Password changing method and system based on reliable verification

Abstract

The invention discloses a password changing method and system based on reliable verification. The password changing method based on reliable verification comprises the steps that a password generator generates new password information; the password generator performs segmentation processing according to the new password information so as to form segmented password information of which the number is the same as that of the password demanders; the password generator sends the split password information to the MPC protocol layer; and the MPC protocol layer distributes the segmented password information, so that each password user can distribute one piece of segmented password information. According to the password changing method based on reliable verification, the password information is shielded and then distributed to different password users, and the password users carry out primary encryption locally through secondary password information, so that each password user cannot obtain the original new password information, and in the whole information transmission process, the password information can be transmitted to the password users through the secondary password information. And no party has complete new password information.

Description

Technical Field

[0001] The present application relates to the technical field of passwords, and in particular to a password changing method based on reliable verification and a password changing system based on reliable verification. Background Art

[0002] When the prior art is used to protect trade secrets or technical secrets, in order to protect the technical secrets or trade secrets, certain permissions are usually required for access, and at this time, a certain password needs to be entered to access.

[0003] However, in most cases, passwords cannot remain unchanged and need to be updated after a period of time. The distribution and transmission of passwords themselves also have the risk of being hacked and stolen. Summary of the invention

[0004] The object of the present invention is to provide a password changing method based on reliable authentication to at least solve one of the above technical problems.

[0005] One aspect of the present invention provides a password changing method based on reliable authentication, the password changing method based on reliable authentication comprising: The password generator generates new password information; The password generator performs segmentation processing based on the new password information, thereby forming segmented password information of the same number as that of the password demander; The password generator sends each segmented password information to the MPC protocol layer; The MPC protocol layer distributes the split password information so that each password user is assigned a copy of the split password information; Each password user generates secondary password information for the segmented password information obtained by itself through the MPC protocol layer, thereby obtaining the final segmented password information.

[0006] Optionally, the password generating party performs segmentation processing according to the new password information, thereby forming segmented password information having the same number as that of the password requesting party, including: A masking operation is performed on the password information, so that the formed segmented password information only includes part of the password information and the masking scheme of each segmented password information is stored.

[0007] Optionally, the MPC protocol layer distributes the split password information so that each password user is assigned a split password information including: The MPC protocol layer generates a distribution list according to each segmented password information obtained, wherein the distribution list includes each segmented password information and a password user corresponding to each segmented password information; The MPC protocol layer sends corresponding segmented password information to each password user according to the distribution list.

[0008] Optionally, each password user generates secondary password information for the segmented password information obtained by itself through the MPC protocol layer, thereby obtaining the final segmented password information, including: Generate secondary password information through its own historical password information; The blocked part in the acquired segmented password information is replaced with the secondary password information, thereby generating the final segmented password information.

[0009] Optionally, the password changing method based on reliable authentication further comprises: The password generator sends the occlusion scheme and new password information to the cloud storage.

[0010] Optionally, the password changing method based on reliable authentication further comprises: The MPC protocol layer sends the allocation list to the cloud storage.

[0011] Optionally, the password changing method based on reliable authentication further comprises: Each of the password users sends the final password information to the cloud storage.

[0012] Optionally, the password changing method based on reliable authentication further comprises: The password user obtains the first password information input by the user; The password user determines whether the first password information is correct based on the final password information he holds. If so, The password user generates a second password input prompt; The password user obtains the second password information input by the user according to the second password input prompt; The password user transmits the second password information to the cloud; The cloud determines whether the second password information is correct based on the allocation list, the shielding plan and the new password information. If so, it determines that the user authentication is successful.

[0013] The present application also provides a password change system based on reliable verification, which includes a password generator, an MPC protocol layer and a password user. The password generator, the MPC protocol layer and the password user cooperate to implement the password change method based on reliable verification as described above.

[0014] Beneficial effects:

[0015] The password changing method based on reliable verification of the present application masks the password information and distributes it to different password users, and the password users encrypt the password once locally using the secondary password information, so that each password user does not obtain the original new password information, and in the entire information transmission process, no party has the complete new password information. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a flowchart of a password changing method based on reliable verification according to an embodiment of the present application; Figure 2 It is a schematic diagram of an electronic device for implementing a password changing method based on reliable verification according to an embodiment of the present application. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical scheme and advantages of the implementation of this application clearer, the technical scheme in the embodiment of this application will be described in more detail below in conjunction with the drawings in the embodiment of this application. In the drawings, the same or similar reference numerals throughout represent the same or similar elements or elements with the same or similar functions. The described embodiments are part of the embodiments of this application, not all of them. The embodiments described below with reference to the drawings are exemplary and are intended to be used to explain this application, and should not be construed as limitations on this application. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application. The embodiments of this application are described in detail below in conjunction with the drawings.

[0018] Figure 1 It is a flowchart of a password changing method based on reliable verification according to an embodiment of the present application.

