Account password management method and device, equipment and storage medium

Abstract

The invention relates to the technical field of information security, in particular to an account password management method, an account password management device, account password management equipment and a storage medium. The information service data corresponding to the target information service system can be read from the external password module which is electrically connected according to the login instruction, the signature data is obtained by analyzing the information service data, and the target login data is obtained by decrypting the signature data, so that the information service system is automatically logged in; the user does not need to independently memorize the account password of each service system, the threat of information leakage to other users is also reduced, the security of the account password is improved, and the technical problems of high management difficulty and low security when the user manages the accounts and passwords of a plurality of information service systems in the prior art are avoided.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an account password management method, device, equipment and storage medium. Background Art

[0002] With the development of information security, when users are faced with the use of information business systems with high security requirements, the accounts and passwords between different information business systems may be different. If each account and password is managed manually, it may cause login errors and high maintenance costs. If multiple login failures occur, the account may be locked, affecting the normal use of the user. If the passwords corresponding to each account are set uniformly, then after the password of one account is leaked, there will be security risks for other accounts.

[0003] In order to solve the above problems, existing terminal devices provide automatic login or password storage services, but this also increases the risk of information leakage when other users operate the terminal device. It can be seen that when users are faced with account and password management of multiple information business systems, management is difficult and security is low.

[0004] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of the present invention is to provide an account password management method, device, equipment and storage medium, aiming to solve the technical problems in the prior art that users are faced with the account and password management of multiple information service systems, which are difficult to manage and have low security.

[0006] To achieve the above object, the present invention provides an account password management method, the method comprising the following steps:

[0007] When receiving a login instruction of a target information service system, reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction;

[0008] Parsing the information service data to obtain signature data;

[0009] Decrypt the signature data to obtain target login data;

[0010] Log into the target information service system according to the target login data.

[0011] Optionally, the signature data includes the signature original text and the signature value;

[0012] The decrypting the signature data to obtain target login data includes:

[0013] Performing data verification on the original signature and the signature value according to a preset signature public key;

[0014] When the verification is successful, the target field in the signature original is decrypted based on a preset decryption key through a preset decryption method to obtain the target login data. The preset decryption key is associated with the unique identifier of the target information business system, the user account and the encryption time information of the signature original. The target login data includes at least a unique identifier, account information, password information and login object information.

[0015] Optionally, the logging into the target information service system according to the target login data includes:

[0016] Calling a first driver based on the unique identifier to start a login page corresponding to the unique identifier, wherein the login page is a display page corresponding to the target information service system pointed to by the unique identifier;

[0017] The login page is filled in according to the account information, password information and login object information to log in to the target information service system.

[0018] Optionally, when receiving a login instruction of the target information service system, before reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction, the method further includes:

[0019] Registering the system name and unique identifier of the target information service system in the electrically connected external password module;

[0020] Calling a second driver to start a registration page corresponding to the registration target information service system;

[0021] Scan the registration page in real time and count the login object information, user account and user password of each input box in the registration page;

[0022] The system name, the unique identifier, the login object information, the user account and the user password are correspondingly stored in the electrically connected external password module.

[0023] Optionally, the storing the system name, the unique identifier, the login object information, the user account and the user password correspondingly in the electrically connected external password module includes:

[0024] Encrypting the user password by a first encryption method to obtain a password ciphertext;

[0025] Integrate the system name, the unique identifier, the login object information, the user account and the password ciphertext to obtain a target data field table;

[0026] Digitally signing the target data field table by a second encryption method to obtain a signature value;

[0027] The target data field table and the signature value are correspondingly stored in the electrically connected external password module.

[0028] Optionally, encrypting the user password by a first encryption method to obtain a password ciphertext includes:

[0029] Generate an initial vector of preset length bytes through a preset function based on the unique identifier, the user account and the current time information;

[0030] The user password is encrypted according to the initial vector and a preset key to obtain a password ciphertext, wherein the byte length of the preset key is the same as the byte length of the initial vector.

