product that can improve password security in response to the above-mentioned technical problems.
[0006] Firstly, this application provides a password recommendation method. The method includes:
[0007] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0008] The initial ciphers in the initial cipher set are subjected to non-normalization to obtain a candidate cipher set;
[0009] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0010] From the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0011] Push at least one target password from the target password set to the target account.
[0012] In one embodiment, the method further includes:
[0013] Obtain the historical passwords set by the target account;
[0014] Based on the character information in the historical password, determine the password feature information corresponding to the historical password;
[0015] Based on the password feature information and the historical passwords, a password blacklist corresponding to the target account is constructed.
[0016] In one embodiment, the cryptographic feature information includes character combination method, character representation content, and cryptographic complexity.
[0017] In one embodiment, the method further includes:
[0018] Obtain a sample set of passwords set by the account sample set;
[0019] The cryptographic samples in the cryptographic sample set are standardized to obtain a standard cryptographic set;
[0020] Construct a standard cryptographic library based on the aforementioned standard cryptographic set.
[0021] In one embodiment, the step of determining an initial password set in response to a password recommendation request from a target account, based on standard passwords in a pre-stored standard password library, includes:
[0022] In response to a password recommendation request issued by a target account for a target portal website, an initial set of passwords that conforms to the password setting rules of the target portal website and standard passwords in a pre-stored standard password library is determined.
[0023] In one embodiment, the method further includes:
[0024] Obtain the historical passwords set by the target account on the target portal website;
[0025] Based on the character information in the historical passwords, the password setting rules corresponding to the target portal website are determined.
[0026] Secondly, this application also provides a password recommendation device. The device includes:
[0027] The password determination module is used to respond to a password recommendation request issued by the target account and determine the initial password set based on the standard passwords in the pre-stored standard password library;
[0028] The password acquisition module is used to perform non-standardization processing on each initial password in the initial password set to obtain a candidate password set.
[0029] The password matching module is used to match each candidate password in the candidate password set with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0030] The password filtering module is used to filter out the candidate passwords that successfully match from the candidate password set to obtain the target password set;
[0031] The password push module is used to push at least one target password from the target password set to the target account.
[0032] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0033] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0034] The initial ciphers in the initial cipher set are subjected to non-normalization to obtain a candidate cipher set;
[0035] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0036] From the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0037] Push at least one target password from the target password set to the target account.
[0038] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:
[0039] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0040] The initial ciphers in the initial cipher set are subjected to non-normalization to obtain a candidate cipher set;
[0041] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0042] From the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0043] Push at least one target password from the target password set to the target account.
[0044] Fifthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:
[0045] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0046] The initial ciphers in the initial cipher set are subjected to non-normalization to obtain a candidate cipher set;
[0047] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0048] From the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0049] Push at least one target password from the target password set to the target account.
[0050] The aforementioned password recommendation method, apparatus, computer equipment, storage medium, and computer program product, when a target account issues a password recommendation request, first determines an initial password set based on standard passwords in a pre-stored standard password library. Then, each initial password in the initial password set undergoes non-standardization processing to obtain a candidate password set. Next, each candidate password in the candidate password set is matched against a password blacklist corresponding to the target account (this blacklist is constructed based on historical passwords set by the target account), and successfully matched candidate passwords are eliminated, while unmatched candidate passwords are retained, resulting in a target password set. Finally, at least one target password from the target password set is pushed to the target account. It can be understood that this application first generates an initial password based on standard passwords and increases password complexity through non-standardization processing. Then, passwords that successfully match the password blacklist are eliminated, i.e., passwords with high correlation to historical passwords set by the target account are eliminated. This results in new target passwords with lower correlation to historical passwords set by the target account being recommended to the user. Thus, the new passwords have less regularity with the old passwords, increasing the difficulty of password cracking and improving password security. Attached Figure Description
[0051] Figure 1 This is a diagram illustrating the application environment of a password recommendation method in one embodiment;
[0052] Figure 2 This is a flowchart illustrating a password recommendation method in one embodiment;
[0053] Figure 3 This is a flowchart illustrating the password blacklist construction process in one embodiment;
[0054] Figure 4 This is a structural block diagram of a password recommendation device in one embodiment;
[0055] Figure 5 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation
[0056] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.
