Password management method and system, server and storage medium

Abstract

The application discloses a password management method and system, a server and a storage medium, relates to the technical field of network security, and the method comprises the following steps: when a new password of a target account is obtained, a synchronization time acquisition request is sent to a terminal management server, and the terminal management server sends a synchronization time; it is judged whether the synchronization time is consistent with the authentication time stored in the network security server; if yes, the new password is sent to the terminal management server, so that the terminal management server sends the new password to a user terminal, and the target account on the user terminal is matched with the new password; the system comprises a network security server, a terminal management server and a user terminal. The application solves the problem of poor password management efficiency in the prior art, realizes automatic change of a broadband account password, reduces manual intervention, and improves the effect of user experience.

Description

Technical Field

[0001] This invention relates to the field of network security technology, and in particular to a password management method and system, server, and storage medium. Background Technology

[0002] With the continuous development of network technology, home broadband has become fully integrated into people's lives and work. Among complaints about home broadband services from telecom operators, those stemming from incorrect broadband account passwords account for over 20% of all complaints. Therefore, managing account passwords is a crucial aspect of broadband services.

[0003] There are two existing methods for password management: one is to reset the password in the background by calling customer service, and the other is for users to submit a password reset request through the operator's application. Although both methods can achieve password changes, after the password is changed, maintenance personnel still need to go to the user's network terminal to configure the broadband account and the changed password. Therefore, the existing technology has the problems of heavy workload for maintenance personnel and poor password management efficiency. Summary of the Invention

[0004] The main objective of this invention is to provide a password management method and system, server, and storage medium, aiming to solve the technical problem of poor password management efficiency in existing technologies.

[0005] To achieve the above objectives, the present invention adopts the following technical solution:

[0006] In a first aspect, the present invention provides a password management method applied to a network security server, the method comprising:

[0007] When a new password for the target account is obtained, a synchronization time acquisition request is sent to the terminal management server, and the synchronization time sent by the terminal management server is received; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal last successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server.

[0008] Determine whether the synchronization time is consistent with the authentication time stored on the network security server; wherein, the authentication time is the time recorded by the network security server when the network security server most recently successfully authenticated the user terminal;

[0009] If the synchronization time is consistent with the authentication time, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal to match the target account on the user terminal with the new password.

[0010] Optionally, in the above password management method, the step of obtaining a new password for the target account specifically includes:

[0011] Obtain the password setting request or password change request for the target account;

[0012] Based on the password setting request or the password change request, the password of the target account is set or changed to obtain the new password of the target account.

[0013] Optionally, in the above password management method, the synchronization time and the authentication time are stored in the terminal management server and the network security server respectively in the form of strings encrypted by an irreversible encryption algorithm;

[0014] The step of receiving the synchronization time sent by the terminal management server specifically includes:

[0015] Receive the synchronization time string sent by the terminal management server;

[0016] The step of determining whether the synchronization time is consistent with the authentication time stored on the network security server specifically includes:

[0017] Determine whether the synchronization time string is consistent with the authentication time string stored on the network security server.

[0018] Optionally, in the above password management method, the step of determining whether the synchronization time is consistent with the authentication time stored on the network security server specifically includes:

[0019] Determine whether the registration code carried in the synchronization time is consistent with the pre-stored registration code corresponding to the target account stored in the network security server;

[0020] If the registration code matches the pre-stored registration code, then determine whether the synchronization time matches the authentication time stored on the network security server.

[0021] Optionally, in the above password management method, after the step of obtaining the new password for the target account, the method further includes:

[0022] The terminal management server receives a password retrieval request for the target account, which is obtained based on a password retrieval request sent by the user terminal to the terminal management server.

[0023] Based on the password retrieval request, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

[0024] Secondly, the present invention provides a password management method applied to a terminal management server, the method comprising:

[0025] Receive a synchronization time retrieval request sent by the network security server when it obtains a new password for the target account;

[0026] The synchronization time is sent to the network security server according to the synchronization time acquisition request, so that when the network security server determines that the synchronization time is consistent with the authentication time stored on the network security server, it sends the new password to the terminal management server;

[0027] The system receives the new password and sends it to the user terminal to match the target account on the user terminal with the new password.

[0028] Optionally, in the above password management method, before the step of receiving the new password and sending the new password to the user terminal to match the target account on the user terminal with the new password, the method further includes:

[0029] Obtain the password retrieval request sent by the user terminal. The password retrieval request carries the target account and its login time. The login time is the time recorded by the user terminal when it last logged into the target account after successfully applying for network authentication from the network security server.

[0030] Determine whether the login time is consistent with the synchronization time stored on the terminal management server;

[0031] If the login time is consistent with the synchronization time, then the password retrieval request for the target account is obtained according to the password retrieval request;

[0032] The password retrieval request is sent to the network security server, so that the network security server sends the new password to the terminal management server in accordance with the password retrieval request.

