Password generation and management method and device, computer equipment and storage medium

Abstract

The invention belongs to the field of network security, and relates to a password generation and management method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining information needing to be encrypted; extracting feature information according to the information needing to be encrypted; setting a password generation rule and a password management rule according to the feature information; generating an encrypted password for the information needing to be encrypted according to the password generation rule; and storing the encrypted password, and managing the stored encrypted password according to the password management rule. The password is generated by combining the characteristics of the information needing to be encrypted, so that the generated password has pertinence, the protection on the information needing to be encrypted is enhanced, memory can be recovered through the characteristics of the information needing to be encrypted even if the password is forgotten, and a traditional encryption mode breaks away from the basic characteristics of the information needing to be encrypted and is convenient to use. Compared with a traditional encryption mode, the encryption mode is more flexible and diversified and can be universally applied to the field of electronics.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a password generation and management method, device, computer equipment and storage medium. Background Art

[0002] Cybersecurity is an important issue related to national security and sovereignty, social stability, and the inheritance and development of national culture. In the information age, cybersecurity has a far-reaching impact on national security and is closely related to many other aspects of security. Without cybersecurity, there will be no national security, no stable operation of the economy and society, and the interests of the general public will be difficult to protect. In addition, information is confidential. Driven by the fiercely competitive market economy, each enterprise has confidentiality requirements for information such as raw material quotas, production technology, and business decisions in specific locations and business scopes. Once these secrets are leaked, it will not only cause serious economic losses to the enterprise, but also to the country. Therefore, improving the national cybersecurity awareness and skills and strengthening cybersecurity work are important contents of national cybersecurity work.

[0003] For information encryption, the usual practice is to just set a password. Currently, there are several ways to set a password, such as randomly generating it or generating it using a software generation tool. The current method of generating a password is simple and can easily lead to password leakage. Once the password is leaked, it will cause irreparable losses. Summary of the invention

[0004] The purpose of the embodiments of the present invention is to propose a password generation and management method, device, computer equipment and storage medium. The password generation method in the prior art is simple and easy to cause password leakage. Once the password is leaked, it will cause irreparable losses.

[0005] In order to solve the above technical problems, the present invention provides a password generation and management method, which adopts the following technical solution and includes the following steps:

[0006] Get the information that needs to be encrypted;

[0007] Extracting characteristic information according to the information to be encrypted;

[0008] According to the characteristic information, setting the rules for generating passwords and the rules for managing passwords;

[0009] Generate an encryption password for the information to be encrypted according to the password generation rule;

[0010] The encrypted password is stored, and the stored encrypted password is managed according to the password management rule.

[0011] Preferably, the step of obtaining the information to be encrypted specifically includes:

[0012] The information to be encrypted is obtained through the network.

[0013] Preferably, the step of extracting characteristic information according to the information to be encrypted specifically includes:

[0014] Parsing the information that needs to be encrypted;

[0015] By analyzing the result of the information to be encrypted, one of the source address, target address, MAC address, high-frequency keyword and function descriptor is obtained.

[0016] Preferably, before the step of setting the rules for generating passwords and the rules for managing passwords according to the characteristic information, the method further comprises:

[0017] A plurality of information block features are preset, as well as password generation rules and password management rules corresponding to the plurality of information block features.

[0018] Preferably, the step of storing the encrypted password and managing the stored encrypted password according to the password management rule specifically includes:

[0019] storing the encrypted password in ciphertext;

[0020] According to the password management rules, the stored encrypted password is updated and stored regularly. Preferably, after the steps of storing the password and managing the stored password according to the password management rules, the method further includes:

[0021] The password is stored in the blockchain.

[0022] In order to solve the above technical problems, the present invention also provides a password generation and management device, which adopts the following technical solution, including:

[0023] An acquisition module is used to obtain information that needs to be encrypted;

[0024] An extraction module, used for extracting characteristic information according to the information to be encrypted;

[0025] A rule module, used to set rules for generating passwords and rules for managing passwords according to the characteristic information;

[0026] A generating module, used for generating an encrypted password for the information to be encrypted according to the rule for generating the password;

[0027] The management module is used to store the encrypted password and manage the stored encrypted password according to the password management rule.

