Information security and data security authentication and evaluation system and method

Abstract

The invention relates to the technical field of security authentication, and discloses an information security and data security authentication and evaluation system and method, and the method comprises the steps: a user sets a password through a password setting module, and judges the security of the password; judging whether the initial password is the same as the password in the existing password set or not through a first strategy, and if yes, prompting the user to reset the password; if not, the similarity of the passwords is judged through a second strategy, and the security of the passwords is further ensured; the identity verification module is used for judging whether the user has the right to access information and data in the database or not, and judging whether a password input by the user is matched with or similar to a password stored in the database or not by adopting a third strategy; according to the method, the levels of password management and data security protection are effectively improved, and the security in the information storage and access process is ensured.

Description

Technical Field

[0001] The present invention relates to the field of security authentication technology, and in particular to an information security and data security authentication and evaluation system and method. Background Art

[0002] With the rapid development of information technology and the increasing amount of data storage, how to ensure the security and privacy of data has become a major challenge in modern society; one of the core issues of information security and data security is how to protect user information stored in the database from being accessed by unauthorized users, especially when using traditional password-based authentication methods, how to prevent security risks such as password leakage, guessing, and brute force cracking.

[0003] Passwords are the most common way of identity authentication. Although they are convenient, they also have many potential security risks. In order to improve the security of passwords, password similarity analysis has become a research hotspot in recent years. By judging the similarity between different passwords, weak passwords and easily guessed passwords can be effectively identified. However, the existing technology does not determine the similarity of passwords and judge the security of passwords based on the numeric keypad layout of the input interface during the password setting stage. If only one number in the same position of two passwords is different, and the two numbers are adjacent on the numeric keypad, and the numbers in all other positions are the same, when entering a password, the user may enter the password of another user due to an accidental touch, and then search for information stored by other users, thereby increasing the risk of information leakage.

[0004] In summary, there is an urgent need for an information security and data security authentication and evaluation system and method to improve the security of information and data storage. Summary of the invention

[0005] The present invention provides an information security and data security authentication and evaluation system and method, which promotes solving the problems mentioned in the above background technology.

[0006] The present invention provides the following technical solution: an information security and data security authentication and evaluation system and method, comprising: The user sets the password through the password setting module; The password is used to determine whether the user has the authority to search for information and data in the database. The password consists of numbers, and the minimum number of digits for the password is 6 and the maximum number of digits is 15; The database is used to store user information and data. The database is composed of multiple sub-databases. Each sub-database is used to store one user's information and data. One sub-database corresponds to one password. The passwords corresponding to all sub-databases in the database are different. The passwords corresponding to all sub-databases in the database constitute the existing password set; Get the password set by the user through the password setting module and record it as the initial password; Determine whether the initial password is the same as the password in the password set according to the first strategy; If the initial password is the same as the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. If the initial password is different from the password in the password set, then judging whether the initial password is similar to the password in the password set according to the second strategy; If the initial password is not similar to the password in the password set; The user is prompted to enter the set password again; If the passwords entered twice are the same, the user will be prompted that the password has been set successfully; If the passwords entered twice are different, the user will be prompted to reset the password. If the initial password is similar to the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. When a user enters a password through the authentication module to query information and data stored in the database; It is determined according to the third strategy whether the user has the authority to search for information and data in the database.

[0007] Optionally, judging whether the initially set password is the same as a password in the password set according to the first strategy specifically includes: Get the number of digits of the initial password; Obtain passwords with the same number of digits as the initial password in the existing password set, and form a first identical set; The passwords whose first digit in the first identical set is the same as the first digit in the initial password constitute the second identical set, the passwords whose second digit in the second identical set is the same as the second digit in the initial password constitute the third identical set... The passwords whose N-1 digit in the N-1 th identical set is the same as the N-1 digit in the initial password constitute the Nth identical set, and the passwords whose N digit in the Nth identical set is the same as the N digit in the initial password constitute the N+1 th identical set; Where N refers to the number of digits of the initial password; If the N+1th identical set is an empty set, it is determined that the initial password is different from the password in the password set; If the N+1th identical set is not an empty set, it is determined that the initial password is the same as the password in the password set.

[0008] Optionally, if the initial password is different from the password in the password set, determining whether the initial password is similar to the password in the password set according to the second strategy specifically includes: The input interface of the password setting module is specifically a grid of four rows and three columns, wherein the first row and the first column is an input port for number 1, the first row and the second column is an input port for number 2, the first row and the third column is an input port for number 3, the second row and the first column is an input port for number 4, the second row and the second column is an input port for number 5, the second row and the third column is an input port for number 6, the third row and the first column is an input port for number 7, the third row and the second column is an input port for number 8, the third row and the third column is an input port for number 9, the fourth row and the first column is an input port for deletion, the fourth row and the second column is an input port for number 0, and the fourth row and the third column is an input port for confirmation; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to the number 1 are 2 and 4; similar numbers to the number 2 are 1, 3 and 5; similar numbers to the number 3 are 2 and 6; similar numbers to the number 4 are 1, 5 and 7; similar numbers to the number 5 are 2, 4, 6 and 8; similar numbers to the number 6 are 3, 5 and 9; similar numbers to the number 7 are 4 and 8; similar numbers to the number 8 are 5, 7, 9 and 0; similar numbers to the number 9 are 6 and 8; similar numbers to the number 0 is 8.