[0033] Thirdly, the present invention provides a cryptographic management system, the system comprising:

[0034] A network security server for implementing the password management method as described in the first aspect;

[0035] A terminal management server is used to implement the password management method as described in the second aspect;

[0036] The user terminal is used to send a password retrieval request to the terminal management server, and to receive a new password sent by the terminal management server, and match the corresponding target account with the new password.

[0037] Fourthly, the present invention provides a server, the device including a processor and a memory, the memory storing a computer program, which, when executed by the processor, implements the password management method as described above.

[0038] Fifthly, the present invention provides a storage medium having a computer program stored thereon, the computer program being executable by one or more processors to implement the password management method described above.

[0039] The above-described one or more technical solutions provided by this invention can have the following advantages or at least achieve the following technical effects:

[0040] This invention proposes a password management method, system, server, and storage medium. When a new password for a target account is obtained through a network security server, a synchronization time retrieval request is sent to a terminal management server. The terminal management server then sends the synchronization time to the network security server. The network security server compares the received synchronization time with the stored authentication time. If the synchronization time matches the authentication time, a new password is sent to the terminal management server. The terminal management server then forwards the new password to the user terminal to match the target account on the user terminal with the new password. This invention, by comparing the synchronization time and authentication time, prevents malicious imitation of broadband account passwords, thus increasing password management security. Furthermore, by synchronizing the password from the network security server to the terminal management server and then automatically distributing it to the user terminal, it eliminates the need for maintenance personnel to visit and configure the user terminal after password changes. This achieves automatic broadband account password changes, reduces manual intervention, improves password management efficiency, and enhances user experience. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0042] Figure 1 This is a flowchart illustrating the first embodiment of the password management method of the present invention;

[0043] Figure 2 This is a schematic diagram of the hardware structure of the server involved in the present invention;

[0044] Figure 3 This is another flowchart illustrating the first embodiment of the password management method of the present invention;

[0045] Figure 4This is a flowchart illustrating the second embodiment of the password management method of the present invention;

[0046] Figure 5 This is a schematic diagram of the functional modules of the first embodiment of the password management system of the present invention.

[0047] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0048] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of the embodiments of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this invention, and not all of them. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0049] It should be noted that in this invention, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element. Furthermore, in this invention, descriptions involving "first," "second," etc., are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined with "first" or "second" may explicitly or implicitly include at least one of those features.

[0050] In this invention, the suffixes such as "module," "component," or "unit" used to denote elements are used only for illustrative purposes and have no specific meaning in themselves. Therefore, "module," "component," or "unit" can be used interchangeably. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances. Furthermore, the technical solutions of the various embodiments can be combined with each other, but only on the basis that they can be implemented by those skilled in the art. When the combination of technical solutions is contradictory or cannot be implemented, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed by this invention.

[0051] With the continuous development of network technology, home broadband has become fully integrated into people's lives and work. Among complaints about home broadband services from telecom operators, those stemming from incorrect broadband account passwords account for over 20% of all complaints. Therefore, managing account passwords is a crucial aspect of broadband services.

[0052] Analysis of existing technologies reveals that the causes of broadband account password errors generally fall into two categories: First, when users set or modify their passwords through customer service in network security systems such as AAA (Authentication, Authorization, Accounting) systems, the low authentication capabilities of customer service personnel make it difficult to identify whether the password setting or modification request is from the genuine broadband account user. Consequently, the password is reset or modified, resulting in an incorrect password when the legitimate user tries to log in. Second, improper actions such as broadband account theft, system upgrades, user network terminal configuration errors, or factory resets can lead to password loss or forgetting of the password, resulting in an incorrect password when logging in.

[0053] To address these issues, existing password management methods fall into two categories: one is through customer service calls for manual password reset, and the other is through user-submitted password reset or change requests via the operator's app, with back-end staff resetting or changing the password and displaying the new password to the user. While both methods achieve password reset or change, they still require significant manual intervention. This involves not only back-end staff resetting or changing the password based on user requests, but also on-site maintenance personnel configuring the user's broadband account and the changed password afterward. Therefore, existing methods for managing broadband account passwords are not only time-consuming, causing users to lose internet access while waiting for maintenance personnel, impacting user experience, but also require repeated on-site visits, leading to a heavy workload for maintenance staff and resulting in inefficient password management.

