Password security system based on configuration strategy

Abstract

The invention relates to a password security system based on a configuration strategy. The password security system comprises a strategy definition unit, a strategy distribution unit and a dynamic adjustment unit, the strategy definition unit comprises a strategy type module, a strategy configuration module and a strategy template module; the strategy distribution unit comprises a user group management module, a dynamic distribution module and a strategy priority module; wherein the user group management module supports creation and management of a plurality of different user groups, and each user group can be associated with one or more password strategies; the dynamic allocation module dynamically allocates an optimal password strategy according to roles, permissions or application scenes of the users; the policy priority module is used for supporting setting of policy priorities, and when multiple policies conflict, the policies with high priorities are executed preferentially according to the high-low order of the priorities; the dynamic adjusting unit comprises a real-time monitoring module, a strategy updating module and a notification mechanism module.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a password security system based on configuration policies, which can adapt to different application scenarios by flexibly configuring multiple password policies. Background Art

[0002] With the rapid development of information technology, the importance of personal information and data security has become increasingly prominent. Traditional password management systems usually only support a single password policy and cannot meet the diverse needs of different application scenarios and user groups. For example, ordinary users may need simple and easy-to-remember passwords, while financial institutions or government agencies require more complex and strict security measures.

[0003] Therefore, it is particularly necessary to develop a password security system that can flexibly configure multiple password policies. Summary of the invention

[0004] In view of the above technical problems in the related art, the present invention proposes a password security system based on configuration strategy, which can overcome the above deficiencies in the prior art.

[0005] To achieve the above technical objectives, the technical solution of the present invention is implemented as follows: A password security system based on configuration policy, comprising a policy definition unit, a policy allocation unit and a dynamic adjustment unit; The policy definition unit includes a policy type module, a policy configuration module, and a policy template module. The policy type module is used to set various types of password policies. The policy configuration module includes a graphical interface that allows administrators to customize and configure different password policies. The policy template module has several password policy templates pre-set to facilitate users to quickly select and apply them. The policy allocation unit includes a user group management module, a dynamic allocation module, and a policy priority module; the user group management module supports the creation and management of several different user groups, each of which can be associated with one or more password policies; the dynamic allocation module dynamically allocates the best password policy based on the user's role, authority or application scenario; the policy priority module is used to support the setting of policy priorities. When multiple policies conflict, the high-priority policy is executed first in order of priority; The dynamic adjustment unit includes a real-time monitoring module, a policy update module, and a notification mechanism module; the monitoring module is used to monitor the user's password usage in real time and automatically detect weak passwords and expired passwords; the policy update module is used for administrators to update and adjust password policies at any time, and the system automatically synchronizes to relevant user groups; the notification mechanism module is used to automatically notify affected users when the policy changes, and guide users to update their passwords.

[0006] Preferably, the password policy includes but is not limited to length requirements, character combination requirements, weak password rules, validity period, history check, etc.

[0007] Preferably, in the password policy, Length requirements include: - setting the minimum and maximum length of the password; Character combination requirements include: requiring passwords to contain a combination of uppercase and lowercase letters, numbers, and special characters; Weak password rules include: - Setting weak password rules through weak password library or regular expressions; Validity period includes: - set the validity period of the password, which must be changed after expiration; History checking includes -- prohibiting users from reusing passwords that were recently used.

[0008] Preferably, a graphical interface is provided in the policy configuration module, and the administrator can easily configure different password policies by dragging and selecting, and supports importing and exporting policy configuration files to facilitate backup and migration.

[0009] Preferably, the templates preset in the policy template module include "enterprise-level security", "ordinary user", "high security requirements" and the like.

[0010] Preferably, a template can be used as a basis, allowing the administrator to fine-tune it as needed.

[0011] Preferably, the functions of the user group management module include creating and managing different user groups, each user group can be associated with one or more password policies; the functions of the user group management module also include supporting nesting of user groups to facilitate the management of complex organizational structures.

[0012] Preferably, the functions of the dynamic allocation module include automatically allocating the best password policy according to the user's attributes and supporting manual adjustment of the association between the user group and the policy; the user's attribute types include role, department, and authority.

[0013] Preferably, the function of the policy priority module includes setting the priority of the policy, and when multiple policies conflict, the policy with a higher priority is executed first.

[0014] Preferably, the priority can be specified during policy configuration or set during user group management.