[0009] Optionally, if the initial password is different from the password in the password set, determining whether the initial password is similar to the password in the password set according to the second strategy further includes: Get the number of digits of the initial password, recorded as the number of digits of the password; Setting a similarity ratio threshold, wherein the similarity ratio threshold is used to determine whether the initial password is similar to the password in the password set; Calculate the number of password digits × the similarity ratio threshold, take the integer part of the result and add 1, and record it as the number of similarity digits; Calculate the number of password digits minus the number of similar digits, and record the result as the number of dissimilar digits; Obtain passwords with the same number of digits as the password in the existing password set, and form a first similar set; For each password in the first similarity set, compare the digits at each position of the password with the digits at the same position of the initial password to determine whether they are the same; The passwords in the first similar set whose positions have the same digits as the initial password and whose number of positions is greater than or equal to the number of dissimilar digits constitute the second similar set; If the number of passwords in the second similar set is 0, it is determined that the initial password is not similar to the passwords in the password set; If the number of passwords in the second similar set is not 0, for each password in the second similar set, obtain the position where the number is the same as the initial password but different from the position where the number is different, and record it as the target position; For each target position, determine whether the number at the target position is similar to the number at the same position in the initial password; In the second similarity set, if there exists a password in which the numbers at each target position are similar to the numbers at the same position of the initial password, then the initial password is deemed to be similar to the passwords in the password set; In the second similarity set, if there is no password in which the numbers at each target position are similar to the numbers at the same position of the initial password, it is determined that the initial password is not similar to the passwords in the password set.

[0010] Optionally, judging whether the user has the authority to search for information and data in the database according to the third policy specifically includes: The input interface of the identity authentication module is specifically a grid of four rows and three columns, wherein the first row and the first column is an input port for number 1, the first row and the second column is an input port for number 2, the first row and the third column is an input port for number 3, the second row and the first column is an input port for number 4, the second row and the second column is an input port for number 5, the second row and the third column is an input port for number 6, the third row and the first column is an input port for number 7, the third row and the second column is an input port for number 8, the third row and the third column is an input port for number 9, the fourth row and the first column is an input port for deletion, the fourth row and the second column is an input port for number 0, and the fourth row and the third column is an input port for confirmation; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to the number 1 are 2 and 4; similar numbers to the number 2 are 1, 3 and 5; similar numbers to the number 3 are 2 and 6; similar numbers to the number 4 are 1, 5 and 7; similar numbers to the number 5 are 2, 4, 6 and 8; similar numbers to the number 6 are 3, 5 and 9; similar numbers to the number 7 are 4 and 8; similar numbers to the number 8 are 5, 7, 9 and 0; similar numbers to the number 9 are 6 and 8; similar numbers to the number 0 is 8.

[0011] Optionally, judging whether the user has the authority to search for information and data in the database according to the third policy further includes: Get the password entered by the user and record it as the password to be verified; Get the number of digits of the password to be verified; Obtain passwords in the password set whose digits are the same as the digits of the password to be verified, and form a first set to be verified; The passwords whose first digit in the first set to be verified is the same as the first digit of the password to be verified constitute the second set to be verified, the passwords whose second digit in the second set to be verified is the same as the second digit of the password to be verified constitute the third set to be verified... The passwords whose X-1 digit in the X-1 set to be verified is the same as the X-1 digit of the password to be verified constitute the X set to be verified, and the passwords whose X digit in the X set to be verified is the same as the X digit of the password to be verified constitute the X+1 set to be verified; Where X refers to the number of digits of the password to be verified; If the X+1th set to be verified is not an empty set, it is determined that the user has the authority to search for information and data in the database.

[0012] Optionally, judging whether the user has the authority to search for information and data in the database according to the third policy further includes: If the X+1th set to be verified is an empty set; Get the number of digits of the password to be verified, recorded as the number of digits to be verified; Setting a verification ratio threshold, which is used to determine whether a user has the authority to search for information and data in the database; Calculate the number of digits to be verified × the verification ratio threshold, take the integer part of the result and add 1, and record it as the first digit; Calculate the number of digits to be verified minus the first digit, and record the result as the second digit; Obtain passwords with the same number of digits as the number to be verified in the existing password set, and form a first verification set; For each password in the first verification set, compare the digits at each position of the password with the digits at the same position of the password to be verified, and determine whether they are the same; The passwords in the first verification set whose positions have the same digits as the password to be verified and whose number of positions is greater than or equal to the second digit constitute the second verification set; If the number of passwords in the second verification set is 0, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked.

