Method, apparatus, device and storage medium for enhancing security of password management application

Abstract

The present invention relates to the field of information security technology, and discloses a method, device, equipment and storage medium for enhancing the security of password management applications, which is used to eliminate the plaintext password embedded in the user login request information, reduce the risk of the application password being intercepted, avoid the loss of all sub-account information caused by a single password leakage, realize the traceability of the application access history, enhance the security of the password management application, and reduce the risk of password loss. The method for enhancing the security of password management applications includes: obtaining user login request information; converting the identity verification code according to the preset conversion rule and the request login time to obtain a time-limited dynamic code; performing multi-level encryption on the user login request information to obtain a first encrypted data packet; sending the first encrypted data packet to the server; receiving a target signal; collecting face recognition information and performing identity authentication, and after passing, displaying the target access content according to the target access purpose information and generating an access record.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular, to a method, device, equipment and storage medium for enhancing the security of password management applications. Background Art

[0002] With the in-depth development of the Internet, users log in to various APPs or web pages on their mobile phones and have multiple account information. If all accounts use the same password, the security is low. If there are multiple passwords, it is difficult for users to remember. Therefore, password management applications for managing various types of passwords and codes are becoming increasingly popular. The password management application centrally stores the managed accounts and passwords locally or in the cloud, and users obtain the password information of sub-accounts by logging in to the password management application.

[0003] However, most of the existing password management applications use account password login. When the user login request is sent to the server for authentication, it is easy for attackers to intercept the user login request of the application, thereby obtaining the plaintext password of the application. By logging in to the application with the password, all sub-account password information can be stolen. The security of the password management application is low, resulting in a high risk of loss of the managed sub-account passwords. Summary of the Invention

[0004] The present invention provides a method, device, equipment and storage medium for enhancing the security of password management applications, which is used to eliminate the plaintext password embedded in the user login request information, reduce the risk of the application password being intercepted, avoid the loss of all sub-account information due to a single password leakage, realize the traceability of the application access history, enhance the security of the password management application, and reduce the risk of password loss.

[0005] In a first aspect of the present invention, a method for enhancing the security of a password management application is provided, including: obtaining user login request information of the password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time; converting the identity verification code according to a preset conversion rule and the request login time to obtain a time-limited dynamic code; performing multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet; sending the first encrypted data packet to the server; receiving a target signal, where the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet; when the target signal is a face recognition authentication signal, collecting face recognition information and performing identity authentication to obtain a first authentication result; when the first authentication result is passed, displaying target access content according to the target access purpose information and generating an access record.

[0006] In a feasible implementation manner, the aging dynamic code, the main account number, the login device authentication information, the user login method information, and the target access purpose information are encrypted at multiple levels to obtain a first encrypted data packet, including: segmenting the aging dynamic code, the main account number, the login device authentication information, the user login method information, and the target access purpose information to obtain multiple information segments, each information segment containing one or more user login request information; randomly generating multiple key indication values, and selecting multiple keys from a preset key set according to the multiple key indication values, each key indication value corresponding to a key, the multiple keys at least including a first key, and the multiple key indication values at least including a first key indication value; symmetrically encrypting the multiple information segments in sequence according to the multiple key indication values, the multiple keys, and a preset secrecy order to obtain a second encrypted data packet; combining the second encrypted data packet and the first key indication value, and encrypting the combination result according to an encryption algorithm to obtain the first encrypted data packet.

[0007] In a feasible implementation manner, symmetrically encrypting the multiple information segments in sequence according to the multiple key indication values, the multiple keys, and a preset secrecy order to obtain a second encrypted data packet, including: sorting the multiple information segments according to the preset secrecy order to obtain a first information segment, a second information segment, and a third information segment; symmetrically encrypting the first information segment and the second key indication value according to the first key to obtain first encrypted data; symmetrically encrypting the second information segment and the third key indication value according to the second key to obtain second encrypted data; symmetrically encrypting the third information segment according to the third key to obtain third encrypted data; packing the first encrypted data, the second encrypted data, and the third encrypted data to obtain the second encrypted data packet.

[0008] In a feasible implementation manner, before obtaining the user login request information of the password management application, the user login request information including an identity verification code, a main account number, login device authentication information, user login method information, target access purpose information, and a request login time, further includes: when registering the main account number of the password management application, collecting a face recognition image of the main account; performing key point recognition on the face recognition image of the main account to obtain multiple first key points; performing non-uniform grid division on the face recognition image to obtain multiple grid regions; selecting multiple first regions according to the multiple first key points and the multiple grid regions; extracting features of the multiple first regions according to a preset image algorithm to obtain the face feature information of the main account.

[0009] In a feasible implementation manner, when the target signal is a face recognition authentication signal, face recognition information is collected and identity authentication is performed to obtain a first authentication result, including: when the target signal is a face recognition authentication signal, obtaining a face recognition image to be authenticated; performing key point recognition on the face recognition image to be authenticated to obtain a plurality of second key points; performing non-uniform grid division on the face recognition image to be authenticated to obtain a plurality of grid regions; selecting a plurality of second regions according to the plurality of second key points and the plurality of grid regions; extracting features of the plurality of second regions according to a preset image algorithm to obtain face feature information to be authenticated; authenticating the face feature information of the main account and the face feature information to be authenticated to obtain a first authentication result.

[0010] In a feasible implementation manner, when the first authentication result is passed, the target access content is displayed according to the target access purpose information and an access record is generated, including: when the first authentication result is passed, parsing the target access purpose information to obtain a first access purpose and a target sub-account; displaying the target access content according to the first access purpose and the target sub-account; combining the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

[0011] In a feasible implementation manner, before encrypting the user login request at multiple levels to obtain a first encrypted data packet, it further includes: when entering a plurality of sub-account information in the password management application, marking the type of each sub-account; when the first access purpose is to query and / or manage sub-account information, determining the target sub-account, and the first access purpose is used to indicate the purpose of the user to log in to the password management application; setting a corresponding user login method according to the first access purpose and the type of the sub-account; determining the first access purpose and the target sub-account as the target access purpose information.