[0031] Optionally, the account password management method further includes:

[0032] When receiving a password modification instruction from the target information service system, calling a third driver according to the password modification instruction to start a password modification page;

[0033] Scan the input information of each input box in the password modification page, wherein the input information at least includes the user password, the modification password, the login object information and the modification object information;

[0034] Obtain at least one of a modification password, a modification unique identifier, and modification object information;

[0035] Updating the target data field table for at least one of the modification password, modification unique identifier, and modification object information;

[0036] Digitally sign the updated target data field table by using a second encryption method to obtain a target signature value;

[0037] The updated target data field table and the target signature value are correspondingly stored in the electrically connected external password module.

[0038] In addition, to achieve the above purpose, the present invention also provides an account password management device, the account password management device comprising:

[0039] A reading module, configured to read information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction when receiving the login instruction of the target information service system;

[0040] A parsing module, used for parsing the information service data to obtain signature data;

[0041] A decryption module, used to decrypt the signature data to obtain target login data;

[0042] A login module is used to log in to the target information service system according to the target login data.

[0043] In addition, to achieve the above-mentioned purpose, the present invention also proposes an account password management device, which includes: a memory, a processor, and an account password management program stored in the memory and executable on the processor, wherein the account password management program is configured to implement the steps of the account password management method described above.

[0044] In addition, to achieve the above-mentioned purpose, the present invention also proposes a storage medium, on which an account password management program is stored, and when the account password management program is executed by a processor, the steps of the account password management method described above are implemented.

[0045] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the account password management method described above are implemented.

[0046] One or more technical solutions proposed in the present application have at least the following technical effects: The present application discloses an account password management method, which includes: when receiving a login instruction for a target information service system, reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction; parsing the information service data to obtain signature data; decrypting the signature data to obtain target login data; logging into the target information service system according to the target login data. Compared with the prior art, the present application, when receiving a login instruction for a target information service system, can read the information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction, and parse the information service data to obtain signature data, decrypt the signature data to obtain target login data, thereby automatically logging into the information service system, without the need for users to remember the account passwords of each service system separately, and reducing the threat of information leakage to other users, thereby improving the security of account passwords and avoiding the technical problems of high management difficulty and low security in the prior art when users face account and password management of multiple information service systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0048] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0049] Figure 1 This is a flow chart of the first embodiment of the account password management method of the present invention;

[0050] Figure 2 A schematic diagram of a login process of an embodiment of an account password management method of the present invention;

[0051] Figure 3 This is a flow chart of a second embodiment of the account password management method of the present invention;

[0052] Figure 4 This is a structural block diagram of the first embodiment of the account password management device of the present invention.

[0053] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0054] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0055] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0056] Based on this, the embodiment of the present invention provides an account password management method, referring to Figure 1 , Figure 1 The figure is a flow chart of a first embodiment of an account password management method of the present invention.

[0057] In this embodiment, the account password management method includes:

[0058] Step S10: upon receiving a login instruction of the target information service system, reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction.

[0059] It should be noted that the executor of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device, a terminal device, etc. that can realize the above functions. The following takes the terminal device as an example to illustrate this embodiment and the following embodiments.

[0060] It should be noted that with the development of information security, when users are faced with the use of information business systems with high security requirements, the accounts and passwords between different information business systems may be different. If each account and password is managed manually, it may cause login errors and high maintenance costs. Therefore, now and if multiple login failures occur, the account may be locked, affecting the normal use of the user. If the passwords corresponding to each account are set uniformly, then after the password of one account is leaked, there will be security risks for other accounts.

[0061] In order to solve the above problems, existing terminal devices provide automatic login or password storage services, but this also increases the risk of information leakage when other users operate the terminal device, especially for an industry with high confidentiality, such as finance, law, etc., where the above risks are even more likely to exist.

[0062] Based on this, in this embodiment, information such as accounts, passwords, and unique identifiers of various information service systems are stored in a hardware device, and the hardware device is electrically connected to the terminal device to achieve data interoperability. The hardware device can be a smart password key or a storage hard disk with a USB interface, etc. This embodiment does not impose specific restrictions on this.