[0054] In view of the technical problem of poor password management efficiency in existing technologies, this invention provides a password management method, the overall idea of ​​which is as follows:

[0055] Application to network security servers: When a new password for a target account is obtained, a synchronization time acquisition request is sent to the terminal management server, and the synchronization time sent by the terminal management server is received; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server;

[0056] Determine whether the synchronization time is consistent with the authentication time stored on the network security server; wherein, the authentication time is the time recorded by the network security server when the network security server most recently successfully authenticated the user terminal;

[0057] If the synchronization time is consistent with the authentication time, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal to match the target account on the user terminal with the new password.

[0058] Application in terminal management servers: Receives synchronization time acquisition requests sent by network security servers when they obtain new passwords for target accounts;

[0059] The synchronization time is sent to the network security server according to the synchronization time acquisition request, so that when the network security server determines that the synchronization time is consistent with the authentication time stored on the network security server, it sends the new password to the terminal management server;

[0060] The system receives the new password and sends it to the user terminal to match the target account on the user terminal with the new password.

[0061] Through the above technical solution, when the network security server obtains a new password for the target account, it sends a synchronization time acquisition request to the terminal management server; the terminal management server sends the synchronization time to the network security server; the network security server compares the received synchronization time with the stored authentication time, and if the synchronization time matches the authentication time, it sends the new password to the terminal management server; the terminal management server then forwards the new password to the user terminal to match the target account on the user terminal with the new password. This invention, by comparing the synchronization time and authentication time, prevents malicious imitation of broadband accounts to obtain passwords, increasing password management security. Furthermore, by synchronizing the password from the network security server to the terminal management server and then automatically distributing it to the user terminal, it eliminates the need for maintenance personnel to visit and configure the user terminal after changing the password, achieving automatic broadband account password changes, reducing manual intervention, improving password management efficiency, and enhancing user experience.

[0062] Example 1

[0063] Reference Figure 1 The flowchart illustrates the first embodiment of the password management method of the present invention, which is applied to a server.

[0064] The server refers to a network device that can achieve network connectivity, such as a server or cloud platform.

[0065] like Figure 2 The diagram shown is a schematic of the server's hardware structure. The server may include: a processor 1001, such as a CPU (Central Processing Unit), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005.

[0066] Those skilled in the art will understand that Figure 2 The hardware structure shown does not constitute a limitation on the server of the present invention, and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0067] Specifically, the communication bus 1002 is used to realize the connection and communication between these components;

[0068] User interface 1003 is used to connect to the client and communicate data with the client. User interface 1003 may include output units, such as a display screen, and input units, such as a keyboard. Optionally, user interface 1003 may also include other input / output interfaces, such as standard wired interfaces and wireless interfaces.

[0069] The network interface 1004 is used to connect to the backend server and communicate data with the backend server. The network interface 1004 may include input / output interfaces, such as standard wired interfaces and wireless interfaces, such as Wi-Fi interfaces.

[0070] The memory 1005 is used to store various types of data, such as instructions for any application or method in the server, as well as application-related data. The memory 1005 can be a high-speed RAM or a stable memory, such as a disk storage. Optionally, the memory 1005 can also be a storage device independent of the processor 1001.

[0071] For details, please refer to... Figure 2 The memory 1005 may include an operating system, a network communication module, a user interface module, and computer programs. The network communication module is mainly used to connect to other servers and communicate data with other servers.

[0072] The processor 1001 is used to call the computer program stored in the memory 1005 and perform the corresponding operation.

[0073] In this embodiment, the server is a network security server.

[0074] Based on the aforementioned network security server, the following will combine... Figure 1 The flowchart shown below provides a detailed description of the password management method in this embodiment.

[0075] In one implementation, the method may include the following steps:

[0076] Step S110: When the new password of the target account is obtained, a synchronization time acquisition request is sent to the terminal management server, and the synchronization time sent by the terminal management server is received; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server.

[0077] In practical implementation, the network system, consisting of a network security server, a terminal management server, and user terminals, can connect to the operator's network nodes, obtain an IP address, and then access the operator's network to access the internet. However, before connecting to the network nodes, broadband account and password authentication is required. The authentication process in this embodiment is as follows:

[0078] The user terminal initiates an authentication request and sends it to the network security server to apply for network authentication. The authentication request includes the broadband account and password. After receiving the authentication request, the network security server compares the received password for the broadband account with the pre-stored password for the same broadband account. If they match, the network authentication is considered successful. At this time, the network security server records the time, which is the authentication time.

[0079] After the network security server successfully completes network authentication, it sends authentication success information to the network node, which then issues an IP address to the user terminal. Once the user terminal receives the IP address, it successfully logs into its broadband account through the network node and accesses the operator's network. At this point, the user terminal records the time, which is the login time.

[0080] When a user terminal accesses the operator's network, all authentication information requested from the network security server is synchronized to the corresponding terminal management server for storage, so that the user can access and view it. At this time, the terminal management server records the time, which is the synchronization time.

