Password batch modification method and system for business system equipment and related equipment

Abstract

The embodiment of the invention provides a password batch modification method and system for service system equipment and related equipment, and the method comprises the steps: obtaining account information of a plurality of pieces of equipment with passwords to be modified under the same service through a safety verification mode; generating new passwords for a plurality of password-to-be-modified devices under a plurality of same businesses; establishing a long connection channel between the device to be subjected to password modification and the front-end user; sequentially carrying out password modification operation on the plurality of password-to-be-modified devices under the same service through the long connection channel; the method has the effect of high safety and is suitable for the technical field of equipment operation and maintenance.

Description

Technical Field

[0001] The present application relates to the technical field of equipment operation and maintenance, and specifically to a method and system for batch modifying passwords of business system equipment and related equipment. Background Art

[0002] In many industries and fields, there are clear security compliance requirements that stipulate that the passwords of business systems must be changed regularly to prevent criminals from exploiting possible network vulnerabilities to control server equipment and thus affect the business.

[0003] With the increasing popularity of digital office and remote operation and maintenance, remote password modification has become a common operation. Although it brings convenience, it also comes with many potential risks. These risks involve multiple levels such as network security, identity authentication, operation accuracy, and management and maintenance. If not handled properly, they may pose a serious threat to the security of business systems.

[0004] Therefore, in the existing technology, password modification work for some important business system devices is usually done manually one by one. Manual operation often consumes a lot of manpower costs. It usually takes 1 to 2 weeks to complete the password modification of hundreds of business system devices. The operation workload is huge and the efficiency is low. Summary of the Invention

[0005] In order to solve one of the above technical defects, the embodiments of the present application provide a method, system and related equipment for batch changing passwords of business system devices with higher security.

[0006] A first aspect of an embodiment of the present application provides a method for batch changing passwords of business system devices, comprising: Obtain account information of multiple devices with passwords to be changed under the same service through security verification; Generate new passwords for multiple devices with the same service that need to have their passwords changed; Establish a long connection channel between the device whose password is to be changed and the front-end user; Through the long connection channel, the password change operation is performed on multiple devices with the same service whose passwords are to be changed.

[0007] A second aspect of the embodiments of the present application provides a system for batch changing passwords of business system devices, including: The account information acquisition module is used to obtain the account information of multiple devices with passwords to be modified under the same service through security verification; A new password generation module is used to generate new passwords for multiple devices whose passwords are to be changed; A channel establishment module is used to establish a long connection channel between the device to be password-changed and the front-end user; The password modification module is used to perform password modification operations on multiple devices with passwords to be modified under the same service in sequence through a long connection channel.

[0008] According to a third aspect of an embodiment of the present application, a computer device is provided, comprising: a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any of the above methods when executing the computer program.

[0009] A fourth aspect of the embodiments of the present application provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of any of the above methods when executed by a processor.

[0010] By adopting the method, system and related equipment for batch password modification of business system devices provided in the embodiments of the present application, in the scenario of obtaining account information of multiple password-modified devices under the same business, the security of the business system devices is improved through security verification, and illegal operations are effectively prevented; through the long connection channel, the front-end user can perform password modification operations on multiple password-modified devices under the same business in turn, so that the password modification can be traced.

[0011] The embodiment of the present application ensures accuracy while tracing the modification status through batch password modification, and also provides a solution for the scenario of modifying parameters of large quantities of server devices or network devices, greatly saving labor costs and time costs and improving processing efficiency.