[0012] The second aspect of the present invention provides a device for enhancing the security of a password management application, including: an acquisition module, configured to acquire user login request information of the password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time; a conversion module, configured to convert the identity verification code according to a preset conversion rule and the request login time to obtain a time-limited dynamic code; an encryption module, configured to perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet; a sending module, configured to send the first encrypted data packet to a server; a receiving module, configured to receive a target signal, where the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet; an authentication module, configured to, when the target signal is a face recognition authentication signal, collect face recognition information and perform identity authentication to obtain a first authentication result; a first processing module, configured to, when the first authentication result is passed, display target access content according to the target access purpose information and generate an access record.

[0013] In a feasible implementation manner, the encryption module includes: a segmentation unit, configured to segment the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a plurality of information segments, and each information segment contains one or more pieces of user login request information; a key unit, configured to randomly generate a plurality of key indication values, and select a plurality of keys from a preset key set according to the plurality of key indication values, where each key indication value corresponds to a key, the plurality of keys at least include a first key, and the plurality of key indication values at least include a first key indication value; a first encryption unit, configured to perform symmetric key encryption on the plurality of information segments in sequence according to the plurality of key indication values, the plurality of keys, and a preset secrecy order to obtain a second encrypted data packet; a second encryption unit, configured to combine the second encrypted data packet and the first key indication value, and encrypt the combination result according to an encryption algorithm to obtain a first encrypted data packet.

[0014] In a feasible implementation manner, the first encryption unit is specifically configured to sort the plurality of information segments according to a preset secrecy order to obtain a first information segment, a second information segment, and a third information segment; perform symmetric encryption on the first information segment and the second key indication value according to the first key to obtain first encrypted data; perform symmetric encryption on the second information segment and the third key indication value according to the second key to obtain second encrypted data; perform symmetric encryption on the third information segment according to the third key to obtain third encrypted data; and package the first encrypted data, the second encrypted data, and the third encrypted data to obtain a second encrypted data packet.

[0015] In a feasible implementation, a device for enhancing the security of a password management application further includes: a feature extraction module, configured to collect a face recognition image of the main account when registering the main account of the password management application; perform key point recognition on the face recognition image of the main account to obtain a plurality of first key points; perform non-uniform grid division on the face recognition image to obtain a plurality of grid regions; select a plurality of first regions according to the plurality of first key points and the plurality of grid regions; perform feature extraction on the plurality of first regions according to a preset image algorithm to obtain the face feature information of the main account.

[0016] In a feasible implementation, the authentication module is specifically configured to: when the target signal is a face recognition authentication signal, obtain the face recognition image to be authenticated; perform key point recognition on the face recognition image to be authenticated to obtain a plurality of second key points; perform non-uniform grid division on the face recognition image to be authenticated to obtain a plurality of grid regions; select a plurality of second regions according to the plurality of second key points and the plurality of grid regions; perform feature extraction on the plurality of second regions according to a preset image algorithm to obtain the face feature information to be authenticated; authenticate the face feature information of the main account and the face feature information to be authenticated to obtain a first authentication result.

[0017] In a feasible implementation, the first processing module 307 is specifically configured to: when the first authentication result is passed, parse the target access purpose information to obtain a first access purpose and a target sub-account; display the target access content according to the first access purpose and the target sub-account; combine the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

[0018] In a feasible implementation, a device for enhancing the security of a password management application further includes: a second processing module, configured to label the type of each sub-account when entering a plurality of sub-account information in the password management application; when the first access purpose is to query and / or manage sub-account information, determine the target sub-account, and the first access purpose is used to indicate the purpose of the user to log in to the password management application; set a corresponding user login method according to the first access purpose and the type of the sub-account; a determination module, configured to determine the first access purpose and the target sub-account as the target access purpose information.

[0019] A third aspect of the present invention provides a device for enhancing the security of a password management application, including: a memory and at least one processor, where instructions are stored in the memory; the at least one processor calls the instructions in the memory to cause the device for enhancing the security of the password management application to execute the above method for enhancing the security of the password management application.

[0020] The fourth aspect of the present invention provides a computer-readable storage medium, in which instructions are stored, and when they run on a computer, the computer is enabled to execute the method for enhancing the security of a password management application as described above.

[0021] In the technical solution provided by the present invention, user login request information of a password management application is obtained. The user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time. According to a preset conversion rule and the request login time, the identity verification code is converted to obtain a time-limited dynamic code. The time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information are encrypted at multiple levels to obtain a first encrypted data packet. The first encrypted data packet is sent to a server. A target signal is received, and the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet. When the target signal is a face recognition authentication signal, face recognition information is collected and identity authentication is performed to obtain a first authentication result. When the first authentication result is passed, the target access content is displayed according to the target access purpose information and an access record is generated. In an embodiment of the present invention, the identity verification code is converted into a time-limited dynamic code, and there is no need to embed a plaintext password in the user login request information, reducing the risk of the application password being intercepted. The user login request information is encrypted at multiple levels, and face recognition provides guarantee for identity authentication. Only the target access content corresponding to the target access purpose information is displayed, and other information irrelevant to the target access purpose information is hidden, avoiding the loss of all sub-account information due to a single password leakage. The generated access record is convenient for tracking and tracing, enhancing the security of the password management application and reducing the risk of password loss. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a schematic diagram of an embodiment of the method for enhancing the security of a password management application in an embodiment of the present invention;