[0081] Specifically, the synchronization time is stored in the terminal management server as a string encrypted with an irreversible encryption algorithm; the authentication time is stored in the network security server as a string encrypted with an irreversible encryption algorithm; and the login time is also stored in the user terminal as a string encrypted with an irreversible encryption algorithm. The irreversible encryption algorithm does not require a key during encryption; plaintext is directly processed into a ciphertext string, making the encrypted data undecryptable and highly secure. Algorithms such as MD5 (MD5 Message-Digest Algorithm), SHA1 (Secure Hash Algorithm 1), and SHA-256 (a 256-bit secure hash algorithm) can be used, and the specific algorithm can be selected based on the actual situation, but it is necessary to ensure that the same irreversible encryption algorithm is used on each terminal.

[0082] In practical applications, network security servers can include AAA systems, and terminal management servers can include terminal management systems that uniformly manage user terminals, such as those that control the performance of Wi-Fi and optical power. User terminals can be user network terminals that enable user interaction, such as ONU (Optical Network Unit) devices, HGU (Home Gateway Unit) devices (i.e., optical modems), IHGU (smart optical modems), etc., equipped with buttons and controls. These controls are used to initiate password retrieval requests. Alternatively, they can be independent user network terminals, such as ONUs, HGUs, and IHGUs, as well as independent clients, such as mobile phones and computers. User network terminals are used to authenticate and receive new passwords issued by the terminal management system, while clients are used by users to actively initiate password retrieval requests, thereby enabling the terminal management system to issue new passwords to the user network terminals.

[0083] After the user terminal successfully authenticates according to the above authentication process and successfully accesses the network and performs normal work, if a situation arises where it is necessary to reset or change the password, the user can use the method of this embodiment to manage the password by calling customer service, including password reset, password deletion, password setting, and password change. Customer service can then manage the password on the AAA system according to the user's requirements.

[0084] Specifically, step S110 may include:

[0085] Step S111: Obtain the password setting request or password change request of the target account.

[0086] Specifically, a password setting request or password change request can be initiated by a customer service representative through a customer service terminal that communicates with the AAA system. A password setting request can be made when a user deletes their password and then sets a new password or when they are setting a new password for the first time. A password change request can be made when a user requests a random password reset or changes their original password to a custom password.

[0087] Step S112: Based on the password setting request or the password change request, set or change the password of the target account to obtain the new password of the target account.

[0088] Specifically, the network security server sets or changes the password of the target account according to the password setting request or password change request, obtains the new password of the broadband account, and stores it in the network security server.

[0089] Step S113: Send a synchronization time acquisition request to the terminal management server.

[0090] Specifically, the network security server can automatically distribute new passwords to user terminals via the terminal management server for actual account and password configuration. First, the network security server sends a synchronization time retrieval request to the terminal management server, carrying the target account and its registration code. Upon receiving the synchronization time retrieval request, the terminal management server verifies the registration code. If verification is successful, it retrieves the synchronization time stored on the terminal management server based on the request. Since the synchronization time is encrypted using an irreversible encryption algorithm and stored as a string, the actual data retrieved is the synchronization time string. This string is then sent to the network security server.

[0091] Step S114: Receive the synchronization time string sent by the terminal management server.

[0092] Specifically, the network security server receives the synchronization time string sent by the terminal management server and proceeds to step S120.

[0093] Step S120: Determine whether the synchronization time is consistent with the authentication time stored on the network security server; wherein, the authentication time is the time recorded by the network security server when the network security server successfully authenticated the user terminal for the most recent time.

[0094] If the same target account successfully authenticated and gained internet access before the password change, it indicates that the account was not compromised or the password was not illegally changed at that time. However, if the account password was changed without the user's knowledge, or if the user actively requested a password change for security reasons, this process could potentially lead to account theft or unauthorized password modification. If the user's terminal password is not automatically updated promptly, the user will be unable to access the internet. Therefore, by comparing the synchronization time and authentication time, it is possible to verify whether the target account is the same broadband account that was successfully authenticated on the user's terminal last time, preventing situations where users cannot access the internet after a password change.

[0095] Specifically, step S120 may include:

[0096] Step S121: Determine whether the registration code carried in the synchronization time is consistent with the pre-stored registration code corresponding to the target account stored in the network security server.