[0012] Other features and advantages of the present invention will be described in the following description, and in part will become apparent from the description, or will be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the contents pointed out in the written description, claims, and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 A flowchart of a method for batch changing passwords for business system devices provided in one embodiment of the present application; Figure 2 This is a flowchart of obtaining account information of multiple password-modified devices under the same service through security verification in one embodiment of the present application; Figure 3 This is a flowchart of performing password modification operations on multiple password-modified devices under the same service in sequence through a long connection channel in one embodiment of the present application; Figure 4 This is a flowchart of performing a password modification operation through an SSH request in one embodiment of the present application; Figure 5 This is a flowchart of an SSH client logging into a device whose password is to be modified and performing a password modification operation in one embodiment of the present application; Figure 6 This is a flowchart of executing a password modification instruction in one embodiment of the present application; Figure 7 A schematic diagram of a system structure for batch changing passwords for business system devices provided in one embodiment of the present application; Figure 8 A schematic diagram of the computer device structure provided for one embodiment of the present application. DETAILED DESCRIPTION

[0014] The solutions in the embodiments of the present application can be implemented using various computer languages, for example, the object-oriented programming language Java and the interpreted scripting language JavaScript.

[0015] In order to make the technical solutions and advantages of the embodiments of the present application more clearly understood, the exemplary embodiments of the present application are further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, and are not an exhaustive list of all the embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other unless they conflict.

[0016] When managing business systems, operations and maintenance personnel usually log in to server devices or related network devices (referred to as operations and maintenance devices) remotely. SSH is usually used to establish a secure channel between the client and the operations and maintenance devices.

[0017] SSH (Secure Shell) is an encrypted network transmission protocol that establishes a secure tunnel in the network to connect the SSH client to the operation and maintenance equipment, providing a secure transmission environment for network services in an insecure network.

[0018] Although SSH is one of the most commonly used secure remote login protocols, changing passwords through SSH (such as using the passwd command) has certain limitations and potential risks. For example, if the root user directly changes the password through SSH, if the session is hijacked (such as through private key leakage or man-in-the-middle attacks), the attacker can directly tamper with all user passwords and control the server device.

[0019] In addition, there is a risk of privilege escalation when modifying passwords for business system devices in batches. For example, batch operations usually require administrator privileges (such as sudo or root). If the script logic is incorrect (such as command injection), it may cause server devices to be tampered with or data to be lost; or the unified key / password may be abused: multiple people share the same credentials to perform batch operations, making it difficult to trace responsibility.

[0020] In response to the above problems, the present application provides a method for batch changing passwords of business system devices, such as Figure 1 As shown, the method includes: S10, obtaining account information of multiple devices with passwords to be modified under the same service through security verification; S20, generating new passwords for multiple devices with the same service whose passwords are to be changed; S30, establishing a long connection channel between the device whose password is to be changed and the front-end user; S40: Perform password modification operations on multiple devices to be modified under the same service in sequence through the long connection channel.

[0021] In an embodiment of the present application, in the scenario of obtaining account information of multiple password-modified devices under the same business, the security of the business system equipment is improved through security verification, and illegal operations are effectively prevented; through a long connection channel, the front-end user can perform password modification operations on multiple password-modified devices under the same business in sequence, so that the password modification can be traced; the embodiment of the present application can trace the modification while ensuring accuracy by modifying passwords in batches.

[0022] In addition, the technical solution of the present application provides a solution for the scenario of modifying parameters of a large number of server devices or network devices, greatly saving manpower costs and time costs and improving processing efficiency.

[0023] like Figure 2 As shown, in a specific embodiment, the S10 obtains account information of multiple password-modified devices under the same service through security verification; including: S101, in the device list, select multiple devices with the same service whose passwords are to be changed; S102, if the auditor's identity verification is passed, SSH credentials are filtered for the device whose password is to be changed; S103, when the reviewer passes the secondary identity verification, requests the server to obtain the account information of the device whose password is to be changed after the credential filtering; including: S103-1, based on the number of devices whose passwords are to be changed after credential filtering, open the same number of data threads; S103-2, through the data thread, cyclically log in to the device whose password is to be changed, and obtain the IP information, account information and password information of the device whose password is to be changed; S103-3, sending the IP information, account information, and password information of the device whose password is to be changed to the device synchronization collection server; S104, obtaining and parsing the return result of the device synchronization acquisition server to obtain all login account names and level information corresponding to the device whose password is to be changed; S105, all login account names and level information corresponding to all password-modified devices are sent to the front-end user.