[0023] Figure 2 It is a schematic diagram of another embodiment of the method for enhancing the security of a password management application in an embodiment of the present invention;

[0024] Figure 3 It is a schematic diagram of an embodiment of the device for enhancing the security of a password management application in an embodiment of the present invention;

[0025] Figure 4 It is a schematic diagram of another embodiment of the device for enhancing the security of a password management application in an embodiment of the present invention;

[0026] Figure 5 It is a schematic diagram of an embodiment of the device for enhancing the security of a password management application in an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0027] The present invention provides a method, device, equipment and storage medium for enhancing the security of a password management application, which is used to convert an identity verification code into a time-limited dynamic code. There is no need to embed a plaintext password in the user login request information, reducing the risk of the application password being intercepted. The user login request information is encrypted at multiple levels, and face recognition provides guarantee for identity authentication. Only the target access content corresponding to the target access purpose information is displayed, and other information irrelevant to the target access purpose information is hidden, avoiding the loss of all sub-account information due to a single password leakage. An access record is generated for easy tracking and tracing, enhancing the security of the password management application and reducing the risk of password loss.

[0028] The terms "first", "second", "third", "fourth", etc. (if any) in the specification, claims and above-mentioned drawings of the present invention are used to distinguish similar objects and do not necessarily need to describe a specific order or sequence. It should be understood that such used data can be interchanged under appropriate circumstances so that the embodiments described here can be implemented in an order different from that illustrated or described here. In addition, the term "comprising" or "having" and any variation thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or equipment comprising a series of steps or units does not necessarily need to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or equipment.

[0029] The password management application of this application can optimize the application interface layout with Masonry. Masonry is a third-party automatic layout framework that encapsulates the system NSLayoutConstraint and provides APIs to developers in a chain programming manner. Masonry adopts the chain programming method, and the code is clear and easy to understand. Moreover, compared with NSLayoutConstraint, the Masonry code is very concise. Masonry supports both the Mac and iOS platforms, and automatic layout can be used with Masonry on both platforms.

[0030] For easy understanding, the specific process of the embodiments of the present invention will be described below. Please refer to Figure 1 , an embodiment of the method for enhancing the security of the password management application in the embodiments of the present invention includes:

[0031] 101. Obtain the user login request information of the password management application. The user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time.

[0032] It can be understood that the execution entity of the present invention can be a device for enhancing the security of password management applications, or it can also be a terminal or a server, and specific details are not limited here. In the embodiments of the present invention, a terminal equipped with a password management application is taken as an example of the execution entity for illustration.

[0033] When a user needs to log in to the password management application, the user inputs an identity verification code, a main account, and target access purpose information. The terminal obtains the user login request information of the password management application. The user login request information includes the identity verification code, the main account, the login device authentication information, the user login method information, the target access purpose information, and the request login time.

[0034] In this application, the login account of the password management application is defined as the main account, and the accounts of other platforms managed in the password management application are defined as sub-accounts. Secondly, according to different user login methods, the identity verification code can be the password of the main account, or it can be a mobile phone verification code, a security device dynamic code, a QR code, or a barcode. Furthermore, the login device authentication information can be the device code of the user login terminal, or it can be the IP address of the login terminal, which is used to indicate the unique login device. The user login method information in the user login request information can be determined by the user's login method, and this information can correspond to the target access purpose information, that is, for the importance or access permission level of different target access purpose information, corresponding user login method information can be set.

[0035] Finally, the target access purpose information includes the first access purpose and the target sub-account. The first access purpose is used to indicate the purpose for the customer to log in to the password management application (hereinafter referred to as the target application or the application), such as various service functions that the user needs the target application to provide, such as querying sub-accounts, managing sub-accounts, managing the main account, and accessing historical records. When the customer logs in to the target application, the first access purpose needs to be selected first. If the first access purpose is to query sub-accounts or manage sub-accounts, the user needs to further select the target sub-account.

[0036] It should be further noted that the number of main accounts is not limited, that is, multiple main accounts can be switched on the same terminal.

[0037] 102. According to the preset conversion rule and the request login time, convert the identity verification code to obtain a time-limited dynamic code.

[0038] The terminal converts the identity verification code according to the request login time and the preset conversion rule to obtain a time-limited dynamic code. Among them, the conversion rule preset in the terminal is the same as the conversion rule in the server. The time-limited dynamic code is data information related to the request login time processed by the conversion rule, and the server can process the identity verification code according to the same conversion rule.

[0039] The conversion rule can be to set different mapping relation tables according to different websites / platforms. The mapping relation table is used to indicate the mapping relations among numbers, capital letters, lowercase letters, and symbols. According to this mapping relation table, the identity verification code can be converted into the corresponding information. In addition to the preset mapping relation table, users can further customize the mapping relations among numbers, capital letters, lowercase letters, and symbols to improve the security level of the mapping relation table.

[0040] In a feasible implementation manner, the identity verification code is converted into first data according to the preset mapping relation table, and the first data is combined with the requested login time to generate second data; according to the second data, the preset time-limited dynamic code digit number, and the preset padding rule, a time-limited dynamic code is generated. Since the digit numbers of different types of identity verification codes are different, it can be judged whether the digit number of the generated second data meets the preset time-limited dynamic code digit number. If not, according to the preset padding rule, numbers, and / or capital letters, and / or lowercase letters, and / or symbols are added to the corresponding positions of the second data so that the digit number of the second data meets the preset time-limited dynamic code digit number.

[0041] Through the above method, there is no need to embed the identity verification code in the user login request information. In this way, even if the user login request information is intercepted, the attacker cannot obtain the plaintext password of the main account and cannot perform conversion without knowing the corresponding conversion rule, eliminating the plaintext and clear code in the user login request information, which can greatly reduce the leakage risk.

[0042] 103. Perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet.