[0097] The registration code is generated by a network security server when a broadband account is first added, based on the account information and a custom irreversible encryption algorithm. Specifically, the broadband account is encrypted using an irreversible encryption algorithm to obtain an encrypted broadband account string. Then, a predetermined number of characters are extracted from this string and combined with these characters to form the registration code. Because the encrypted broadband account string is quite long, using the complete string directly as the registration code would cause inconvenience for maintenance personnel when installing and registering user network terminals on-site. Therefore, only the predetermined number of characters needs to be extracted from the encrypted broadband account string, for example, the last 10 characters. To ensure the uniqueness of the registration code and prevent the last 10 characters from being the same for different broadband accounts, the predetermined number of characters from the broadband account string are also used to construct the registration code, for example, the last 4 characters. Thus, the last 4 characters of the broadband account string and the last 10 characters of the broadband account string together constitute the unique registration code for that broadband account. To prevent overly simple registration codes from being maliciously cracked or abused, and to ensure the security of broadband users' accounts, only the broadband account is required; no additional fields are needed, saving space resources. It should be noted that the number of characters selected, and the order of the broadband account's default length characters and the default length characters in the broadband account string when constructing the registration code, can be adjusted according to actual needs.

[0098] First, the security is initially verified by checking whether the registration codes match. This decouples the network security server from the terminal management server and reduces the design complexity between the two servers.

[0099] Step S122: If the registration code is consistent with the pre-stored registration code, then determine whether the synchronization time is consistent with the authentication time stored on the network security server;

[0100] Specifically, it is determined whether the synchronization time string is consistent with the authentication time string stored on the network security server.

[0101] If the registration codes match and the time of the most recent successful authentication is also the same, it means that the target account is a real user's broadband account and not a maliciously imitating broadband account. This dual identification and judgment increases the security of the target account. If the registration codes do not match, it means that the target account may have been stolen. In this case, the process can be terminated directly, or the process can be returned to step S111 to obtain the real user's password change request again.

[0102] Step S130: If the synchronization time is consistent with the authentication time, then send the new password to the terminal management server, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

[0103] Specifically, if the synchronization time is inconsistent with the authentication time, it indicates that the request may have been tampered with during the transmission process. In this case, the process can be terminated directly, or the process can be returned to step S110 to resend the synchronization time acquisition request to the terminal management server.

[0104] When a network security server sends a new password to a terminal management server, it can include the registration code corresponding to the target account. The terminal management server can verify the registration code first, and only receive the new password after successful verification. This prevents the new password from being maliciously tampered with during transmission, which could lead to a discrepancy between the password on the network security server and the password on the user's terminal, resulting in the user being unable to access the internet.

[0105] After receiving the new password from the network security server, the terminal management server forwards the new password to the user terminal. Upon receiving the new password from the terminal management server, the user terminal associates the new password with the target account to achieve a match between the target account and the new password, so that it can resend the authentication request to the network security server and reconnect to the operator's network.

[0106] In this embodiment, after the password of the target account is changed on the network security server, the new password is synchronized throughout the entire system in a timely manner. This not only prevents the inability to access the Internet due to the theft of the account password, but also saves resources by eliminating the need for an additional IMS system or asset management system and synchronizing passwords with the terminal management system.

[0107] After obtaining the new password for the target account, steps S140 to S150 can be executed sequentially to achieve the purpose of the user actively synchronizing the new password; alternatively, steps S110 to S130 can be executed independently to achieve the purpose of the system automatically synchronizing the new password.

[0108] In another implementation, refer to Figure 3 The flowchart shown may further include the following steps:

[0109] Step S140: Receive the password retrieval request for the target account sent by the terminal management server. The password retrieval request is obtained based on the password retrieval request sent by the user terminal to the terminal management server.

[0110] Specifically, the user terminal sends a password retrieval request to the terminal management server. This request may include the target account and its login time, as well as the target account's registration code. Upon receiving the password retrieval request, the terminal management server can first verify the registration code. If successful, it can then determine if the received login time matches the previously stored synchronization time. Alternatively, it can directly check if the received login time matches the previously stored synchronization time. Since the login time and synchronization time are stored as strings encrypted with an irreversible encryption algorithm on the user terminal and the terminal management server respectively, the specific check is whether the login time string matches the synchronization time string. If they match, a password retrieval request for the target account is generated based on the password retrieval request and sent to the network security server. If they do not match, it indicates that the request may be sent by an impersonating user terminal, not the genuine user terminal. In this case, the process can end directly, or the server can continue receiving the next password retrieval request from the user terminal, or it can invoke a warning process to alert backend personnel.

[0111] The network security server receives a password retrieval request sent by the terminal management server. The password retrieval request may carry the target account and its registration code.

[0112] Step S150: Based on the password retrieval request, send the new password to the terminal management server, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

[0113] Specifically, the network security server, based on the target account and its registration code in the password retrieval request, first verifies whether the received registration code matches the pre-stored registration code of the target account. If the verification is successful, it then retrieves the new password corresponding to the stored target account and returns the new password to the terminal management server.

