Password management method, device, system, storage medium and computer equipment

Abstract

The embodiments of the present invention provide a password management method, device, system, storage medium and computer equipment. In the technical solution provided by the embodiments of the present invention, a target account and a target password of a target scenario input by a user are received, and the target account and the target password are fuzzified to generate account information and password information according to the fuzzification method selected by the user, and the account information and the password information are encrypted and stored by an encryption key. The embodiments of the present invention can effectively solve the security risks existing in existing password management tools.

Description

[Technical field]

[0001] The present invention relates to the field of data security technology, and in particular to a password management method, device, system, storage medium and computer equipment. [Background technology]

[0002] With the rapid development of information technology and Internet technology, people's daily lifestyles have gradually moved from offline to online. Various Internet services such as online banking, online shopping, online games, website forums, emails, cloud disks and mobile apps have penetrated into every aspect of people's lives. In order to protect users' personal privacy and data security, the first and most basic line of defense is to log in and authenticate by setting a personal password. Although authentication methods using random SMS verification codes, fingerprint recognition and face recognition technologies are becoming more and more popular, password authentication is still the most basic, most commonly used and most common authentication method.

[0003] As people's lives are gradually becoming more and more internet-based, the internet services that an ordinary person is exposed to are becoming more and more extensive, including not only online shopping services involving property security, but also online services for leisure and entertainment. Websites for various types of network services require registration, and users are required to remember different account numbers, passwords and other information. Therefore, the number of accounts and passwords that users need to remember is increasing, and there is an urgent need for a password management tool that assists memory to reduce the burden of manual memory.

[0004] Existing password management tools include notepad-type tools, browser-built-in password protection functions, local password management software, open source or commercial Internet password management software, etc. However, existing password management tools do not manage user accounts and passwords in various scenarios in a hierarchical and classified manner. They usually only implement conventional links such as encryption, decryption, encrypted transmission, and encrypted storage, without analyzing the deep-level needs of user password management and processing them in a targeted manner. In addition, password data is stored centrally locally or in the cloud. Once a user's login password is leaked or the password management platform itself is leaked, all the user's saved passwords are at risk of being leaked. Therefore, there are security risks in existing password management tools. [Summary of the invention]

[0005] In view of this, embodiments of the present invention provide a password management method, apparatus, system, storage medium and computer equipment, which can effectively solve the security risks existing in existing password management tools.

[0006] In a first aspect, an embodiment of the present invention provides a password management method, the method comprising:

[0007] Receive the target account and target password of the target scenario input by the user;

[0008] According to the obfuscation method selected by the user, the target account and the target password are obfuscated to generate account information and password information;

[0009] The account information and the password information are encrypted and stored using an encryption key.

[0010] Optionally, the generating account information and password information by performing obfuscation processing on the target account and the target password according to the obfuscation mode selected by the user specifically includes:

[0011] Determining whether the blurring method selected by the user is complete blurring or protective blurring;

[0012] If it is determined that the obfuscation method selected by the user is the complete obfuscation, according to the character positions selected by the user in the target account and the target password, the target characters corresponding to the character positions are deleted or randomly replaced to generate the account information and the password information;

[0013] If it is determined that the obfuscation method selected by the user is the protection obfuscation, the target characters corresponding to the character positions selected by the user in the target account and the target password are randomly replaced, and the target characters are encrypted using a protection key to generate the account information and the password information.

[0014] On the other hand, an embodiment of the present invention provides a password management method, the method comprising:

[0015] Generating prompt information for prompting the user to input an encryption key according to the target scenario selected by the user;

[0016] receiving the encryption key input by the user;

[0017] After the encryption key is verified, a target account and a target password of the target scene are generated according to the obfuscation method corresponding to the target scene.

[0018] Optionally, after the encryption key is verified, generating the account information and password information of the target scene according to the obfuscation method corresponding to the target scene specifically includes:

[0019] Determining whether the blurring method corresponding to the target scene is complete blurring or protective blurring;

[0020] If it is determined that the blurring method corresponding to the target scene is the complete blurring, the account information and the password information of the target scene are obtained, and the account information and the password information include blurred characters.

