Multi-dimensional password recording method
Through the dual-factor authentication of face recognition and key combination, and the password management method of multi-system, multi-label, and historical password trajectory, the problem of users managing a large number of passwords is solved, improving system security and simplifying the password management process.
Patent Information
- Application Number
- CN202411731344.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-29
- Publication Date
- 2025-03-11
AI Technical Summary
In the prior art, users need to remember and manage a large number of passwords, resulting in an increase in memory burden and an increase in security risks. In addition, traditional password management methods are at risk of being hacked or leaked.
The two-factor authentication method combined with face recognition and key is adopted to generate strong passwords that meet different application needs through password management methods of multi-system, multi-label, and historical password trajectory, and set the frequency of automatic change.
It improves the security of the system, reduces the difficulty of multi-application password management, reduces the burden of users to remember and manage passwords, and effectively avoids the security risks caused by long-term use of the same password.
Smart Images

Figure CN119598444A_ABST
Abstract
Description
Technical Field
[0001] The invention relates to the field of software login password security, and in particular to a multi-dimensional password recording method. Background Art
[0002] With the rapid development of information technology, the use of smart devices and online applications has gradually penetrated into people's daily lives. Whether it is personal affairs, work collaboration, or social interaction, almost every application requires users to authenticate their identities. Passwords, as the most common authentication method, have become an important means to ensure the security of personal information. However, with the use of more and more applications and services, users have to remember a large number of passwords, which not only increases the memory burden, but also makes password management extremely complicated. At present, the traditional way of password management relies on users to remember each password themselves, or use password management software to uniformly manage and save these passwords; however, the traditional password management method still has many security risks, such as the password management software itself may be attacked or leaked by hackers, or users rely on simple password strategies for easy memorization, but this will reduce the security of the system; in addition, many users fail to change their passwords in time or use strong passwords, resulting in poor account security. Summary of the invention
[0003] The purpose of the present invention is to solve the shortcomings of the prior art and to propose a multi-dimensional password recording method.
[0004] To achieve the above object, the present invention adopts the following technical solutions: A method for multi-dimensional password recording, comprising the following steps: S1: initiates a login request and performs identity authentication; The user registers an account in the system in advance, enters facial information and inputs a picture into the system; the system is a multi-dimensional password management system; The picture is a picture taken by the user himself, a picture of his ID card or other forms of pictures; The system uses image processing technology to extract features from the image input by the user and generates a unique key file based on the features; the system stores the key file in an encrypted form in the database and binds it to the user account; The image processing technology includes image encryption, feature extraction technology, etc. The user initiates a login request, and the system performs identity verification on the user, which includes face verification and key verification; Specifically, the system collects the current user's facial image through the camera, and compares the collected facial image with the facial information entered when the user registered. If the two do not match, the identity verification fails and the user cannot log in; If the two match, the first level of identity authentication is passed and the second level of identity authentication is entered; that is, the user uploads a picture, the system extracts features from the picture uploaded by the user, and generates a key file for the picture; the system compares the key file of this user in the database with the key file generated by the picture uploaded when logging in. If the two are completely matched, the second level of identity authentication is passed, the login is successful, and the process enters step S2; if the two are not completely matched, the identity authentication fails and the login cannot be made.
[0005] S2: Create multi-level password management tags; After successfully logging into the system, create password management tags for different applications; Specifically, each application password corresponds to an independent label, and the label supports a multi-level classification structure; The system is provided with multi-level label buttons; users use the label buttons to create first-level classification labels, which correspond to major categories such as office applications, life applications, educational applications, and financial applications; according to actual application needs, multiple second-level labels are created under each first-level classification label, and multiple third-level labels are further refined under each second-level label, and multi-level labels are continuously created until the labels cover all applications involved by the user; Finally, a tree-like label structure diagram of password management is obtained. The tree-like label structure diagram contains multiple label nodes. Each label node corresponds to a specific application and marks the application name. Click the label node to view the specific information of the corresponding application. The password management page of the application contains specific requirements for passwords.