[0114] After receiving the new password from the network security server, the terminal management server returns the new password to the user terminal. Upon receiving the new password from the terminal management server, the user terminal associates the new password with the target account to achieve matching between the target account and the new password, so that it can resend the authentication request to the network security server and reconnect to the operator's network.

[0115] The password management method provided in this embodiment involves sending a synchronization time acquisition request to the terminal management server when a new password for a target account is obtained through a network security server. The terminal management server then sends the synchronization time to the network security server. The network security server compares the received synchronization time with the stored authentication time. If the synchronization time matches the authentication time, the new password is sent to the terminal management server. The terminal management server then forwards the new password to the user terminal to match the target account on the user terminal with the new password. This invention, by comparing the synchronization time and authentication time, prevents malicious imitation of broadband account passwords, thus increasing password management security. Furthermore, by synchronizing the password to the terminal management server through the network security server and then automatically distributing it to the user terminal, it eliminates the need for maintenance personnel to visit and configure the user terminal after password changes. This achieves automatic password changes for broadband accounts, reduces manual intervention, improves password management efficiency, and enhances user experience.

[0116] Example 2

[0117] Based on the same inventive concept, referring to Figure 4 This paper presents a second embodiment of the password management method of the present invention, which is applied to a server. The structure of the server is as described in Embodiment 1, and will not be repeated here. Specifically, the server in this embodiment is a terminal management server.

[0118] Based on the aforementioned terminal management server, the following will be combined with... Figure 4 The flowchart shown below provides a detailed description of the password management method in this embodiment.

[0119] In one implementation, the method may include the following steps:

[0120] Step S210: Receive a synchronization time acquisition request sent by the network security server when it obtains a new password for the target account;

[0121] Step S220: Send the synchronization time to the network security server according to the synchronization time acquisition request, so that when the network security server determines that the synchronization time is consistent with the authentication time stored on the network security server, it sends the new password to the terminal management server;

[0122] Step S230: Receive the new password and send the new password to the user terminal to match the target account on the user terminal with the new password.

[0123] In another implementation, the method may include the following steps:

[0124] Step S221: Obtain the password retrieval request sent by the user terminal. The password retrieval request carries the target account and its login time. The login time is the time recorded by the user terminal when the user terminal last successfully applied for network authentication from the network security server and logged into the target account.

[0125] Step S222: Determine whether the login time is consistent with the synchronization time stored on the terminal management server;

[0126] Step S223: If the login time is consistent with the synchronization time, then obtain the password retrieval request of the target account according to the password retrieval request;

[0127] Step S224: Send the password retrieval request to the network security server, so that the network security server sends the new password to the terminal management server according to the password retrieval request;

[0128] Step S230: Receive the new password and send the new password to the user terminal to match the target account on the user terminal with the new password.

[0129] For more details on the specific implementation of the above method steps, please refer to the description of the specific implementation in Example 1. For the sake of brevity, these details will not be repeated here.

[0130] The password management method provided in this embodiment involves a terminal management server receiving a synchronization time retrieval request sent by a network security server when it obtains a new password for a target account. After sending a synchronization time to the network security server based on the synchronization time retrieval request, the method receives the new password from the network security server and forwards it to the user terminal to match the target account and new password on the user terminal. Furthermore, by receiving a password retrieval request from the user terminal, and if the login time carried in the request matches the synchronization time, a password retrieval request is generated and sent to the network security server. This allows the method to receive the new password from the network security server and return it to the user terminal to match the target account and new password on the user terminal. This method automates the retrieval and configuration of broadband account passwords in two scenarios: password modification on the network security server and password loss on the user terminal. This reduces the number of on-site visits by frontline maintenance personnel, shortens the maintenance time for internet access failures caused by password errors, and thus improves the user's internet experience and increases user satisfaction.

[0131] Example 3

[0132] Based on the same inventive concept, referring to Figure 5 The first embodiment of the cryptographic management system of the present invention is presented below. Figure 5 The functional module diagram shown illustrates the password management system provided in this embodiment in detail. The system may include:

[0133] A network security server is used to implement the password management method described in Embodiment 1;

[0134] A terminal management server is used to implement the password management method described in Embodiment 2.

[0135] The user terminal is used to send a password retrieval request to the terminal management server, and to receive a new password sent by the terminal management server, and match the corresponding target account with the new password.

[0136] Specifically, the network security server can be a physical device or a virtual device, and the network security server may include:

[0137] The first transceiver module is used to send a synchronization time acquisition request to the terminal management server when a new password for the target account is obtained, and to receive the synchronization time sent by the terminal management server; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server the most recent time.