[0024] Specifically, when creating a new business system device (including server devices and network devices) on the server side, a business tag can be bound to each business system device, so that in the embodiment S101 of the present application, all devices to be modified under the same business tag can be directly selected through a drop-down menu.

[0025] Furthermore, in S102, when the auditor's identity authentication is passed, the SSH credentials of the device to be modified are filtered, and the credentials include: account number, password, port number, protocol type (SSHv1 / SSHv2), etc.

[0026] In a specific embodiment, the S103-2 includes: cyclically logging into the device whose password is to be modified through a data thread to obtain the IP information, account information, and password information of the device whose password is to be modified; including: Use a single-threaded approach to cyclically log in to the device whose password is to be modified, and obtain the encryption password and key of the device whose password is to be modified in turn; Decrypt the encrypted password via AES; Construct SSH command execution parameters; Use the SSH command execution parameters to access the device whose password is to be changed and obtain the IP information, account information, and password information of the device whose password is to be changed.

[0027] Specifically, the process of decrypting the encrypted password using AES can be: Pass in the encrypted password and encryption salt, and convert the encrypted password into a byte[] array; Call the third-party component CIPher; use the CIPher.init (CIPher.DECRYPT_MODE, encryption salt, AES) initialization method; CIPher.DECRYPT_MODE is CIPher's decryption, AES parameter is CIPher's decryption method, cIPher.doFinal (encrypted password byte array), the return result is the decrypted password.

[0028] Furthermore, constructing the SSH command execution request parameters may include: Create an entity class that needs to execute an SSH command to modify the account password. The entity class includes: the unique ID of the current modification command, port number, new password, old password (user login server device, password modification secondary password verification), account number, IP address, device type, etc.

[0029] In a specific embodiment, the step S105 includes sending all login account names and level information corresponding to all password-modified devices to the front-end user, and also includes: Check whether the device account level is within the range of 1-65535 and the account is not equal to root to limit the abuse of superuser privileges.

[0030] In a specific embodiment, S20 generates new passwords for multiple password-changing devices under multiple identical services. The new passwords for the multiple password-changing devices under the multiple identical services are the same below. The new password generation rule is security zone + device type + month and day + special characters + random order. An example of the new password is: Rq%Sa0-&s4[72Q.

[0031] In a specific embodiment, in the S30 of establishing a long connection channel between the device whose password is to be modified and the front-end user, the long connection channel between the device whose password is to be modified and the front-end user may be established through a websocket.

[0032] WebSocket is a full-duplex communication protocol over a single TCP connection, allowing real-time, bidirectional data transmission between client and server devices. During the data transmission phase, after the connection is established, the client and server devices directly exchange data through frames, without the need for HTTP headers, resulting in higher transmission efficiency. The connection can be closed by the client or server device actively sending a Close frame to terminate the connection, or passively closed due to network failure, timeout, etc.

[0033] like Figure 3 As shown, in a specific embodiment, the S40, through a long connection channel, sequentially performs a password modification operation on multiple password-modified devices under the same service; including: S401, bind the currently logged-in user to the persistent connection channel; S402, obtaining the account information and password information of the device whose password is to be changed through the long connection channel; S403, calculating whether the account information is empty; If the account information is empty, the front-end user is notified through the persistent connection channel that the password to be changed is an error message; S404: If the account information is not empty, calculate whether the account index is out of bounds; If the account index is out of bounds, the front-end user will be notified through the persistent connection channel that the password device to be changed is an error message; S405: If the account index is within the range, obtain the password modification template; If the password template cannot be obtained, the front-end user is notified through the persistent connection channel that the password device to be changed is an error message; S406, if the password modification template is successfully obtained, the password modification record is saved and the password modification operation is performed through an SSH request; S407: If the password of the device to be modified is an error message, obtain the account information and password information of the next device to be modified, continue the password modification operation, or stop modifying the password and disconnect the channel.

