A method and device for managing and controlling security of account password in a fingerprint browser

Abstract

The application provides a kind of account password security control method and device in fingerprint browser, method includes: fingerprint browser receives the account and password input by user, if user chooses not to save, then end step;If user chooses to save, then generate a string of 32-bit string as encryption and decryption key;Account and password are encrypted by AES256 encryption algorithm, then save to setting file;When user closes fingerprint browser, the setting file is uploaded to cloud;If user replaces equipment and opens fingerprint browser, then fingerprint browser obtains setting file from cloud, setting file is decrypted according to AES256 decryption algorithm by encryption and decryption key, and is stored in memory, is used to encrypt and save the account password for website login in fingerprint browser, guarantee data security.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field, in particular to a method and device for managing and controlling the security of account passwords in a fingerprint browser. BACKGROUND

[0002] Fingerprint browsers are usually built on the Chromium kernel, and the encryption and decryption algorithms used are public. If a user's computer has a Trojan horse, the file used to store the user's website account password in the browser will be stolen. Since the encryption and decryption algorithms are public, criminals can decrypt them and obtain the user's website account password.

[0003] Moreover, when a user of a fingerprint browser needs to use an account password across devices, they often rely on cloud synchronization. This means that the user's sensitive information, such as account numbers and passwords, must be transmitted over the network, and this transmission process can be intercepted by malicious actors. Since the encryption technology used in fingerprint browsers is public, once this sensitive information is intercepted, criminals may use known decryption methods to crack the account password, thereby endangering the user's account security. SUMMARY

[0004] The technical problem to be solved by the present application is to provide a method and device for managing and controlling the security of account passwords in a fingerprint browser, which encrypts and saves the account password used for website login in the fingerprint browser, ensuring the security of the user's account password.

[0005] In a first aspect, the present application provides a method for managing and controlling the security of account passwords in a fingerprint browser, wherein the fingerprint browser uses the chromium kernel, and the method comprises the following steps:

[0006] Step 1: Modify the EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser, replacing the encryption algorithm with the AES256 encryption algorithm; modify the EncryptionResult LoginDatabase::DecryptedString method, replacing the decryption algorithm with the AES256 decryption algorithm.

[0007] Step 2: The fingerprint browser receives the user's input account and password. If the user chooses not to save, the step ends. If the user chooses to save, a 32-bit string is generated as the encryption and decryption key; the account and password are encrypted using the AES256 encryption algorithm, and then saved to a designated file.

[0008] Step 3: When the user closes the fingerprint browser, the designated file is uploaded to the cloud.

[0009] Step 4, when the user does not change the device, opens the fingerprint browser, the fingerprint browser decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory; if the user changes the device and opens the fingerprint browser, the fingerprint browser obtains the setting file from the cloud, decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory.

[0010] In a second aspect, the application provides a device for safe management and control of account passwords in a fingerprint browser, comprising:

[0011] The setting encryption algorithm module replaces the encryption algorithm in the EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser with the AES256 encryption algorithm, and replaces the decryption algorithm in the EncryptionResult LoginDatabase::DecryptedString method with the AES256 decryption algorithm.

[0012] The encryption and decryption key generation module receives the account and password input by the user, and if the user chooses not to save, the step is ended; if the user chooses to save, a 32-bit string is generated as the encryption and decryption key; the account and password are encrypted through the AES256 encryption algorithm, and then saved to the setting file.

[0013] The uploading module uploads the setting file to the cloud when the user closes the fingerprint browser.

[0014] The synchronization decryption module decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key when the user does not change the device and opens the fingerprint browser, and stores it in the memory; if the user changes the device and opens the fingerprint browser, the fingerprint browser obtains the setting file from the cloud, decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory.

[0015] The one or more technical solutions provided by the application have at least the following technical effects or advantages:

[0016] The application sets a custom encryption and decryption algorithm and sets a corresponding key, so that the account and password used by the user for website login are stored after encryption, ensuring their security; even if the computer is infected or intercepted by others during transmission, the high-security encryption will not cause data leakage.