[0043] The terminal performs multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet. Among them, the multi-level encryption includes segmented encryption and combined encryption. The encryption algorithm used can be the DES algorithm, or 3DES, AES, etc. By encrypting the user login request sent to the server, the security of the target application can be further improved.

[0044] 104. Send the first encrypted data packet to the server.

[0045] The terminal sends the first encrypted data packet to the server. If the server receives successful signal is received, the first encrypted data packet is deleted. If the server receives failure signal or the server response time is greater than the preset time threshold, the first encrypted data packet is resent.

[0046] 105. Receive a target signal, where the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet.

[0047] The terminal receives the target signal sent by the server. The target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet. When any level of decryption and authentication by the server fails, the server generates a face recognition authentication signal and sends it to the terminal. When all levels of decryption and authentication by the server pass, the server generates an authentication passed signal and sends it to the terminal.

[0048] The generation method of the target signal is as follows: The server obtains the first encrypted data packet; decrypts and authenticates the first encrypted data packet to obtain multiple authentication results; generates the target signal based on the multiple authentication results. When the server fails the authentication, that is, when any one of the authentication results is not passed, the target signal is the face recognition authentication signal. When the server passes the authentication, that is, when all multiple authentication results are passed, the target signal is the authentication passed signal.

[0049] 106. When the target signal is the face recognition authentication signal, collect face recognition information and perform identity authentication to obtain the first authentication result.

[0050] When the target signal of the terminal is the face recognition authentication signal, the face recognition program is launched. The terminal collects the current face recognition information and performs identity authentication with the pre-set face feature information of the main account to obtain the first authentication result. To further improve the accuracy of the face recognition information, the OCR intelligent recognition algorithm can be used to perform rotation-independent and equivalent pattern processing on the face recognition information to obtain the processed face image information, and then calculate the similarity to obtain the first authentication result. When the similarity is greater than or equal to the pre-set similarity threshold, the first authentication result is authentication passed. When the similarity is less than the pre-set similarity threshold, the first authentication result is authentication not passed.

[0051] 107. When the first authentication result is passed, display the target access content according to the target access usage information and generate an access record.

[0052] When the first authentication result of the terminal is passed, that is, when face recognition passes, the terminal displays the target access content according to the target access usage information. For example, if the target access usage information is to query the Alipay account password, the terminal only displays the Alipay account password information. Another example is that when the target access usage information is to manage the main account information, the terminal only displays the main account information management interface. After displaying the target access content, the terminal records the request login time, login device authentication information, user login method information, and target access usage information to generate an access record for subsequent traceability, further improving the security of the target application.

[0053] In the present invention, when the target signal is an authentication passed signal, that is, when the server passes multi-level decryption and authentication of the first encrypted data packet, the terminal displays the target access content according to the target access purpose information. After displaying the target access content, the terminal records the request login time, login device authentication information, user login method information, and target access purpose information to generate an access record, without going through the face recognition step.

[0054] It should be further noted that when the terminal starts the target application and fails to pass the authentication, it can also generate an access record. By identifying abnormal situations such as abnormal startup, warning measures can be further taken.

[0055] In the embodiment of the present invention, the identity verification code is converted into a time-limited dynamic code. There is no need to embed the plaintext password in the user login request information, reducing the risk of the password of the target application being intercepted. The user login request information is encrypted at multiple levels, and face recognition further provides guarantee for identity authentication. Only the target access content corresponding to the target access purpose information is displayed, hiding other information irrelevant to the target access purpose information, avoiding the loss of all sub-account information due to a single password leakage. Generating an access record facilitates tracking and tracing, enhancing the security of the password management application and reducing the risk of password loss.

[0056] Please refer to Figure 2 , another embodiment of the method for enhancing the security of the password management application in the embodiment of the present invention includes:

[0057] 201. Obtain the user login request information of the password management application. The user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time.

[0058] The user inputs the identity verification code, main account, and target access purpose information on the login interface of the password management application. The terminal obtains the user login request information of the password management application. The user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time.

[0059] In this application, the password management application provides multiple user login methods. According to different user login methods, there are corresponding identity verification codes. When the user login method is account password login, the identity verification code can be the password of the main account; when the user login method is mobile verification code login, the identity verification code can also be the mobile verification code; when the user login method is security device dynamic code login, the identity verification code can also be the security device dynamic code; when the user login method is scan code login, the identity verification code is the scanned QR code or barcode. The diversified login methods can provide users with a more comprehensive usage experience, and different user login methods and corresponding identity verification codes can provide multi-angle security. However, there are also risks of non-genuine login caused by loss, leakage or other situations. Therefore, by combining the above multiple login methods with other steps of this application, while providing users with diversified login methods, the security of the password management application can be better improved.

[0060] In a feasible implementation manner, when the terminal registers the main account of the password management application, it collects the face recognition image of the main account; performs key point recognition on the face recognition image of the main account to obtain multiple first key points; performs non-uniform grid division on the face recognition image to obtain multiple grid regions; selects multiple first regions according to the multiple first key points and the multiple grid regions; and extracts features from the multiple first regions according to a preset image algorithm to obtain the face feature information of the main account.

[0061] In a feasible implementation, when the terminal enters multiple sub-account information in the password management application, the type of each sub-account is marked; when the first access purpose is to query and / or manage sub-account information, the target sub-account is determined, and the first access purpose is used to indicate the purpose of the user to log in to the password management application; according to the first access purpose and the type of the sub-account, the corresponding user login method is set. Different weights can be assigned according to the degree of influence of the first access purpose on the security of the target application and the importance of the type of the sub-account, and the allowed user login method is comprehensively determined. For example, the degree of influence of the first access purpose on the security of the target application is: managing the master account information > managing sub-account information = querying sub-account information > historical access records, and the importance of the type of the sub-account is financial payment account > common account > occasionally logged-in account > one-time account, or financial payment account > social platform account > cloud disk account > game account > other accounts, etc. The allowed user login method is determined by comprehensively considering the first access purpose and the type of the sub-account. The user login methods are sorted according to the security level as face recognition login > fingerprint recognition login > security device dynamic code login > mobile phone verification code login > scan code login > account password login. After setting the corresponding user login method, only when the user login method information is the user login method allowed by the target access purpose information or the security level is higher than the allowed user login method, can the authentication pass; the first access purpose and the target sub-account are determined as the target access purpose information.

