Password use and access method, password management device and security chip

Abstract

The invention relates to the technical field of security chip software development, and discloses a password using and accessing method, a password management device and a security chip, the security chip comprises a password accessing module and a password using module which are connected with each other, and the password using method is applied to the password using module. Comprising the following steps: acquiring a user identifier, a password identifier and a password address sent by a password access module; verifying the legality of the user according to the user identifier, the password identifier and the password address; after the legality verification of the user is passed, performing a cryptographic algorithm calculation operation according to the password address, and updating the password identifier; and sending the updated password identifier to the user, so that the user can verify the use record of the password according to the updated password identifier. According to the method and the device, the bidirectional authentication between the user and the password can be realized, so that the possibility that the password is illegally used is reduced, the difficulty that an attacker illegally obtains the password is increased, and the password use safety is improved.

Description

Technical Field

[0001] The present application relates to the technical field of security chip software development, for example, to a password usage and access method, a password management device and a security chip. Background Art

[0002] At present, embedded security chips are widely used in many fields such as smart cards, mobile devices, and vehicle systems. Security chips based on password management and use technology have become an important part of information security protection in modern society. In the implementation of security chips, passwords are one of the most important security assets in security chips and are the focus of chip security protection. With the continuous evolution of attack methods against security chips, the protection technology of security chips also needs to be continuously improved.

[0003] In the related art, user identity verification and password usage in the password management system are handled separately. User identity verification is usually performed at the system login stage, while password usage is performed at the subsequent data processing or resource access stage. The two processes are separated in time and logic.

[0004] In the process of implementing the embodiments of the present disclosure, it is found that there are at least the following problems in the related art:

[0005] Separate the user's identity verification and password usage. Since there is no mutual identity legitimacy check between the password and the user, if an attacker obtains the user's login credentials, they can access and use the password without further verification.

[0006] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present application, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field. Summary of the invention

[0007] In order to provide a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. The summary is not an extensive review, nor is it intended to identify key / critical components or delineate the scope of protection of these embodiments, but rather serves as a prelude to the detailed description that follows.

[0008] The disclosed embodiments provide a password usage and access method, a password management device, and a security chip, which improve the security of password usage through two-way authentication between users and passwords.

[0009] In some embodiments, the security chip includes: a password access module, which is disposed in the security chip; and a password usage module, which is disposed in the security chip and connected to the password access module.

[0010] In some embodiments, a password usage method is applied to a password usage module, including: obtaining a user identifier, a password identifier, and a password address sent by a password access module; verifying the legitimacy of the user based on the user identifier, the password identifier, and the password address; after the legitimacy of the user is verified, performing a password algorithm calculation operation based on the password address and updating the password identifier; sending the updated password identifier to the user so that the user can verify the password usage record based on the updated password identifier.

[0011] Optionally, the legitimacy of the user is verified based on the user identifier, password identifier and password address, including: based on the password address, searching for a password counter corresponding to the password address in a password table; wherein the password table includes multiple sets of corresponding password addresses and password counters; based on a preset calculation algorithm, calculating a check value based on the user identifier and the password counter; when the check value is consistent with the password identifier, confirming that the legitimacy verification of the user has passed.

[0012] Optionally, performing a cryptographic algorithm calculation operation according to the cryptographic address includes: obtaining a cryptographic algorithm key stored in the cryptographic address; performing a cryptographic algorithm calculation according to the cryptographic algorithm key to obtain a calculation result.

[0013] Optionally, updating the password identifier includes: after the password algorithm calculation operation is completed, updating the password counter and writing the updated password counter into the password table; based on a preset calculation algorithm, calculating the updated password identifier according to the updated password counter and the user identifier.

[0014] Optionally, the password usage method further includes: after updating the password identifier, sending the updated password identifier to the password access module.

[0015] In some embodiments, the password access method is applied to a password access module, including: obtaining a user identifier and a password identifier; determining a password address based on the user identifier and the password identifier; and sending the user identifier, the password identifier and the password address to a password usage module.