[0063] The target information service system can be an information platform in the form of software, web pages, etc., such as: news pages, online mailboxes, company websites, and business communication platforms; the login instruction can be a login operation for the target information service system issued to an electrically connected external password module, and this embodiment does not impose specific restrictions on this.

[0064] Information service data refers to the user's unique identifier, account information, password information and login object information in the target information service system, and is mainly used to log in to the target information service system.

[0065] Step S20: Parse the information service data to obtain signature data.

[0066] It should be understood that the signature data includes the signature original and the signature value, wherein the signature original includes the above-mentioned unique identifier, account information, password information, login object information and other information, and the signature value is used to verify whether the information business data is secure and whether it has been tampered with.

[0067] Further, decrypting the signature data to obtain target login data includes:

[0068] Performing data verification on the original signature and the signature value according to a preset signature public key;

[0069] When the verification is successful, the target field in the signature original is decrypted based on a preset decryption key through a preset decryption method to obtain the target login data. The preset decryption key is associated with the unique identifier of the target information business system, the user account and the encryption time information of the signature original. The target login data includes at least a unique identifier, account information, password information and login object information.

[0070] It is understandable that the preset signature key is not fixed, and is related to the encryption algorithm and encryption key used during encryption. Specifically, the preset signature key is related to the unique identifier of the target information service system, the user account, and the encryption time information.

[0071] In the specific implementation, after the user selects the information business system to log in on the account and password security management system, the service program of the account and password security management system reads the information business data of the information business system of the password module, obtains the signature value Signature by parsing each field data in the information business data, and uses the signature public key to verify the signature original text and the signature value. If the verification passes, it means that the account and password information has not been modified; if the verification fails, it means that the account and password information has been tampered with, and it is prompted that the account and password are not secure, and the next step is stopped.

[0072] Step S30: Decrypt the signature data to obtain target login data.

[0073] After the signature original and signature value are verified, the KeyEncryptedData, PwdEncryptedLen, and PwdEncryptedData fields in the signature original are read by decrypting the password data, and the encrypted private key is used to perform SM2 decryption of KeyEncryptedData to obtain the SM4-CBC key key; key is used to perform SM4-CBC decryption of PwdEncryptedData to obtain the password pwd.

[0074] Step S40: Log into the target information service system according to the target login data.

[0075] Further, the logging into the target information service system according to the target login data includes:

[0076] Calling a first driver based on the unique identifier to start a login page corresponding to the unique identifier, wherein the login page is a display page corresponding to the target information service system pointed to by the unique identifier;

[0077] The login page is filled in according to the account information, password information and login object information to log in to the target information service system.

[0078] In the specific implementation, refer to Figure 2 , Figure 2 This is the account password management system architecture diagram of this application. The account password security management system starts the browser, accesses the information business system login URL, and calls the browser driver according to the page object tag data of the account input box and the page object tag data of the password input box, fills the account information and password information into the page object of the account input box and the page object of the password input box, and completes the system login.

[0079] When receiving a login instruction for a target information service system, this embodiment can use the login instruction to read the information service data corresponding to the target information service system from an electrically connected external password module, and parse the information service data to obtain signature data, decrypt the signature data, and obtain target login data, thereby automatically logging into the information service system. There is no need for users to remember the account passwords of each service system separately, and the threat of information leakage to other users is reduced, thereby improving the security of account passwords and avoiding the technical problems of high management difficulty and low security when users are faced with account and password management of multiple information service systems in the prior art.

[0080] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 3 , before step S10, further comprising:

[0081] Step S01: registering the system name and unique identifier of the target information service system in the electrically connected external password module.

[0082] Step S02: calling a second driver program to start a registration page corresponding to the registration target information service system.

[0083] Step S03: Scan the registration page in real time, and count the login object information, user account and user password of each input box in the registration page.