[0034] Specifically, since modifying the account password of the password-changing device (server device or network device) is a high-risk operation, the operation must be safe and all operations must be recorded; therefore, this application uses a single-threaded approach to perform password modification operations on multiple password-changing devices under the same business in sequence.

[0035] Furthermore, the password modification template refers to the command to be executed by the device (server device or network device) whose password is to be modified, and the account number and the password to be modified are occupied by placeholders. For example: The template command of the server device is: passwd ${select account}; The network device template command is: system aaa local-user ${select an account} password cipher ${random password} quit.

[0036] Furthermore, the calculation of whether the account index is out of bounds is as follows: calculating whether the account index of the current device whose password is to be modified is greater than the total number; if so, it is determined to be out of bounds; wherein, the index starts from 0, and the account index increases by one each time a device is modified.

[0037] like Figure 4 As shown, in a specific embodiment, in S406, performing a password modification operation through an SSH request includes: S406-1, constructing SSH command execution request parameters; S406-2, the SSH client logs in to the device whose password is to be changed and performs the password change operation; S406-3, parsing the return result of the password change; If the returned result is an error, the front-end user is notified through the persistent connection channel that the device to be modified has an error message; S406-4, if the returned result is correct, verify whether the modified new password can be used to log in to the device whose password is to be changed; S406-5, if the login is possible, then bind new credential information to the device whose password is to be changed; If the login is not possible, the front-end user will be notified through the persistent connection channel that the device to be modified password is an error message; S406-6, update the password operation record, and display the return result of the password change and whether the new password can successfully log in to the front-end user.

[0038] Specifically, the new credential information bound to the password device to be modified may include: Calculate whether the current device account credential exists; obtain the credential from the Concurrent Hash Map, where the key is user id + "_" + business system id; If it exists, update the device binding credential information and update it to the new credential. The same business system password and credential are the same; If it does not exist, a new credential is generated; the credential generation rule can be: the first letter of the device name in pinyin + account number + generation year, month and day, and the credential is stored in a Concurrent Hash Map with the key being user id + "_" + business system id; and the device binding credential information is updated to the new credential.

[0039] In network services, they are generally divided into front-end and back-end. The back-end is distributed and includes multiple microservices, each of which has its own corresponding functional business. One of the microservices is specifically used to build channel connections with host devices, network devices, databases, etc. This service is the SSH client service (SSH client for short). Another microservice is used to interact with front-end users and meet the needs of front-end user interactions. This service is a business service.

[0040] When the front-end user initiates a command to change the device password to the business service, the business service receives the front-end user's request and constructs an SSH connection request message. The SSH connection request message generally includes: device IP number, port number, account number, password, execution of the password change command and other information. The SSH connection request message is then packaged and sent to the SSH client service. After receiving the SSH connection request message, the SSH client service establishes a connection channel with the host device, network device, data center, etc. through the device IP number, port number, account number, password and other information sent by the business service. If the connection is successful, the password change command is executed.