[0016] Optionally, determining the password address according to the user identifier and the password identifier includes: searching for the password address corresponding to the user identifier and the password identifier in a user table according to the user identifier and the password identifier; wherein the user table includes multiple groups of corresponding user identifiers, password identifiers and password addresses.

[0017] Optionally, the password access method further includes: acquiring an updated password identifier sent by the password usage module; and updating the user table according to the updated password identifier.

[0018] In some embodiments, the password management device includes a processor and a memory storing program instructions, and the processor is configured to execute the password usage method or the password access method as described above when running the program instructions.

[0019] Optionally, the security chip further includes: a password management device as described above, which is arranged in the security chip and is connected to the password access module and the password use module respectively.

[0020] The password usage and access method, password management device, and security chip provided in the embodiments of the present disclosure can achieve the following technical effects:

[0021] In the disclosed embodiment, a password access module and a password use module are provided in the security chip, and the password use module can obtain a user identifier, a password identifier and a password address through the password access module. In the password use module, the legitimacy of the user can be verified according to the user identifier, the password identifier and the password address, thereby realizing the security authentication of the user identity by the password use module. Then, the password algorithm calculation operation is completed according to the password address, and the password identifier is updated. The password use module can also send the updated password identifier to the user, and the user can verify the password usage record according to the updated password identifier, thereby realizing the security authentication of the user to the password use module. Therefore, in the disclosed embodiment, two-way authentication between the user and the password can be realized, which not only realizes the verification of the user identity by the password, but also the user can verify the legitimacy of the password, thereby reducing the possibility of the password being used illegally, and increasing the difficulty for the attacker to illegally obtain the password, thereby improving the security of the password use.

[0022] The above general description and the following description are exemplary and explanatory only and are not intended to limit the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] One or more embodiments are exemplarily described by corresponding drawings, which do not limit the embodiments. Elements with the same reference numerals in the drawings are shown as similar elements, and the drawings do not constitute a scale limitation, and wherein:

[0024] Figure 1 is a schematic diagram of the structure of a security chip provided by an embodiment of the present disclosure;

[0025] Figure 2 is a schematic diagram of a user table of a password access module in a security chip provided by an embodiment of the present disclosure;

[0026] Figure 3 is a schematic diagram of a password table of a password usage module in a security chip provided by an embodiment of the present disclosure;

[0027] Figure 4 is a schematic diagram of a password usage method provided by an embodiment of the present disclosure;

[0028] Figure 5 is a schematic diagram of a password access method provided by an embodiment of the present disclosure;

[0029] Figure 6 is a schematic diagram of another password usage method provided by an embodiment of the present disclosure;

[0030] Figure 7 It is a schematic diagram of a password management device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0031] In order to be able to understand the features and technical contents of the embodiments of the present disclosure in more detail, the implementation of the embodiments of the present disclosure is described in detail below in conjunction with the accompanying drawings. The attached drawings are for reference only and are not used to limit the embodiments of the present disclosure. In the following technical description, for the convenience of explanation, a full understanding of the disclosed embodiments is provided through multiple details. However, one or more embodiments can still be implemented without these details. In other cases, to simplify the drawings, well-known structures and devices can be simplified for display.

[0032] The terms "first", "second", etc. in the technical solutions described in this application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so as to describe the embodiments of the disclosed embodiments described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions.

[0033] Unless otherwise stated, the term "plurality" means two or more.

[0034] In the embodiment of the present disclosure, the character " / " indicates that the preceding and following objects are in an "or" relationship. For example, A / B indicates: A or B.

[0035] The term "and / or" is a description of the association relationship between objects, indicating that three relationships can exist. For example, A and / or B means: A or B, or, A and B.

[0036] The term "correspondence" may refer to an association relationship or a binding relationship. The correspondence between A and B means that there is an association relationship or a binding relationship between A and B.

[0037] Combination Figure 1 As shown, the embodiment of the present disclosure provides a security chip 1, including a password access module 10 and a password use module 20. The password access module 10 and the password use module 20 are both arranged in the security chip 1 and connected to each other.