[0084] Step S04: storing the system name, the unique identifier, the login object information, the user account and the user password in correspondence to the electrically connected external password module.

[0085] It should be noted that the system name target information business system is the code or name in the electrically connected external password module. Since the external password module may store a large number of user accounts and passwords of different platforms, for the convenience of management, in this embodiment, the stored login object information, the user account and the user password can be stored in strips based on the system name, and in this embodiment, the system name and the unique identifier correspond.

[0086] It can be understood that the second driver is used to start the browser to open the login URL, thereby starting the registration page corresponding to the registration target information business system. After the registration page is opened, the login object information, user account and user password of each input box in the registration page are scanned and collected to realize account authentication and registration. Specifically, real-time scanning of the registration page refers to capturing the label of the page object element of the account input box of the html page, and the management system program collects the label of the page object element of the account input box; collecting user account information. The user enters the login account of the information system in the browser, and the management system program collects the account information entered by the user according to the label of the page object element of the account input box; captures the label of the page object element of the password input box of the html page, and the user clicks the password input box with the mouse on the login page, and the management system program collects the label of the page object element of the password input box; collects user password information. The user enters the password in the browser, and the management system program collects the password information entered by the user according to the label of the page object element of the password input box.

[0087] Furthermore, the corresponding storage of the system name, the unique identifier, the login object information, the user account and the user password in the electrically connected external password module includes:

[0088] Encrypting the user password by a first encryption method to obtain a password ciphertext;

[0089] Integrate the system name, the unique identifier, the login object information, the user account and the password ciphertext to obtain a target data field table;

[0090] Digitally signing the target data field table by a second encryption method to obtain a signature value;

[0091] The target data field table and the signature value are correspondingly stored in the electrically connected external password module.

[0092] In a specific implementation, in order to prevent account and password leakage and endanger the user's information security, in this embodiment, when storing information such as account and password in an electrically connected external password module, the data to be stored needs to be encrypted first.

[0093] Further, the encrypting the user password by the first encryption method to obtain the password ciphertext includes:

[0094] Generate an initial vector of preset length bytes through a preset function based on the unique identifier, the user account and the current time information;

[0095] The user password is encrypted according to the initial vector and a preset key to obtain a password ciphertext, wherein the byte length of the preset key is the same as the byte length of the initial vector.

[0096] Among them, the first encryption method refers to first using the SM2_KDF function to derive 16-byte data in length from the unique identifier (LoginURL), user account (Account), and current time information (TimeStamp) as the initial vector iv encrypted by the SM4_CBC algorithm; the preset key refers to a 16-byte random number automatically generated by an external password module, and the 16-byte random number is used as the key key encrypted by the SM4_CBC algorithm. The user password is encrypted based on the above-mentioned initial vector iv and the preset key key of the 16-byte random number to obtain the password ciphertext PwdEncryptedData.

[0097] In addition, in order to improve the security of the password during subsequent logins and to successfully decrypt the password ciphertext, the present embodiment can also encrypt the above-mentioned preset key through the encryption public key of the SM2 algorithm to obtain the key ciphertext KeyEncryptedData, and finally store the password ciphertext PwdEncryptedData and the ciphertext KeyEncryptedData correspondingly.

[0098] The target data field table can refer to the table structure shown in Table 1, integrating the system name, the unique identifier, the login object information, the user account and the password ciphertext. The target data field table can be obtained by integrating the unique identifier, login object information, user account and password ciphertext into one table in a fixed data format to facilitate storage and improve data standardization.

[0099] Table 1

[0100]

[0101] Digitally signing the target data field table through the second encryption method to obtain the signature value means using the SM2 signature private key in the password module to digitally sign the unique identifier, user account, password ciphertext, login account input box page object tag, and login password input box page object tag with SM2+SM3 to obtain the signature value, and finally writing the target data field table and the signature value to the password module persistently, waiting for subsequent account management, such as: login, modification, deletion, etc. This embodiment does not impose specific restrictions on this.