[0057] First, before introducing the technical solutions of the embodiments of this application in detail, the technical background or evolution of the embodiments of this application will be introduced. Generally, in the field of password recommendation, the current technical background is that when users change their passwords, for ease of memorization, they usually change their passwords based on personal habits, resulting in a certain regularity between the new and old passwords. For example, a user can obtain a new password simply by changing the first lowercase letter of the old password to the corresponding uppercase letter. Based on this background, through long-term model simulation research and development, as well as the collection, demonstration, and verification of experimental data, the applicant has found that using traditional techniques, the modified password is easily cracked. Therefore, how to improve password security has become a pressing problem to be solved. Furthermore, it should be noted that the applicant has devoted a great deal of creative effort to the inventive concept of this application and the technical solutions described in the following embodiments.
[0058] The password recommendation method provided in this application can be applied to, for example... Figure 1In the application environment shown, terminal 102 communicates with server 104 via a network. A data storage system can store the data that server 104 needs to process. The data storage system can be integrated onto server 104 or located in the cloud or on another network server. Specifically, the target account in terminal 102 sends a password recommendation request to server 104. In response to this request, server 104 first determines an initial password set based on standard passwords in a pre-stored standard password library. Then, server 104 performs non-standardization processing on each initial password in the initial password set to obtain a candidate password set. Next, server 104 matches each candidate password in the candidate password set with the password blacklist corresponding to the target account. This password blacklist is constructed based on historical passwords set by the target account. Then, server 104 filters out successfully matching candidate passwords from the candidate password set to obtain the target password set. Finally, server 104 pushes at least one target password from the target password set to the target account in terminal 102.
[0059] The terminal 102 can be, but is not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can include smart speakers, smart TVs, smart air conditioners, and smart in-vehicle systems. Portable wearable devices can include smartwatches, smart bracelets, and head-mounted devices. The server 104 can be implemented using a standalone server or a server cluster consisting of multiple servers.
[0060] In one embodiment, such as Figure 2 As shown, a password recommendation method is provided, which can be applied to... Figure 1 Taking the server in the example, the following steps are included:
[0061] Step S202: In response to the password recommendation request issued by the target account, determine the initial password set based on the standard passwords in the pre-stored standard password library.
[0062] The standard cryptography library stores multiple standard ciphers. Standard ciphers are ciphers that have undergone standardization. Standardization can include glyph standardization and content standardization.
[0063] Specifically, a user requesting a password recommendation logs in to the terminal with the target account. This user can then trigger the password recommendation action using the target account. Optionally, the user can click the "Password Recommendation" button in the terminal's graphical user interface to trigger the password recommendation action. In response to this password recommendation action, the terminal generates a password recommendation request carrying the account identifier corresponding to the target account and sends the request to the server.
[0064] Upon receiving the password recommendation request, the server reads the standard passwords from the pre-stored standard password library and determines the initial password set based on these standard passwords. Optionally, the server randomly selects multiple standard passwords from the pre-stored standard password library to obtain the initial password set. Optionally, the server randomly combines the standard passwords from the pre-stored standard password library into multiple initial passwords to obtain the initial password set.
[0065] Step S204: Perform non-normalization processing on each initial cipher in the initial cipher set to obtain a candidate cipher set.
[0066] Non-standardization processing is the inverse process of standardization processing. Non-standardization processing can include font non-standardization and content non-standardization.
[0067] Specifically, the server performs denormalization on each initial password in the initial password set to obtain a candidate password set. Optionally, the server performs glyph denormalization on each initial password in the initial password set to obtain a candidate password set. Optionally, the server performs content denormalization on each initial password in the initial password set to obtain a candidate password set.
[0068] Step S206: Match each candidate password in the candidate password set with the password blacklist corresponding to the target account.
[0069] The password blacklist is built based on the historical passwords set by the target account. It can include historical passwords set by the target account and their corresponding password characteristics. The password blacklist can be pre-stored on a server.
[0070] Specifically, the server reads the password blacklist associated with the account identifier corresponding to the target account. Then, the server matches each candidate password in the candidate password set with the password blacklist corresponding to the target account. Optionally, the server matches each candidate password in the candidate password set with historical passwords and password feature information in the password blacklist.