[0015] Preferably, the functions of the real-time monitoring module include real-time monitoring of user password usage, automatic detection of weak passwords and expired passwords, and support for regular scanning and reporting to help administrators identify potential security risks in a timely manner.

[0016] Preferably, the functions of the policy update module include that the administrator can update and adjust the password policy at any time, and the system automatically synchronizes it to the relevant user groups. Support version control, retain historical versions, and facilitate rollback and audit.

[0017] Preferably, the function of the notification mechanism module includes that when the policy changes, the system automatically notifies the affected users and guides them to update their passwords. Several notification methods are supported, all of which include email, SMS, system messages, etc.

[0018] Beneficial effects of the present disclosure: The present disclosure solves the problem that a single strategy in the existing password management system cannot meet diverse needs, and can automatically adapt the most appropriate password strategy according to different application scenarios and user groups.

[0019] The disclosure is flexible, supports multiple password policies, and can flexibly adapt to different application scenarios and user groups. The disclosure is easy to use, provides a friendly user interface and detailed help documents, allowing users to easily manage and use passwords. The disclosure is scalable, supports dynamic adjustment and expansion, and can adapt to future technological developments and changes in security requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0021] Figure 1 This is a structural architecture diagram of the password security system based on configuration policies disclosed in the present invention. DETAILED DESCRIPTION

[0022] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0023] like Figure 1 As shown, in order to facilitate understanding of the above technical solutions of the present invention, the above technical solutions of the present invention are described in detail below through specific usage methods.

[0024] The password security system based on configuration policy includes a policy definition unit, a policy allocation unit and a dynamic adjustment unit; The policy definition unit includes a policy type module, a policy configuration module, and a policy template module. The policy type module is used to set various types of password policies. The policy configuration module includes a graphical interface that allows administrators to customize and configure different password policies. The policy template module has several password policy templates pre-set to facilitate users to quickly select and apply them. The policy allocation unit includes a user group management module, a dynamic allocation module, and a policy priority module; the user group management module supports the creation and management of several different user groups, each of which can be associated with one or more password policies; the dynamic allocation module dynamically allocates the best password policy based on the user's role, authority or application scenario; the policy priority module is used to support the setting of policy priorities. When multiple policies conflict, the high-priority policy is executed first in order of priority; The dynamic adjustment unit includes a real-time monitoring module, a policy update module, and a notification mechanism module; the monitoring module is used to monitor the user's password usage in real time and automatically detect weak passwords and expired passwords; the policy update module is used for administrators to update and adjust password policies at any time, and the system automatically synchronizes to relevant user groups; the notification mechanism module is used to automatically notify affected users when the policy changes, and guide users to update their passwords.

[0025] In one embodiment, the password policy includes but is not limited to length requirements, character combination requirements, weak password rules, validity period, history check, etc.

[0026] In one embodiment, in the password policy, Length requirements include: - setting the minimum and maximum length of the password; Character combination requirements include: requiring passwords to contain a combination of uppercase and lowercase letters, numbers, and special characters; Weak password rules include: - Setting weak password rules through weak password library or regular expressions; Validity period includes: - set the validity period of the password, which must be changed after expiration; History checking includes -- prohibiting users from reusing passwords that were recently used.

[0027] In one embodiment, a graphical interface is provided in the policy configuration module, and the administrator can easily configure different password policies by dragging and selecting. The module supports importing and exporting policy configuration files, which facilitates backup and migration.

[0028] In a certain embodiment, the templates preset by the policy template module include "enterprise-level security", "ordinary user", "high security requirements", etc.

[0029] In one embodiment, the template can be used as a basis, allowing the administrator to make fine-tuning adjustments as needed.

[0030] In one embodiment, the functions of the user group management module include creating and managing different user groups, each of which can be associated with one or more password policies; the functions of the user group management module also include supporting nesting of user groups to facilitate the management of complex organizational structures.

[0031] In a certain embodiment, the functions of the dynamic allocation module include automatically allocating the best password policy according to the user's attributes and supporting manual adjustment of the association between the user group and the policy; the user's attribute types include role, department, and authority.

[0032] In a certain embodiment, the function of the policy priority module includes setting the priority of the policy, and when multiple policies conflict, the high-priority policy is executed first.

[0033] In one embodiment, the priority may be specified during policy configuration or set during user group management.

[0034] In one embodiment, the functions of the real-time monitoring module include real-time monitoring of user password usage, automatic detection of weak passwords and expired passwords, and support for regular scanning and reporting to help administrators identify potential security risks in a timely manner.