[0028] Preferably, the extraction module comprises:

[0029] A parsing module, used for parsing the information to be encrypted;

[0030] The feature extraction module is used to obtain one of the source address, target address, MAC address, high-frequency keywords and function descriptors through the result of parsing the information to be encrypted.

[0031] In order to solve the above technical problems, the present invention also provides a computer device, which adopts the technical solution described below, including a memory and a processor, wherein the memory stores computer-readable instructions, and the processor implements the steps of the above-mentioned password generation and management method when executing the computer-readable instructions.

[0032] In order to solve the above technical problems, the present invention also provides a computer-readable storage medium, which adopts the technical solution described below, and stores computer-readable instructions on the computer-readable storage medium, which implement the steps of the above-mentioned password generation and management method when executed by the processor.

[0033] Compared with the prior art, the present invention mainly has the following beneficial effects: by acquiring information to be encrypted, then extracting characteristic information according to the information to be encrypted, and then setting rules for generating passwords and rules for managing passwords according to the characteristic information, generating an encrypted password for the information to be encrypted according to the rules for generating passwords, finally storing the encrypted password, and managing the stored encrypted password according to the rules for managing passwords; generating passwords in combination with the characteristics of the information to be encrypted, so that the generated passwords are targeted, and the protection of the information to be encrypted is strengthened, even if the password is forgotten, the memory can be restored through the characteristics of the information to be encrypted, the traditional encryption method is separated from the basic characteristics of the information to be encrypted, compared with the traditional encryption method, the encryption method is more flexible and diverse, and can be generally applied to the electronic field. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the scheme in the present invention, a brief introduction is given below to the drawings required for use in the description of the embodiments of the present invention. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0035] Figure 1 is a flow chart of an embodiment of the password generation and management method of the present invention;

[0036] Figure 2 It is a schematic diagram of the structure of an embodiment of the password generation and management device of the present invention;

[0037] Figure 3 It is a schematic structural diagram of an embodiment of a computer device of the present invention. DETAILED DESCRIPTION

[0038] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by technicians in the technical field of the present invention; the terms used in the specification of the application herein are only for the purpose of describing specific embodiments and are not intended to limit the present invention; the terms "including" and "having" and any variations thereof in the specification and claims of the present invention and the above-mentioned drawings are intended to cover non-exclusive inclusions. The terms "first", "second", etc. in the specification and claims of the present invention or the above-mentioned drawings are used to distinguish different objects, not to describe a specific order.

[0039] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0040] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings.

[0041] It should be noted that the password generation and management method provided in the embodiment of the present invention is generally executed by a server / terminal device, and accordingly, the password generation and management device is generally arranged in the server / terminal device.

[0042] It should be understood that the number of terminal devices, networks and servers is only illustrative. Depending on the implementation requirements, there can be any number of terminal devices, networks and servers.

[0043] Embodiment 1

[0044] Continue to refer Figure 1 , shows a flow chart of an embodiment of the password generation and management method of the present invention. The password generation and management method comprises the following steps:

[0045] Step S1, obtaining information to be encrypted.

[0046] In this embodiment, the password generation and management method is executed on the electronic device (eg Figure 1The server / terminal device shown in the figure can receive the password generation and management request through a wired connection or a wireless connection. It should be noted that the above wireless connection method may include but is not limited to 3G / 4G / 5G connection, WiFi connection, Bluetooth connection, WiMAXX connection, Zigbee connection, UWB (ultrawideband) connection, and other wireless connection methods currently known or to be developed in the future.

[0047] The information that needs to be encrypted can be various mailboxes, such as QQ mailboxes, 163 mailboxes, Sohu mailboxes and various corporate mailboxes, etc., or it can be a piece of information block, such as a piece of software code, a hardware circuit diagram, a software function module, a test case or multiple test cases, etc.

[0048] Step S1 specifically includes: obtaining information to be encrypted through the network.