[0021] Optionally, after determining whether the blurring mode corresponding to the target scene is complete blurring or protective blurring, the method further includes:

[0022] If it is determined that the obfuscation mode corresponding to the target scene is the protection obfuscation, the account information and the password information of the target scene are obtained, wherein the account information and the password information include the obfuscated characters;

[0023] After receiving the protection key input by the user, obtaining the target character corresponding to the character position of the obfuscated character according to the protection key;

[0024] The target account number and the target password are generated according to the account information, the password information and the target characters.

[0025] On the other hand, an embodiment of the present invention provides a password management device, the device comprising:

[0026] A first receiving module is used to receive a target account and a target password for a target scenario input by a user;

[0027] A fuzzification processing module, used to perform fuzzification processing on the target account and the target password to generate account information and password information according to the fuzzification method selected by the user;

[0028] The encryption storage module is used to encrypt and store the account information and the password information using an encryption key.

[0029] On the other hand, an embodiment of the present invention provides a password management device, the device comprising:

[0030] A prompt module, used for generating prompt information for prompting the user to input an encryption key according to a target scenario selected by the user;

[0031] A second receiving module, used for receiving the encryption key input by the user;

[0032] A generation module is used to generate a target account and a target password of the target scenario according to a fuzzification method corresponding to the target scenario after the encryption key is verified.

[0033] On the other hand, an embodiment of the present invention provides a password management system, the system comprising:

[0034] Registration and login unit, used for user registration or login to the password management system;

[0035] A password management unit, configured to receive a target account and a target password of a target scenario input by a user, perform obfuscation processing on the target account and the target password according to an obfuscation method selected by the user to generate account information and password information, and encrypt and store the account information and the password information using an encryption key;

[0036] The password management unit is further used to generate prompt information for prompting the user to input an encryption key according to the target scenario selected by the user, receive the encryption key input by the user, and after the encryption key is verified, generate a target account and a target password for the target scenario according to the obfuscation method corresponding to the target scenario;

[0037] The password storage unit is used to store the encrypted information.

[0038] On the other hand, an embodiment of the present invention provides a storage medium, which includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the above-mentioned password management method.

[0039] On the other hand, an embodiment of the present invention provides a computer device, including a memory and a processor, wherein the memory is used to store information including program instructions, and the processor is used to control the execution of the program instructions, and is characterized in that the program instructions implement the steps of the above-mentioned password management method when loaded and executed by the processor.

[0040] In the technical solutions of the password management method, device, system, storage medium and computer equipment provided by the embodiments of the present invention, a target account and a target password of a target scenario input by a user are received, and the target account and the target password are fuzzified to generate account information and password information according to the fuzzification method selected by the user, and the account information and the password information are encrypted and stored by an encryption key. The embodiments of the present invention can effectively solve the security risks existing in existing password management tools.

Brief Description of the Drawings

[0041] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0042] Figure 1 A flowchart of a password management method provided by one embodiment of the present invention;

[0043] Figure 2 for Figure 1In the example, according to the obfuscation method selected by the user, the target account and target password are obfuscated to generate a specific flow chart of account information and password information;

[0044] Figure 3 A flowchart of a password management method provided by another embodiment of the present invention;

[0045] Figure 4 for Figure 3 After the encryption key is verified, a specific flow chart of the target account and target password of the target scenario is generated according to the fuzzification method corresponding to the target scenario;

[0046] Figure 5 A schematic diagram of the structure of a password management device provided by one embodiment of the present invention;

[0047] Figure 6 A schematic diagram of the structure of a password management device provided by another embodiment of the present invention;

[0048] Figure 7 A schematic diagram of the structure of a password management system provided by one embodiment of the present invention;

[0049] Figure 8 A schematic diagram of a computer device provided by an embodiment of the present invention. [Specific implementation method]

[0050] In order to better understand the technical solution of the present invention, the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0051] It should be clear that the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0052] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0053] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0054] Figure 1A flowchart of a password management method provided by an embodiment of the present invention is applied to encrypted input scenarios, such as Figure 1 As shown, the method includes:

[0055] Step 101: Receive a target account and a target password of a target scenario input by a user.