[0013] Optionally, judging whether the user has the authority to search for information and data in the database according to the third policy further includes: If the number of passwords in the second verification set is not 0; For each password in the second verification set, obtain the position where the number is different from the number in the same position of the password to be verified, and record it as the verification position; For each verification position, determine whether the number at the verification position is similar to the number at the same position of the password to be verified; In the second verification set, if there is no password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; In the second verification set, if there is a password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, the user is prompted that the password input is incorrect and is asked to re-enter the password; If the password entered by the user again is different from the password in the password set, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; If the password entered by the user again is the same as the password in the password collection, the user is deemed to have the authority to search for information and data in the database.

[0014] Optional, including: A database, which is used to store user information and data, and is composed of multiple sub-databases; A password setting module, the password setting module is used to set the password of the sub-database storing information and data in the database; An authentication module that verifies whether a user has the authority to find information and data in the database; The information processing module is used to determine whether the password input by the user is the same as or similar to the password in the password set.

[0015] The present invention has the following beneficial effects: 1. This information security and data security authentication and evaluation system and method requires that the minimum number of digits of the password be 6 and the maximum be 15 when setting the password, which effectively increases the complexity of the password combination, thereby increasing the difficulty of the password being cracked by brute force; according to the computational theory in cryptography, the longer the password is, the more difficult it is to crack it, so this strategy can effectively improve the system's protection capabilities; by setting the password to a 6- to 15-digit string, the system enhances security; short passwords are easy to guess or crack through brute force attacks, and overly long passwords affect the user experience; therefore, setting a reasonable length range not only improves security, but also maintains user operability. Limiting passwords to only numbers also simplifies the requirements for input devices and environments, but the challenge lies in how to ensure the complexity of digital passwords, which can be alleviated in part through subsequent similarity judgment strategies.

[0016] 2. This information security and data security authentication and evaluation system and method, in the password setting stage, by comparing the initial password with the passwords in the password set bit by bit, to determine whether the initial password is the same as the password in the password set. If each bit of the initial password is the same as each bit of a password in the password set, then it is determined that the initial password is repeated with the password in the password set, so the user is prompted to reset the password because the password set is low in security; by ensuring that the password of each sub-database is unique in the set, password conflicts between different users are avoided; this mechanism can prevent permission confusion and data leakage caused by repeated passwords, which is especially important in multi-user systems. Even if the password is leaked, attackers cannot access other users' data through known passwords.

[0017] 3. This information security and data security authentication and evaluation system and method, in the password setting stage, sets a similarity ratio threshold, then obtains the number of password digits, calculates the number of password digits × the similarity ratio threshold, rounds the result and adds 1, which is recorded as the number of similar digits, calculates the number of password digits - the number of similar digits, and records the result as the number of dissimilar digits. In the existing password set, it is determined whether there is a password in the existing password set with the same number of positions as the initial password, and the number of positions is greater than or equal to the number of dissimilar digits. If not, it means that the initial password is not similar to the passwords in the existing password set. If so, it is determined whether there is a password in the second similar set with the number in each target position similar to the number in the same position as the initial password. If so, it means that the initial password is similar to the password in the existing password set. By introducing a password similarity analysis mechanism, the passwords set by users are strictly screened. The system determines whether a password meets security standards based on the similarity between the characters and numbers in the password. In particular, in digital passwords, the similarity between numbers is used to identify passwords that are easy to guess. By comparing the similarity between the user's password and existing passwords in the database, potential weak passwords can be identified in a timely manner. For example, if the password set by the user is only slightly different from an existing password, the system will prompt that the password is unsafe and require a reset. This can effectively avoid the risks caused by users setting similar passwords.

[0018] 4. In this information security and data security authentication and evaluation system and method, in an input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar. In this way, numbers that are easily accidentally touched in the input interface can be listed as similar numbers. This method is the basis for judging password similarity.