[0017] The above description is only a summary of the technical solutions of the present application. In order to make the technical means of the present application more clearly understood and implemented according to the content of the description, and in order to make the above and other purposes, characteristics and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application are described below. BRIEF DESCRIPTION OF DRAWINGS

[0018] The present application will be further described below with reference to the accompanying drawings in conjunction with the embodiments.

[0019] Figure 1 The flowchart of the method in the first embodiment of the present application is shown.

[0020] Figure 2 The structural schematic diagram of the device in the second embodiment of the present application is shown. DETAILED DESCRIPTION

[0021] The technical solutions of the embodiments of the present application provide a method and device for securely managing and controlling account passwords in a fingerprint browser, which are used for encrypting and storing the account passwords used for website login in the fingerprint browser, so as to ensure data security during transmission.

[0022] The technical solutions of the embodiments of the present application have the following general ideas:

[0023] 1. A set of encryption and decryption algorithms is set.

[0024] 1.1. The system generates a high-security encryption and decryption key for the user, and the user saves the encryption and decryption key. The platform cannot decrypt without the user inputting the key.

[0025] 1.1.1. The user selects

Account password is not managed in the platform

[0026] The platform does not store this encryption and decryption key. If the user loses the key, the account password cannot be decrypted and used, and needs to be done again.

[0027] 1.1.2. The user selects

Account password is managed in the platform

[0028] The platform generates a 32-bit string as the encryption and decryption key according to the following rules: take the current machine: cpu architecture + cpu core number + hard disk name + hard disk type + hard disk serial number, and extract the set number of strings from it according to the set rules. The remaining string is a randomly generated string.

[0029] 2. Use of cross-machine synchronization of browser account password data

[0030] 2.1 When the user inputs the account password, a dialog box is popped up to let the user choose whether to save. If yes: the account password is saved in the Login Data file under the user profile directory of the browser. (The saved account at this time is encrypted data using the algorithm in step 1)

[0031] If no: do not save Login Data

[0032] 2.2 When the user closes the browser, upload the Login Data file to the cloud

[0033] 2.3 When the user opens the browser on another machine, synchronize Login Data from the cloud to the user profile directory first

[0034] 2.4 When the user opens the browser, read Login Data and decrypt it according to the encryption and decryption method in step 1, and put it into memory.

[0035] 2.5 When the user accesses a webpage, such as www.example.com, check if there is an account password for www.example.com in memory.

[0036] If yes: fill in the account password for www.example.com in the input of the page.

[0037] If not: do nothing

[0038] 3. The specific implementation of encryption and decryption is as follows:

[0039] Encryption: modify the EncryptionResult LoginDatabase::EncryptedString method, replace the encryption algorithm in the method with the AES256 encryption algorithm for encryption;

[0040] Decryption: modify the EncryptionResult LoginDatabase::DecryptedString method, replace the decryption algorithm in the method with the AES256 decryption algorithm for decryption.

[0041] Embodiment one

[0042] As Figure 1 shown, the embodiment provides a method for managing and controlling account password security in a fingerprint browser, the fingerprint browser uses chromium kernel, and specifically includes the following steps:

[0043] Step 1, modify the EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser, replace the encryption algorithm in it with the AES256 encryption algorithm; modify the EncryptionResult LoginDatabase::DecryptedString method, replace the decryption algorithm in it with the AES256 decryption algorithm;

[0044] Step 2, the fingerprint browser receives the account and password input by the user, if the user chooses not to save, end the step; if the user chooses to save, generate a 32-bit string as the encryption and decryption key; encrypt the account and password through the AES256 encryption algorithm, and then save it to the specified file;

[0045] Step 3, when the user closes the fingerprint browser, upload the specified file to the cloud;

[0046] Step 4, when the user does not change the device and opens the fingerprint browser, the fingerprint browser decrypts the specified file according to the AES256 decryption algorithm through the encryption and decryption key and stores it in the memory; if the user changes the device and opens the fingerprint browser, the fingerprint browser obtains the specified file from the cloud, decrypts the specified file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory.