[0056] In the embodiment of the present invention, each step is executed by a password management system.

[0057] In the embodiment of the present invention, before step 101, the following steps are further included:

[0058] Step 100: Log in to the password management system according to the system account and system password of the password management system input by the user.

[0059] After logging into the password management system, users can manage their passwords, which at least includes encrypted entry and password query. When users perform encrypted entry, they need to enter personal password information. As shown in Table 1, personal password information includes target scenario, target account, target password, and remarks. Among them, target scenarios include Weibo, WeChat, QQ, Sohu Mailbox, or Sina Mailbox, etc.

[0060] Table 1 Personal password information

[0061] Target scenario Target account Target password Remark Weibo ABCDEFGH ABCDEFGH12345678 Daily life WeChat 123456789 ABCDEFGH Daily life QQ 123456789 ABCDEFGH Daily life Sohu Mail ABC@sohu.com ABC12345678 Daily life Sina Mail ABC@sina.com ABC12345678 Daily life …… …… …… ……

[0062] Step 102: According to the obfuscation method selected by the user, the target account and target password are obfuscated to generate account information and password information.

[0063] In the embodiment of the present invention, the obfuscation method includes complete obfuscation or protective obfuscation. The user can obfuscate certain characters of the target account and target password according to personal needs. According to the principle that "the core personal password is most securely remembered in your own brain", the user can obfuscate certain characters in the password combination according to the importance of the target account and target password, and these obfuscated characters can choose the obfuscation method of complete obfuscation or protective obfuscation.

[0064] In the embodiment of the present invention, Figure 2 As shown, step 102 specifically includes:

[0065] Step 1021, determine whether the fuzzification method selected by the user is complete fuzzification or protected fuzzification. If it is complete fuzzification, execute step 1022; if it is protected fuzzification, execute step 1023.

[0066] Step 1022: According to the character positions selected by the user in the target account and the target password, the target characters corresponding to the character positions are deleted or randomly replaced to generate account information and password information.

[0067] In the embodiment of the present invention, the user selects the target character to be blurred and clicks to perform a complete blurring process. The password management system performs a complete blurring process on the target character according to the character position of the target character, for example, replacing the target character with *.

[0068] For example, as shown in Table 2, the target account and target password with the target scenario of "Weibo" in Table 1 above are completely blurred, and the characters "D", "E", "F", and "G" in the target account and the characters "D", "E", "F", "G", "3", "4", "5", "6", and "7" in the target password are replaced by the character "*".

[0069] Table 2 Personal password information after complete obfuscation

[0070] Target scenario Account Information Password Information Remark Weibo ABC****H ABC*****12*****8 Daily life

[0071] The completely obfuscated obfuscation method deletes the target characters selected by the user and only records the position information of the target characters. The user can only get the obfuscated account information and password information from the password management system. In this way, once information leakage occurs in a certain link, the attacker cannot get the user's accurate target account and target password, and the user can use the obfuscated account information and password information to restore his target account and target password in his mind according to the relevant password combination "in his memory".

[0072] Step 1023: According to the character positions selected by the user in the target account and the target password, the corresponding target characters at the character positions are randomly replaced, and the target characters are encrypted using a protection key to generate account information and password information.

[0073] In the embodiment of the present invention, the user's non-core, non-critical or target password without relevant password rules can choose the obfuscation mode of protecting obfuscation. It should be noted that if the user does not select the character position to be obfuscated, the password management system will select X positions for obfuscation by default according to the rules (X>=1).