[0041] In a specific embodiment, the step S406-2, wherein the SSH client logs in to the device whose password is to be changed and performs a password change operation, includes: S406-2-1, constructing SSH login server device request parameters; S406-2-2, create an SSH connection channel through the jsch component; S406-2-3, when the SSH client successfully logs in to the device whose password is to be changed, the SSHClient connection channel is encapsulated; S406-2-4, obtain the outputStream standard output stream, InputStream standard input stream, and etxInputStream extended input stream from the SSHClient connection channel; S406-2-5, execute the locale command using the outputStream standard output stream to obtain the encoding format of the current password device to be modified; Among them, different password-changing devices have different encoding formats, and different encoding formats correspond to corresponding parsing formats; in order to accurately identify the content returned by the password-changing device; the encoding format example is: LANG=zh_CN.UTF-8 LANGUAGE=zh_CN:zh LC_CTYPE="zh_CN.UTF-8" LC_NUMERIC="zh_CN.UTF-8" LC_TIME="zh_CN.UTF-8" LC_COLLATE="zh_CN.UTF-8" LC_MONETARY="zh_CN.UTF-8" LC_MESSAGES="zh_CN.UTF-8" LC_PAPER="zh_CN.UTF-8" LC_NAME="zh_CN.UTF-8" LC_ADDRESS="zh_CN.UTF-8" LC_TELEPHONE="zh_CN.UTF-8" LC_MEASUREMENT="zh_CN.UTF-8" LC_IDENTIFICATION="zh_CN.UTF-8" LC_ALL= ”.

[0042] S406-2-6, using a while loop to monitor whether there is an InputStream standard input stream; if so, parse the content of the InputStream standard input stream to obtain the service encoding format of the current password device to be modified, and set the parsed output stream encoding; Specifically, the parsed output stream encoding is parsed accordingly according to the service encoding format.

[0043] S406-2-7, execute the password change instruction.

[0044] Specifically, the SSH login server device request parameter example is: {"commands":["passwdhljfyth"], "deviceType":"1", "host":"192.168.40.33", "modifyPass":"0:&qq(RSa24-S7", "password":"0&5qa1#4RQ%sS~", "port":22, "sshVersion":2, "userName":"hljfyth", "uuid":"b48e3979-4343-4099-bf9a-d7e9f9cbc286"}.

[0045] In a specific embodiment, the step S406-2-7, executing the password modification instruction, includes: S406-2-7-1, determine the type of the device whose password is to be changed; S406-2-7-2, if the type of the device whose password is to be changed is a server device, then: Loop monitoring to see if there is an etxInputStream extended input stream; if there is an etxInputStream extended input stream, obtain the return result of the server device and parse it; If the parsed content contains UNIX content, enter the old password for secondary login verification, obtain the secondary verification result returned by the server device and parse it, and then process it as if the parsed content does not contain UNIX content; When the parsed content does not include UNIX content, determining whether the calculation result includes first parsed content; wherein: the first parsed content is: (enter new|New|Retype new|)(UNIX password|UNIX password|password|password)(:|:|:|); Specifically, the UNIX content is: when the server device executes the password modification, it needs to verify the old password. The security levels of different server devices are different. Some server devices do not require a second verification of the old password when modifying the account password, but some server devices require a second verification of the old password. Only after the verification is passed can the new password be modified.

[0046] S406-2-7-2-3, if the first parsed content is included, execute the while loop, and perform the following operations in the while loop: Use the outputStream standard output stream to execute the new password input command; A while loop is used to monitor whether the etxInputStream extended input stream has a service return result; if a result is returned, the return result is calculated to determine whether it contains the second parsed content; wherein the second parsed content is: (enter new|new|New|retype new|)(UNIX password|UNIX password|password|password)(:|:|:|); If the second parsed content is included, continue executing the while loop; S406-2-7-3, if the second parsed content or the first parsed content is not included, then end the while loop and assemble and execute the password change to return the result; S406-2-7-4, if the type of the device whose password is to be changed is a network device, then: Loop monitoring to see if there is an InputStream standard input stream; if there is an eInputStream standard input stream, obtain the result returned by executing the password change operation on the current network device; Assemble and execute the password change to return the result.

[0047] Since network devices and server devices have different functional positioning, the embodiment of the present application sets different password modification methods according to the type of device whose password is currently to be modified (server device or network device), thereby improving the flexibility of password modification.