[0006] S3: Set up multiple password rules and select appropriate password rules for each application; Different applications have different requirements for passwords. Users set password rules based on different application requirements; the password rules include length requirements, complexity requirements, avoidance of common words, prohibition of repeated characters, regular password changes, and password history repetition frequency; The length requirement refers to the minimum or maximum length of the password; the complexity requirement refers to the requirement that the password contains different types of characters, such as uppercase letters, lowercase letters, numbers, special characters, etc.; the avoidance of common words refers to the common words and phrases that are set in advance in the rules to be avoided; the prohibition of repeated characters refers to the requirement to avoid repeated characters or the same consecutive characters in the password; the regular password modification refers to the mandatory requirement that users change their passwords regularly; the historical password repetition frequency refers to the frequency of repeated use of historical passwords; Based on the specific password requirements of each application, the user can select appropriate rules for each application as the password generation rule for this application on the password management page of the application.
[0007] S4: Randomly generate a password according to the password rules; The user enters the password management page of a specific application and clicks on the password rule. The system generates a password that complies with the password rule of this application through the password generation algorithm. Furthermore, the system stores the history of each password update, retaining a maximum of 10 history records.
[0008] S5: Initiate a password expiration instruction to remind the user to change the password in time; A scheduled task is set in the system. When it is detected that the application password has expired, the scheduled task system is triggered to generate a new password. At the same time, the system will actively pop up a window to remind the user. After the user views the new password in the label, he can go to the application to update the password.
[0009] Furthermore, when the user needs to change the password, a new password can be manually generated.
[0010] Compared with the prior art, the present invention has the following beneficial effects: A multi-dimensional password recording method proposed in the present invention provides a dual identity authentication method combining face recognition and key, thereby improving the security of the system; through a multi-system, multi-label, and historical password track password management method, the difficulty of multi-application password management is reduced; the password can be set to change automatically at a frequency, expired passwords will be automatically updated, and users will be reminded to change application passwords in a timely manner, thereby solving the troubles of remembering and changing passwords for users. BRIEF DESCRIPTION OF THE DRAWINGS
[0011] Figure 1 The present invention is a flowchart of the steps of a multi-dimensional password recording method. DETAILED DESCRIPTION
[0012] In order to provide a further understanding of the purpose, structure, features, and functions of the present invention, the following detailed description is given in conjunction with the embodiments.
[0013] like Figure 1 As shown, a method for multi-dimensional password recording includes the following steps: S1: initiates a login request and performs identity authentication; The user registers an account in the system in advance, enters facial information and inputs a picture into the system; the system is a multi-dimensional password management system; The picture is a picture taken by the user himself, a picture of his ID card or other forms of pictures; The system uses image processing technology to extract features from the image input by the user and generates a unique key file based on the features; the system stores the key file in an encrypted form in the database and binds it to the user account; The image processing technology includes image encryption, feature extraction technology, etc. The user initiates a login request, and the system performs identity verification on the user, which includes face verification and key verification; Specifically, the system collects the current user's facial image through the camera, and compares the collected facial image with the facial information entered when the user registered. If the two do not match, the identity verification fails and the user cannot log in; If the two match, the first level of identity authentication is passed and the second level of identity authentication is entered; that is, the user uploads a picture, the system extracts features from the picture uploaded by the user, and generates a key file for the picture; the system compares the key file of this user in the database with the key file generated by the picture uploaded when logging in. If the two are completely matched, the second level of identity authentication is passed, the login is successful, and the process enters step S2; if the two are not completely matched, the identity authentication fails and the login cannot be made.
[0014] The present invention introduces a dual identity authentication method that combines face recognition and key. When a user logs in, he or she is not only required to enter a password, but also to perform face recognition, thereby adding multiple protections for identity authentication. This dual authentication method makes it difficult for hackers to obtain account access rights through a single password even if the password is leaked, thereby significantly improving the security of the system.