[0074] For example, as shown in Table 3, the target account and target password with the target scenario of "Weibo" in Table 1 above are protected and blurred, and the characters "E" and "G" in the target account and the characters "D", "H", "4", and "8" in the target password are replaced by the character "#".

[0075] Table 3 Protecting the obfuscated personal password information

[0076] Target scenario Account Information Password Information Remark Weibo ABCD#F#H ABC#EFG#123#567# Daily life

[0077] It should be noted that since users usually choose to protect obfuscated target passwords that are non-core, non-critical, or have no relevant password rules, users may completely forget their passwords. The purpose of setting a protection key in the embodiment of the present invention is that when a user completely forgets his password and cannot restore his target account and target password in his mind based on the relevant password combination "in his memory" by using the account information and password information after protection obfuscation, he can enter the protection key to make the password management system display the complete target account and target password.

[0078] Therefore, under the completely obfuscated method, the user's final original password information will not be reflected and stored in the password management system. In this way, even in the event of extreme information leakage in the password management system, the user's commonly used core passwords can be absolutely secure.

[0079] Step 103: Encrypt and store the account information and password information using an encryption key.

[0080] In an embodiment of the present invention, the password management system encrypts and stores the user's account information and password information encryption key after being completely obfuscated or protected. Specifically, the password management system transmits the character position of the target character, the information encrypted by the protection key, and the information encrypted by the encryption key to the password storage unit through an encrypted channel for storage.

[0081] The embodiment of the present invention adopts a secondary encryption method of a protection key and an encryption key to perform hierarchical encryption and decryption management on user accounts and passwords. When a user queries a password, if he can restore his final password based on the obfuscated information decrypted by the encryption key, there is no need to use the protection key to decrypt and display the original final password, which can effectively prevent the invalid display of account and password information. The hierarchical decryption method can effectively reduce the risk of information leakage.

[0082] In order to ensure the security of user password information, the user needs to use and remember his / her system password, protection key and encryption key. In the embodiment of the present invention, the order of importance of these passwords from low to high is: system password, encryption key, protection key.

[0083] The embodiments of the present invention aim at the different levels of needs for personal password management, utilize the strategies of classified management and hierarchical fuzzy display, and combine conventional measures such as encryption, decryption, encrypted transmission, and encrypted storage to manage users' personal passwords in the whole process. The hierarchical decryption method can effectively prevent the invalid display of account and password information, effectively reduce the risk of information leakage, and provide security for users' passwords to the greatest extent.

[0084] In a technical solution of a password management method provided by an embodiment of the present invention, a target account and a target password of a target scenario input by a user are received, and the target account and the target password are fuzzified to generate account information and password information according to the fuzzification method selected by the user, and the account information and the password information are encrypted and stored by an encryption key. The embodiment of the present invention can effectively solve the security risks existing in existing password management tools.

[0085] Figure 3 A flowchart of a password management method provided by another embodiment of the present invention is applied to a password query scenario, such as Figure 3 As shown, the method includes:

[0086] Step 201: Generate prompt information for prompting the user to input an encryption key according to the target scenario selected by the user.

[0087] In the embodiment of the present invention, each step is executed by a password management system.

[0088] In the embodiment of the present invention, before step 201, the following steps are further included:

[0089] Step 200: Log into the password management system according to the system account and system password of the password management system input by the user.

[0090] After logging into the password management system, users can manage their passwords, which at least includes encrypted entry and password query. When users query passwords, they need to select a target scenario in the memo. For example, the target scenarios include Weibo, WeChat, QQ, Sohu Mail, or Sina Mail.

[0091] The password management system generates a prompt message for the user to enter the encryption key based on the target scenario selected by the user. The user needs to enter the correct encryption key to view the target account and target password of the target scenario.

[0092] Step 202: Receive the encryption key input by the user.

[0093] Step 203: After the encryption key is verified, a target account and a target password of the target scenario are generated according to the obfuscation method corresponding to the target scenario.