[0038] The password access module 10 and the password use module 20 are two core components in the security chip 1. Through these two components, two-way authentication of users and passwords of the password management system in the security chip 1 can be realized. Among them, the password access module 10 is responsible for processing the user's access request for the password, and the password use module 20 is responsible for using the found password to perform the actual password algorithm operation and perform two-way authentication of the user and the password.

[0039] Optionally, combined Figure 2 As shown, the password access module includes a user table, and the user table includes multiple sets of corresponding user identifiers, password identifiers and password addresses.

[0040] In the password access module, a user table is maintained, which is a mapping data table. According to the mapping relationship in the user table, the password access module can determine the corresponding password address according to the user identifier and the password identifier. Among them, the user identifier is 2 bytes, representing the unique identity of the user, and remains unchanged; the password identifier is 4 bytes, representing the unique identity of the password, and it changes every time it is accessed; the password address represents the address where the key value of the password algorithm is stored in the password usage module.

[0041] Optionally, combined Figure 3 As shown, the password usage module includes a password table, and the password table includes multiple groups of corresponding password addresses and password counters.

[0042] In the password usage module, a password table is maintained, which is a mapping data table. According to the mapping relationship in the password table, the password usage module can determine the corresponding password counter according to the password address sent by the password access module. Among them, the password counter is a 4-byte number used to reflect the number of times the password has been used.

[0043] Combination Figure 4 As shown, the embodiment of the present disclosure provides a password usage method, which is applied to a password usage module, including:

[0044] S001, the password use module obtains the user identifier, password identifier and password address sent by the password access module.

[0045] S002, the password usage module verifies the legitimacy of the user based on the user identifier, password identifier and password address.

[0046] S003, after the user's legitimacy is verified, the password usage module performs a password algorithm calculation operation according to the password address and updates the password identifier.

[0047] S004, the password usage module sends the updated password identifier to the user, so that the user can verify the password usage record according to the updated password identifier.

[0048] Through the password access module, the password use module can obtain the user identifier, password identifier and password address. In the password use module, the legitimacy of the user can be verified according to the user identifier, password identifier and password address, so as to realize the security authentication of the user identity by the password use module. Then the password algorithm calculation operation is completed according to the password address, and the password identifier is updated. The password use module can also send the updated password identifier to the user, and the user can use the pre-stored password counter to calculate the verification password identifier, and compare the verification password identifier with the updated password identifier, so as to verify the use record of the password, so as to realize the security authentication of the user to the password use module. Therefore, in the disclosed embodiment, two-way authentication between the user and the password can be realized, which not only realizes the verification of the user identity by the password, but also the user can verify the legitimacy of the password, so as to reduce the possibility of the password being illegally used, and increase the difficulty for the attacker to illegally obtain the password, thereby improving the security of the password use. In addition, the updated password identifier is sent to the user, and the user can use the updated password identifier for the next password use.

[0049] Optionally, the legitimacy of the user is verified based on the user identifier, password identifier and password address, including: based on the password address, searching for a password counter corresponding to the password address in a password table; wherein the password table includes multiple sets of corresponding password addresses and password counters; based on a preset calculation algorithm, calculating a check value based on the user identifier and the password counter; when the check value is consistent with the password identifier, confirming that the legitimacy verification of the user has passed.

[0050] In this embodiment, the password usage module can first determine the password counter corresponding to the password address in the password table. The password counter reflects the number of times the password is used. Therefore, it is necessary to check whether the password counter reaches the number limit to determine whether the number of times the password is used does not exceed the set maximum number of times. Then, a check value is calculated based on the password counter and the user identifier through a preset calculation algorithm, and the check value is compared with the password identifier to confirm the legitimacy of the user identity. In addition, the password usage module can also verify the integrity of the password through the user identifier and the password identifier.

[0051] Optionally, the preset calculation algorithm includes a CRC32 (Cyclic Redundancy Check 32-bit, 32-bit cyclic redundancy check) algorithm.