[0102] This embodiment registers the system name and unique identifier of the target information service system in an electrically connected external password module; calls a second driver program to start a registration page corresponding to the registered target information service system; scans the registration page in real time, and counts the login object information, user account and user password of each input box in the registration page; stores the system name, the unique identifier, the login object information, the user account and the user password in correspondence to the electrically connected external password module, starts the registration page by calling the driver program, and scans the input information of each input box in the registration page, thereby collecting the registration information, and storing it in the electrically connected external password module to realize account information registration of the external password module, which is convenient for subsequent account management.

[0103] In another feasible embodiment, the account password management method further includes:

[0104] When receiving a password modification instruction from the target information service system, calling a third driver according to the password modification instruction to start a password modification page;

[0105] Scan the input information of each input box in the password modification page, wherein the input information at least includes the user password, the modification password, the login object information and the modification object information;

[0106] Obtain at least one of a modification password, a modification unique identifier, and modification object information;

[0107] Updating the target data field table for at least one of the modification password, modification unique identifier, and modification object information;

[0108] Digitally sign the updated target data field table by using a second encryption method to obtain a target signature value;

[0109] The updated target data field table and the target signature value are correspondingly stored in the electrically connected external password module.

[0110] In a specific implementation, a user may modify the stored account information and passwords due to software iteration or personal information protection. The password modification instruction may refer to registering the modification password information of the information service system on the account password management system, selecting the information service system where the login information has been registered, and filling in the password modification URL, thereby calling the third driver to start the password modification page.

[0111] Since the external password module is highly operable, each modification will be recorded in this embodiment. In particular, for information services with high confidentiality, there may be regular modifications. Therefore, in this embodiment, the last password modification time, password usage period Period, password complexity rules, etc. will be set to improve the security of the account passwords of the stored information services.

[0112] The account password management system starts the browser to open the password modification URL, scans the browser html page object, and captures the label of the page object element of the account input box on the html page. The user clicks the account input box with the mouse on the password modification page, and the management system program collects the label of the page object element of the account input box; captures the label of the page object element of the original password input box on the html page. The user clicks the password input box with the mouse on the password modification page, and the management system program collects the label of the page object element of the password input box; captures the label of the page object element of the new password input box on the html page. The user clicks the new password input box with the mouse on the password modification page, and the management system program collects the label of the page object element of the new password input box; captures the label of the page object element of the new password re-entry box on the html page. When the user clicks on the new password re-entry box with the mouse on the password modification page, the management system program collects the label of the page object element of the new password re-entry box; stores the modified password data of the information system; and encrypts and stores the unique identifier corresponding to the information business, the label of the page object element of the account input box, the account information, the page object label of the original password input box, the page object label of the new password input box, and the password information in an external password module.

[0113] Furthermore, when the modified account, password, unique identifier and other information are stored in the external password module, they also need to be re-encrypted and signed, that is, the SM2 signature private key in the external password module is used to digitally sign the modified password URL, password usage period, password complexity rule, account input box page object tag, original password input box page object tag, new password input box page object tag, and new password re-entry box page object tag with SM2+SM3 to obtain the signature value, and then the modified password URL, password usage period, password complexity rule, account input box page object tag, original password input box page object tag, new password input box page object tag, and new password re-entry box page object tag are digitally signed with SM2+SM3, and the signature value is persistently written to the password module. The stored data format can refer to Table 2.

[0114] Table 2

[0115]

[0116]

[0117] This embodiment starts a password modification page by calling a third driver according to the password modification instruction when receiving a password modification instruction from a target information business system; scanning input information of each input box in the password modification page, the input information including at least a user password, a modification password, login object information and modification object information; obtaining at least one of the modification password, the modification unique identifier and the modification object information; updating a target data field table for at least one of the modification password, the modification unique identifier and the modification object information; digitally signing the updated target data field table by a second encryption method to obtain a target signature value; and storing the updated target data field table and the target signature value in correspondence to the electrically connected external password module, thereby realizing account password modification management and improving security.