[0071] Step S208: In the candidate password set, filter out the candidate passwords that successfully match to obtain the target password set.
[0072] Specifically, the server filters out successfully matched candidate passwords from the candidate password set, retaining those that do not match, thus obtaining the target password set. Optionally, if a candidate password matches a historical password or password feature information, the server determines that the match is successful. Conversely, if a candidate password does not match either a historical password or password feature information, the server determines that the match has failed.
[0073] Step S210: Push at least one target password from the target password set to the target account.
[0074] Specifically, the server pushes at least one target password from the target password set to the terminal corresponding to the target account. Optionally, the server randomly selects a target password from the target password set and pushes it to the target account. Optionally, the server pushes multiple target passwords from the target password set to the target account, instructing the target account to select one of the multiple target passwords as the new modified password.
[0075] In the above password recommendation method, when the target account sends a password recommendation request, an initial password set is first determined based on standard passwords in a pre-stored standard password library. Then, each initial password in the initial password set undergoes non-standardization processing to obtain a candidate password set. Next, each candidate password in the candidate password set is matched against the target account's password blacklist (built based on the target account's historical passwords). Successfully matched candidate passwords are removed, while those that fail to match are retained, resulting in the target password set. Finally, at least one target password from the target password set is pushed to the target account. In essence, this method first generates initial passwords based on standard passwords and increases password complexity through non-standardization processing. Then, passwords that successfully match the password blacklist are removed, i.e., passwords with high relevance to the target account's historical passwords are removed. This results in new target passwords with lower relevance to the target account being recommended to the user. Consequently, the new passwords have less correlation with the old passwords, increasing the difficulty of password cracking and improving password security.
[0076] In one embodiment, the method involves the specific process of constructing a password blacklist corresponding to the target account. Based on the above embodiment, the method further includes the following steps:
[0077] Step S2052: Obtain the historical passwords set by the target account;
[0078] Step S2054: Determine the password feature information corresponding to the historical password based on the character information in the historical password;
[0079] Step S2056: Construct a password blacklist corresponding to the target account based on password feature information and historical passwords.
[0080] Optionally, the password feature information includes character combination method, character representation content, and password complexity. The character combination method can be used to represent the combination method preferred by the user when setting the password. The character representation content can be used to represent the content preferred by the user when setting the password.
[0081] Specifically, first, the server retrieves the target account's historical passwords. These historical passwords can be one or more, and can be passwords from different portals.
[0082] Then, the server determines the password feature information corresponding to the historical password based on the character information in the historical password. Optionally, the server determines the character combination method corresponding to the historical password based on the character type in the historical password. For example, assuming the historical password is abc123456, the server recognizes the character combination method corresponding to this password as "letters + numbers". Optionally, the server determines the character representation content corresponding to the historical password based on the character meaning in the historical password. For example, assuming the historical password is passwd, the server recognizes the character representation content corresponding to this password as "password". Optionally, the server determines the password complexity corresponding to the historical password based on the character type, character length, and case of the characters in the historical password.
[0083] Finally, the server constructs a password blacklist corresponding to the target account based on password signature information and historical passwords. Optionally, the server stores the password signature information and historical passwords as data in the password blacklist corresponding to the target account.
[0084] In this embodiment, password feature information is obtained by mining the historical passwords set by the target account. Then, a password blacklist is constructed based on the password feature information and historical passwords. In this way, password information that is highly related to the historical passwords used by the target account can be used as blacklist data, and based on this, it can be excluded from the recommended range. Therefore, it is beneficial to improve the distinction between new passwords and old passwords, improve the security of new passwords, and improve anti-hacking capabilities.
[0085] It's understandable that setting up a password blacklist is to exclude passwords that users have used before during the password recommendation process, exclude related variations and passwords with similar meanings (for example, if a variation of password, Passwd, is used, Passw0rd will not be recommended), exclude passwords that users typically use (for example, Passwd with the first letter capitalized, or Passw0rd where the letter 'o' is replaced with the number '0'), and so on.
