An IP address protection application management method and system

Abstract

The present invention proposes an IP address protection application management method and system, which relates to the field of password security. It includes assigning different initial login passwords to multiple accounts, and the passwords are encrypted through the MD5 algorithm; when the user logs in successfully for the first time, the user is allowed to modify the password to the user login password, and the user login password is encrypted through the national cryptography algorithm; if the user does not modify the initial login password, when the user performs an operation, the initial login password is input into the MD5 ciphertext field; if the user has modified the initial login password, when the user performs an operation, the user login password is input into the national cryptography ciphertext field; when the user logs in, it is judged whether there is a value in the national cryptography ciphertext field. If so, the initial login password is used for verification, otherwise the user login password is used for verification. When the verification passes, the login is successful, and when it fails, the login fails. It can adapt to password verification with algorithm modification and protect the user application address.

Description

Technical Field

[0001] The present invention relates to the field of password security, and more particularly, to a method and system for managing IP address protection applications. Background Art

[0002] Domestic cryptographic algorithms (national cryptographic algorithms) refer to domestic commercial cryptographic algorithms recognized by the National Cryptography Administration. Currently, in the financial field, mainly three types of algorithms, namely SM2, national cryptography, and SM4, are used, which are asymmetric algorithm, hash algorithm, and symmetric algorithm respectively. Due to algorithm changes and upgrades, when users log in, there will be a problem that the password cannot match the stored value of the original encryption algorithm. In order to prevent password leakage, the system cannot directly upgrade the original encrypted password of users. And the original encryption algorithm usually uses MD5, and the reversibility of the MD5 algorithm is relatively low. It is also not feasible to calculate the original password of customers through the reverse algorithm. Therefore, there is currently a need for a password verification method that can adapt to algorithm modifications to protect the user application address. Summary of the Invention

[0003] An object of the present invention is to provide a method for managing IP address protection applications, which can adapt to password verification for algorithm modifications, protect the user application address, and improve password security.

[0004] Another object of the present invention is to provide a system for managing IP address protection applications, which can adapt to password verification for algorithm modifications, protect the user application address, and improve password security.

[0005] The embodiments of the present invention are implemented as follows:

[0006] In a first aspect, an embodiment of the present application provides a method for managing IP address protection applications, which includes the following steps: allocating different initial login passwords to multiple accounts, and encrypting the above initial login passwords through the MD5 algorithm; when a user logs in successfully for the first time, allowing the user to modify the above initial login password to a user login password, and encrypting the above user login password through the national cryptographic algorithm; creating a database, and the above database includes two password fields, namely an MD5 ciphertext field and a national cryptographic ciphertext field; when a user performs an operation, if the user has not modified the above initial login password, input the above initial login password into the MD5 ciphertext field; when a user performs an operation, if the user has modified the above initial login password, input the above user login password into the national cryptographic ciphertext field; when a user logs in, determine whether there is a value in the above national cryptographic ciphertext field. When the determination is yes, verify using the above initial login password, otherwise verify using the above user login password. When the password verification is passed, the user logs in successfully, and when the password verification fails, the user logs in fails.

[0007] In some embodiments of the present invention, the above IP address protection application management method includes the following steps. The database includes an administrator table and a member table, and both the above administrator table and the above member table include the above MD5 ciphertext field and the above national ciphertext field; when a user performs an operation to create an administrator, the above initial login password or the above user login password is stored in the above administrator table; when a user performs an operation to register as a member, the above initial login password or the above user login password is stored in the above administrator table.

[0008] In some embodiments of the present invention, the above IP address protection application management method includes the following steps. When a user performs an operation to modify the password or retrieve the password, the above user login password is input into the above national ciphertext field, and at the same time the above initial login password is input into the above MD5 ciphertext field.

[0009] In some embodiments of the present invention, the above IP address protection application management method includes the following steps. When the above national ciphertext field stores the above user login password, it extends the string type.