[0035] In one embodiment, the functions of the policy update module include that the administrator can update and adjust the password policy at any time, and the system automatically synchronizes it to the relevant user groups. It supports version control, retains historical versions, and facilitates rollback and auditing.

[0036] In one embodiment, the function of the notification mechanism module includes that when the policy changes, the system automatically notifies the affected users and guides them to update their passwords. Several notification methods are supported, all of which include email, SMS, system messages, etc.

[0037] In summary, through the above unique technical solutions, the present disclosure solves the problem that a single strategy in the existing password management system cannot meet the diversified needs, and can automatically adapt the most appropriate password strategy according to different application scenarios and user groups. The present disclosure is flexible, supports multiple password strategies, and can flexibly adapt to different application scenarios and user groups. The present disclosure is easy to use, provides a friendly user interface and detailed help documents, so that users can easily manage and use passwords. The present disclosure is scalable, supports dynamic adjustment and expansion, and can adapt to future technological developments and changes in security requirements.

[0038] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A password security system based on configuration strategy, characterized in that: It includes a policy definition unit, a policy allocation unit and a dynamic adjustment unit; The policy definition unit includes a policy type module, a policy configuration module, and a policy template module. The policy type module is used to set various types of password policies. The policy configuration module includes a graphical interface that allows administrators to customize and configure different password policies. The policy template module has several password policy templates pre-set to facilitate users to quickly select and apply them. The policy allocation unit includes a user group management module, a dynamic allocation module, and a policy priority module; the user group management module supports the creation and management of several different user groups, each of which is associated with one or more password policies; the dynamic allocation module dynamically allocates the best password policy based on the user's role, authority or application scenario; the policy priority module is used to support the setting of policy priorities. When multiple policies conflict, the high-priority policy is executed first in order of priority; The dynamic adjustment unit includes a real-time monitoring module, a policy update module, and a notification mechanism module; the monitoring module is used to monitor the user's password usage in real time and automatically detect weak passwords and expired passwords; the policy update module is used for administrators to update and adjust password policies at any time, and the system automatically synchronizes to relevant user groups; the notification mechanism module is used to automatically notify affected users when the policy changes, and guide users to update their passwords.

2. A password security system as claimed in claim 1, characterized in that Password policies include but are not limited to length requirements, character combination requirements, weak password rules, validity period, and history check.

3. The password security system as claimed in claim 1, characterized in that In the password policy, Length requirements include: - setting the minimum and maximum length of the password; Character combination requirements include: requiring passwords to contain a combination of uppercase and lowercase letters, numbers, and special characters; Weak password rules include: - Setting weak password rules through weak password library or regular expressions; Validity period includes: - set the validity period of the password, which must be changed after expiration; History checking includes -- prohibiting users from reusing passwords that were recently used.

4. The password security system of claim 1, wherein: The policy configuration module provides a graphical interface, allowing administrators to easily configure different password policies by dragging and selecting. It supports importing and exporting policy configuration files for easy backup and migration.

5. The password security system of claim 1, wherein: The pre-set templates of the policy template module include "Enterprise-level security", "Ordinary user", and "High security requirements"; The template serves as a foundation, allowing administrators to fine-tune it as needed.

6. The password security system of claim 1, wherein: The functions of the user group management module include creating and managing different user groups, each of which is associated with one or more password policies; the functions of the user group management module also include supporting the nesting of user groups to facilitate the management of complex organizational structures; The functions of the dynamic allocation module include automatically allocating the best password policy based on user attributes and supporting manual adjustment of the relationship between user groups and policies; user attribute types include role, department, and authority; The functions of the policy priority module include setting policy priorities. When multiple policies conflict, the policy with the higher priority is executed first. Priorities are specified during policy configuration or set during user group management.

7. The password security system of claim 1, wherein: The functions of the real-time monitoring module include: real-time monitoring of user password usage, automatic detection of weak passwords and expired passwords; support for regular scanning and reporting to help administrators identify potential security risks in a timely manner.

8. The password security system of claim 1, wherein: The functions of the policy update module include: administrators can update and adjust password policies at any time, and the system will automatically synchronize them to relevant user groups; support version control, retain historical versions, and facilitate rollback and auditing.

9. The password security system of claim 1, wherein: The functions of the notification mechanism module include: when the policy changes, the system automatically notifies the affected users and guides them to update their passwords; supports several notification methods, all of which include email, SMS, and system messages.

Images