[0086] In one embodiment, the specific construction process of a standard cryptographic library is involved. Building upon the above embodiment, the method further includes the following steps:
[0087] Step S2012: Obtain the password sample set set that the account sample set has been set;
[0088] Step S2014: Standardize each cryptographic sample in the cryptographic sample set to obtain a standard cryptographic set;
[0089] Step S2016, construct a standard password library according to the standard password set.
[0090] Among them, the account sample set is a set composed of at least one account sample. The password sample set is a set composed of at least one password sample. The password sample can be the historical password set by the account sample.
[0091] Specifically, the server obtains the password sample set set by the account sample set. Since the password samples set by each account sample are various and the formats are not unified, the server will perform standardization processing on each password sample in the password sample set to obtain the standard password set. The standardization processing can include glyph standardization and content standardization. Then, the server uses the standard password set as the data stored in the standard password library.
[0092] In this embodiment, by performing standardization processing on the password samples to obtain the standard password set and thus constructing the standard password library, the password data in the standard password library can be enriched. In this way, when generating the initial password subsequently, the diversity of the initial password is higher, further increasing the difficulty of password cracking and being beneficial to improving the security of the password.
[0093] In one embodiment, the glyph standardization includes converting letters to lowercase uniformly, converting English abbreviations to English full names, etc. For example, for the password Passwd, the corresponding meaning is password. Convert all letters to lowercase uniformly, and then compare. Taking password as the reference prototype, each letter of the passwd string after the lowercase conversion of Passwd appears in password, and the similarity of the characters is 100%. Its corresponding Chinese meaning is password.
[0094] In one embodiment, the content standardization includes determining the content meaning of the password. For example, by comparing through the conversion of the content, the content meaning is used as a content sample library. For example, "Hoe the crops under the midday sun" corresponds to the first letters Chrdw. Chrdw is saved as a sample in the sample library. Taking chrdw as the reference prototype, Chrdw is a variant, and its corresponding Chinese content meaning is "Hoe the crops under the midday sun". Another example is that a group of letters corresponds to multiple content meanings. According to the reference prototype, they are all calculated according to multiple samples. For example, yyds may correspond to the Chinese content meanings of "application store" and "as good as ten".
[0095] In one embodiment, it involves a possible implementation manner of determining the initial password set according to the standard password in the pre-stored standard password library in response to a password recommendation request sent by the target account. On the basis of the above embodiment, step S202 can be specifically implemented through the following steps:
[0096] Step S2022: In response to the password recommendation request sent by the target account to the target portal website, determine the initial password set that conforms to the password setting rules according to the password setting rules of the target portal website and the standard passwords in the pre-stored standard password library.
[0097] The password setting rules are used to ensure that the set passwords meet the password requirements of the portal website. For example, some portal websites require passwords to contain uppercase letters and numbers. The password setting rules for the target portal website can be pre-stored on the server.
[0098] Specifically, a user requesting a password recommendation logs in to the target portal website on the terminal using the target account. This user can then trigger a password recommendation action for the target portal website using the target account. Optionally, the user clicks the "Password Recommendation" button in the graphical user interface displayed on the target portal website on the terminal to trigger the password recommendation action. In response to this password recommendation action, the terminal generates a password recommendation request carrying the account identifier corresponding to the target account and sends the password recommendation request to the server corresponding to the target portal website.
[0099] Upon receiving the password recommendation request, the server reads the standard passwords from the pre-stored standard password database and the password setting rules corresponding to the target portal website. Based on these standard passwords and password setting rules, the server determines an initial set of passwords that conform to the password setting rules. Optionally, the server selects multiple standard passwords from the pre-stored standard password database that satisfy the password setting rules corresponding to the target portal website to obtain an initial password set. Optionally, the server combines the standard passwords from the pre-stored standard password database into multiple initial passwords that satisfy the password setting rules corresponding to the target portal website to obtain an initial password set.
[0100] In this embodiment, an initial password that conforms to the password setting rules corresponding to the portal website is generated, which can ensure the accuracy of password setting and improve user experience.
[0101] In one embodiment, the method involves the specific process of determining the password setting rules corresponding to the target portal website. Based on the above embodiment, the method further includes the following steps:
[0102] Step S201a: Obtain the historical passwords set by the target account on the target portal website;
[0103] Step S201b: Determine the password setting rules corresponding to the target portal website based on the character information in the historical passwords.