[0019] 5. This information security and data security authentication and evaluation system and method, when a user enters a password through an identity authentication module to query information and data stored in a database, obtain the password entered by the user, record it as the password to be verified, obtain the number of digits of the password to be verified, first screen out passwords with the same number of digits as the password to be verified in the existing password set to form a first set to be verified, for each password in the first set to be verified, compare it with the password to be verified digit by digit, if there is a password with every digit being the same as the password to be verified, it means that the password entered by the user is a password in the password set, and the user has the right to search for information and data in the database, if there is no password with every digit being the same as the password to be verified, then obtain the number of digits to be verified, set a verification ratio threshold, calculate the number of digits to be verified × the verification ratio threshold, round the result and add 1, record it as the first digit, calculate the number of digits to be verified - the first digit, and record the result as the second digit; determine whether there is a number of positions in the first verification set with the same digits as the password to be verified, and the number is greater than or equal to the second digit. If the password does not exist, it means that the password to be verified is not similar to any password in the password set. At this time, it can be considered that the user does not know the password and just enters the password at random. It is determined that the user does not have the authority to search for information and data in the database, and the database is locked; if it exists, it is determined whether there is a password in the second verification set with numbers in each verification position similar to the numbers in the same position of the password to be verified; if it exists, it means that the password to be verified is similar to a password in the password set. At this time, it can be considered that the user knows the password. It may be due to factors such as accidental touch that the password is entered incorrectly, so the user is given another chance to enter the password. If the user enters the wrong password again, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked at the same time; if the password is entered correctly again, it is determined that the user has the authority to search for information and data in the database; the identity authentication process uses a multi-level strategy to determine whether the user has database access rights, combined with similarity judgment, it can effectively prevent unauthorized access. Even if the attacker can obtain part of the password information, it still needs to pass complex similarity verification, which increases the difficulty of the attack. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a schematic diagram of the process of the present invention.

[0021] Figure 2 Schematic diagram of the input interface of the password setting module of the present invention.

[0022] Figure 3 Schematic diagram of the input interface of the identity authentication module of the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] Example, see Figure 1-Figure 3 , an information security and data security authentication and evaluation system and method, comprising: The user sets the password through the password setting module; The password is used to determine whether the user has the authority to search for information and data in the database. The password consists of numbers, and the minimum number of digits for the password is 6 and the maximum number of digits is 15; This information security and data security authentication and assessment system and method requires that the minimum number of digits in the password be 6 and the maximum be 15 when setting the password, which effectively increases the complexity of the password combination, thereby increasing the difficulty of brute force cracking of the password; according to the computational theory in cryptography, the longer the password is, the more difficult it is to crack, so this strategy can effectively improve the system's protection capabilities; by setting the password to a 6- to 15-digit string, the system enhances security; short passwords are easy to guess or crack through brute force attacks, and passwords that are too long will affect the user experience; therefore, setting a reasonable length range not only improves security, but also maintains user operability. Limiting passwords to only numbers also simplifies the requirements for input devices and environments, but the challenge is how to ensure the complexity of digital passwords, which is partially alleviated through subsequent similarity judgment strategies; The database is used to store user information and data. The database is composed of multiple sub-databases. Each sub-database is used to store one user's information and data. One sub-database corresponds to one password. The passwords corresponding to all sub-databases in the database are different. The passwords corresponding to all sub-databases in the database constitute the existing password set; Get the password set by the user through the password setting module and record it as the initial password; Determine whether the initial password is the same as the password in the password set according to the first strategy; If the initial password is the same as the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. If the initial password is different from the password in the password set, then judging whether the initial password is similar to the password in the password set according to the second strategy; If the initial password is not similar to the password in the password set; The user is prompted to enter the set password again; If the passwords entered twice are the same, the user will be prompted that the password has been set successfully; If the passwords entered twice are different, the user will be prompted to reset the password. If the initial password is similar to the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. When a user enters a password through the authentication module to query information and data stored in the database; It is determined according to the third strategy whether the user has the authority to search for information and data in the database.

[0025] The determining, according to the first strategy, whether the initially set password is the same as a password in the password set specifically includes: Get the number of digits of the initial password; Obtain passwords with the same number of digits as the initial password in the existing password set, and form a first identical set; The passwords whose first digit in the first identical set is the same as the first digit in the initial password constitute the second identical set, the passwords whose second digit in the second identical set is the same as the second digit in the initial password constitute the third identical set... The passwords whose N-1 digit in the N-1 th identical set is the same as the N-1 digit in the initial password constitute the Nth identical set, and the passwords whose N digit in the Nth identical set is the same as the N digit in the initial password constitute the N+1 th identical set; Where N refers to the number of digits of the initial password; If the N+1th identical set is an empty set, it is determined that the initial password is different from the password in the password set; If the N+1th identical set is not an empty set, the initial password is determined to be the same as the password in the password set; the information security and data security authentication and evaluation system and method, in the password setting stage, by comparing the initial password with the password in the password set bit by bit, to determine whether the initial password is the same as the password in the password set, if each bit of the initial password is the same as each bit of a password in the password set, then the initial password is determined to be repeated with the password in the password set, so the user is prompted to reset the password because the password set is low in security; by ensuring that the password of each sub-database is unique in the set, password conflicts between different users are avoided; this mechanism can prevent permission confusion and data leakage caused by repeated passwords, which is especially important in multi-user systems. Even if the password is leaked, attackers cannot access other users' data through known passwords.