[0015] S2: Create multi-level password management tags; After successfully logging into the system, create password management tags for different applications; Specifically, each application password corresponds to an independent label, and the label supports a multi-level classification structure; The system is provided with multi-level label buttons; users use the label buttons to create first-level classification labels, which correspond to major categories such as office applications, life applications, educational applications, and financial applications; according to actual application needs, multiple second-level labels are created under each first-level classification label, and multiple third-level labels are further refined under each second-level label, and multi-level labels are continuously created until the labels cover all applications involved by the user; Finally, a tree-like label structure diagram of password management is obtained. The tree-like label structure diagram contains multiple label nodes. Each label node corresponds to a specific application and marks the application name. Click the label node to view the specific information of the corresponding application. The password management page of the application contains specific requirements for passwords.
[0016] S3: Set up multiple password rules and select appropriate password rules for each application; Different applications have different requirements for passwords. Users set password rules based on different application requirements; the password rules include length requirements, complexity requirements, avoidance of common words, prohibition of repeated characters, regular password changes, and password history repetition frequency; The length requirement refers to the minimum or maximum length of the password; the complexity requirement refers to the requirement that the password contains different types of characters, such as uppercase letters, lowercase letters, numbers, special characters, etc.; the avoidance of common words refers to the common words and phrases that are set in advance in the rules to be avoided; the prohibition of repeated characters refers to the requirement to avoid repeated characters or the same consecutive characters in the password; the regular password modification refers to the mandatory requirement that users change their passwords regularly; the historical password repetition frequency refers to the frequency of repeated use of historical passwords; Based on the specific password requirements of each application, the user can select appropriate rules for each application as the password generation rule for this application on the password management page of the application.
[0017] S4: Randomly generate a password according to the password rules; The user enters the password management page of a specific application and clicks on the password rule. The system generates a password that complies with the password rule of this application through a password generation algorithm; the password generation algorithm includes a random number generation algorithm, a character combination algorithm, etc.; Furthermore, the system stores the history of each password update, retaining up to 10 history records; When a user logs into an application, he can open the system, find the corresponding password management label and copy the password to the clipboard.
[0018] The system generates passwords according to the set password naming rules; it uses a combination of random number generation algorithm and character combination algorithm to generate random passwords that comply with the password naming rules, quickly and conveniently generating strong passwords that are difficult to guess, and reducing the risk of manually creating passwords that are easy to guess.
[0019] By providing a password management method with multiple systems, multiple labels, and historical password tracks, users can easily manage passwords for multiple applications; each system and application has an independent label and password record, and the system will automatically load the corresponding password according to the application selected by the user, avoiding the trouble of switching and remembering between numerous passwords; this method effectively simplifies the password management process and improves user operating efficiency.
[0020] S5: Initiate a password expiration instruction to remind the user to change the password in time; A scheduled task is set in the system. When it is detected that the application password has expired, the scheduled task system is triggered to generate a new password. At the same time, the system will actively pop up a window to remind the user. After the user views the new password in the label, he can go to the application to update the password.
[0021] Furthermore, when the user needs to change the password, a new password can be manually generated.
[0022] The present invention allows users to set the frequency of automatic password changes. Passwords will be automatically updated after expiration, and the system will promptly remind users to update their passwords. This not only reduces the burden of users having to manually remember and change passwords, but can also effectively avoid the security risks caused by long-term use of the same password. The automatic password change mechanism ensures the continued security of user accounts and avoids the risk of password disclosure or brute force cracking.
[0023] The present invention has been described by the above-mentioned relevant embodiments, however, the above-mentioned embodiments are only examples for implementing the present invention. It must be pointed out that the disclosed embodiments do not limit the scope of the present invention. On the contrary, changes and modifications made without departing from the spirit and scope of the present invention are all within the scope of patent protection of the present invention.