[0062] 202. According to the preset conversion rule and the requested login time, convert the identity verification code to obtain a time-limited dynamic code.

[0063] Step 202 is similar to the above step 102 and will not be elaborated here.

[0064] 203. Perform multi-level encryption on the time-limited dynamic code, the master account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet.

[0065] The terminal performs multi-level encryption on the time-limited dynamic code, the master account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet.

[0066] In a feasible implementation, the aging dynamic code, the main account number, the login device authentication information, the user login method information, and the target access purpose information are segmented to obtain multiple information segments. Each information segment contains one or more user login request information. The multiple information segments include a first information segment, a second information segment, and a third information segment. Among them, the first information segment includes the main account number, the login device authentication information, and the requested login time. The second information segment includes the target access purpose information. The third information segment includes the aging dynamic code; multiple key indication values are randomly generated, and multiple keys are selected from a preset key set according to the multiple key indication values. Each key indication value corresponds to a key. The multiple keys at least include a first key, and the multiple key indication values at least include a first key indication value. For example, the key set is a three-dimensional data set, and the key indication value is a three-dimensional coordinate value. The unique key can be determined in the key set according to the three-dimensional coordinate value; according to the multiple key indication values, the multiple keys, and the preset confidentiality order, the multiple information segments are sequentially encrypted with a symmetric key to obtain a second encrypted data packet; the second encrypted data packet and the first key indication value are combined, and the combined result is encrypted according to an encryption algorithm to obtain a first encrypted data packet.

[0067] In a feasible implementation, the multiple information segments are sorted according to the preset confidentiality order to obtain a first information segment, a second information segment, and a third information segment; the first information segment and the second key indication value are symmetrically encrypted according to the first key to obtain first encrypted data; the second information segment and the third key indication value are symmetrically encrypted according to the second key to obtain second encrypted data; the third information segment is symmetrically encrypted according to the third key to obtain third encrypted data; the first encrypted data, the second encrypted data, and the third encrypted data are packaged to obtain a second encrypted data packet.

[0068] In this application, the segmented encryption and the combined encryption can use the same encryption algorithm or different encryption algorithms. In this application, the key indication value can also be processed according to a preset conversion rule to obtain an aging dynamic indication value. The key set and the preset mapping relation table of this application can be updated after a preset time interval to improve the security of the target application.

[0069] 204. Send the first encrypted data packet to the server.

[0070] Step 204 is similar to the above step 104 and will not be elaborated here.

[0071] 205. Receive a target signal, where the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet.

[0072] The terminal receives the target signal sent by the server. The target signal is the feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet. When any level of decryption and authentication by the server fails, the server generates a face recognition authentication signal and sends it to the terminal. When all levels of decryption and authentication by the server pass, the server generates an authentication passed signal and sends it to the terminal.

[0073] The processing process of the server for the first encrypted data packet is as follows: The server obtains the first encrypted data packet, decrypts the first encrypted data packet to obtain the second encrypted data packet and the first key indication value; determines the first key according to the first key indication value and the preset key set; performs segmented decryption and authentication on the second encrypted data packet according to the first key to obtain multiple authentication results, and generates a target signal based on the multiple authentication results and sends it to the terminal. The target signal is a face recognition authentication signal or an authentication passed signal.

[0074] In a feasible implementation manner, the second encrypted data packet is segmented and decrypted and authenticated according to the first key to obtain multiple authentication results. According to the multiple authentication results, a target signal is generated and sent to the terminal. The target signal is a face recognition authentication signal or an authentication passed signal, including: performing primary decryption on the first encrypted data of the second encrypted data packet according to the first key to obtain a first information segment, where the first information segment includes a second key indication value, login device authentication information, and a main account; authenticating the login device authentication information and the main account with a preset security device table to obtain a second authentication result, where the security device table is a table of devices logged in by the main account that has passed security authentication; when the second authentication result is passed, determining a second key according to the second key indication value and a preset key set; performing secondary decryption on the second encrypted data of the second encrypted data packet according to the second key to obtain a second information segment, where the second information segment includes a third key indication value, target access purpose information, and user login method information; determining whether the target access purpose information and the user login method information match to obtain a third authentication result. For example, when the target access purpose information is access history, and the user login method information is account password login, the third authentication result is passed. Another example is that when the target access purpose information is querying the bank account password, if the user login method information is security device dynamic code login, the third authentication result is passed, and if the user login method information is account password login, the third authentication result is not passed; when the third authentication result is passed, determining a third key according to the third key indication value and a preset key set; performing tertiary decryption on the third encrypted data of the second encrypted data packet according to the third key to obtain a third information segment, where the third information segment includes a time-limited dynamic code; performing inverse operation on the time-limited dynamic code according to the time-limited dynamic code, the requested login time, and a preset conversion rule to obtain an identity verification code; authenticating the main account and the identity authentication information to obtain a fourth authentication result. When any one of the second authentication result, the third authentication result, and the fourth authentication result is not passed, the server generates a face recognition authentication signal and sends it to the terminal; when the second authentication result, the third authentication result, and the fourth authentication result are all passed, the server generates an authentication passed signal and sends it to the terminal.