[0049] The terminal device, server, etc. that executes the password generation and management method obtains the information to be encrypted through the network. In some optional implementations of this embodiment, information related to the information to be encrypted can be set through a configuration file. The related information can be the URL source of the information to be encrypted, or the MAC address source, or various mailbox information, etc.

[0050] Step S2, extracting characteristic information according to the information to be encrypted.

[0051] In this embodiment, step S2 may further include the following steps:

[0052] S21. Parse the information that needs to be encrypted.

[0053] The obtained information that needs to be encrypted is parsed. In some optional implementations of this embodiment, first try to open the configuration file related to the information that needs to be encrypted, and obtain the URL source of the information that needs to be encrypted, or the MAC address source, or various mailbox information, etc. from the configuration file. If the configuration file fails to be opened, the information that needs to be encrypted itself is parsed, for example, Python can be used to parse the data. First, the information that needs to be encrypted can be divided into different parts and types. Through further analysis, the characteristics of the information itself can be mined, such as text information, picture information, audio information, video information, or a combination of multiple information. After classification, regression analysis, cluster analysis, similarity matching, statistical description, etc. can be further performed.

[0054] Regression analysis can determine the causal relationship between variables by specifying dependent variables and independent variables, establish a regression model, and solve the parameters of the model based on measured data, and then evaluate whether the regression model can fit the measured data well. If it can fit well, further predictions can be made based on the independent variables. Data clustering is used for static data analysis, including machine learning, data mining, pattern recognition, image analysis, and bioinformatics, which can all be combined with existing technologies for cluster analysis, and will not be repeated here. Similarity matching is to calculate the similarity of two data by a certain method, and the similarity is usually measured as a percentage. Similarity algorithms can be used in a variety of scenarios, such as recommendation statistics, automatic scoring systems, etc. Statistical description refers to the use of certain statistical indicators and indicator systems to indicate the information fed back by the data according to the characteristics of the data. It is the basic processing work for data analysis. The main methods include the calculation of average indicators and variation indicators, and the graphical representation of data distribution forms.

[0055] After parsing the information to be encrypted, the parsing result is generated. The purpose of parsing the information to be encrypted is to obtain the information characteristics, and then encrypt it in a targeted manner according to the information characteristics to generate a password for easy memory. Even if you forget the password, you can refer to the information to be encrypted and reproduce the password, which is conducive to memory.

[0056] S22. Obtain one of the source address, target address, MAC address, high-frequency keyword and function descriptor information through the result of parsing the information to be encrypted.

[0057] In some optional implementations of this embodiment, the analysis result includes information categories, such as text, pictures, audio, video, or any combination of these categories. If it is text, the specific content of the text is extracted; if it is a picture, the graphic recognition method in the prior art is used to perform picture recognition, obtain the content involved in the picture, and store it. If it is audio, the audio recognition method in the prior art is combined to store the audio in the form of text. If it is a video, the video decoding method in the prior art is combined to perform analysis, obtain the video content, and generate text information.

[0058] For the parsing results, extract key information therein, such as the source address, target address, MAC address, high-frequency keywords and one of the function descriptors of the information to be encrypted. It should be noted that if the parsing results contain multiple types of these characteristic information, the combined information of the source address, target address, MAC address, high-frequency keywords and function descriptors can be obtained.

[0059] Step S3, setting the rules for generating passwords and the rules for managing passwords according to the characteristic information.