[0047] In the embodiment, preferably, the generation of a 32-bit string as the encryption and decryption key is specifically: obtaining current device information, the device information includes: the architecture of the cpu, the number of cpu cores, the name of the hard disk, the type of the hard disk and the serial number of the hard disk, arranging the device information in a specified order, and then taking the first specified number of strings; then manually input a second specified number of strings by the user, combine the first specified number of strings and the second specified number of strings to form a 32-bit string as the encryption and decryption key, the key is saved by the user; this way, the user saves the encryption and decryption key, so only the user who has the encryption and decryption key can decrypt, greatly ensuring the security of the data.

[0048] In this embodiment, preferably, the 32-bit string is generated as the encryption and decryption key, specifically: obtaining current device information, the device information including: the architecture of the CPU, the number of CPU cores, the name of the hard disk, the type of the hard disk and the serial number of the hard disk, the fingerprint browser arranges the device information in a set order, and then takes the first set number of characters from the string; then generate a second set number of characters randomly, combine the first set number of characters and the second set number of characters to form a 32-bit string as the encryption and decryption key, store the device information and the second set number of characters generated randomly to the cloud, not directly store the encryption and decryption key, but obtain the first set number of characters from the set rule, so even if intercepted, it cannot be decrypted because the specific 32-bit string cannot be obtained.

[0049] For example: the first set number is 24 bits, and the second set number is 8 bits.

[0050] Based on the same inventive concept, the application also provides a device corresponding to the method in embodiment one, which is described in detail in embodiment two.

[0051] Embodiment two

[0052] As shown in Figure 2 In this embodiment, a fingerprint browser account password security management device is provided, which includes:

[0053] The encryption algorithm setting module replaces the encryption algorithm in the EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser with the AES256 encryption algorithm, and replaces the decryption algorithm in the EncryptionResult LoginDatabase::DecryptedString method with the AES256 decryption algorithm.

[0054] The encryption and decryption key generation module receives the user input account and password, if the user chooses not to save, the step is ended; if the user chooses to save, a 32-bit string is generated as the encryption and decryption key; the account and password are encrypted by the AES256 encryption algorithm, and then saved to the set file;

[0055] The upload module uploads the set file to the cloud when the user closes the fingerprint browser.

[0056] The synchronous decryption module, when the user does not change the device and opens the fingerprint browser, the fingerprint browser decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key and stores the setting file in the memory; if the user changes the device and opens the fingerprint browser, the fingerprint browser obtains the setting file from the cloud, decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores the setting file in the memory.

[0057] Preferably, the method for generating a 32-bit string as the encryption and decryption key comprises the following steps: obtaining current device information, the device information comprising the architecture of the CPU, the core number of the CPU, the name of the hard disk, the type of the hard disk and the serial number of the hard disk; arranging the device information in a set order; and then taking a first set number of characters from the device information to form a 32-bit string as the encryption and decryption key.

[0058] Preferably, the method for generating a 32-bit string as the encryption and decryption key comprises the following steps: obtaining current device information, the device information comprising the architecture of the CPU, the core number of the CPU, the name of the hard disk, the type of the hard disk and the serial number of the hard disk; the fingerprint browser arranging the device information in a set order; and then taking a first set number of characters from the device information to form a 32-bit string as the encryption and decryption key.

[0059] For example, the first set number of characters is 24 bits, and the second set number of characters is 8 bits.

[0060] The device described in Embodiment Two of the present application is a device used to implement the method described in Embodiment One of the present application, and therefore, based on the method described in Embodiment One of the present application, those skilled in the art can understand the specific structure and modifications of the device, and therefore, will not be described here. Any device used by the method described in Embodiment One of the present application belongs to the scope of the present application.

[0061] Although the specific embodiments of the present application are described above, those skilled in the art should understand that the specific embodiments described are only illustrative, and are not intended to limit the scope of the present application, and equivalent modifications and changes made by those skilled in the art in accordance with the spirit of the present application should be covered within the scope of the claims of the present application.