[0075] 206. When the target signal is a face recognition authentication signal, collect face recognition information and perform identity authentication to obtain a first authentication result.

[0076] When the target signal is a face recognition authentication signal, the terminal acquires the face recognition image to be authenticated; performs key point recognition on the face recognition image to be authenticated to obtain a plurality of second key points; performs non-uniform grid division on the face recognition image to be authenticated to obtain a plurality of grid regions; selects a plurality of second regions according to the plurality of second key points and the plurality of grid regions; extracts features from the plurality of second regions according to a preset image algorithm to obtain the face feature information to be authenticated; authenticates the main account face feature information and the face feature information to be authenticated to obtain a first authentication result.

[0077] In the present invention, when the target signal is an authentication passed signal, the terminal displays the target access content according to the target access purpose information and generates an access record without triggering the face authentication step.

[0078] 207. When the first authentication result is passed, display the target access content according to the target access purpose information and generate an access record.

[0079] In a feasible implementation manner, when the first authentication result is passed, the terminal parses the target access purpose information to obtain a first access purpose and a target sub-account; displays the target access content according to the first access purpose and the target sub-account; combines the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

[0080] In the embodiment of the present invention, the identity verification code is converted into a time-limited dynamic code, and there is no need to embed a plaintext password in the user login request information, reducing the risk of the application password being intercepted. The user login request information is encrypted at multiple levels, and further provides guarantee for identity authentication through face recognition. Only the target access content corresponding to the target access purpose information is displayed, hiding other information irrelevant to the target access purpose information, avoiding the loss of all sub-account information due to a single password leakage, generating an access record for easy tracking and tracing, enhancing the security of the password management application, and reducing the risk of password loss.

[0081] The method for enhancing the security of the password management application in the embodiment of the present invention is described above. Next, the device for enhancing the security of the password management application in the embodiment of the present invention will be described. Please refer to Figure 3 , an embodiment of the device for enhancing the security of the password management application in the embodiment of the present invention includes:

[0082] An acquisition module 301, configured to acquire user login request information of a password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time;

[0083] A conversion module 302, configured to convert the identity verification code according to a preset conversion rule and the requested login time to obtain a time-limited dynamic code;

[0084] An encryption module 303, configured to perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet;

[0085] A sending module 304, configured to send the first encrypted data packet to the server;

[0086] A receiving module 305, configured to receive a target signal, where the target signal is a feedback signal generated by the server after multi-level decryption and authentication of the first encrypted data packet;

[0087] An authentication module 306, configured to collect face recognition information and perform identity authentication when the target signal is a face recognition authentication signal to obtain a first authentication result;

[0088] A first processing module 307, configured to display target access content and generate an access record according to the target access purpose information when the first authentication result is passed.

[0089] In an embodiment of the present invention, the identity verification code is converted into a time-limited dynamic code, and there is no need to embed a plaintext password in the user login request information, reducing the risk of the application password being intercepted. The user login request information is multi-level encrypted, and further, face recognition provides guarantee for identity authentication. Only the target access content corresponding to the target access purpose information is displayed, and other information irrelevant to the target access purpose information is hidden, avoiding the loss of all sub-account information due to a single password leakage. Generating an access record facilitates tracking and tracing, enhancing the security of the password management application and reducing the risk of password loss.

[0090] Please refer to Figure 4 , another embodiment of the device for enhancing the security of the password management application in an embodiment of the present invention includes:

[0091] An acquisition module 301, configured to acquire user login request information of the password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and a requested login time;

[0092] A conversion module 302, configured to convert the identity verification code according to a preset conversion rule and the requested login time to obtain a time-limited dynamic code;

[0093] An encryption module 303, configured to perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet;

[0094] A sending module 304, configured to send the first encrypted data packet to the server;

[0095] A receiving module 305, configured to receive a target signal, where the target signal is a feedback signal generated by the server after performing multi-level decryption and authentication on the first encrypted data packet;

[0096] An authentication module 306, configured to collect face recognition information and perform identity authentication to obtain a first authentication result when the target signal is a face recognition authentication signal;

[0097] A first processing module 307, configured to display target access content and generate an access record according to the target access purpose information when the first authentication result is passed.

[0098] Optionally, the encryption module 303 includes:

[0099] A segmentation unit 3031, configured to segment the time-limited dynamic code, the main account number, the login device authentication information, the user login method information, and the target access purpose information to obtain a plurality of information segments, and each information segment includes one or more user login request information;

[0100] A key unit 3032, configured to randomly generate a plurality of key indication values, and select a plurality of keys from a preset key set according to the plurality of key indication values, each key indication value corresponds to a key, the plurality of keys at least includes a first key, and the plurality of key indication values at least includes a first key indication value;

[0101] A first encryption unit 3033, configured to perform symmetric key encryption on the plurality of information segments in sequence according to the plurality of key indication values, the plurality of keys, and a preset confidentiality order to obtain a second encrypted data packet;

[0102] A second encryption unit 3034, configured to combine the second encrypted data packet and the first key indication value, and encrypt the combination result according to an encryption algorithm to obtain a first encrypted data packet.

[0103] Optionally, the first encryption unit 3033 is specifically configured to sort the plurality of information segments according to a preset confidentiality order to obtain a first information segment, a second information segment, and a third information segment; perform symmetric encryption on the first information segment and the second key indication value according to the first key to obtain first encrypted data; perform symmetric encryption on the second information segment and the third key indication value according to the second key to obtain second encrypted data; perform symmetric encryption on the third information segment according to the third key to obtain third encrypted data; and package the first encrypted data, the second encrypted data, and the third encrypted data to obtain a second encrypted data packet.