[0010] In some embodiments of the present invention, the above national cipher algorithm is the SM2 algorithm, the SM3 algorithm, or the SM4 algorithm.

[0011] In some embodiments of the present invention, the above IP address protection application management method includes the following steps. After a user fills in or modifies the IP application form, it is judged whether the user's identity is an internal person. If it is judged to be yes, it enters the internal review process of the above IP application form, otherwise it is submitted to an operator for review; after the operator's review is passed, the above IP application form is provided to the user's affiliated department for review, and when the review is passed, it enters the internal review process of the above IP application form; after the internal review process is passed, the review result is returned to the operator for the operator to allocate multiple accounts to different users.

[0012] Second aspect, an IP address protection application management system is provided in an embodiment of the present application, which includes: a password distribution module: distributing different initial login passwords for multiple accounts, and encrypting the initial login passwords through the MD5 algorithm; a password change module: when a user logs in successfully for the first time, enabling the user to modify the initial login password to a user login password, and encrypting the user login password through the national cryptography algorithm; a storage preparation module: creating a database, where the database includes two password fields, namely an MD5 ciphertext field and a national cryptography ciphertext field; a password storage module: when a user operates, if the user has not modified the initial login password, inputting the initial login password into the MD5 ciphertext field; when a user operates, if the user has modified the initial login password, inputting the user login password into the national cryptography ciphertext field; a password verification module: when a user logs in, determining whether there is a value in the national cryptography ciphertext field, and when it is determined to be yes, verifying using the initial login password, otherwise verifying using the user login password. When the password verification is passed, the user logs in successfully, and when the password verification fails, the user logs in fails.

[0013] Compared with the prior art, the embodiments of the present invention have at least the following advantages or beneficial effects:

[0014] In this application, different initial login passwords are distributed for multiple accounts, and the initial login passwords are encrypted through the MD5 algorithm, so as to meet the use when the initial login password is verified by the MD5 algorithm; when a user logs in successfully for the first time, the user is enabled to modify the initial login password to a user login password, and the user login password is encrypted through the national cryptography algorithm, realizing password upgrade and improving password security; creating a database, where the database includes two password fields, namely an MD5 ciphertext field and a national cryptography ciphertext field; if the user has not modified the initial login password, when the user operates, inputting the initial login password into the MD5 ciphertext field, and at this time the national cryptography ciphertext field is a null value; if the user has modified the initial login password, when the user operates, inputting the user login password into the national cryptography ciphertext field; when a user logs in, determining whether there is a value in the national cryptography ciphertext field, and when it is determined to be yes, it indicates that an operation has been performed after logging in, and at this time verifying using the initial login password; otherwise, it indicates that no operation has been performed yet, and at this time verifying using the user login password. When the password verification is passed, the user logs in successfully, and when the password verification fails, the user logs in fails, so as to store and verify the passwords of users who have logged in and operated. When a user logs in successfully for the first time with the initial login password, first calculate whether the password is correct through the original MD5 algorithm. If it is correct, then calculate a new password value using the new national cryptography algorithm, and provide the user with the ability to upgrade and store the password. When the user logs in again, verify using the stored new password value, and calculate whether the password is correct using the national cryptography algorithm. The present invention can adapt to password verification with algorithm modification, protect the user application address, and improve password security. Brief Description of the Drawings

[0015] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the drawings required for use in the embodiments. It should be understood that the following drawings only show some embodiments of the present invention, and therefore should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.

[0016] Figure 1 It is a flowchart of the IP address protection application management method in Embodiment 1 of the present invention;

[0017] Figure 2 It is a flowchart of password storage in Embodiment 1 of the present invention;

[0018] Figure 3 It is a flowchart of IP account application in Embodiment 1 of the present invention;

[0019] Figure 4 It is a schematic diagram of the IP address protection application management system in Embodiment 2 of the present invention;

[0020] Figure 5 It is a schematic diagram of the electronic device in Embodiment 3 of the present invention. Detailed Embodiments

[0021] To make the objectives, technical solutions, and advantages of the embodiments of the present application clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present application in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are some, but not all, of the embodiments of the present application. Usually, the components of the embodiments of the present application described and illustrated in the drawings here can be arranged and designed in various different configurations.