Claims

1. A method for secure management of account passwords in a fingerprint browser, characterized in that: The fingerprint browser adopts chromium kernel, and specifically comprises the following steps: Step 1, modifying the EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser, and replacing the encryption algorithm therein with an AES256 encryption algorithm; modifying the EncryptionResult LoginDatabase::DecryptedString method, and replacing the decryption algorithm therein with an AES256 decryption algorithm; Step 2, the fingerprint browser receives the account and password input by the user, if the user chooses not to save, then end the step; if the user chooses to save, then generate a 32-bit string as an encryption and decryption key; encrypt the account and password through the AES256 encryption algorithm, and then save them to a setting file; the generation of the 32-bit string as the encryption and decryption key specifically comprises: obtaining current device information, the device information comprising: the architecture of the cpu, the core number of the cpu, the name of the hard disk, the type of the hard disk and the serial number of the hard disk, arranging the device information in a set order, and then taking a first set number of strings therefrom; then combining the first set number of strings and a second set number of strings input by the user to form a 32-bit string as the encryption and decryption key, and the key is saved by the user Step 3, when the user closes the fingerprint browser, the setting file is uploaded to the cloud; Step 4, when the user does not change the device and opens the fingerprint browser, the fingerprint browser decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory; if the user changes the device and opens the fingerprint browser, the fingerprint browser obtains the setting file from the cloud, decrypts the setting file according to the AES256 decryption algorithm through the encryption and decryption key, and stores it in the memory.

2. The method for secure management of account passwords in a fingerprint browser according to claim 1, characterized in that: The generation of the 32-bit string as the encryption and decryption key specifically comprises: obtaining current device information, the device information comprising: the architecture of the cpu, the core number of the cpu, the name of the hard disk, the type of the hard disk and the serial number of the hard disk, the fingerprint browser arranging the device information in a set order, and then taking a first set number of strings therefrom; then combining the first set number of strings and a second set number of strings generated randomly to form a 32-bit string as the encryption and decryption key, and storing the device information and the second set number of strings generated randomly to the cloud.

3. A device for managing and controlling security of account password in a fingerprint browser, characterized in that: It comprises: The EncryptionResult LoginDatabase::EncryptedString method in the fingerprint browser is modified to replace the encryption algorithm therein with an AES256 encryption algorithm; the EncryptionResult LoginDatabase::DecryptedString method is modified to replace the decryption algorithm therein with an AES256 decryption algorithm; The encryption / decryption key generation module receives the account and password input by the user, and if the user selects not to save, the step ends; if the user selects to save, a 32-bit string is generated as the encryption / decryption key; the account and password are encrypted by the AES256 encryption algorithm, and then saved to the setting file; the 32-bit string generated as the encryption / decryption key is specifically obtained by: obtaining current device information, the device information including: the architecture of the CPU, the core number of the CPU, the name of the hard disk, the type of the hard disk, and the serial number of the hard disk, arranging the device information in a set order, and then taking a first set number of characters therefrom; then, a second set number of characters is input manually by the user, the first set number of characters and the second set number of characters are combined to form a 32-bit string as the encryption / decryption key, and the key is saved by the user The uploading module uploads the setting file to the cloud when the user closes the fingerprint browser; The decryption module decrypts the setting file according to the AES256 decryption algorithm through the encryption / decryption key and stores it in the memory when the user opens the fingerprint browser without changing the device; if the user opens the fingerprint browser after changing the device, the fingerprint browser obtains the setting file from the cloud, decrypts the setting file according to the AES256 decryption algorithm through the encryption / decryption key, and stores it in the memory.

4. The account password security management device in the fingerprint browser according to claim 3, characterized in that: The 32-bit string generated as the encryption / decryption key is specifically obtained by: obtaining current device information, the device information including: the architecture of the CPU, the core number of the CPU, the name of the hard disk, the type of the hard disk, and the serial number of the hard disk, arranging the device information in a set order, and then taking a first set number of characters therefrom; then, a second set number of characters is input manually by the user, the first set number of characters and the second set number of characters are combined to form a 32-bit string as the encryption / decryption key, and the key is saved by the user

Images