[0094] In the embodiment of the present invention, the obfuscation method includes complete obfuscation or protective obfuscation. When the user enters the encrypted information, he can obfuscate certain characters of the target account and the target password according to his personal needs. According to the principle that "the core personal password is most securely remembered in your own brain", the user can obfuscate certain characters in his commonly used password combination according to the importance of the target account and the target password, and these obfuscated characters can choose the obfuscation method of complete obfuscation or protective obfuscation.

[0095] In the embodiment of the present invention, Figure 4 As shown, step 203 specifically includes:

[0096] Step 2031, determine whether the blurring method corresponding to the target scene is complete blurring or protective blurring. If it is complete blurring, execute step 2032; if it is protective blurring, execute step 2033.

[0097] Step 2032: Obtain the account information and password information of the target scenario, where the account information and password information include blurred characters; the process ends.

[0098] In the embodiment of the present invention, the user uses the encryption key to decrypt and obtain the completely obfuscated account information and password information. Since the account information and password information include obfuscated characters, the user needs to restore his final account and password, i.e., the target account and target password, based on the account information and password information obtained from the password management system and the customary password rules he remembers.

[0099] Step 2033: Obtain the account information and password information of the target scene, where the account information and password information include fuzzy characters.

[0100] The process ends when the user can restore his final password based on the protected and obfuscated account information and password information obtained from the password management system and the usual password rules he remembers.

[0101] In the complete obfuscation method, the user's final original password information will not be reflected and stored in the password management system. In this way, even in the event of extreme information leakage in the password management system, the user's commonly used core passwords can be absolutely secure.

[0102] Step 2034: After receiving the protection key input by the user, obtain the target character corresponding to the character position of the obfuscated character according to the protection key.

[0103] The user obtains the obfuscated account information and password information from the password management system, and uses the password rules he or she remembers. If he or she cannot restore his or her final password, the user needs to enter the protection key. When the password management system receives the protection key entered by the user, it obtains the target character corresponding to the character position of the obfuscated character according to the protection key.

[0104] Under objective circumstances, if the user completely forgets the password, the user can use the protection password to perform a secondary protective decryption operation on the obfuscated account information and password information.

[0105] Step 2035: Generate a target account and a target password according to the account information, password information and target characters.

[0106] In the embodiment of the present invention, the password management system generates a target account and a target password according to the account information, the password information and the target characters, that is, displays the user's final complete account and password.

[0107] In order to ensure the security of user password information, the user needs to use and remember his / her system password, protection key and encryption key. In the embodiment of the present invention, the order of importance of these passwords from low to high is: system password, encryption key, protection key.

[0108] The embodiment of the present invention adopts a secondary encryption method of a protection key and an encryption key to perform hierarchical encryption and decryption management on user accounts and passwords. When a user queries a password, if he can restore his final password based on the obfuscated information decrypted by the encryption key, there is no need to use the protection key to decrypt and display the original final password, which can effectively prevent the invalid display of account and password information. The hierarchical decryption method can effectively reduce the risk of information leakage.

[0109] The embodiments of the present invention aim at the different levels of needs for personal password management, utilize the strategies of classified management and hierarchical fuzzy display, and combine conventional measures such as encryption, decryption, encrypted transmission, and encrypted storage to manage users' personal passwords in the whole process. The hierarchical decryption method can effectively prevent the invalid display of account and password information, effectively reduce the risk of information leakage, and provide security for users' passwords to the greatest extent.

[0110] In a technical solution of a password management method provided by an embodiment of the present invention, prompt information for prompting the user to input an encryption key is generated according to a target scenario selected by the user, the encryption key input by the user is received, and after the encryption key is verified, a target account and a target password of the target scenario are generated according to a fuzzification method corresponding to the target scenario. The embodiment of the present invention can effectively solve the security risks existing in existing password management tools.

[0111] Figure 5 A schematic diagram of the structure of a password management device provided by an embodiment of the present invention is shown in FIG. Figure 5 As shown, the device includes: a first login module 31, a first receiving module 32, a fuzzy processing module 33 and an encryption storage module 34.