[0118] This application also provides an account password management device, please refer to Figure 4 , the account password management device comprises:

[0119] The reading module 10 is used to read the information service data corresponding to the target information service system from the electrically connected external password module according to the login instruction when receiving the login instruction of the target information service system.

[0120] The parsing module 20 is used to parse the information service data to obtain signature data.

[0121] The decryption module 30 is used to decrypt the signature data to obtain target login data.

[0122] The login module 40 is used to log in to the target information service system according to the target login data.

[0123] When receiving a login instruction for a target information service system, this embodiment can use the login instruction to read the information service data corresponding to the target information service system from an electrically connected external password module, and parse the information service data to obtain signature data, decrypt the signature data, and obtain target login data, thereby automatically logging into the information service system. There is no need for users to remember the account passwords of each service system separately, and the threat of information leakage to other users is reduced, thereby improving the security of account passwords and avoiding the technical problems of high management difficulty and low security when users are faced with account and password management of multiple information service systems in the prior art.

[0124] In one embodiment, the decryption module 30 is also used to perform data verification on the signature original and the signature value according to a preset signature public key; when the verification is successful, the target field in the signature original is decrypted by a preset decryption method based on a preset decryption key to obtain target login data, and the preset decryption key is associated with the unique identifier of the target information business system, the user account and the encryption time information of the signature original, and the target login data includes at least a unique identifier, account information, password information and login object information.

[0125] In one embodiment, the login module 40 is also used to call the first driver program based on the unique identifier to start the login page corresponding to the unique identifier, and the login page is a display page corresponding to the target information business system pointed to by the unique identifier; the login page is filled in according to the account information, password information and login object information to log in to the target information business system.

[0126] In one embodiment, the reading module 10 is also used to register the system name and unique identifier of the target information business system in the electrically connected external password module; call the second driver to start the registration page corresponding to the registered target information business system; scan the registration page in real time, and count the login object information, user account and user password of each input box in the registration page; store the system name, the unique identifier, the login object information, the user account and the user password in correspondence to the electrically connected external password module.

[0127] In one embodiment, the reading module 10 is further used to encrypt the user password by a first encryption method to obtain a password ciphertext; integrate the system name, the unique identifier, the login object information, the user account and the password ciphertext to obtain a target data field table; digitally sign the target data field table by a second encryption method to obtain a signature value; and store the target data field table and the signature value correspondingly in the electrically connected external password module.

[0128] In one embodiment, the reading module 10 is further used to generate an initial vector of preset length bytes through a preset function based on the unique identifier, the user account and the current time information; encrypt the user password according to the initial vector and the preset key to obtain a password ciphertext, and the byte length of the preset key is the same as the byte length of the initial vector.

[0129] In one embodiment, it also includes a modification module 10, which is used to call a third driver program according to the password modification instruction to start the password modification page when receiving the password modification instruction of the target information business system; scan the input information of each input box in the password modification page, the input information at least including the user password, the modification password, the login object information and the modification object information; obtain at least one of the modification password, the modification unique identifier, and the modification object information; update the target data field table for at least one of the modification password, the modification unique identifier, and the modification object information; digitally sign the updated target data field table through the second encryption method to obtain the target signature value; and store the updated target data field table and the target signature value in correspondence to the electrically connected external password module.

[0130] The present application provides an account password management device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the account password management method in the above-mentioned embodiment 1.

[0131] The account password management device provided by the present application adopts the account password management method in the above embodiment, which can solve the technical problem of account password management. Compared with the prior art, the beneficial effects of the account password management device provided by the present application are the same as the beneficial effects of the account password management method provided by the above embodiment, and the other technical features in the account password management device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0132] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0133] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0134] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the account password management method in the above-mentioned embodiment.

[0135] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0136] The computer-readable storage medium may be included in the account and password management device; or may exist independently without being assembled into the account and password management device.

[0137] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the account and password management device, the account and password management device performs account and password management.