[0026] If the initial password is different from the password in the password set, determining whether the initial password is similar to the password in the password set according to the second strategy specifically includes: The input interface of the password setting module is specifically a grid of four rows and three columns, wherein the first row and the first column is the input port for number 1, the first row and the second column is the input port for number 2, the first row and the third column is the input port for number 3, the second row and the first column is the input port for number 4, the second row and the second column is the input port for number 5, the second row and the third column is the input port for number 6, the third row and the first column is the input port for number 7, the third row and the second column is the input port for number 8, the third row and the third column is the input port for number 9, the fourth row and the first column is the input port for deletion, the fourth row and the second column is the input port for number 0, and the fourth row and the third column is the input port for confirmation. For details, refer to Figure 2 ; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to number 1 are 2 and 4; similar numbers to number 2 are 1, 3 and 5; similar numbers to number 3 are 2 and 6; similar numbers to number 4 are 1, 5 and 7; similar numbers to number 5 are 2, 4, 6 and 8; similar numbers to number 6 are 3, 5 and 9; similar numbers to number 7 are 4 and 8; similar numbers to number 8 are 5, 7, 9 and 0; similar numbers to number 9 are 6 and 8; similar numbers to number 0 are 8; The information security and data security authentication and evaluation system and method, in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are identified as similar. In this way, the numbers that are easily touched by mistake in the input interface can be listed as similar numbers. This method is the basis for judging password similarity.

[0027] If the initial password is different from the password in the password set, judging whether the initial password is similar to the password in the password set according to the second strategy, further comprising: Get the number of digits of the initial password, recorded as the number of digits of the password; Setting a similarity ratio threshold, wherein the similarity ratio threshold is used to determine whether the initial password is similar to the password in the password set; Calculate the number of password digits × the similarity ratio threshold, take the integer part of the result and add 1, and record it as the number of similarity digits; Calculate the number of password digits minus the number of similar digits, and record the result as the number of dissimilar digits; Obtain passwords with the same number of digits as the password in the existing password set, and form a first similar set; For each password in the first similarity set, compare the digits at each position of the password with the digits at the same position of the initial password to determine whether they are the same; The passwords in the first similar set whose positions have the same digits as the initial password and whose number of positions is greater than or equal to the number of dissimilar digits constitute the second similar set; If the number of passwords in the second similar set is 0, it is determined that the initial password is not similar to the passwords in the password set; If the number of passwords in the second similar set is not 0, for each password in the second similar set, obtain the position where the number is the same as the initial password but different from the position where the number is different, and record it as the target position; For each target position, determine whether the number at the target position is similar to the number at the same position in the initial password; In the second similarity set, if there exists a password in which the numbers at each target position are similar to the numbers at the same position of the initial password, then the initial password is deemed to be similar to the passwords in the password set; In the second similarity set, if there is no password in which the numbers at each target position are similar to the numbers at the same position of the initial password, then it is determined that the initial password is not similar to the passwords in the password set; The information security and data security authentication and evaluation system and method, in the password setting stage, sets a similarity ratio threshold, then obtains the number of password digits, calculates the number of password digits×the similarity ratio threshold, rounds the result and adds 1, which is recorded as the number of similar digits, calculates the number of password digits-the number of similar digits, and records the result as the number of dissimilar digits. In the existing password set, it is judged whether there is a password in the existing password set with the same number of positions as the initial password, and the number of positions is greater than or equal to the number of dissimilar digits. If not, it means that the initial password is not similar to the passwords in the existing password set. If so, it is judged whether there is a password in the second similarity set with the number in each target position similar to the number in the same position as the initial password. If so, it means that the initial password is similar to the passwords in the existing password set. By introducing a password similarity analysis mechanism, the passwords set by users are strictly screened. The system determines whether a password meets security standards based on the similarity between the characters and numbers in the password. In particular, in digital passwords, the similarity between numbers is used to identify passwords that are easy to guess. By comparing the similarity between the user's password and existing passwords in the database, potential weak passwords can be identified in a timely manner. For example, if the password set by the user is only slightly different from an existing password, the system will prompt that the password is unsafe and require a reset. This can effectively avoid the risks caused by users setting similar passwords.

[0028] The determining whether the user has the authority to search for information and data in the database according to the third strategy specifically includes: The input interface of the identity authentication module is specifically a grid of four rows and three columns, in which the first row and the first column is the input port for number 1, the first row and the second column is the input port for number 2, the first row and the third column is the input port for number 3, the second row and the first column is the input port for number 4, the second row and the second column is the input port for number 5, the second row and the third column is the input port for number 6, the third row and the first column is the input port for number 7, the third row and the second column is the input port for number 8, the third row and the third column is the input port for number 9, the fourth row and the first column is the input port for deletion, the fourth row and the second column is the input port for number 0, and the fourth row and the third column is the input port for confirmation. For details, refer to Figure 3 ; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to number 1 are 2 and 4; similar numbers to number 2 are 1, 3 and 5; similar numbers to number 3 are 2 and 6; similar numbers to number 4 are 1, 5 and 7; similar numbers to number 5 are 2, 4, 6 and 8; similar numbers to number 6 are 3, 5 and 9; similar numbers to number 7 are 4 and 8; similar numbers to number 8 are 5, 7, 9 and 0; similar numbers to number 9 are 6 and 8; similar numbers to number 0 are 8; The information security and data security authentication and evaluation system and method, in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are identified as similar. In this way, the numbers that are easily touched by mistake in the input interface can be listed as similar numbers. This method is the basis for judging password similarity.