[0060] In this embodiment, the rule for generating a password can be to generate a password based on the characteristic information through a password generation tool, or to set the rule for generating a password based on the characteristic information. For example, if the characteristic information is a URL address. A password generation tool can be used, and the URL information can be added to generate a password together. For example, if it is under Linux, a command for randomly generating a password can be used to implement it. The commands for randomly generating a password include: mkpasswd command, apg command, etc. The mkpasswd command can set the complexity of the generated password. It can not only generate a password randomly, but also directly modify the account password. The parameter "-l" of the mkpasswd command defines the length of the generated password, which defaults to 9, the parameter "-d" defines the minimum number of numbers contained in the password, which defaults to 2, the parameter "-c" defines the minimum number of lowercase letters contained in the password, which defaults to 2, the parameter "-C" defines the minimum number of uppercase letters contained in the password, which defaults to 2, and the parameter "-s" defines the minimum number of special characters contained in the password, which defaults to 1. After the mkpasswd command generates a password of a specified length, such as "D3a5b@Cde", the characters in the URL, such as www.163.com, can be extracted: 3 ws, the numbers 1, 6, 3, and the letters c, o, m are randomly scattered and placed in the password of the specified length, for example, it can be "w1D3cw6a5bo@w3Cmde".

[0061] The parameter "-m" of the apg command defines the minimum length of the generated password, which defaults to 8. The actual random password may exceed this value. After generating a random password according to the parameters of the apg command, the characters in the URL such as www.163.com can be extracted: 3 ws, numbers 1, 6, 3 and letters c, o, m are randomly scattered and placed in the password of the specified length.

[0062] It should be noted that: the URL information is scattered and set in the randomly generated password, and the rules for scattering and insertion can be set, for example, it can be set to be inserted at the head of the randomly generated password, the tail of the randomly generated password, or the middle of the randomly generated password, or it can be randomly scattered and set in the randomly generated password.

[0063] If it is non-URL information, for other characteristic information, such as target address, MAC address, high-frequency keywords and function descriptors, etc., you can set the target address, MAC address, high-frequency keywords and function descriptors to the head, tail, middle or randomly in the random password when generating the password.

[0064] It should be noted that when setting a password, in order to avoid the password being too simple and cracked, some hints can be given. For example, the password cannot be exactly the same as the login name, the password cannot be exactly the same as any of the telephone number, fax number, mobile phone number, zip code, etc. in the contact information, the password cannot use consecutive increasing or decreasing numbers, the password cannot use consecutive and uppercase English characters in order or reverse order, the password cannot use the same character or number consecutively, etc.

[0065] The rules for managing passwords include: the frequency of password updates, the way passwords are stored, the rules for password deletion, the rules for password changes, etc. The frequency of password updates can be set according to the importance of the password, for example, it can be one week, ten days, one month, one quarter, etc. The password storage method can be plain text storage or cipher text storage. For the sake of security, plain text passwords can be stored in an encrypted manner to prevent password leakage. The rules for password deletion can be the trigger conditions for password deletion, for example, when the user account is cancelled or the user account is changed, the password bound to the current account can be deleted. The rules for password changes can be when the user account changes or the user actively sets a password change, etc.

[0066] Step S4, generating an encryption password for the information to be encrypted according to the rules for generating the password.

[0067] According to the password generation rule in step S3, an encryption password is generated for the information to be encrypted.

[0068] In some optional implementations of this embodiment, before step S4, the following steps may be further included:

[0069] A variety of information block features are preset, as well as password generation rules and password management rules corresponding to the various information block features.

[0070] The basic characteristics of data are: capacity, the size of the data determines the value and potential information of the data under consideration; type, the diversity of data types, such as text, video, audio, pictures, etc.; speed, which refers to the speed of obtaining data; variability, which hinders the process of processing and effectively processing data; authenticity, which refers to the quality of data, such as documentaries, non-fiction, novels based on reality, TV series, movies, etc.; complexity, which refers to the large amount of data, multiple sources, and what are the sources; value, the rational use of big data to create high value at low cost, etc. The structure of data can include structured, semi-structured and unstructured.