[0138] The first judgment module is used to determine whether the synchronization time is consistent with the authentication time stored on the network security server; wherein, the authentication time is the time recorded by the network security server when the network security server successfully authenticated the user terminal for the most recent time;

[0139] The password sending module is used to send the new password to the terminal management server if the synchronization time is consistent with the authentication time, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

[0140] Furthermore, the network security server may also include:

[0141] The password management module is used to obtain password setting requests or password change requests for the target account; and

[0142] Based on the password setting request or the password change request, the password of the target account is set or changed to obtain the new password of the target account.

[0143] Furthermore, the synchronization time and the authentication time are stored in the terminal management server and the network security server respectively in the form of strings encrypted with an irreversible encryption algorithm;

[0144] The first transceiver module is specifically used for:

[0145] Receive the synchronization time string sent by the terminal management server;

[0146] The first judgment module is specifically used for:

[0147] Determine whether the synchronization time string is consistent with the authentication time string stored on the network security server.

[0148] Furthermore, the first determination module may include:

[0149] The registration code determination unit is used to determine whether the registration code carried in the synchronization time is consistent with the pre-stored registration code corresponding to the target account stored in the network security server;

[0150] The time comparison unit is used to determine whether the synchronization time is consistent with the authentication time stored on the network security server if the registration code is consistent with the pre-stored registration code.

[0151] Furthermore, the first transceiver module is also used for:

[0152] The terminal management server receives a password retrieval request for the target account, which is obtained based on a password retrieval request sent by the user terminal to the terminal management server.

[0153] The password sending module is further configured to:

[0154] Based on the password retrieval request, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

[0155] Specifically, the terminal management server can be a physical device or a virtual device, and the terminal management server may include:

[0156] The second transceiver module is used to receive synchronization time acquisition requests sent by the network security server when it obtains a new password for the target account; and

[0157] The synchronization time is sent to the network security server according to the synchronization time acquisition request, so that when the network security server determines that the synchronization time is consistent with the authentication time stored on the network security server, it sends the new password to the terminal management server;

[0158] The password forwarding module is used to receive the new password and send the new password to the user terminal to match the target account on the user terminal with the new password.

[0159] Furthermore, the second transceiver module is also used to obtain a password retrieval request sent by the user terminal. The password retrieval request carries the target account and its login time, wherein the login time is the time recorded by the user terminal when it last logged into the target account after successfully applying for network authentication from the network security server.

[0160] The terminal management server may further include:

[0161] The second judgment module is used to determine whether the login time is consistent with the synchronization time stored on the terminal management server;

[0162] The request conversion module is used to obtain the password retrieval request of the target account based on the password retrieval request if the login time is consistent with the synchronization time.

[0163] The second transceiver module is further configured to send the password retrieval request to the network security server, so that the network security server sends the new password to the terminal management server according to the password retrieval request.

[0164] Specifically, the user terminal can be a physical user network device, such as an optical modem, or a virtual user terminal, such as a web page for human-computer interaction with the optical modem. The user terminal may include:

[0165] The user interaction module is used to initiate a password retrieval request and send the password retrieval request to the terminal management server when the user triggers the corresponding control.

[0166] The password matching module is used to receive a new password sent by the terminal management server and match the corresponding target account with the new password.

[0167] It should be noted that the functions and corresponding technical effects of each module in the password management system provided in this embodiment can be referred to the description of the specific implementation methods in the various embodiments of the password management method of this invention. For the sake of brevity, they will not be repeated here.

[0168] Example 4

[0169] Based on the same inventive concept, referring to Figure 2 This is a schematic diagram of the hardware structure of the server involved in various embodiments of the present invention. This embodiment provides a server, which may include a processor and a memory. The memory stores a computer program, and when the computer program is executed by the processor, it implements the steps of the first embodiment or the second embodiment of the password management method of the present invention.

[0170] Specifically, the server refers to a network device capable of network connectivity, such as a server or cloud platform.

[0171] It is understood that the server may also include a communication bus, a user interface, and a network interface.

[0172] The communication bus is used to enable communication between these components.

[0173] The user interface is used to connect to the client and communicate data with the client. The user interface may include output units, such as a display screen, and input units, such as a keyboard. Optionally, the user interface may also include other input / output interfaces, such as standard wired interfaces and wireless interfaces.

[0174] The network interface is used to connect to the backend server and communicate with it. The network interface can include input / output interfaces, such as standard wired interfaces and wireless interfaces, such as Wi-Fi interfaces.

[0175] The memory is used to store various types of data, which may include, for example, instructions for any application or method in the server, as well as application-related data. The memory can be implemented using any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. Optionally, the memory can also be a storage device independent of the processor.

[0176] The processor is used to call the computer program stored in the memory and execute the password management method as described above. The processor may be an application-specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field-programmable gate array (FPGA), a controller, a microcontroller, a microprocessor, or other electronic components, and is used to execute the steps of the first embodiment or the second embodiment of the password management method described above.