[0029] The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: Get the password entered by the user and record it as the password to be verified; Get the number of digits of the password to be verified; Obtain passwords in the password set whose digits are the same as the digits of the password to be verified, and form a first set to be verified; The passwords whose first digit in the first set to be verified is the same as the first digit of the password to be verified constitute the second set to be verified, the passwords whose second digit in the second set to be verified is the same as the second digit of the password to be verified constitute the third set to be verified... The passwords whose X-1 digit in the X-1 set to be verified is the same as the X-1 digit of the password to be verified constitute the X set to be verified, and the passwords whose X digit in the X set to be verified is the same as the X digit of the password to be verified constitute the X+1 set to be verified; Where X refers to the number of digits of the password to be verified; If the X+1th set to be verified is not an empty set, it is determined that the user has the authority to search for information and data in the database.

[0030] The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: If the X+1th set to be verified is an empty set; Get the number of digits of the password to be verified, recorded as the number of digits to be verified; Setting a verification ratio threshold, which is used to determine whether a user has the authority to search for information and data in the database; Calculate the number of digits to be verified × the verification ratio threshold, take the integer part of the result and add 1, and record it as the first digit; Calculate the number of digits to be verified minus the first digit, and record the result as the second digit; Obtain passwords with the same number of digits as the number to be verified in the existing password set, and form a first verification set; For each password in the first verification set, compare the digits at each position of the password with the digits at the same position of the password to be verified, and determine whether they are the same; The passwords in the first verification set whose positions have the same digits as the password to be verified and whose number of positions is greater than or equal to the second digit constitute the second verification set; If the number of passwords in the second verification set is 0, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked.

[0031] The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: If the number of passwords in the second verification set is not 0; For each password in the second verification set, obtain the position where the number is different from the number in the same position of the password to be verified, and record it as the verification position; For each verification position, determine whether the number at the verification position is similar to the number at the same position of the password to be verified; In the second verification set, if there is no password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; In the second verification set, if there is a password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, the user is prompted that the password input is incorrect and is asked to re-enter the password; If the password entered by the user again is different from the password in the password set, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; If the password entered by the user again is the same as the password in the password collection, the user is deemed to have the authority to search for information and data in the database; The information security and data security authentication and evaluation system and method, when a user enters a password through an identity authentication module to query information and data stored in a database, obtain the password entered by the user, record it as the password to be verified, obtain the number of digits of the password to be verified, first screen out passwords with the same number of digits as the password to be verified in the existing password set to form a first set to be verified, compare each password in the first set to be verified with the password to be verified digit by digit, if there is a password with every digit being the same as the password to be verified, it means that the password entered by the user is a password in the password set, and the user has the right to search for information and data in the database, if there is no password with every digit being the same as the password to be verified, then obtain the number of digits to be verified, set a verification ratio threshold, calculate the number of digits to be verified × the verification ratio threshold, round the result and add 1, record it as the first digit, calculate the number of digits to be verified - the first digit, and record the result as the second digit; judge whether there is a number of positions in the first verification set with the same digits as the password to be verified, which is greater than or equal to the second digit If there is a password with the same number as the password to be verified, if it does not exist, it means that the password to be verified is not similar to any password in the password set. At this time, it can be considered that the user does not know the password and just enters the password at random. It is determined that the user does not have the authority to search for information and data in the database, and the database is locked; if it exists, it is determined whether there is a password in the second verification set with numbers in each verification position similar to the numbers in the same position of the password to be verified; if it exists, it means that the password to be verified is similar to a password in the password set. At this time, it can be considered that the user knows the password, and the password may be entered incorrectly due to factors such as accidental touch, so the user is given another chance to enter the password. If the user enters the wrong password again, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked at the same time; if the password is entered correctly again, it is determined that the user has the authority to search for information and data in the database; the identity authentication process uses a multi-level strategy to determine whether the user has database access rights, combined with similarity judgment, it can effectively prevent unauthorized access. Even if the attacker can obtain part of the password information, it still needs to pass complex similarity verification, which increases the difficulty of the attack.