[0104] Optionally, a device for enhancing the security of a password management application further includes: a feature extraction module 308, configured to collect a face recognition image of the main account when registering the main account of the password management application; perform key point recognition on the face recognition image of the main account to obtain a plurality of first key points; perform non-uniform grid division on the face recognition image to obtain a plurality of grid regions; select a plurality of first regions according to the plurality of first key points and the plurality of grid regions; and perform feature extraction on the plurality of first regions according to a preset image algorithm to obtain the main account face feature information.

[0105] Optionally, the authentication module 306 is specifically configured to: when the target signal is a face recognition authentication signal, obtain the face recognition image to be authenticated; perform key point recognition on the face recognition image to be authenticated to obtain a plurality of second key points; perform non-uniform grid division on the face recognition image to be authenticated to obtain a plurality of grid regions; select a plurality of second regions according to the plurality of second key points and the plurality of grid regions; perform feature extraction on the plurality of second regions according to a preset image algorithm to obtain the face feature information to be authenticated; and authenticate the main account face feature information and the face feature information to be authenticated to obtain a first authentication result.

[0106] Optionally, the first processing module 307 is specifically configured to: when the first authentication result is passed, parse the target access purpose information to obtain a first access purpose and a target sub-account; display the target access content according to the first access purpose and the target sub-account; and combine the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

[0107] Optionally, a device for enhancing the security of a password management application further includes:

[0108] A second processing module 309, configured to label the type of each sub-account when entering a plurality of sub-account information in the password management application; determine a target sub-account when the first access purpose is to query and / or manage sub-account information, and the first access purpose is used to indicate the purpose of the user to log in to the password management application; and set a corresponding user login method according to the first access purpose and the type of the sub-account.

[0109] A determination module 310, configured to determine the first access purpose and the target sub-account as the target access purpose information.

[0110] In the embodiments of the present invention, the identity verification code is converted into a time-limited dynamic code. There is no need to embed the plaintext password in the user login request information, which reduces the risk of the application password being intercepted. The user login request information is encrypted at multiple levels, and further, face recognition provides guarantee for identity authentication. Only the target access content corresponding to the target access purpose information is displayed, and other information irrelevant to the target access purpose information is hidden, avoiding the loss of all sub-account information due to the leakage of a single password. An access record is generated for easy tracking and tracing, enhancing the security of the password management application and reducing the risk of password loss.

[0111] Above Figure 3 and Figure 4 The device for enhancing the security of the password management application in the embodiments of the present invention is described in detail from the perspective of modular functional entities. Next, the device for enhancing the security of the password management application in the embodiments of the present invention is described in detail from the perspective of hardware processing.

[0112] Figure 5 FIG. is a schematic structural diagram of a device for enhancing the security of a password management application provided by an embodiment of the present invention. The device 500 for enhancing the security of the password management application may vary greatly due to configuration or performance, and may include one or more processors (central processing units, CPU) 510 (for example, one or more processors) and a memory 520, and one or more storage media 530 for storing application programs 533 or data 532 (for example, one or more mass storage devices). Among them, the memory 520 and the storage media 530 may be transient storage or persistent storage. The program stored in the storage media 530 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the device 500 for enhancing the security of the password management application. Further, the processor 510 may be configured to communicate with the storage media 530 and execute a series of instruction operations in the storage media 530 on the device 500 for enhancing the security of the password management application.

[0113] The device 500 for enhancing the security of the password management application may further include one or more power supplies 540, one or more wired or wireless network interfaces 550, one or more input / output interfaces 560, and / or one or more operating systems 531, such as Windows Serve, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that Figure 5 The shown structural diagram of the device for enhancing the security of the password management application does not constitute a limitation on the device for enhancing the security of the password management application, and may include more or fewer components than shown, or combine some components, or have different component arrangements.

[0114] The present invention also provides a device for enhancing the security of a password management application. The computer device includes a memory and a processor. Computer-readable instructions are stored in the memory. When the computer-readable instructions are executed by the processor, the processor is caused to execute the steps of the method for enhancing the security of the password management application in the above embodiments.

[0115] The present invention also provides a computer-readable storage medium. The computer-readable storage medium can be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. Instructions are stored in the computer-readable storage medium. When the instructions are run on a computer, the computer is caused to execute the steps of the method for enhancing the security of the password management application.

[0116] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems, devices, and units described above can refer to the corresponding processes in the foregoing method embodiments and will not be described herein again.

[0117] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in the various embodiments of the present invention. The foregoing storage medium includes: various media such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disc that can store program codes.

[0118] The above embodiments are only used to illustrate the technical solution of the present invention and are not intended to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments or perform equivalent replacements for some of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A method for enhancing the security of a password management application, characterized in that, The method for enhancing the security of the password management application includes: Obtain the user login request information of the password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time; According to the preset conversion rule and the request login time, convert the identity verification code to obtain a time-limited dynamic code; Perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet; Send the first encrypted data packet to the server, and the server decrypts and authenticates the first encrypted data packet to obtain multiple authentication results; when any one of the authentication results fails, determine the signal of face recognition authentication as the target signal; when all authentication results pass, determine the authentication passed signal as the target signal; use the target signal as a feedback signal and send it; Receive the target signal, where the target signal is a feedback signal generated by the server after multi-level decryption and authentication of the first encrypted data packet; When the target signal is a face recognition authentication signal, collect face recognition information and perform identity authentication to obtain a first authentication result; When the first authentication result passes, display the target access content according to the target access purpose information and generate an access record; The step of, when the first authentication result passes, displaying the target access content according to the target access purpose information and generating an access record includes: When the first authentication result passes, parse the target access purpose information to obtain a first access purpose and a target sub-account; Display the target access content according to the first access purpose and the target sub-account; Combine the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

2. The method for enhancing the security of a password management application according to claim 1, wherein, The step of performing multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet includes: Perform segmented processing on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain multiple information segments, and each information segment contains one or more pieces of user login request information; Randomly generate multiple key indication values, and select multiple keys from a preset key set according to the multiple key indication values, each key indication value corresponds to a key, the multiple keys at least include a first key, and the multiple key indication values at least include a first key indication value; According to the multiple key indication values, the multiple keys, and a preset confidentiality order, perform symmetric key encryption on the multiple information segments in sequence to obtain a second encrypted data packet; Combine the second encrypted data packet and the first key indication value, and encrypt the combination result according to an encryption algorithm to obtain a first encrypted data packet.