[0104] Specifically, for a target portal website, the server obtains the target account's historical passwords set on that website. Then, based on the character information in these historical passwords, it determines the password setting rules for the target portal website. For example, assuming the target account's historical passwords on the target portal website are abc123456, qwe666, and ccc3344, the server recognizes that all historical passwords contain a combination of letters and numbers. Therefore, it determines that the password setting rules for that target portal website must include letters and numbers.
[0105] In this embodiment, the password setting rules of the target portal website are analyzed based on the historical passwords set by the user on the target portal website, thereby achieving the purpose of automatically identifying password setting rules and facilitating the rapid generation of passwords to be recommended.
[0106] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.
[0107] Based on the same inventive concept, this application also provides a password recommendation apparatus for implementing the password recommendation method described above. The solution provided by this apparatus is similar to the implementation scheme described in the above method; therefore, the specific limitations in one or more embodiments of the password recommendation apparatus provided below can be found in the limitations of the password recommendation method described above, and will not be repeated here.
[0108] In one embodiment, such as Figure 4 As shown, a password recommendation device is provided, including: a password determination module 302, a password acquisition module 304, a password matching module 306, a password filtering module 308, and a password push module 310, wherein:
[0109] The password determination module 302 is used to respond to a password recommendation request issued by the target account and determine an initial password set based on the standard passwords in the pre-stored standard password library.
[0110] The password acquisition module 304 is used to perform non-normalization processing on each initial password in the initial password set to obtain a candidate password set;
[0111] The password matching module 306 is used to match each candidate password in the candidate password set with the password blacklist corresponding to the target account, wherein the password blacklist is constructed based on the historical passwords set by the target account;
[0112] The password filtering module 308 is used to filter out the candidate passwords that successfully match from the candidate password set to obtain the target password set;
[0113] Password push module 310 is used to push at least one target password from the target password set to the target account.
[0114] In the aforementioned password recommendation device, when a target account issues a password recommendation request, an initial password set is first determined based on standard passwords in a pre-stored standard password library. Then, each initial password in the initial password set undergoes non-standardization processing to obtain a candidate password set. Next, each candidate password in the candidate password set is matched against the target account's password blacklist (built based on historical passwords set by the target account). Successfully matched candidate passwords are eliminated, while those that fail to match are retained, resulting in a target password set. Finally, at least one target password from the target password set is pushed to the target account. In essence, this device first generates initial passwords based on standard passwords and increases password complexity through non-standardization processing. Then, it eliminates passwords that successfully match the password blacklist, i.e., passwords with high relevance to historical passwords set by the target account. This results in new target passwords with lower relevance to historical passwords set by the target account being recommended to the user. Consequently, the new passwords exhibit less regularity compared to old passwords, increasing the difficulty of password cracking and improving password security.
[0115] In one embodiment, the device further includes:
[0116] The password retrieval module is used to retrieve historical passwords set by the target account.
[0117] The feature determination module is used to determine the password feature information corresponding to the historical password based on the character information in the historical password;
[0118] The blacklist building module is used to build a password blacklist corresponding to the target account based on password feature information and historical passwords.
[0119] In one embodiment, the cryptographic feature information includes character combination method, character representation content, and cryptographic complexity.
[0120] In one embodiment, the device further includes:
[0121] The sample acquisition module is used to acquire a set of password samples that have been set by the account sample set;
[0122] The cryptographic processing module is used to standardize each cryptographic sample in the cryptographic sample set to obtain a standard cryptographic set;
[0123] The cryptography library construction module is used to build standard cryptography libraries based on standard cryptographic sets.
[0124] In one embodiment, the password determination module 302 is specifically used to respond to a password recommendation request issued by the target account for the target portal website, and determine an initial set of passwords that conform to the password setting rules according to the password setting rules corresponding to the target portal website and the standard passwords in the pre-stored standard password library.
[0125] In one embodiment, the device further includes:
[0126] The password retrieval module is used to retrieve historical passwords set by the target account on the target portal website;
[0127] The rule determination module is used to determine the password setting rules for the target portal website based on the character information in historical passwords.
[0128] Each module in the aforementioned password recommendation device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.
[0129] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 5 As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The network interface is used to communicate with external terminals via a network connection. When executed by the processor, the computer program implements a password recommendation method.