[0019] like Figure 1 The password change method shown based on strong authentication includes: Step 1: The password generator generates new password information; Step 2: The password generator performs segmentation processing based on the new password information, thereby forming segmented password information of the same number as that of the password demander; Step 3: The password generator sends each segmented password information to the MPC protocol layer; Step 4: The MPC protocol layer distributes the split password information so that each password user is assigned a copy of the split password information; Step 5: Each password user generates secondary password information for the split password information obtained by itself through the MPC protocol layer, thereby obtaining the final split password information.

[0020] The password changing method based on reliable verification of the present application masks the password information and distributes it to different password users, and the password users encrypt the password once locally using the secondary password information, so that each password user does not obtain the original new password information, and in the entire information transmission process, no party has the complete new password information.

[0021] In this embodiment, the password generator performs segmentation processing according to the new password information, thereby forming segmented password information having the same number as that of the password demander, including: A masking operation is performed on the password information, so that the formed segmented password information only includes part of the password information and the masking scheme of each segmented password information is stored.

[0022] For example, assuming that the password information is a string of numbers, such as 123456, then each time the masking operation is performed, other numbers in the number can be randomly changed. For example, one split password information is 12QW56, and another split password information can be WE3456, etc.

[0023] In this embodiment, each shielding scheme needs to be recorded to prevent not knowing how the shielding is performed specifically.

[0024] In this embodiment, the MPC protocol layer distributes the split password information so that each password user is assigned a split password information including: The MPC protocol layer generates a distribution list according to each segmented password information obtained, wherein the distribution list includes each segmented password information and a password user corresponding to each segmented password information; The MPC protocol layer sends corresponding segmented password information to each password user according to the distribution list.

[0025] In this embodiment, the allocation list records the password users corresponding to the split password information. For example, 12QW56 is allocated to password user 1, and WE3456 is allocated to password user 2.

[0026] In this embodiment, each password user generates secondary password information for the segmented password information obtained by itself through the MPC protocol layer, so as to obtain the final segmented password information including: Generate secondary password information through its own historical password information; The blocked part in the acquired segmented password information is replaced with the secondary password information, thereby generating the final segmented password information.

[0027] In this embodiment, a time range is set, for example, within 1 year. Through the historical password information, some secondary password information used within the year can be known. In this case, when generating new secondary password information, these secondary password information will not be used. For example, if the historical password information includes 123, 123 will not be used when generating new secondary password information. In addition, the generated secondary password information does not need to be the same as the blocked part in terms of the number of digits. It can be more or the same as the blocked part, or it can be less than the blocked part. For example, if the secondary password information is 12345, then after replacing the blocked part, the password becomes 121234556. If the secondary password information is 1, one solution for replacing the blocked part is 121W56, and another solution is 12Q156. It can be set at will through the pre-set rules of the secondary password information.

[0028] In this embodiment, the password changing method based on reliable authentication further includes: The password generator sends the occlusion scheme and new password information to the cloud storage.

[0029] In this embodiment, the password changing method based on reliable authentication further includes: The MPC protocol layer sends the allocation list to the cloud storage.

[0030] In this embodiment, the password changing method based on reliable authentication further includes: Each of the password users sends the final password information to the cloud storage.

[0031] This method ensures that neither party has the complete password information. On the other hand, by transmitting the password to the cloud through different transmission channels, it ensures that the complete password information will not be leaked due to being intercepted during the transmission to the cloud.

[0032] In this embodiment, the password changing method based on reliable authentication further includes: The password user obtains the first password information input by the user; The password user determines whether the first password information is correct based on the final password information he holds. If so, The password user generates a second password input prompt; The password user obtains the second password information input by the user according to the second password input prompt; The password user transmits the second password information to the cloud; The cloud determines whether the second password information is correct based on the allocation list, the shielding plan and the new password information. If so, it determines that the user authentication is successful.

[0033] In this way, the user's security can be further ensured by verifying the password twice. In addition, the first password of this application only needs to be the same as the final password information of the password user, and the second password needs to be the same as the new password information generated by the password generator.

[0034] The present application also provides a password change system based on reliable verification, which includes a password generator, an MPC protocol layer and a password user. The password generator, the MPC protocol layer and the password user cooperate to implement the password change method based on reliable verification as described above.

[0035] It should be noted that the above explanations of the method embodiment are also applicable to the system of this embodiment and will not be repeated here.

[0036] The present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. When the processor executes the computer program, the above-mentioned password changing method based on reliable verification is implemented.

[0037] The present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned password changing method based on reliable verification can be implemented.

[0038] Figure 2 It is an exemplary structural diagram of an electronic device that can implement a password changing method based on reliable verification provided according to an embodiment of the present application.