[0022] Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the present application claimed, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present application.

[0023] In the description of the present application, it should also be noted that, unless otherwise clearly defined and limited, the terms "set" and "connect" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected, or indirectly connected through an intermediate medium, and it can be the communication inside two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present application can be understood according to specific situations.

[0024] The following will describe in detail some embodiments of the present application with reference to the accompanying drawings. Without conflict, the following various embodiments and the various features in the embodiments can be combined with each other.

[0025] Embodiment 1

[0026] Please refer to Figures 1 to 3 , Figures 1 to 3 which shows a schematic diagram of the IP address protection application management method provided by the embodiment of the present application. The IP address protection application management method includes the following steps: allocate different initial login passwords for multiple accounts, and encrypt the above initial login passwords through the MD5 algorithm; when the user logs in successfully for the first time, allow the user to modify the above initial login password to the user login password, and encrypt the above user login password through the national cryptography algorithm; create a database, and the above database includes two password fields, namely the MD5 ciphertext field and the national cryptography ciphertext field; when the user operates, if the user has not modified the above initial login password, input the above initial login password into the above MD5 ciphertext field; when the user operates, if the user has modified the above initial login password, input the above user login password into the above national cryptography ciphertext field; when the user logs in, determine whether there is a value in the above national cryptography ciphertext field. When the determination is yes, verify with the above initial login password, otherwise verify with the above user login password. When the password verification passes, the user logs in successfully, and when the password verification fails, the user logs in fails.

[0027] This application assigns different initial login passwords to multiple accounts. The initial login passwords are encrypted using the MD5 algorithm to meet the requirement for using the MD5 algorithm during verification. When the user logs in successfully for the first time, the user is allowed to modify the initial login password to the user login password. The user login password is encrypted using the national cryptography algorithm, achieving password upgrade and enhancing password security. A database is created, which includes two password fields: the MD5 ciphertext field and the national cryptography ciphertext field. If the user does not modify the initial login password, when the user performs an operation, the initial login password is input into the MD5 ciphertext field, and at this time, the national cryptography ciphertext field is empty. If the user has modified the initial login password, when the user performs an operation, the user login password is input into the national cryptography ciphertext field. When the user logs in, it is determined whether there is a value in the national cryptography ciphertext field. If it is determined to be yes, it indicates that an operation has been performed after logging in, and at this time, the initial login password is used for verification. Otherwise, it indicates that no operation has been performed yet, and at this time, the user login password is used for verification. When the password verification passes, the user logs in successfully; when the password verification fails, the user login fails, thereby storing and verifying the passwords of users who have logged in and operated. When the user logs in successfully for the first time using the initial login password, first, it is calculated whether the password is correct through the original MD5 algorithm. If it is correct, then the new password value is calculated using the new national cryptography algorithm, providing the user with the ability to upgrade and store the password. When the user logs in again, the stored new password value is used for verification, and the national cryptography algorithm is used to calculate whether the password is correct. The present invention can adapt to password verification with algorithm modification, protect the user application address, and improve password security.

[0028] In some embodiments of the present invention, the above IP address protection application management method includes the following steps. The database includes an administrator table and a member table. Both the above administrator table and the above member table include the above MD5 ciphertext field and the above national cryptography ciphertext field. When the user performs an operation to create an administrator, the above initial login password or the above user login password is stored in the above administrator table. When the user performs an operation to register as a member, the above initial login password or the above user login password is stored in the above administrator table.

[0029] Configure the password storage methods for administrators and users, and adjust the algorithm from the original MD5 algorithm to the national cryptography algorithm. Both the administrator table and the member table have two password fields at the same time: the MD5 ciphertext field for the password originally using the MD5 algorithm is represented by Password, and the modified password uses the SM3 national cryptography algorithm. A new national cryptography ciphertext field is added, represented as Password_SM3.