[0052] In the CRC32 algorithm, a 32-bit check value can be generated. In the embodiment of the present disclosure, the check value can be calculated based on the user identifier and the password counter through the CRC32 algorithm. For example, the user identifier is 0001, the password counter is 00000001, and after splicing and calculating CRC32, the check value FBA5B885 can be obtained. The check value is compared with the password identifier. If the check value is consistent with the password identifier, it means that the user's legitimacy verification has passed.

[0053] Optionally, performing a cryptographic algorithm calculation operation according to the cryptographic address includes: obtaining a cryptographic algorithm key stored in the cryptographic address; performing a cryptographic algorithm calculation according to the cryptographic algorithm key to obtain a calculation result.

[0054] In this embodiment, the password address represents the address where the password algorithm key is stored in the password usage module. After the legitimacy of the user identity is verified, the password usage module can use the password algorithm key stored in the password address to perform password algorithm calculations, such as encryption, decryption or other cryptographic operations.

[0055] Optionally, the cryptographic algorithm key in the cryptographic address includes a symmetric or asymmetric key that conforms to a common cryptographic algorithm, such as DES (Data Encryption Standard), AES (Advanced Encryption Standard), RSA (RSA encryption algorithm), ECC (Elliptic Curve Cryptography), SM2 (SM2 elliptic curve public key cryptography algorithm), SM4 (national commercial encryption algorithm) and other algorithms' key values ​​and components.

[0056] Optionally, updating the password identifier includes: after the password algorithm calculation operation is completed, updating the password counter and writing the updated password counter into the password table; based on a preset calculation algorithm, calculating the updated password identifier according to the updated password counter and the user identifier.

[0057] In this embodiment, after the password algorithm calculation operation is completed, the password counter is updated to record that the password has been used. For example, the original password counter 00000001 is updated to 00000002. The updated password counter is written into the password table, overwriting the original password counter to record the number of times the password is used. Then, the updated password counter 00000002 is concatenated with the user identifier 0001 through the CRC32 algorithm, and the CRC32 is calculated to obtain the updated password identifier 62AC393F.

[0058] Optionally, the password usage method further includes: after updating the password identifier, sending the updated password identifier to the password access module.

[0059] After the password identifier is updated in the password use module, the updated password identifier needs to be sent to the password access module for updating the user table in the password access module to ensure the correctness of the password the next time it is used.

[0060] Combination Figure 5 As shown, the embodiment of the present disclosure provides a password access method, which is applied to a password access module, including:

[0061] S101, a password access module obtains a user identifier and a password identifier.

[0062] S102, the password access module determines the password address according to the user identifier and the password identifier.

[0063] S103, the password access module sends the user identifier, password identifier and password address to the password use module.

[0064] The password access module can receive the user identifier and password identifier input by the user to identify and verify the identity of the user. Based on the user identifier and password identifier, the password access module can also determine the corresponding password address. The password address points to the location where the password algorithm key is stored in the password usage module. After finding a valid password address, the password access module passes the user identifier, password identifier and password address to the password usage module for further processing.

[0065] Optionally, determining the password address according to the user identifier and the password identifier includes: searching for the password address corresponding to the user identifier and the password identifier in a user table according to the user identifier and the password identifier; wherein the user table includes multiple groups of corresponding user identifiers, password identifiers and password addresses.

[0066] In the user table, the password address can be quickly determined according to the mapping relationship between the user identifier, the password identifier and the password address, according to the user identifier and the password identifier. For example, the password access module can determine the corresponding password address in the user table according to the input user identifier 0001 and the password identifier FBA5B885.

[0067] Optionally, the password access method further includes: acquiring an updated password identifier sent by the password usage module; and updating the user table according to the updated password identifier.

[0068] After updating the password identifier, the password usage module will send the updated password identifier to the customer. The user will use the updated password identifier the next time they use the password. Therefore, the password access module also needs to synchronously update the password identifier in the user table to ensure that the password address can be correctly found during the next password use.

[0069] Combination Figure 6 , the present disclosure embodiment provides another password using method, including:

[0070] S201, the password access module obtains a user identifier and a password identifier.

[0071] S202: The password access module determines the password address according to the user identifier and the password identifier.

[0072] S203, the password access module sends the user identifier, password identifier and password address to the password use module.

