Password generation method of power equipment and password management system of power equipment

Abstract

The invention discloses a password generation method of power equipment and a password management system of the power equipment. The method comprises the following steps: randomly selecting from a preset password seed bank to obtain a target password seed number; randomly selecting in a preset generation rule base to obtain a target generation rule; determining a target password of the target power equipment based on the target password seed number and the target generation rule; transmitting the target password seed number and the target generation rule to the authentication terminal; receiving an input password determined by the authentication terminal based on the target password seed number and the target generation rule; and under the condition that the input password is matched with the target password, determining to log in the target power equipment. The technical problems of numerous power equipment, difficulty in password management and certain security risk in the current transformer substation are solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, in particular to a password generation method of power equipment and a password management system of power equipment. BACKGROUND

[0002] In the conventional power equipment of a substation, in order to ensure the safety of the equipment, the equipment is required to be provided with a password, only a user who knows the password is allowed to log in and operate the equipment, and there are specific requirements for identity authentication information in the second and third level of information security protection systems, which require that the identity of the logged-in user be identified and authenticated, the identity identification has uniqueness, and the identity authentication information has complexity requirements and is changed periodically. However, in actual operation and maintenance, due to the large number of substation hosts, for example, in Beijing, more than 300 substations are under the jurisdiction of the Beijing company, and more than 1000 host devices, and the existing secret management relies on manual modification, and manual password modification is time-consuming and laborious, therefore, the existing system generally has the phenomenon of using default password, weak password or unified password, the password complexity is insufficient, the default password or simple password is easy to be cracked by brute force, and in order to facilitate the employees to remember the password, the unified password of multiple devices is also used, which leads to serious password reuse problem, if the password of a device is leaked, it is easy to cause a chain attack on other devices. And because there are many host devices and the password is maintained by the operation and maintenance personnel, even if the password is set artificially, it is also easy to cause the password to be used for a long time or to be low in complexity due to human factors, and does not meet the system requirements. At the same time, since the password is modified manually, the password must be known by the setter and the device user, which is easy to cause leakage due to human factors.

[0003] At present, no effective solution has been proposed for the above problems. SUMMARY

[0004] The embodiments of the present application provide a password generation method of power equipment and a password management system of power equipment, to at least solve the technical problem that there are many power equipment in the substation at present, the password is difficult to manage and there is a certain security risk.

[0005] According to one aspect of the embodiments of the present application, a password generation method of power equipment is provided, comprising: randomly selecting a target password seed number in a preset password seed library; randomly selecting a target generation rule in a preset generation rule library; determining a target password of a target power equipment based on the target password seed number and the target generation rule; transmitting the target password seed number and the target generation rule to an authentication terminal; receiving an input password determined by the authentication terminal based on the target password seed number and the target generation rule; and determining to log in the target power equipment in the case that the input password matches the target password.

[0006] Optionally, before the target password seed number and the target generation rule are transmitted to the authentication terminal, the IP address of the target power device and the user identification are sent to the authentication terminal, wherein the authentication terminal is configured to detect whether the IP address and the user identification match; the detection result returned by the authentication terminal is received; and in the case that the detection result is a match success, the target password seed number and the target generation rule are transmitted to the authentication terminal.

[0007] Optionally, the transmission of the target password seed number and the target generation rule to the authentication terminal comprises: encrypting the target password seed number and the target generation rule to obtain an encrypted ciphertext; and transmitting the encrypted ciphertext to the authentication terminal.

[0008] Optionally, in the case that the login to the target power device based on the target password is successful, a new password seed number is randomly selected from the password seed library again; a new generation rule is randomly selected from the generation rule library again; and a new password of the target power device is determined based on the new password seed number and the new generation rule.

[0009] Optionally, in the case that it is detected that the target power device has not been logged in for more than a preset number of days, the target password of the target power device is modified.

[0010] According to another aspect of the embodiments of the present application, a power device password management system is also provided, comprising: a password control plug-in configured to generate a password corresponding to a power device based on any one of the power device password generation methods; a control terminal configured to generate an authentication two-dimensional code based on the password corresponding to the power device; and an authentication terminal configured to scan the authentication two-dimensional code to complete authentication, obtain a password seed number and a generation rule, and generate an input password based on the password seed number and the generation rule.