[0030] Part of the program code is as follows:

[0031] string str = "password";

[0032] string pwdSM3 = str.SM3();

[0033] In some embodiments of the present invention, the above IP address protection application management method includes the following steps: when a user performs an operation of modifying the password or retrieving the password, the user's login password is input into the above national secret ciphertext field, and at the same time, the above initial login password is input into the MD5 ciphertext field. When the user modifies the password or retrieves the password, ciphertexts encrypted by different encryption algorithms are written into both fields at the same time, so as to meet the user's password change and upgrade requirements.

[0034] In some embodiments of the present invention, the above IP address protection application management method includes the following steps: when the above national secret ciphertext field stores the user's login password, it extends the string type. An extension method is provided for this type to facilitate the call of the algorithm during hashing.

[0035] In some embodiments of the present invention, the above national secret algorithm is the SM2 algorithm, the SM3 algorithm or the SM4 algorithm.

[0036] SM2 algorithm: The SM2 elliptic curve public key cryptography algorithm is a public key cryptography algorithm independently designed in China, including the SM2-1 elliptic curve digital signature algorithm, the SM2-2 elliptic curve key exchange protocol, and the SM2-3 elliptic curve public key encryption algorithm, which are respectively used to implement functions such as digital signature, key negotiation, and data encryption. Compared with the RSA algorithm, the cryptographic strength of 256-bit SM2 is already higher than that of 2048-bit RSA. SM3 algorithm: The national secret hashing algorithm is a hashing algorithm independently designed in China, which is applicable to digital signatures in commercial cryptography applications, the generation and verification of message authentication codes, and the generation of random numbers, and can meet the security requirements of various cryptographic applications. MD5 outputs a 128-bit hash value, and the output length is too short, affecting its security. The output length of the SHA-1 algorithm is 160 bits, and the output length of the national secret algorithm is 256 bits. Therefore, the security of the national secret algorithm is higher than that of the MD5 algorithm and the SHA-1 algorithm. SM4 algorithm: The SM4 block cipher algorithm is a block symmetric cipher algorithm independently designed in China, which is used to implement data encryption / decryption operations to ensure the confidentiality of data and information. The SM4 algorithm has the same key length and block length of 128 bits as the AES algorithm, so its security is higher than that of the 3DES algorithm.

[0037] The communication algorithm generally adopts an algorithm method similar to RSA, etc. This application only includes the method of using the hashing algorithm. The original algorithm using the hashing algorithm is MD5, which is changed to the SM3 national secret algorithm with higher security.

[0038] In some embodiments of the present invention, the above IP address protection application management method includes the following steps: after the user fills in or modifies the IP application form, determine whether the user's identity is an internal person. If it is determined to be yes, enter the internal review process of the above IP application form; otherwise, submit it to the operator for review. After the operator's review is passed, provide the above IP application form to the user's affiliated department for review, and enter the internal review process of the above IP application form when the review is passed. After the internal review process is passed, return the review result to the operator for the operator to assign multiple accounts to different users.

[0039] Submit a service application, review the user's identity, and thus enter different review processes. After the review is passed, assign accounts to each user. Protect the legal and secure use of the IP addresses of non-registered devices within the private network, ensure that the management responsibilities of various non-registered devices within the private network are effectively implemented at all levels, and achieve effective and secure management. Realize the electronic and traceable protection process, where internal personnel can be personnel from the municipal bureau.