[0112] The first login module 31 is used to log in to the password management system according to the system account and system password of the password management system input by the user.

[0113] The first receiving module 32 is used to receive a target account and a target password of a target scene input by a user.

[0114] The fuzzification processing module 33 is used to perform fuzzification processing on the target account and target password to generate account information and password information according to the fuzzification method selected by the user.

[0115] In the embodiment of the present invention, the fuzzification processing module 33 specifically includes: a first judgment submodule 331 , a complete fuzzification submodule 332 , and a protective fuzzification submodule 333 .

[0116] The first judgment submodule 331 is used to judge whether the fuzzification method selected by the user is complete fuzzification or protective fuzzification.

[0117] The complete obfuscation submodule 332 is used to delete or randomly replace the corresponding target characters at the character positions selected by the user in the target account and target password if the first judgment submodule 331 determines that the obfuscation method selected by the user is complete obfuscation, so as to generate account information and password information.

[0118] The protection obfuscation submodule 333 is used to randomly replace the corresponding target characters at the character positions selected by the user in the target account and target password if the first judgment submodule 331 determines that the obfuscation method selected by the user is protection obfuscation, and encrypt the target characters with the protection key to generate account information and password information.

[0119] The encryption storage module 34 is used to encrypt and store the account information and password information using an encryption key.

[0120] The password management device provided in the embodiment of the present invention can be used to implement the above Figure 1 to Figure 2 For the password management method in, the specific description can be found in the embodiment of the above-mentioned password management method, which will not be repeated here.

[0121] In a technical solution of a password management device provided by an embodiment of the present invention, a target account and a target password of a target scenario input by a user are received, and the target account and the target password are fuzzified to generate account information and password information according to the fuzzification method selected by the user, and the account information and the password information are encrypted and stored by an encryption key. The embodiment of the present invention can effectively solve the security risks existing in existing password management tools.

[0122] Figure 6 A schematic diagram of the structure of a password management device provided by an embodiment of the present invention is shown in FIG. Figure 6 As shown, the device includes: a second login module 41, a prompt module 42, a second receiving module 43 and a generating module 44.

[0123] The second login module 41 is used to log in to the password management system according to the system account and system password of the password management system input by the user.

[0124] The prompt module 42 is used to generate prompt information for prompting the user to input an encryption key according to the target scenario selected by the user.

[0125] The second receiving module 43 is used to receive the encryption key input by the user.

[0126] The generation module 44 is used to generate a target account and a target password of a target scenario according to a fuzzification method corresponding to the target scenario after the encryption key is verified.

[0127] In the embodiment of the present invention, the generating module 44 specifically includes:

[0128] The second judgment submodule 441 is used to judge whether the blurring method corresponding to the target scene is complete blurring or protective blurring.

[0129] The first acquisition submodule 442 is used to acquire the account information and password information of the target scene if the second determination submodule 441 determines that the blurring method corresponding to the target scene is complete blurring, and the account information and password information include blurring characters.

[0130] The first acquisition submodule 442 is further used to acquire the account information and password information of the target scene if the second judgment submodule 441 judges that the blurring method corresponding to the target scene is protection blurring, and the account information and password information include blurring characters.

[0131] The second acquisition submodule 443 is used to acquire the target character corresponding to the character position of the obfuscated character according to the protection key after receiving the protection key input by the user.

[0132] The generating submodule 444 is used to generate a target account and a target password according to the account information, the password information and the target characters.

[0133] The password management device provided in the embodiment of the present invention can be used to implement the above Figure 3 to Figure 4 For the password management method in, the specific description can be found in the embodiment of the above-mentioned password management method, which will not be repeated here.

[0134] In a technical solution of a password management device provided by an embodiment of the present invention, prompt information for prompting the user to input an encryption key is generated according to a target scenario selected by the user, the encryption key input by the user is received, and after the encryption key is verified, a target account and a target password of the target scenario are generated according to a fuzzification method corresponding to the target scenario. The embodiment of the present invention can effectively solve the security risks existing in existing password management tools.