[0032] include: A database, which is used to store user information and data, and is composed of multiple sub-databases; A password setting module, the password setting module is used to set the password of the sub-database storing information and data in the database; An authentication module that verifies whether a user has the authority to find information and data in the database; The information processing module is used to determine whether the password input by the user is the same as or similar to the password in the password set.

[0033] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0034] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. An information security and data security authentication and evaluation method, characterized in that: include: The user sets the password through the password setting module; The password is used to determine whether the user has the authority to search for information and data in the database. The password consists of numbers, and the minimum number of digits for the password is 6 and the maximum number of digits is 15; The database is used to store user information and data. The database is composed of multiple sub-databases. Each sub-database is used to store one user's information and data. One sub-database corresponds to one password. The passwords corresponding to all sub-databases in the database are different. The passwords corresponding to all sub-databases in the database constitute the existing password set; Get the password set by the user through the password setting module and record it as the initial password; Determine whether the initial password is the same as the password in the password set according to the first strategy; If the initial password is the same as the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. If the initial password is different from the password in the password set, then judging whether the initial password is similar to the password in the password set according to the second strategy; If the initial password is not similar to the password in the password set; The user is prompted to enter the set password again; If the passwords entered twice are the same, the user will be prompted that the password has been set successfully; If the passwords entered twice are different, the user will be prompted to reset the password. If the initial password is similar to the password in the password set; The user is prompted that the password he set is not secure enough and he needs to reset the password. When a user enters a password through the authentication module to query information and data stored in the database; It is determined according to the third strategy whether the user has the authority to search for information and data in the database.

2. The information security and data security authentication and evaluation method according to claim 1, characterized in that: The determining, according to the first strategy, whether the initially set password is the same as a password in the password set specifically includes: Get the number of digits of the initial password; Obtain passwords with the same number of digits as the initial password in the existing password set, and form a first identical set; The passwords whose first digit in the first identical set is the same as the first digit in the initial password constitute the second identical set, the passwords whose second digit in the second identical set is the same as the second digit in the initial password constitute the third identical set... The passwords whose N-1 digit in the N-1 th identical set is the same as the N-1 digit in the initial password constitute the Nth identical set, and the passwords whose N digit in the Nth identical set is the same as the N digit in the initial password constitute the N+1 th identical set; Where N refers to the number of digits of the initial password; If the N+1th identical set is an empty set, it is determined that the initial password is different from the password in the password set; If the N+1th identical set is not an empty set, it is determined that the initial password is the same as the password existing in the password set.

3. The information security and data security authentication and evaluation method according to claim 1, characterized in that: If the initial password is different from the password in the password set, determining whether the initial password is similar to the password in the password set according to the second strategy specifically includes: The input interface of the password setting module is specifically a grid of four rows and three columns, wherein the first row and the first column is an input port for number 1, the first row and the second column is an input port for number 2, the first row and the third column is an input port for number 3, the second row and the first column is an input port for number 4, the second row and the second column is an input port for number 5, the second row and the third column is an input port for number 6, the third row and the first column is an input port for number 7, the third row and the second column is an input port for number 8, the third row and the third column is an input port for number 9, the fourth row and the first column is an input port for deletion, the fourth row and the second column is an input port for number 0, and the fourth row and the third column is an input port for confirmation; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to the number 1 are 2 and 4; similar numbers to the number 2 are 1, 3 and 5; similar numbers to the number 3 are 2 and 6; similar numbers to the number 4 are 1, 5 and 7; similar numbers to the number 5 are 2, 4, 6 and 8; similar numbers to the number 6 are 3, 5 and 9; similar numbers to the number 7 are 4 and 8; similar numbers to the number 8 are 5, 7, 9 and 0; similar numbers to the number 9 are 6 and 8; similar numbers to the number 0 is 8.

4. The information security and data security authentication and evaluation method according to claim 3 is characterized by: If the initial password is different from the password in the password set, judging whether the initial password is similar to the password in the password set according to the second strategy, further comprising: Get the number of digits of the initial password, recorded as the number of digits of the password; Setting a similarity ratio threshold, wherein the similarity ratio threshold is used to determine whether the initial password is similar to the password in the password set; Calculate the number of password digits × the similarity ratio threshold, take the integer part of the result and add 1, and record it as the number of similarity digits; Calculate the number of password digits minus the number of similar digits, and record the result as the number of dissimilar digits; Obtain passwords with the same number of digits as the password in the existing password set, and form a first similar set; For each password in the first similarity set, compare the digits at each position of the password with the digits at the same position of the initial password to determine whether they are the same; The passwords in the first similar set whose positions have the same digits as the initial password and whose number of positions is greater than or equal to the number of dissimilar digits constitute the second similar set; If the number of passwords in the second similar set is 0, it is determined that the initial password is not similar to the passwords in the password set; If the number of passwords in the second similar set is not 0, for each password in the second similar set, obtain the position where the number is the same as the initial password but different from the position where the number is different, and record it as the target position; For each target position, determine whether the number at the target position is similar to the number at the same position in the initial password; In the second similarity set, if there exists a password in which the numbers at each target position are similar to the numbers at the same position of the initial password, then the initial password is deemed to be similar to the passwords in the password set; In the second similarity set, if there is no password in which the numbers at each target position are similar to the numbers at the same position of the initial password, it is determined that the initial password is not similar to the passwords in the password set.