3. The method for enhancing the security of a password management application according to claim 2, wherein Performing symmetric key encryption on the multiple information segments in sequence according to the multiple key indication values, the multiple keys, and a preset confidentiality order to obtain a second encrypted data packet, including: Sorting the multiple information segments according to the preset confidentiality order to obtain a first information segment, a second information segment, and a third information segment; Performing symmetric encryption on the first information segment and the second key indication value according to the first key to obtain first encrypted data; Performing symmetric encryption on the second information segment and the third key indication value according to the second key to obtain second encrypted data; Performing symmetric encryption on the third information segment according to the third key to obtain third encrypted data; Packaging the first encrypted data, the second encrypted data, and the third encrypted data to obtain a second encrypted data packet.

4. The method for enhancing the security of a password management application according to claim 1, wherein Before obtaining the user login request information of the password management application, the user login request information including an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time, further including: When registering the main account of the password management application, collecting a face recognition image of the main account; Performing key point recognition on the face recognition image of the main account to obtain multiple first key points; Performing non-uniform grid division on the face recognition image to obtain multiple grid regions; Selecting multiple first regions according to the multiple first key points and the multiple grid regions; Performing feature extraction on the multiple first regions according to a preset image algorithm to obtain main account face feature information.

5. The method for enhancing the security of a password management application according to claim 4, wherein When the target signal is a face recognition authentication signal, collecting face recognition information and performing identity authentication to obtain a first authentication result, including: When the target signal is a face recognition authentication signal, obtaining a face recognition image to be authenticated; Performing key point recognition on the face recognition image to be authenticated to obtain multiple second key points; Performing non-uniform grid division on the face recognition image to be authenticated to obtain multiple grid regions; Selecting multiple second regions according to the multiple second key points and the multiple grid regions; Performing feature extraction on the multiple second regions according to a preset image algorithm to obtain face feature information to be authenticated; Authenticating the main account face feature information and the face feature information to be authenticated to obtain a first authentication result.

6. The method for enhancing the security of a password management application according to any one of claims 1-5, characterized in that, Before encrypting the user login request at multiple levels to obtain a first encrypted data packet, further including: When entering multiple sub-account information in the password management application, marking the type of each sub-account; When the first access purpose is to query and / or manage sub-account information, determining a target sub-account, where the first access purpose is used to indicate the purpose of the user logging in to the password management application; Setting a corresponding user login method according to the first access purpose and the type of the sub-account; Determining the first access purpose and the target sub-account as the target access purpose information.

7. A device for enhancing the security of a password management application, characterized in that, The device for enhancing the security of the password management application includes: An acquisition module, configured to acquire user login request information of a password management application, where the user login request information includes an identity verification code, a main account, login device authentication information, user login method information, target access purpose information, and request login time; A conversion module, configured to convert the identity verification code according to a preset conversion rule and the request login time to obtain a time-limited dynamic code; An encryption module, configured to perform multi-level encryption on the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain a first encrypted data packet; A sending module, configured to send the first encrypted data packet to a server, and the server decrypts and authenticates the first encrypted data packet to obtain multiple authentication results; when any one of the authentication results fails, determine the signal of face recognition authentication as the target signal; when all the authentication results pass, determine the authentication passed signal as the target signal; use the target signal as a feedback signal and send it; A receiving module, configured to receive the target signal, where the target signal is a feedback signal generated by the server after multi-level decryption and authentication of the first encrypted data packet; An authentication module, configured to collect face recognition information and perform identity authentication when the target signal is a face recognition authentication signal to obtain a first authentication result; A first processing module, configured to display target access content and generate an access record according to the target access purpose information when the first authentication result passes; Specifically, the first processing module is configured to: when the first authentication result passes, parse the target access purpose information to obtain a first access purpose and a target sub-account; Display the target access content according to the first access purpose and the target sub-account; Combine the request login time, the login device authentication information, the user login method information, and the target access purpose information to obtain an access record.

8. The device for enhancing the security of a password management application according to claim 7, wherein The encryption module includes: A segmentation unit, configured to segment the time-limited dynamic code, the main account, the login device authentication information, the user login method information, and the target access purpose information to obtain multiple information segments, and each information segment contains one or more pieces of user login request information; A key unit, configured to randomly generate multiple key indication values, and select multiple keys from a preset key set according to the multiple key indication values, each key indication value corresponds to a key, the multiple keys at least include a first key, and the multiple key indication values at least include a first key indication value; A first encryption unit, configured to perform symmetric key encryption on the multiple information segments in sequence according to the multiple key indication values, the multiple keys, and a preset confidentiality order to obtain a second encrypted data packet; A second encryption unit, configured to combine the second encrypted data packet and the first key indication value, and encrypt the combination result according to an encryption algorithm to obtain a first encrypted data packet.

9. A device for enhancing the security of a password management application, characterized in that, The device for enhancing the security of the password management application includes: a memory and at least one processor, and instructions are stored in the memory; The at least one processor invokes the instructions in the memory to cause the device for enhancing the security of password management applications to perform the method for enhancing the security of password management applications according to any one of claims 1-6.

10. A computer-readable storage medium, on which instructions are stored, characterized in that, The instructions, when read and run, perform the method for enhancing the security of password management applications according to any one of claims 1-6.

Images