[0039] like Figure 2 As shown, the electronic device includes an input device 501, an input interface 502, a central processor 503, a memory 504, an output interface 505, and an output device 506. The input interface 502, the central processor 503, the memory 504, and the output interface 505 are interconnected through a bus 507, and the input device 501 and the output device 506 are connected to the bus 507 through the input interface 502 and the output interface 505, respectively, and then connected to other components of the electronic device. Specifically, the input device 501 receives input information from the outside, and transmits the input information to the central processor 503 through the input interface 502; the central processor 503 processes the input information based on the computer executable instructions stored in the memory 504 to generate output information, temporarily or permanently stores the output information in the memory 504, and then transmits the output information to the output device 506 through the output interface 505; the output device 506 outputs the output information to the outside of the electronic device for the user to use.

[0040] That is to say, Figure 2The electronic device shown can also be implemented as comprising: a memory storing computer executable instructions; and one or more processors, which can implement the combination when executing the computer executable instructions. Figure 1 Describes a password change method based on reliable authentication.

[0041] In one embodiment, Figure 2 The electronic device shown may be implemented to include: a memory 504 configured to store executable program codes; and one or more processors configured to run the executable program codes stored in the memory 504 to execute the password changing method based on reliable authentication in the above embodiment.

[0042] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0043] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0044] Computer readable media include permanent and non-permanent, removable and non-removable, and the media can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), data versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0045] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and a module, a program segment or a part of a code includes one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes identified in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or the total flow chart can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0046] The processor referred to in this embodiment may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0047] The memory can be used to store computer programs and / or modules. The processor realizes various functions of the system / terminal device by running or executing the computer programs and / or modules stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area can store data created according to the use of the mobile phone (such as audio data, a phone book, etc.), etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0048] In this embodiment, if the module / unit integrated in the system / terminal device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or system that can carry computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. Although the present application is disclosed as above in terms of a preferred embodiment, it is not intended to limit the present application. Any technical personnel in this field may make possible changes and modifications without departing from the spirit and scope of the present application. Therefore, the scope of protection of the present application shall be based on the scope defined by the claims of the present application.

[0049] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0050] In addition, it is obvious that the word "comprising" does not exclude other units or steps. The multiple units, modules or systems stated in the system claims can also be implemented by one unit or the overall system through software or hardware.

[0051] Although the present invention has been described in detail above with general descriptions and specific embodiments, it is obvious to those skilled in the art that some modifications or improvements may be made thereto based on the present invention. Therefore, these modifications or improvements made without departing from the spirit of the present invention all fall within the scope of protection claimed by the present invention.

Claims

1. A password changing method based on reliable authentication, characterized in that: The password changing method based on reliable authentication includes: The password generator generates new password information; The password generator performs segmentation processing based on the new password information, thereby forming segmented password information of the same number as that of the password demander; The password generator sends each segmented password information to the MPC protocol layer; The MPC protocol layer distributes the split password information so that each password user is assigned a copy of the split password information.

2. The password changing method based on reliable authentication as claimed in claim 1, characterized in that: The password generator performs segmentation processing according to the new password information, thereby forming segmented password information having the same number as that of the password demander, including: A masking operation is performed on the password information, so that the formed segmented password information only includes part of the password information and the masking scheme of each segmented password information is stored.

3. The password changing method based on reliable authentication as claimed in claim 2, characterized in that: The MPC protocol layer distributes the split password information so that each password user is assigned a split password information including: The MPC protocol layer generates a distribution list according to each segmented password information obtained, wherein the distribution list includes each segmented password information and a password user corresponding to each segmented password information; The MPC protocol layer sends corresponding segmented password information to each password user according to the distribution list.

4. The password changing method based on reliable authentication as claimed in claim 3, characterized in that: Each password user generates secondary password information for the segmented password information obtained by itself through the MPC protocol layer, thereby obtaining the final segmented password information, including: Generate secondary password information through its own historical password information; The blocked part in the acquired segmented password information is replaced with the secondary password information, thereby generating the final segmented password information.

5. The password changing method based on reliable authentication as claimed in claim 4, characterized in that: The password changing method based on reliable authentication further comprises: The password generator sends the occlusion scheme and new password information to the cloud storage.

6. The password changing method based on reliable authentication as claimed in claim 5, characterized in that: The password changing method based on reliable authentication further comprises: The MPC protocol layer sends the allocation list to the cloud storage.

7. The password changing method based on reliable authentication as claimed in claim 6, characterized in that: The password changing method based on reliable authentication further comprises: Each of the password users sends the final password information to the cloud storage.

8. The password changing method based on reliable authentication as claimed in claim 7, characterized in that: The password changing method based on reliable authentication further comprises: The password user obtains the first password information input by the user; The password user determines whether the first password information is correct based on the final password information he holds. If so, The password user generates a second password input prompt; The password user obtains the second password information input by the user according to the second password input prompt; The password user transmits the second password information to the cloud; The cloud determines whether the second password information is correct based on the allocation list, the shielding plan and the new password information. If so, it determines that the user authentication is successful.

9. A password changing system based on reliable authentication, characterized in that: The password change system based on reliable verification includes a password generator, an MPC protocol layer and a password user. The password generator, the MPC protocol layer and the password user cooperate to implement the password change method based on reliable verification as described in any one of claims 1 to 8.

Images