[0071] The preset multiple information block features may include data capacity, data type, documentary, non-fiction, novel, TV series, movie, etc. The preset password generation rules adapted to data capacity, data type, documentary, non-fiction, novel, TV series, movie, etc. may be: using data capacity information, data type information, documentary name, non-fiction name, novel name, TV series name, movie name, etc. as keywords to generate random passwords or custom passwords. The preset password management rules adapted to data capacity, data type, documentary, non-fiction, novel, TV series, movie, etc. may be: setting the password update frequency, password storage method, password deletion rules, password change rules, etc. according to the activity level of these information block features. For information block features with low activity level such as data capacity, data type, documentary, non-fiction, etc., the password refresh frequency may be set lower, such as once a quarter, half a year, or a year, etc. For information block features with high activity level such as TV series, movie, etc., the password refresh frequency may be set higher, such as once a week or once a month, etc. The password storage method can be plain text storage or cipher text storage. For security reasons, the plain text password can be stored in an encrypted manner to prevent password leakage. The password deletion rule can be a trigger condition for deleting the password. For example, when the user account is cancelled or the user account is changed, the password bound to the current account can be deleted. The password change rule can be when the user account changes or the user actively sets a password change.

[0072] Step S5, storing the encrypted password, and managing the stored encrypted password according to the rules for managing passwords.

[0073] In some optional implementations of this embodiment, step S5 may further perform the following steps:

[0074] S51. Store the encrypted password in ciphertext.

[0075] Ciphertext is a message encrypted from a plaintext password. It is the output after applying some disguise or change to the plaintext password. It can also be understood as a character or bit set that cannot be directly understood, but the scrambled information can be restored through an algorithm, which is the opposite of plaintext.

[0076] Ciphertext is a message generated by a password generation tool. If the message is not converted, i.e. decrypted, by the message recipient, it cannot be understood by others. The purpose is to ensure the confidentiality of the password. You can use existing encryption software such as Encryption Lock, 360 Encryption, Ansi Secret Letter, etc. to encrypt the password, generate ciphertext, and store it.

[0077] It should be noted that, for the sake of information security, the location for storing ciphertext can be allocated by a dedicated person with certain authority.

[0078] S52. According to the rules for managing passwords, the stored encrypted passwords are updated and stored regularly.

[0079] According to the above password management rules, the stored encrypted passwords are updated and stored regularly to ensure the life cycle of the passwords.

[0080] It should be noted that in order to manage passwords more securely, the entire password life cycle can be followed up, including password creation, creation method, password encryption process, password change, password deletion, password update, password decryption, etc., and a database for password life cycle follow-up can be established. This makes it easy to understand the entire life cycle of the password. If a password is leaked, it is easy to follow up and analyze which links have the risk of password leakage, learn from experience, prevent problems before they happen, and provide greater security for information that needs to be encrypted.

[0081] It should be emphasized that in order to further ensure the privacy and security of the above-mentioned cryptographic information, the above-mentioned cryptographic information can also be stored in a node of a blockchain.

[0082] The blockchain referred to in this invention is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0083] The beneficial effects of implementing this embodiment are as follows: by obtaining information to be encrypted, then extracting characteristic information based on the information to be encrypted, and then setting rules for generating passwords and rules for managing passwords based on the characteristic information, generating an encrypted password for the information to be encrypted according to the rules for generating passwords, and finally storing the encrypted password, and managing the stored encrypted password according to the rules for managing passwords; generating a password in combination with the characteristics of the information to be encrypted, so that the generated password is targeted, and the protection of the information to be encrypted is strengthened. Even if the password is forgotten, the memory can be restored through the characteristics of the information to be encrypted. The traditional encryption method is separated from the basic characteristics of the information to be encrypted. Compared with the traditional encryption method, the encryption method is more flexible and diverse, and can be generally applied to the electronic field.

[0084] The present invention can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present invention can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present invention can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0085] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through computer-readable instructions, and the computer-readable instructions can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the aforementioned storage medium can be a non-volatile storage medium such as a disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0086] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0087] Embodiment 2

[0088] Further references Figure 2 , as a response to the above Figure 1 The present invention provides an embodiment of a password generation and management device, and the device embodiment is similar to Figure 1 Corresponding to the method embodiment shown, the device can be specifically applied to various electronic devices.