[0130] Those skilled in the art will understand that Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0131] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:
[0132] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0133] The initial ciphers in the initial cipher set are denormalized to obtain a candidate cipher set.
[0134] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account. The password blacklist is constructed based on the historical passwords set by the target account.
[0135] In the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0136] Push at least one target password from the target password set to the target account.
[0137] In the aforementioned computer device, when a target account sends a password recommendation request, an initial password set is first determined based on standard passwords in a pre-stored standard password library. Then, each initial password in the initial password set undergoes non-standardization processing to obtain a candidate password set. Next, each candidate password in the candidate password set is matched against the target account's password blacklist (built based on historical passwords set by the target account). Successfully matched candidate passwords are eliminated, while those that fail to match are retained, resulting in a target password set. Finally, at least one target password from the target password set is pushed to the target account. In essence, this computer device first generates an initial password based on standard passwords and increases its complexity through non-standardization processing. Then, it eliminates passwords that match the password blacklist, i.e., passwords with high relevance to historical passwords set by the target account. This results in new target passwords with lower relevance to historical passwords set by the target account being recommended to the user. Consequently, the new passwords have less correlation with the old passwords, increasing the difficulty of password cracking and improving password security.
[0138] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0139] Obtain the historical passwords set by the target account; determine the password feature information corresponding to the historical passwords based on the character information in the historical passwords; construct a password blacklist corresponding to the target account based on the password feature information and the historical passwords.
[0140] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0141] Obtain the password sample set set by the account sample set; standardize each password sample in the password sample set to obtain the standard password set; construct the standard password library based on the standard password set.
[0142] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0143] In response to a password recommendation request from a target account for a target portal website, an initial set of passwords that conforms to the password setting rules of the target portal website and the standard passwords in the pre-stored standard password library is determined.
[0144] In one embodiment, the processor, when executing a computer program, also performs the following steps:
[0145] Obtain the target account's historical passwords set on the target portal website; determine the password setting rules for the target portal website based on the character information in the historical passwords.
[0146] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:
[0147] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0148] The initial ciphers in the initial cipher set are denormalized to obtain a candidate cipher set.
[0149] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account. The password blacklist is constructed based on the historical passwords set by the target account.
[0150] In the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0151] Push at least one target password from the target password set to the target account.
[0152] In the aforementioned computer-readable storage medium, when a target account issues a password recommendation request, an initial password set is first determined based on standard passwords in a pre-stored standard password library. Then, each initial password in the initial password set undergoes non-standardization processing to obtain a candidate password set. Next, each candidate password in the candidate password set is matched against the target account's password blacklist (constructed based on historical passwords set by the target account). Successfully matched candidate passwords are removed, while unmatched candidate passwords are retained, resulting in a target password set. Finally, at least one target password from the target password set is pushed to the target account. It can be understood that this computer-readable storage medium first generates initial passwords based on standard passwords and increases password complexity through non-standardization processing. Then, passwords that successfully match the password blacklist are removed, i.e., passwords with high correlation to historical passwords set by the target account are removed. This results in new target passwords with lower correlation to historical passwords set by the target account being recommended to the user. Thus, the new passwords have less regularity compared to old passwords, increasing the difficulty of password cracking and improving password security.
[0153] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0154] Obtain the historical passwords set by the target account; determine the password feature information corresponding to the historical passwords based on the character information in the historical passwords; construct a password blacklist corresponding to the target account based on the password feature information and the historical passwords.
[0155] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0156] Obtain the password sample set set by the account sample set; standardize each password sample in the password sample set to obtain the standard password set; construct the standard password library based on the standard password set.
[0157] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0158] In response to a password recommendation request from a target account for a target portal website, an initial set of passwords that conforms to the password setting rules of the target portal website and the standard passwords in the pre-stored standard password library is determined.
[0159] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0160] Obtain the target account's historical passwords set on the target portal website; determine the password setting rules for the target portal website based on the character information in the historical passwords.
[0161] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:
[0162] In response to a password recommendation request from the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library;
[0163] The initial ciphers in the initial cipher set are denormalized to obtain a candidate cipher set.