[0135] Figure 7 A schematic diagram of a password management system provided by an embodiment of the present invention is shown in FIG. Figure 7 As shown, the system includes: a registration and login unit 51, a password management unit 52 and a password storage unit 53.

[0136] The registration and login unit 51 is used for a user to register or log in to the password management system.

[0137] Users register, log in, and use the cloud-based password management system through the website or mobile app.

[0138] The password management unit 52 is used to receive the target account and target password of the target scenario input by the user, and according to the obfuscation method selected by the user, obfuscate the target account and target password to generate account information and password information, and encrypt and store the account information and password information using an encryption key.

[0139] The password management unit 52 is also used to generate prompt information for prompting the user to input an encryption key according to the target scenario selected by the user, receive the encryption key input by the user, and after the encryption key is verified, generate a target account and a target password for the target scenario according to the obfuscation method corresponding to the target scenario;

[0140] The password storage unit 53 is used to store encryption information.

[0141] The password management system provided by the embodiment of the present invention can be used to implement the above Figures 1 to 4 For the password management method in, the specific description can be found in the embodiment of the above-mentioned password management method, which will not be repeated here.

[0142] In a technical solution of a password management system provided by an embodiment of the present invention, a target account and a target password of a target scenario input by a user are received, and the target account and the target password are fuzzified to generate account information and password information according to the fuzzification method selected by the user, and the account information and the password information are encrypted and stored by an encryption key. The embodiment of the present invention can effectively solve the security risks existing in existing password management tools.

[0143] Figure 8 A schematic diagram of a computer device provided by an embodiment of the present invention. Figure 8As shown, the computer device 20 of this embodiment includes: a processor 21, a memory 22, and a computer program 23 stored in the memory 22 and executable on the processor 21. When the computer program 23 is executed by the processor 21, the method for password management in the embodiment is implemented. To avoid repetition, it is not described one by one here. Alternatively, when the computer program is executed by the processor 21, the functions of each model / unit in the password management device in the embodiment are implemented. To avoid repetition, it is not described one by one here.

[0144] The computer device 20 includes, but is not limited to, a processor 21 and a memory 22. Those skilled in the art will appreciate that Figure 8 It is only an example of the computer device 20 and does not constitute a limitation of the computer device 20. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the computer device may also include input and output devices, network access devices, buses, etc.

[0145] The processor 21 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0146] The memory 22 may be an internal storage unit of the computer device 20, such as a hard disk or memory of the computer device 20. The memory 22 may also be an external storage device of the computer device 20, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a Flash Card, etc. equipped on the computer device 20. Further, the memory 22 may also include both an internal storage unit of the computer device 20 and an external storage device. The memory 22 is used to store computer programs and other programs and data required by the computer device. The memory 22 may also be used to temporarily store data that has been output or is to be output.

[0147] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0148] In the several embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0149] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present invention.

[0150] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0151] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor (Processor) to perform some steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store program codes.

[0152] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A password management method, characterized in that: The method comprises: Receive the target account and target password of the target scenario input by the user; According to the obfuscation method selected by the user, the target account and the target password are obfuscated to generate account information and password information; Encrypting and storing the account information and the password information by using an encryption key; The generating account information and password information by performing obfuscation processing on the target account and the target password according to the obfuscation mode selected by the user specifically includes: Determining whether the blurring method selected by the user is complete blurring or protective blurring; If it is determined that the obfuscation method selected by the user is the complete obfuscation, according to the character positions selected by the user in the target account and the target password, the target characters corresponding to the character positions are deleted or randomly replaced to generate the account information and the password information; If it is determined that the obfuscation method selected by the user is the protection obfuscation, the target characters corresponding to the character positions selected by the user in the target account and the target password are randomly replaced, and the target characters are encrypted using a protection key to generate the account information and the password information.