[0040] Embodiment 2

[0041] Please refer to Figure 4 , Figure 4 which is the schematic diagram of the IP address protection application management system provided by the embodiment of the present application. The IP address protection application management system includes: a password distribution module: assign different initial login passwords to multiple accounts, and the above initial login passwords are encrypted through the MD5 algorithm; a password change module: when the user logs in successfully for the first time, allow the user to modify the above initial login password to the user login password, and the above user login password is encrypted through the national secret algorithm; a storage preparation module: create a database, and the above database includes two password fields, namely an MD5 ciphertext field and a national secret ciphertext field; a password storage module: when the user operates, if the user has not modified the above initial login password, input the above initial login password into the above MD5 ciphertext field; when the user operates, if the user has modified the above initial login password, input the above user login password into the above national secret ciphertext field; a password verification module: when the user logs in, determine whether there is a value in the above national secret ciphertext field. If it is determined to be yes, verify using the above initial login password, otherwise verify using the above user login password. When the password verification is passed, the user logs in successfully, and when the password verification fails, the user logs in fails.

[0042] The principle of the embodiment of the present application is different from that of Embodiment 1, and will not be described repeatedly here. It can be understood that Figure 4 the structure shown is only for illustration, and the IP address protection application management system may also include more or fewer components than those shown in Figure 4 , or have a different configuration from that shown in Figure 4 . Figure 4 Each component shown in can be implemented by hardware, software, or a combination thereof.

[0043] Example 3

[0044] Please refer to Figure 5 , Figure 5 which is a schematic structural block diagram of an electronic device provided by an embodiment of the present application. The electronic device includes a memory 101, a processor 102, and a communication interface 103. The memory 101, the processor 102, and the communication interface 103 are electrically connected directly or indirectly to each other to achieve data transmission or interaction. For example, these components can be electrically connected to each other through one or more communication buses or signal lines. The memory 101 can be used to store software programs and modules, such as the program instructions / modules corresponding to the IP address protection application management system provided in Embodiment 2 of the present application. The processor 102 executes various functional applications and data processing by executing the software programs and modules stored in the memory 101. The communication interface 103 can be used for signaling or data communication with other node devices.

[0045] Among them, the memory 101 can be, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), etc.

[0046] The processor 102 can be an integrated circuit chip with signal processing capabilities. The processor 102 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0047] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions, and operations of devices, methods, and computer program products according to multiple embodiments of the present application. In this regard, each block in the flowchart or block diagram may represent a module, a program segment, or a part of code, and the above-mentioned module, program segment, or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order than that marked in the accompanying drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, as well as the combination of blocks in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system for performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0048] In addition, each functional module in various embodiments of the present application may be integrated together to form an independent part, or each module may exist alone, or two or more modules may be integrated to form an independent part.

[0049] If the above functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present application. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs that can store program codes.

[0050] In summary, the present application embodiments provide an IP address protection application management method and system:

[0051] The present application provides an IP address protection application management method. Different initial login passwords are assigned to multiple accounts, and the initial login passwords are encrypted by the MD5 algorithm to meet the use when the initial login password is verified by the MD5 algorithm. When the user logs in successfully for the first time, the user is allowed to modify the initial login password to the user login password, and the user login password is encrypted by the national cryptography algorithm, realizing password upgrade and improving password security. A database is created, and the database includes two password fields, namely the MD5 ciphertext field and the national cryptography ciphertext field. If the user does not modify the initial login password, when the user performs an operation, the initial login password is input into the MD5 ciphertext field, and at this time, the national cryptography ciphertext field is a null value. If the user has modified the initial login password, when the user performs an operation, the user login password is input into the national cryptography ciphertext field. When the user logs in, it is judged whether there is a value in the national cryptography ciphertext field. When the judgment is yes, it indicates that an operation has been performed after logging in, and at this time, the initial login password is used for verification. Otherwise, it indicates that no operation has been performed yet, and at this time, the user login password is used for verification. When the password verification passes, the user logs in successfully; when the password verification fails, the user login fails, thereby storing and verifying the passwords of the users who have logged in and operated. When the user logs in successfully for the first time through the initial login password, first, it is calculated whether the password is correct through the original MD5 algorithm. If it is correct, the new password value is calculated by the new national cryptography algorithm, providing the user with the ability to upgrade and store the password. When the user logs in again, the stored new password value is used for verification, and the national cryptography algorithm is used to calculate whether the password is correct. The present invention can adapt to password verification with algorithm modification, protect the user application address, and improve password security.