[0138] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0139] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0140] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0141] The readable storage medium provided in this application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned account password management method, and can solve the technical problems of account password management. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the account password management method provided in the above-mentioned embodiment, and will not be repeated here.

[0142] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned account password management method when executed by a processor.

[0143] The computer program product provided by this application can solve the technical problem of account password management. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the account password management method provided by the above embodiment, which will not be repeated here.

[0144] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A method for managing account passwords, characterized in that: The account password management method comprises: When receiving a login instruction of a target information service system, reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction; Parsing the information service data to obtain signature data; Decrypt the signature data to obtain target login data; Log into the target information service system according to the target login data.

2. The method according to claim 1, characterized in that The signature data includes the signature original text and the signature value; The decrypting the signature data to obtain target login data includes: Performing data verification on the original signature and the signature value according to a preset signature public key; When the verification is successful, the target field in the signature original is decrypted based on a preset decryption key through a preset decryption method to obtain the target login data. The preset decryption key is associated with the unique identifier of the target information business system, the user account and the encryption time information of the signature original. The target login data includes at least a unique identifier, account information, password information and login object information.

3. The method according to claim 1, characterized in that The step of logging into the target information service system according to the target login data comprises: Calling a first driver based on the unique identifier to start a login page corresponding to the unique identifier, wherein the login page is a display page corresponding to the target information service system pointed to by the unique identifier; The login page is filled in according to the account information, password information and login object information to log in to the target information service system.

4. The method according to claim 1, characterized in that When receiving a login instruction of the target information service system, before reading information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction, the method further includes: Registering the system name and unique identifier of the target information service system in the electrically connected external password module; Calling a second driver to start a registration page corresponding to the registration target information service system; Scan the registration page in real time and count the login object information, user account and user password of each input box in the registration page; The system name, the unique identifier, the login object information, the user account and the user password are correspondingly stored in the electrically connected external password module.

5. The method according to claim 4, characterized in that The corresponding storage of the system name, the unique identifier, the login object information, the user account and the user password in the electrically connected external password module includes: Encrypting the user password by a first encryption method to obtain a password ciphertext; Integrate the system name, the unique identifier, the login object information, the user account and the password ciphertext to obtain a target data field table; Digitally signing the target data field table by a second encryption method to obtain a signature value; The target data field table and the signature value are correspondingly stored in the electrically connected external password module.

6. The method according to claim 5, characterized in that The step of encrypting the user password by a first encryption method to obtain a password ciphertext includes: Generate an initial vector of preset length bytes through a preset function based on the unique identifier, the user account and the current time information; The user password is encrypted according to the initial vector and a preset key to obtain a password ciphertext, wherein the byte length of the preset key is the same as the byte length of the initial vector.

7. The method according to claim 1, characterized in that The account password management method further includes: When receiving a password modification instruction from the target information service system, calling a third driver according to the password modification instruction to start a password modification page; Scan the input information of each input box in the password modification page, wherein the input information at least includes the user password, the modification password, the login object information and the modification object information; Obtain at least one of a modification password, a modification unique identifier, and modification object information; Updating the target data field table for at least one of the modification password, modification unique identifier, and modification object information; Digitally sign the updated target data field table by using a second encryption method to obtain a target signature value; The updated target data field table and the target signature value are correspondingly stored in the electrically connected external password module.

8. An account password management device, characterized in that: The account password management device comprises: A reading module, configured to read information service data corresponding to the target information service system from an electrically connected external password module according to the login instruction when receiving the login instruction of the target information service system; A parsing module, used for parsing the information service data to obtain signature data; A decryption module, used to decrypt the signature data to obtain target login data; A login module is used to log in to the target information service system according to the target login data.

9. An account password management device, characterized in that: The account password management device includes: a memory, a processor, and an account password management program stored in the memory and executable on the processor, wherein the account password management program is configured to implement the steps of the account password management method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium stores an account password management program, and when the account password management program is executed by the processor, the steps of the account password management method according to any one of claims 1 to 7 are implemented.

Images