2. A password management method, characterized in that: The method comprises: Generating prompt information for prompting the user to input an encryption key according to the target scenario selected by the user; receiving the encryption key input by the user; After the encryption key is verified, a target account and a target password for the target scenario are generated according to a fuzzification method corresponding to the target scenario; After the encryption key is verified, the account information and password information of the target scene are generated according to the obfuscation method corresponding to the target scene, specifically including: Determining whether the blurring mode corresponding to the target scene is complete blurring or protective blurring; If it is determined that the obfuscation method corresponding to the target scene is the complete obfuscation, the account information and the password information of the target scene are obtained, and the account information and the password information include obfuscated characters; If it is determined that the obfuscation mode corresponding to the target scene is the protection obfuscation, the account information and the password information of the target scene are obtained, wherein the account information and the password information include the obfuscated characters; After receiving the protection key input by the user, obtaining the target character corresponding to the character position of the obfuscated character according to the protection key; The target account number and the target password are generated according to the account information, the password information and the target characters.

3. A password management device, characterized in that: The device comprises: A first receiving module is used to receive a target account and a target password for a target scenario input by a user; A fuzzification processing module, used to perform fuzzification processing on the target account and the target password to generate account information and password information according to the fuzzification method selected by the user; An encryption storage module, used to encrypt and store the account information and the password information using an encryption key; The fuzzification processing module is specifically used to determine whether the fuzzification method selected by the user is complete fuzzification or protective fuzzification; if it is determined that the fuzzification method selected by the user is the complete fuzzification, according to the character position selected by the user in the target account and the target password, the target character corresponding to the character position is deleted or randomly replaced to generate the account information and the password information; if it is determined that the fuzzification method selected by the user is the protective fuzzification, according to the character position selected by the user in the target account and the target password, the target character corresponding to the character position is randomly replaced, and the target character is encrypted by a protection key to generate the account information and the password information.

4. A password management device, characterized in that: The device comprises: A prompt module, used for generating prompt information for prompting the user to input an encryption key according to a target scenario selected by the user; A second receiving module, used for receiving the encryption key input by the user; A generating module, configured to generate a target account and a target password for the target scenario according to a fuzzification method corresponding to the target scenario after the encryption key is verified; The generating module is specifically used to determine whether the blurring mode corresponding to the target scene is complete blurring or protective blurring; If it is determined that the obfuscation method corresponding to the target scene is the complete obfuscation, the account information and the password information of the target scene are obtained, and the account information and the password information include obfuscated characters; If it is determined that the obfuscation mode corresponding to the target scene is the protection obfuscation, the account information and the password information of the target scene are obtained, wherein the account information and the password information include the obfuscated characters; After receiving the protection key input by the user, obtaining the target character corresponding to the character position of the obfuscated character according to the protection key; The target account number and the target password are generated according to the account information, the password information and the target characters.

5. A password management system, characterized in that: The system comprises: The password management device according to claim 3 or 4; Registration and login unit, used for user registration or login to the password management system; A password management unit is used to receive a target account and a target password of a target scenario input by a user, perform obfuscation processing on the target account and the target password according to an obfuscation method selected by the user to generate account information and password information, and encrypt and store the account information and the password information using an encryption key to obtain encrypted information; The password management unit is further used to generate prompt information for prompting the user to input an encryption key according to the target scenario selected by the user, receive the encryption key input by the user, and after the encryption key is verified, generate a target account and a target password for the target scenario according to the obfuscation method corresponding to the target scenario; The password storage unit is used to store the encrypted information.

6. A storage medium, characterized in that: The storage medium includes a stored program, wherein when the program is executed, the device where the storage medium is located is controlled to execute the password management method according to any one of claims 1 to 2.

7. A computer device comprising a memory and a processor, wherein the memory is used to store information including program instructions, and the processor is used to control the execution of the program instructions, characterized in that: When the program instructions are loaded and executed by the processor, the steps of the password management method described in any one of claims 1-2 are implemented.

Images