5. The information security and data security authentication and evaluation method according to claim 1, characterized in that: The determining whether the user has the authority to search for information and data in the database according to the third strategy specifically includes: The input interface of the identity authentication module is specifically a grid of four rows and three columns, wherein the first row and the first column is an input port for number 1, the first row and the second column is an input port for number 2, the first row and the third column is an input port for number 3, the second row and the first column is an input port for number 4, the second row and the second column is an input port for number 5, the second row and the third column is an input port for number 6, the third row and the first column is an input port for number 7, the third row and the second column is an input port for number 8, the third row and the third column is an input port for number 9, the fourth row and the first column is an input port for deletion, the fourth row and the second column is an input port for number 0, and the fourth row and the third column is an input port for confirmation; Establish similarity between numbers; in the input interface, if two grids have a common edge, the numbers corresponding to the two grids are considered similar, specifically: Similar numbers to the number 1 are 2 and 4; similar numbers to the number 2 are 1, 3 and 5; similar numbers to the number 3 are 2 and 6; similar numbers to the number 4 are 1, 5 and 7; similar numbers to the number 5 are 2, 4, 6 and 8; similar numbers to the number 6 are 3, 5 and 9; similar numbers to the number 7 are 4 and 8; similar numbers to the number 8 are 5, 7, 9 and 0; similar numbers to the number 9 are 6 and 8; similar numbers to the number 0 is 8.

6. The information security and data security authentication and evaluation method according to claim 5, characterized in that: The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: Get the password entered by the user and record it as the password to be verified; Get the number of digits of the password to be verified; Obtain passwords in the password set whose digits are the same as the digits of the password to be verified, and form a first set to be verified; The passwords whose first digit in the first set to be verified is the same as the first digit of the password to be verified constitute the second set to be verified, the passwords whose second digit in the second set to be verified is the same as the second digit of the password to be verified constitute the third set to be verified... The passwords whose X-1 digit in the X-1 set to be verified is the same as the X-1 digit of the password to be verified constitute the X set to be verified, and the passwords whose X digit in the X set to be verified is the same as the X digit of the password to be verified constitute the X+1 set to be verified; Where X refers to the number of digits of the password to be verified; If the X+1th set to be verified is not an empty set, it is determined that the user has the authority to search for information and data in the database.

7. The information security and data security authentication and evaluation method according to claim 6, characterized in that: The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: If the X+1th set to be verified is an empty set; Get the number of digits of the password to be verified, recorded as the number of digits to be verified; Setting a verification ratio threshold, which is used to determine whether a user has the authority to search for information and data in the database; Calculate the number of digits to be verified × the verification ratio threshold, take the integer part of the result and add 1, and record it as the first digit; Calculate the number of digits to be verified minus the first digit, and record the result as the second digit; Obtain passwords with the same number of digits as the number to be verified in the existing password set, and form a first verification set; For each password in the first verification set, compare the digits at each position of the password with the digits at the same position of the password to be verified, and determine whether they are the same; The passwords in the first verification set whose positions have the same digits as the password to be verified and whose number of positions is greater than or equal to the second digit constitute the second verification set; If the number of passwords in the second verification set is 0, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked.

8. The information security and data security authentication and evaluation method according to claim 7, characterized in that: The determining whether the user has the authority to search for information and data in the database according to the third strategy also includes: If the number of passwords in the second verification set is not 0; For each password in the second verification set, obtain the position where the number is different from the number in the same position of the password to be verified, and record it as the verification position; For each verification position, determine whether the number at the verification position is similar to the number at the same position of the password to be verified; In the second verification set, if there is no password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; In the second verification set, if there is a password in which the numbers in each verification position are similar to the numbers in the same position of the password to be verified, the user is prompted that the password input is incorrect and is asked to re-enter the password; If the password entered by the user again is different from the password in the password set, it is determined that the user does not have the authority to search for information and data in the database, and the database is locked; If the password entered by the user again is the same as the password in the password collection, the user is deemed to have the authority to search for information and data in the database.

9. A system for implementing the information security and data security authentication and evaluation method of claim 1, characterized in that: include: A database, which is used to store user information and data, and is composed of multiple sub-databases; A password setting module, the password setting module is used to set the password of the sub-database storing information and data in the database; An authentication module that verifies whether a user has the authority to find information and data in the database; The information processing module is used to determine whether the password input by the user is the same as or similar to the password in the password set.

Images