[0073] S204, the password usage module verifies the legitimacy of the user based on the user identifier, password identifier and password address.

[0074] S205, after the user's legitimacy verification is passed, the password usage module performs a password algorithm calculation operation according to the password address and updates the password identifier.

[0075] S206, the password usage module sends the updated password identifier to the user, so that the user can verify the password usage record according to the updated password identifier.

[0076] S207, the password use module sends the updated password identifier to the password access module.

[0077] S208: The password access module updates the user table according to the updated password identifier.

[0078] In the disclosed embodiments, based on the function of realizing cryptographic algorithm calculation, it not only allows passwords to authenticate the legitimacy of users and avoid user identity hijacking, but also allows users to check records of illegal password usage, thereby realizing two-way verification of users and passwords, ensuring the legitimacy of the identities of both users and passwords, increasing the difficulty of attacks such as illegal use of passwords after identity usurpation, and improving the security of the overall system.

[0079] Combination Figure 7As shown, the embodiment of the present disclosure provides a device 300 for password management, including a processor 400 and a memory 401. Optionally, the device may also include a communication interface 402 and a bus 403. The processor 400, the communication interface 402, and the memory 401 may communicate with each other through the bus 403. The communication interface 402 may be used for information transmission. The processor 400 may call the logic instructions in the memory 401 to execute the password usage method or the password access method of the above embodiment.

[0080] In addition, the logic instructions in the memory 401 described above may be implemented in the form of software functional units and when sold or used as independent products, may be stored in a computer-readable storage medium.

[0081] The memory 401 is a computer-readable storage medium that can be used to store software programs, computer executable programs, such as program instructions / modules corresponding to the methods in the embodiments of the present disclosure. The processor 400 executes the functional application and data processing by running the program instructions / modules stored in the memory 401, that is, implementing the password usage method or the password access method in the above embodiments.

[0082] The memory 401 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function; the data storage area may store data created according to the use of the terminal device, etc. In addition, the memory 401 may include a high-speed random access memory and may also include a non-volatile memory.

[0083] The security chip provided by the embodiment of the present disclosure also includes: the above-mentioned password management device. The password management device is arranged in the security chip, and is respectively connected to the password access module and the password usage module. The password management device is installed in the security chip. The installation relationship described here is not limited to placement inside the security chip, but also includes installation connections with other components of the security chip, including but not limited to physical connections, electrical connections or signal transmission connections, etc. Those skilled in the art can understand that the password management device can be adapted to a feasible security chip body, thereby realizing other feasible embodiments.

[0084] An embodiment of the present disclosure provides a computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured to execute the above-mentioned password usage method or password access method.

[0085] The technical solution of the embodiment of the present disclosure can be embodied in the form of a software product, which is stored in a storage medium and includes one or more instructions for enabling a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in the embodiment of the present disclosure. The aforementioned storage medium may be a non-transient storage medium, including: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0086] The above description and accompanying drawings fully illustrate the embodiments of the present disclosure so that those skilled in the art can practice them. Other embodiments may include structural, logical, electrical, process and other changes. The embodiments represent possible changes only. Unless explicitly required, separate components and functions are optional, and the order of operation may vary. The parts and features of some embodiments may be included in or replace the parts and features of other embodiments. Moreover, the words used in this application are only used to describe the embodiments and are not used to limit the technical solutions recorded in this application. As used in the technical solutions recorded in this application, unless the context clearly indicates, the singular forms of "a", "an" and "the" are intended to include plural forms as well. Similarly, the term "and / or" as used in this application refers to any and all possible combinations of listings containing one or more associated ones. In addition, when used in the present application, the term "comprise" and its variants "comprises" and / or comprising refer to the presence of stated features, wholes, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or groups thereof. In the absence of further restrictions, the elements defined by the sentence "comprising a ..." do not exclude the presence of other identical elements in the process, method or device comprising the elements. In this article, each embodiment may focus on the differences from other embodiments, and the same and similar parts between the various embodiments may refer to each other. For the methods, products, etc. disclosed in the embodiments, if they correspond to the method part disclosed in the embodiments, then the relevant parts can refer to the description of the method part.