Claims
1. A method for multi-dimensional password recording, characterized in that: The following steps are involved: S1: initiates a login request and performs identity authentication; The user registers an account in the system in advance, enters facial information and inputs a picture into the system; The system is a multi-dimensional password management system; The picture is a picture taken by the user himself, a picture of his ID card or other forms of pictures; The system uses image processing technology to extract features from the image input by the user and generates a unique key file based on the features; the system stores the key file in an encrypted form in the database and binds it to the user account; The user initiates a login request, and the system authenticates the user; S2: Create multi-level password management tags; After the user logs into the system, password management tags are created for different applications. Each application password corresponds to an independent tag, and the tags support a multi-level classification structure. Multiple levels of tags are created according to specific application requirements. S3: Set up multiple password rules and select appropriate password rules for each application; Different applications have different requirements for passwords. Users set password rules based on different application requirements. Users select appropriate rules for each application as the password generation rules for this application on the application's password management page based on the specific password requirements of each application. S4: Randomly generate a password according to the password rules; The user enters the password management page of a specific application and clicks on the password rule. The system generates a password that complies with the password rule of this application through the password generation algorithm. S5: Initiate a password expiration instruction to remind the user to change the password in time; A scheduled task is set in the system. When it is detected that the application password has expired, the scheduled task system is triggered to generate a new password. At the same time, the system will actively pop up a window to remind the user. After the user views the new password in the label, he can go to the application to update the password.
2. The method for multi-dimensional password recording as claimed in claim 1, characterized in that: In step S1, the identity verification includes face verification and key verification; Specifically, the system collects the current user's facial image through the camera, and compares the collected facial image with the facial information entered when the user registered. If the two do not match, the identity verification fails and the user cannot log in; If the two match, the first level of identity authentication is passed and the second level of identity authentication is entered; that is, the user uploads a picture, the system extracts features of the picture uploaded by the user, and generates a key file for this picture; the system compares the key file of this user in the database with the key file generated by the picture uploaded when logging in. If the two are completely matched, the second level of identity authentication is passed, the login is successful, and the process enters step S2; if the two are not completely matched, the identity authentication fails and the login cannot be made.
3. The method for multi-dimensional password recording as claimed in claim 1, characterized in that: The specific contents of step S2 are as follows: The system is provided with multi-level label buttons; users use the label buttons to create first-level classification labels, which correspond to major categories such as office applications, life applications, educational applications, and financial applications; according to actual application needs, multiple second-level labels are created under each first-level classification label, and multiple third-level labels are further refined under each second-level label, and multi-level labels are continuously created until the labels cover all applications involved by the user; Finally, a tree-like label structure diagram of password management is obtained. The tree-like label structure diagram contains multiple label nodes. Each label node corresponds to a specific application and marks the application name. Click the label node to view the specific information of the corresponding application. The password management page of the application contains specific requirements for passwords.
4. The multi-dimensional password recording method as claimed in claim 1, characterized in that: In step S3, the password rules include length requirements, complexity requirements, avoidance of common words, prohibition of repeated characters, regular password changes, and password history repetition frequency; The length requirement refers to the minimum or maximum length of the password; the complexity requirement refers to the requirement that the password contains different types of characters, such as uppercase letters, lowercase letters, numbers, special characters, etc.; the avoidance of common words refers to the common words and phrases that are set in advance in the rules to be avoided; the prohibition of repeated characters refers to the requirement to avoid using repeated characters or the same consecutive characters in the password; the regular password modification refers to the mandatory requirement for users to change their passwords regularly; the historical password repetition frequency refers to the frequency of repeated use of historical passwords.
5. The method for multi-dimensional password recording as claimed in claim 1, characterized in that: The system stores the history of each password update.
6. The multi-dimensional password recording method as claimed in claim 1, characterized in that: When the user needs to change the password, a new password can be generated manually.