[0089] like Figure 2 As shown, the password generation and management device 60 of this embodiment includes: an acquisition module 61, an extraction module 62, a rule module 63, a generation module 64 and a management module 65. Among them:

[0090] An acquisition module 61 is used to acquire information that needs to be encrypted;

[0091] An extraction module 62, used to extract characteristic information according to the information that needs to be encrypted;

[0092] A rule module 63, used to set rules for generating passwords and rules for managing passwords according to feature information;

[0093] A generating module 64, used to generate an encryption password for the information to be encrypted according to the rules for generating the password;

[0094] The management module 65 is used to store the encrypted password and manage the stored encrypted password according to the rules for managing the password.

[0095] In some optional implementations of the present embodiment, the extraction module 62 further includes a parsing module 621 and a feature extraction module 622, wherein the parsing module 621 is used to parse the information to be encrypted; the feature extraction module 622 is used to obtain one of the source address, target address, MAC address, high-frequency keywords and function descriptors through the results of parsing the information to be encrypted.

[0096] The beneficial effects of implementing this embodiment are as follows: by obtaining information to be encrypted, then extracting characteristic information based on the information to be encrypted, and then setting rules for generating passwords and rules for managing passwords based on the characteristic information, generating an encrypted password for the information to be encrypted according to the rules for generating passwords, and finally storing the encrypted password, and managing the stored encrypted password according to the rules for managing passwords; generating a password in combination with the characteristics of the information to be encrypted, so that the generated password is targeted, and the protection of the information to be encrypted is strengthened. Even if the password is forgotten, the memory can be restored through the characteristics of the information to be encrypted. The traditional encryption method is separated from the basic characteristics of the information to be encrypted. Compared with the traditional encryption method, the encryption method is more flexible and diverse, and can be generally applied to the electronic field.

[0097] Embodiment 3

[0098] To solve the above technical problems, the embodiment of the present invention also provides a computer device. Figure 3 , Figure 3 This is a basic structural block diagram of the computer device in this embodiment.

[0099] The computer device 7 includes a memory 71, a processor 72, and a network interface 73 that are interconnected through a system bus. It should be noted that the figure only shows a computer device 7 having components of a memory 71, a processor 72, and a network interface 73, but it should be understood that it is not required to implement all the components shown, and more or fewer components can be implemented instead. Among them, those skilled in the art can understand that the computer device here is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable gate arrays (Field-Programmable Gate Array, FPGA), digital processors (Digital Signal Processor, DSP), embedded devices, etc.

[0100] The computer device may be a desktop computer, a notebook computer, a PDA, a cloud server, etc. The computer device may interact with the user through a keyboard, a mouse, a remote control, a touch pad, or a voice control device.

[0101] The memory 71 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 71 may be an internal storage unit of the computer device 7, such as a hard disk or memory of the computer device 7. In other embodiments, the memory 71 may also be an external storage device of the computer device 7, such as a plug-in hard disk, a smart memory card (SmartMediaCard, SMC), a secure digital (SecureDigital, SD) card, a flash card (FlashCard), etc. equipped on the computer device 7. Of course, the memory 71 may also include both the internal storage unit of the computer device 7 and its external storage device. In this embodiment, the memory 71 is generally used to store the operating system and various application software installed on the computer device 7, such as computer-readable instructions of the password generation and management method, etc. In addition, the memory 71 can also be used to temporarily store various types of data that have been output or are to be output.

[0102] The processor 72 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chips in some embodiments. The processor 72 is generally used to control the overall operation of the computer device 7. In this embodiment, the processor 72 is used to run computer-readable instructions stored in the memory 71 or process data, such as computer-readable instructions for running the password generation and management method.

[0103] The network interface 73 may include a wireless network interface or a wired network interface. The network interface 73 is generally used to establish a communication connection between the computer device 7 and other electronic devices.

[0104] The beneficial effects of implementing this embodiment are: combining the characteristics of the information to be encrypted to generate a password, so that the generated password is targeted and the protection of the information to be encrypted is strengthened. Even if the password is forgotten, the memory can be restored through the characteristics of the information to be encrypted. The traditional encryption method is separated from the basic characteristics of the information to be encrypted. Compared with the traditional encryption method, the encryption method is more flexible and diverse and can be widely applied to the electronic field.