[0048] It should be understood that, although the various steps in the flowchart are shown in sequence as indicated by the arrows, these steps are not necessarily performed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps may be performed in other orders. Moreover, at least a portion of the steps in the figure may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily performed at the same time, but may be performed at different times. The execution order of these sub-steps or stages is not necessarily to be performed in sequence, but may be performed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0049] like Figure 7 As shown, one embodiment of the present application provides a system for batch changing passwords of business system devices, including: The account information acquisition module is used to obtain the account information of multiple devices with passwords to be modified under the same service through security verification; A new password generation module is used to generate new passwords for multiple devices whose passwords are to be changed; A channel establishment module is used to establish a long connection channel between the device to be password-changed and the front-end user; The password modification module is used to perform password modification operations on multiple devices with passwords to be modified under the same service in sequence through a long connection channel.

[0050] The specific definition of the batch password modification system for a business system device described above can be found in the definition of the batch password modification method for a business system device described above and will not be repeated here. Each module in the above system can be implemented in whole or in part through software, hardware, or a combination thereof. Each of the above modules can be embedded in or independent of a processor in a computer device in hardware form, or can be stored in a memory in a computer device in software form, so that the processor can call and execute the corresponding operations of each of the above modules.

[0051] In one embodiment, a computer device is provided, wherein the internal structure diagram of the computer device can be as follows: Figure 8As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, it implements a method for batch changing passwords of a business system device as described above. It includes: a memory and a processor, the memory stores a computer program, and when the processor executes the computer program, it implements any step in the method for batch changing passwords of a business system device as described above.

[0052] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, any step in the above-mentioned method for batch changing passwords of business system devices can be implemented.

[0053] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0054] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0055] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0056] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 The steps for the function specified in one or more boxes.

[0057] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present application.

[0058] Obviously, those skilled in the art may make various changes and modifications to this application without departing from the spirit and scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalents, this application is intended to include these modifications and variations.

Claims

1. A method for batch changing passwords of business system devices, characterized in that: include: Obtain account information of multiple devices with passwords to be changed under the same service through security verification; Generate new passwords for multiple devices with the same service that need to have their passwords changed; Establish a long connection channel between the device whose password is to be changed and the front-end user; Through the long connection channel, the password change operation is performed on multiple devices with the same service whose passwords are to be changed.

2. The method for batch changing passwords of business system devices according to claim 1, characterized in that: The method of obtaining the account information of multiple devices to be modified for the same service through security verification includes: In the device list, select multiple devices with the same service whose passwords you want to change. If the auditor's identity verification is passed, SSH credentials are filtered for devices whose passwords are to be changed; If the reviewer passes the secondary identity verification, the server is requested to obtain the account information of the device whose password is to be changed after the credentials are filtered; this includes: Open the same number of data threads based on the number of devices whose passwords are to be changed after credential filtering; Through the data thread, cyclically log in to the device whose password is to be changed, and obtain the IP information, account information and password information of the device whose password is to be changed; Send the IP information, account information and password information of the device whose password is to be changed to the device synchronization collection server; Obtain and parse the return results from the device synchronization acquisition server to obtain all login account names and level information corresponding to the device whose password is to be changed; All login account names and level information corresponding to all devices whose passwords are to be changed are sent to the front-end user.

3. The method for batch changing passwords of business system devices according to claim 1, characterized in that: The method of sequentially performing password modification operations on multiple password-modified devices under the same service through a long connection channel includes: Bind the currently logged-in user to the persistent connection channel; Obtain the account information and password information of the device whose password is to be changed through the persistent connection channel; Calculate whether the account information is empty; If the account information is empty, the front-end user is notified through the persistent connection channel that the password to be changed is an error message; If the account information is not empty, calculate whether the account index is out of bounds; If the account index is out of bounds, the front-end user will be notified through the persistent connection channel that the password device to be changed is an error message; If the account index is not out of bounds, then get the password modification template; If the password template cannot be obtained, the front-end user is notified through the persistent connection channel that the password device to be changed is an error message; If the password modification template is obtained successfully, the password modification record is saved and the password modification operation is performed through SSH request; If the device to be modified has an error message, obtain the account information and password information of the next device to be modified, continue the password modification operation, or stop modifying the password and disconnect the channel.