[0087] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software may depend on the specific application and design constraints of the technical solution. The technicians may use different methods for each specific application to implement the described functions, but such implementations should not be considered to exceed the scope of the embodiments of the present disclosure. The technicians may clearly understand that, for the convenience and simplicity of description, the specific working processes of the systems, devices and units described above may refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here.

[0088] In the embodiments disclosed herein, the disclosed methods and products (including but not limited to devices, equipment, etc.) can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units can be only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between each other shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms. The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to implement this embodiment. In addition, each functional unit in the embodiment of the present disclosure may be integrated in a processing unit, or each unit may exist physically alone, or two or more units may be integrated in one unit.

[0089] The flowchart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system, method and computer program product according to the embodiment of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of the code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. In the description corresponding to the flowchart and the block diagram in the accompanying drawings, the operations or steps corresponding to different boxes can also occur in a different order from the order disclosed in the description, and sometimes there is no specific order between different operations or steps. For example, two consecutive operations or steps can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. Each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented by a dedicated hardware-based system that performs the specified functions or actions, or may be implemented by a combination of dedicated hardware and computer instructions.

Claims

1. A password usage method, characterized in that: Applied to the password usage module, the password usage module is set in the security chip, the security chip also includes a password access module, the password access module is connected to the password usage module, and the password usage method includes: Obtaining the user identifier, password identifier and password address sent by the password access module; Verify the legitimacy of the user based on the user identifier, password identifier and password address; After the user's legitimacy is verified, the password algorithm calculation operation is performed according to the password address, and the password identifier is updated; The updated password identifier is sent to the user so that the user can verify the password usage record according to the updated password identifier.

2. The password usage method according to claim 1, characterized in that: Verify the legitimacy of the user based on the user identifier, password identifier, and password address, including: According to the password address, searching the password counter corresponding to the password address in the password table; wherein the password table includes multiple sets of corresponding password addresses and password counters; Calculate the check value based on the user identifier and the password counter based on a preset calculation algorithm; When the check value is consistent with the password identifier, it is confirmed that the user's legitimacy verification has passed.

3. The password usage method according to claim 1, characterized in that: Perform cryptographic algorithm calculation operations based on the cryptographic address, including: Get the cryptographic algorithm key stored at the cryptographic address; Perform cryptographic algorithm calculation according to the cryptographic algorithm key to obtain a calculation result.

4. The password usage method according to claim 2, characterized in that: Update password identifiers, including: After the password algorithm calculation operation is completed, the password counter is updated and the updated password counter is written into the password table; Based on a preset calculation algorithm, an updated password identifier is calculated according to the updated password counter and the user identifier.

5. The password using method according to any one of claims 1 to 4, characterized in that: Also includes: After the password identifier is updated, the updated password identifier is sent to the password access module.

6. A password access method, characterized in that: Applied to the password access module, the password access module is set in the security chip, the security chip also includes a password use module, the password use module is connected to the password access module, and the password access method includes: Get user identifier and password identifier; Determining a password address based on the user identifier and the password identifier; The user identifier, password identifier and password address are sent to the password usage module.

7. The password access method according to claim 6, characterized in that: Based on the user identifier and the password identifier, determine the password address, including: According to the user identifier and the password identifier, the password address corresponding to the user identifier and the password identifier is searched in the user table; wherein the user table includes a plurality of sets of corresponding user identifiers, password identifiers and password addresses.

8. The password access method according to claim 7, characterized in that: Also includes: Get the updated password identifier sent by the password usage module; The user table is updated according to the updated password identifier.

9. A password management device, comprising a processor and a memory storing program instructions, characterized in that: The processor is configured to execute the password usage method according to any one of claims 1 to 5, or the password access method according to any one of claims 6 to 8 when running the program instructions.

10. A security chip, characterized in that: include: A password access module is provided in the security chip; A password use module is provided in the security chip and is connected to the password access module; The password management device as described in claim 9 is arranged in a security chip and is connected to the password access module and the password use module respectively.

Images