[0105] Embodiment 4

[0106] The present invention also provides another embodiment, namely, providing a computer-readable storage medium, which stores computer-readable instructions. The computer-readable instructions can be executed by at least one processor to enable the at least one processor to perform the steps of the password generation and management method as described above.

[0107] The beneficial effects of implementing this embodiment are: combining the characteristics of the information to be encrypted to generate a password, so that the generated password is targeted and the protection of the information to be encrypted is strengthened. Even if the password is forgotten, the memory can be restored through the characteristics of the information to be encrypted. The traditional encryption method is separated from the basic characteristics of the information to be encrypted. Compared with the traditional encryption method, the encryption method is more flexible and diverse and can be widely applied to the electronic field.

[0108] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the various embodiment methods of the present invention.

[0109] Obviously, the embodiments described above are only some embodiments of the present invention, rather than all embodiments. The preferred embodiments of the present invention are given in the accompanying drawings, but they do not limit the patent scope of the present invention. The present invention can be implemented in many different forms. On the contrary, the purpose of providing these embodiments is to make the understanding of the disclosure of the present invention more thorough and comprehensive. Although the present invention has been described in detail with reference to the aforementioned embodiments, for those skilled in the art, it is still possible to modify the technical solutions recorded in the aforementioned specific embodiments, or to perform equivalent replacements for some of the technical features therein. Any equivalent structure made using the contents of the specification and drawings of the present invention, directly or indirectly used in other related technical fields, is also within the scope of patent protection of the present invention.

Claims

1. A password generation and management method, characterized in that: The steps include: Get the information that needs to be encrypted; Extracting characteristic information according to the information to be encrypted; According to the characteristic information, setting the rules for generating passwords and the rules for managing passwords; Generate an encryption password for the information to be encrypted according to the password generation rule; The encrypted password is stored, and the stored encrypted password is managed according to the password management rule.

2. The password generation and management method according to claim 1, characterized in that: The step of obtaining the information to be encrypted specifically includes: The information to be encrypted is obtained through the network.

3. The password generation and management method according to claim 1, characterized in that: The step of extracting characteristic information according to the information to be encrypted specifically includes: Parsing the information that needs to be encrypted; By analyzing the result of the information to be encrypted, one of the source address, target address, MAC address, high-frequency keyword and function descriptor is obtained.

4. The password generation and management method according to claim 1, characterized in that: Before the step of setting the password generation rule and the password management rule according to the characteristic information, the method includes: A plurality of information block features are preset, as well as password generation rules and password management rules corresponding to the plurality of information block features.

5. The password generation and management method according to claim 1, characterized in that: The step of storing the encrypted password and managing the stored encrypted password according to the password management rule specifically includes: storing the encrypted password in ciphertext; According to the password management rules, the stored encrypted password is updated and stored regularly.

6. The password generation and management method according to claim 5, characterized in that: After the step of storing the password and managing the stored password according to the password management rule, the method further includes: The password is stored in the blockchain.

7. A password generation and management device, characterized in that: include: An acquisition module is used to obtain information that needs to be encrypted; An extraction module, used for extracting characteristic information according to the information to be encrypted; A rule module, used to set rules for generating passwords and rules for managing passwords according to the characteristic information; A generating module, used for generating an encrypted password for the information to be encrypted according to the rule for generating the password; The management module is used to store the encrypted password and manage the stored encrypted password according to the password management rule.

8. The password generation and management device according to claim 7, characterized in that: The extraction module comprises: A parsing module, used for parsing the information to be encrypted; The feature extraction module is used to obtain one of the source address, target address, MAC address, high-frequency keywords and function descriptors through the result of parsing the information to be encrypted.

9. A computer device comprising a memory and a processor, wherein the memory stores computer-readable instructions, and when the processor executes the computer-readable instructions, the steps of the password generation and management method according to any one of claims 1 to 6 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-readable instructions, which, when executed by a processor, implement the steps of the password generation and management method according to any one of claims 1 to 6.

Images