4. The method for batch changing passwords of business system devices according to claim 3, characterized in that: The password modification operation is performed through the SSH request; including: Construct SSH command execution request parameters; Use the SSH client to log in to the device whose password is to be changed and change the password; Parse the return result of changing the password; If the returned result is an error, the front-end user is notified through the persistent connection channel that the device to be modified has an error message; If the returned result is correct, verify whether the modified new password can be used to log in to the device whose password is to be changed; If you can log in, then bind new credential information to the device whose password is to be changed; If the login is not possible, the front-end user will be notified through the persistent connection channel that the device to be modified password is an error message; Update the password operation record and display the return result of the password change and whether the new password can be successfully logged in to the front-end user.

5. The method for batch changing passwords of business system devices according to claim 4, characterized in that: The SSH client logs in to the device whose password is to be changed and performs a password change operation, including: Construct SSH login server device request parameters; Create an SSH connection channel through the jsch component; When the SSH client successfully logs in to the device whose password is to be changed, the SSHClient connection channel is encapsulated; From the SSHClient connection channel, obtain the outputStream standard output stream, InputStream standard input stream, and etxInputStream extended input stream; Use the outputStream standard output stream to execute the locale command to obtain the encoding format of the password device to be modified; Use a while loop to monitor whether there is an InputStream standard input stream; if so, parse the content of the InputStream standard input stream, obtain the service encoding format of the current password device to be modified, and set the parsed output stream encoding; Execute the change password command.

6. The method for batch changing passwords of business system devices according to claim 5, characterized in that: The executing the password modification instruction includes: Determine the type of the device whose password is to be changed; If the device whose password is to be changed is a server device, then: Loop monitoring to see if there is an etxInputStream extended input stream; if there is an etxInputStream extended input stream, obtain the return result of the server device and parse it; If the parsed content contains UNIX content, enter the old password for secondary login verification, obtain the secondary verification result returned by the server device and parse it, and then process it as if the parsed content does not contain UNIX content; When the parsed content does not include UNIX content, determining whether the calculation result includes first parsed content; wherein: the first parsed content is: (enter new|new|New|re-enter new|Retype new|) (UNIX password|UNIX password|password|password) (:|:|:|); If the first parsed content is included, execute the while loop and perform the following operations in the while loop: Use the outputStream standard output stream to execute the new password input command; Use a while loop to monitor whether the etxInputStream extended input stream has a service return result; if a result is returned, calculate whether the return result contains the second parsed content; where: the second parsed content is: (enter new|new|New|re-enter new|Retype new|) (UNIX password|UNIX password|password|password) (:|:|:|); If the second parsed content is included, continue executing the while loop; If the second parsed content is not included, then end the while loop, and assemble and execute the password change to return the result; If the first parsed content is not included, then the password modification instruction is terminated, and the password modification instruction is executed and the result is returned; If the device whose password is to be changed is a network device, then: Loop monitoring to see if there is an InputStream standard input stream; if there is an eInputStream standard input stream, obtain the result returned by executing the password change operation on the current network device; Assemble and execute the password change to return the result.

7. The method for batch changing passwords of business system devices according to claim 1, characterized in that: The new passwords of the multiple password-modified devices under the same service are the same.

8. A password batch modification system for business system equipment, characterized in that: include: The account information acquisition module is used to obtain the account information of multiple devices with passwords to be modified under the same service through security verification; A new password generation module is used to generate new passwords for multiple devices whose passwords are to be changed; A channel establishment module is used to establish a long connection channel between the device to be password-changed and the front-end user; The password modification module is used to perform password modification operations on multiple devices with passwords to be modified under the same service in sequence through a long connection channel.

9. A computer device comprising: The method comprises a memory and a processor, wherein the memory stores a computer program, and is characterized in that the processor implements the steps of the method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images