[0052] The foregoing are only the preferred embodiments of the present application and are not intended to limit the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

[0053] For those skilled in the art, it is obvious that the present application is not limited to the details of the above-described exemplary embodiments, and can be implemented in other specific forms without departing from the spirit or basic characteristics of the present application. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-limiting. The scope of the present application is defined by the appended claims rather than the above description. Therefore, it is intended to include all changes falling within the meaning and scope of the equivalent elements of the claims in the present application. Any reference signs in the claims should not be regarded as limiting the claimed rights.

Claims

1. A method for managing IP address protection applications, characterized in that It includes the following steps: Assign different initial login passwords to multiple accounts, and the initial login passwords are encrypted by the MD5 algorithm; When the user logs in successfully for the first time, the user is allowed to modify the initial login password to the user login password, and the user login password is encrypted by the national cryptography algorithm; Create a database, which includes two password fields: an MD5 ciphertext field and a national cryptography ciphertext field; When the user operates, if the user has not modified the initial login password, input the initial login password into the MD5 ciphertext field; when the user operates, if the user has modified the initial login password, input the user login password into the national cryptography ciphertext field; When the user logs in, determine whether there is a value in the national cryptography ciphertext field. If it is determined to be yes, verify with the initial login password, otherwise verify with the user login password. When the password verification passes, the user logs in successfully; when the password verification fails, the user logs in fails.

2. The IP address protection application management method according to claim 1, wherein It includes the following steps: The database includes an administrator table and a member table, and both the administrator table and the member table include the MD5 ciphertext field and the national cryptography ciphertext field; when the user performs an administrator creation operation, store the initial login password or the user login password in the administrator table; when the user performs a member registration operation, store the initial login password or the user login password in the administrator table.

3. The IP address protection application management method according to claim 1, characterized in that, It includes the following steps: When the user performs a password modification or password retrieval operation, input the user login password into the national cryptography ciphertext field, and at the same time input the initial login password into the MD5 ciphertext field.

4. The IP address protection application management method according to claim 1, characterized in that, It includes the following steps: When storing the user login password, the national cryptography ciphertext field extends the string type.

5. The IP address protection application management method according to claim 1, characterized in that The national cryptography algorithm is the SM2 algorithm, the SM3 algorithm or the SM4 algorithm.

6. The IP address protection application management method according to claim 5, wherein, It includes the following steps: After the user fills in or modifies the IP application form, determine whether the user's identity is an internal person. If it is determined to be yes, enter the internal review process of the IP application form, otherwise submit it to the operator for review; after the operator's review passes, provide the IP application form to the user's affiliated department for review, and when the review passes, enter the internal review process of the IP application form; after the internal review process passes, return the review result to the operator for the operator to assign multiple accounts to different users.

7. An IP address protection application management system, characterized in that, It includes Password assignment module: Assign different initial login passwords to multiple accounts, and the initial login passwords are encrypted by the MD5 algorithm; Password change module: When the user logs in successfully for the first time, the user is allowed to modify the initial login password to the user login password, and the user login password is encrypted by the national cryptography algorithm; Storage preparation module: Create a database, which includes two password fields: an MD5 ciphertext field and a national cryptography ciphertext field; Password storage module: When the user operates, if the user has not modified the initial login password, input the initial login password into the MD5 ciphertext field; When the user operates, if the user has modified the initial login password, input the user login password into the national cryptography ciphertext field; Password verification module: When a user logs in, it determines whether there is a value in the national secret ciphertext field. If the determination is yes, it verifies using the initial login password; otherwise, it verifies using the user login password. When the password verification passes, the user logs in successfully; when the password verification fails, the user's login fails.

Images