[0177] Example 5

[0178] Based on the same inventive concept, this embodiment provides a computer-readable storage medium, such as flash memory, hard disk, multimedia card, card-type memory (e.g., SD or DX memory), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, disk, optical disk, server, App application store, etc. The storage medium stores a computer program, which can be executed by one or more processors. When the computer program is executed by the processor, it can implement the steps of the first embodiment or the second embodiment of the password management method of the present invention.

[0179] It should be noted that the sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0180] The above description is merely an optional embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural or procedural transformations made using the contents of the present invention's specification and drawings under the inventive concept of the present invention, or direct or indirect applications in other related technical fields, are included within the patent protection scope of the present invention.

Claims

1. A password management method, characterized in that, Applied to network security servers, the method includes: When a new password for the target account is obtained, a synchronization time acquisition request is sent to the terminal management server, and the synchronization time sent by the terminal management server is received; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal last successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server. Determine whether the synchronization time is consistent with the authentication time stored on the network security server; wherein, the authentication time is the time recorded by the network security server when the network security server most recently successfully authenticated the user terminal; If the synchronization time is consistent with the authentication time, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal, and the user terminal matches the target account on the user terminal with the new password.

2. The password management method as described in claim 1, characterized in that, The steps to obtain the new password for the target account specifically include: Obtain the password setting request or password change request for the target account; Based on the password setting request or the password change request, the password of the target account is set or changed to obtain the new password of the target account.

3. The password management method as described in claim 1, characterized in that, The synchronization time and the authentication time are stored in the terminal management server and the network security server respectively in the form of strings encrypted with an irreversible encryption algorithm; The step of receiving the synchronization time sent by the terminal management server specifically includes: Receive the synchronization time string sent by the terminal management server; The step of determining whether the synchronization time is consistent with the authentication time stored on the network security server specifically includes: Determine whether the synchronization time string is consistent with the authentication time string stored on the network security server.

4. The password management method as described in claim 1, characterized in that, The step of determining whether the synchronization time is consistent with the authentication time stored on the network security server specifically includes: Determine whether the registration code carried in the synchronization time is consistent with the pre-stored registration code corresponding to the target account stored in the network security server; If the registration code matches the pre-stored registration code, then determine whether the synchronization time matches the authentication time stored on the network security server.

5. The password management method as described in claim 1, characterized in that, After obtaining the new password for the target account, the method further includes: The terminal management server receives a password retrieval request for the target account, which is obtained based on a password retrieval request sent by the user terminal to the terminal management server. Based on the password retrieval request, the new password is sent to the terminal management server, so that the terminal management server sends the new password to the user terminal and matches the target account on the user terminal with the new password.

6. A password management method, characterized in that, Applied to a terminal management server, the method includes: Receive a synchronization time retrieval request sent by the network security server when it obtains a new password for the target account; The synchronization time is sent to the network security server according to the synchronization time acquisition request, so that the network security server, when determining that the synchronization time is consistent with the authentication time stored on the network security server, sends the new password to the terminal management server; wherein, the synchronization time is the time recorded by the terminal management server when the user terminal successfully applied for network authentication from the network security server and synchronized the authentication information to the terminal management server; the authentication time is the time recorded by the network security server when the network security server successfully performed network authentication on the user terminal most recently; The system receives the new password and sends it to the user terminal so that the user terminal matches the target account on the user terminal with the new password.

7. The password management method as described in claim 6, characterized in that, Before the step of receiving the new password and sending the new password to the user terminal to match the target account on the user terminal with the new password, the method further includes: Obtain the password retrieval request sent by the user terminal. The password retrieval request carries the target account and its login time. The login time is the time recorded by the user terminal when it last logged into the target account after successfully applying for network authentication from the network security server. Determine whether the login time is consistent with the synchronization time stored on the terminal management server; If the login time is consistent with the synchronization time, then the password retrieval request for the target account is obtained according to the password retrieval request; The password retrieval request is sent to the network security server, so that the network security server sends the new password to the terminal management server in accordance with the password retrieval request.

8. A password management system, characterized in that, The system includes: A network security server for implementing the password management method as described in any one of claims 1 to 5; A terminal management server is used to implement the password management method as described in claim 6 or 7; The user terminal is used to send a password retrieval request to the terminal management server, and to receive a new password sent by the terminal management server, and match the corresponding target account with the new password.

9. A server, characterized in that, The server includes a processor and a memory, the memory storing a computer program that, when executed by the processor, implements the password management method as described in any one of claims 1 to 7.

10. A storage medium having a computer program stored thereon, characterized in that, The computer program may be executed by one or more processors to implement the cryptographic management method as described in any one of claims 1 to 7.

Images