[0164] Each candidate password in the candidate password set is matched with the password blacklist corresponding to the target account. The password blacklist is constructed based on the historical passwords set by the target account.
[0165] In the candidate password set, the candidate passwords that successfully match are filtered out to obtain the target password set;
[0166] Push at least one target password from the target password set to the target account.
[0167] In the aforementioned computer program product, when a target account sends a password recommendation request, it first determines an initial password set based on standard passwords in a pre-stored standard password library. Then, it performs non-standardization processing on each initial password in the initial password set to obtain a candidate password set. Next, it matches each candidate password in the candidate password set with the target account's password blacklist (built based on the target account's historical passwords), filtering out successfully matched candidate passwords and retaining those that fail to match, thus obtaining the target password set. Finally, it pushes at least one target password from the target password set to the target account. In essence, this computer program product first generates an initial password based on standard passwords and increases password complexity through non-standardization processing. Then, it filters out passwords that match the password blacklist, i.e., passwords with high correlation to the target account's historical passwords. This results in new target passwords with lower correlation to the target account's historical passwords being recommended to the user. Thus, the new passwords have less correlation with the old passwords, increasing the difficulty of password cracking and improving password security.
[0168] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0169] Obtain the historical passwords set by the target account; determine the password feature information corresponding to the historical passwords based on the character information in the historical passwords; construct a password blacklist corresponding to the target account based on the password feature information and the historical passwords.
[0170] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0171] Obtain the password sample set set by the account sample set; standardize each password sample in the password sample set to obtain the standard password set; construct the standard password library based on the standard password set.
[0172] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0173] In response to a password recommendation request from a target account for a target portal website, an initial set of passwords that conforms to the password setting rules of the target portal website and the standard passwords in the pre-stored standard password library is determined.
[0174] In one embodiment, when the computer program is executed by a processor, it also performs the following steps:
[0175] Obtain the target account's historical passwords set on the target portal website; determine the password setting rules for the target portal website based on the character information in the historical passwords.
[0176] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.
[0177] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0178] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0179] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A password recommendation method, characterized in that: The method comprises: In response to a password recommendation request issued by the target account, an initial password set is determined based on standard passwords in a pre-stored standard password library; Performing non-standard processing on each initial password in the initial password set to obtain a candidate password set; Matching each candidate password in the candidate password set with a password blacklist corresponding to the target account, wherein the password blacklist is constructed based on historical passwords set for the target account; In the candidate password set, filter out the candidate passwords that are successfully matched to obtain a target password set; At least one target password in the target password set is pushed to the target account.
2. The method according to claim 1, characterized in that The method further comprises: Obtain the historical passwords set for the target account; Determining password feature information corresponding to the historical password based on character information in the historical password; A password blacklist corresponding to the target account is constructed based on the password feature information and the historical passwords.
3. The method according to claim 2, characterized in that The password feature information includes character combination mode, character representation content and password complexity.
4. The method according to claim 1, characterized in that The method further comprises: Get the password sample set set by the account sample set; Performing standardization processing on each password sample in the password sample set to obtain a standard password set; According to the standard password set, a standard password library is constructed.
5. The method according to claim 1, characterized in that The step of responding to the password recommendation request issued by the target account and determining the initial password set according to the standard passwords in the pre-stored standard password library includes: In response to a password recommendation request issued by a target account to a target portal website, an initial password set that complies with the password setting rules is determined according to password setting rules corresponding to the target portal website and standard passwords in a pre-stored standard password library.
6. The method according to claim 5, characterized in that The method further comprises: Obtaining historical passwords that the target account has set in the target portal website; The password setting rule corresponding to the target portal website is determined according to the character information in the historical password.
7. A password recommendation device, characterized in that: The device comprises: A password determination module, configured to determine an initial password set based on standard passwords in a pre-stored standard password library in response to a password recommendation request issued by a target account; A password obtaining module, used for performing non-standard processing on each initial password in the initial password set to obtain a candidate password set; a password matching module, configured to match each candidate password in the candidate password set with a password blacklist corresponding to the target account, wherein the password blacklist is constructed based on historical passwords set for the target account; A password screening module, used to screen out successfully matched candidate passwords from the candidate password set to obtain a target password set; The password pushing module is used to push at least one target password in the target password set to the target account.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.