[0011] According to another aspect of the embodiments of the present application, a power device password generation device is also provided, comprising: a first selection module configured to randomly select a target password seed number from a preset password seed library; a second selection module configured to randomly select a target generation rule from a preset generation rule library; a determination module configured to determine a target password of a target power device based on the target password seed number and the target generation rule; a transmission module configured to transmit the target password seed number and the target generation rule to an authentication terminal; a receiving module configured to receive an input password determined by the authentication terminal based on the target password seed number and the target generation rule; and a login module configured to determine to log in to the target power device in the case that the input password matches the target password.

[0012] According to still another aspect of the embodiments of the present application, a non-volatile storage medium is also provided, comprising a stored program, wherein the program controls a device in which the non-volatile storage medium is located to execute any one of the power device password generation methods when the program is running.

[0013] According to still another aspect of the embodiments of the present application, a computer device is provided, which comprises a processor configured to execute a program, wherein the program is configured to implement the power device password generation method according to any one of the above.

[0014] According to still another aspect of the embodiments of the present application, a computer program product is provided, which comprises a computer program configured to implement the power device password generation method according to any one of the above when executed by a processor.

[0015] In the embodiments of the present application, the power device password generation method is adopted, the target password seed number is obtained by randomly selecting in the preset password seed library, the target generation rule is obtained by randomly selecting in the preset generation rule library, the target password of the target power device is determined based on the target password seed number and the target generation rule, the target password seed number and the target generation rule are transmitted to the authentication terminal, the input password determined by the authentication terminal based on the target password seed number and the target generation rule is received, and the target power device is determined to be logged in in the case that the input password matches the target password, so as to achieve the purpose of not needing the user to remember or input the password, thereby realizing the technical effect of improving the password management efficiency and security, and further solving the technical problems that the power devices are numerous in the substation, the password is difficult to manage, and there is a certain security risk. BRIEF DESCRIPTION OF DRAWINGS

[0016] The accompanying drawings, which are included to provide a further understanding of the present application and constitute a part of this application, illustrate embodiments of the present application and together with the description serve to explain the present application. In the drawings:

[0017] Figure 1 Fig. 1 shows a hardware structure block diagram of a computer terminal for implementing the power device password generation method;

[0018] Figure 2 Fig. 2 is a flowchart of the power device password generation method according to an embodiment of the present application;

[0019] Figure 3 Fig. 3 is a schematic diagram of the power device password management system according to an embodiment of the present application;

[0020] Figure 4 Fig. 4 is a structure block diagram of the power device password generation device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to better understand the technical scheme of the present application, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative efforts should fall within the scope of the present application.

[0022] It should be noted that the terms "first", "second" and the like in the description and claims of the present application and the above-described accompanying drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or a chronological sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0023] According to the embodiments of the present application, a method embodiment of a password generation method of a power device is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described herein can be executed in an order different from that shown herein.

[0024] The method embodiment provided by the first embodiment of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 A hardware structure block diagram of a computer terminal for implementing a password generation method of a power device is shown. As shown in Figure 1 The computer terminal 10 can include one or more processors (the processor can include but is not limited to a microprocessor MCU or a programmable logic device FPGA processing device) (shown in 102a, 102b,..., 102n in the figure), a memory 104 for storing data. In addition, it can also include a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which can be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. Those skilled in the art can understand that Figure 1 The structure shown is only schematic, which does not limit the structure of the above-mentioned electronic device. For example, the computer terminal 10 can also include more or fewer components than those shown in Figure 1 the above-mentioned electronic device. For example, the computer terminal 10 can also include more or fewer components than those shown inFigure 1 different configurations.

[0025] It should be noted that the one or more processors and / or other data processing circuitry described above can be referred to herein generally as "data processing circuitry". The data processing circuitry can be embodied in whole or in part as software, hardware, firmware, or any combination thereof. In addition, the data processing circuitry can be a single standalone processing module, or incorporated in whole or in part within any one of the other elements of the computer terminal 10. As referred to in the embodiments of the present application, the data processing circuitry serves as a processor to control, for example, the selection of the variable resistance terminal path connected to the interface.

[0026] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage means corresponding to the power device password generation method of the embodiments of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory 104, i.e. implements the power device password generation method of the application program described above. The memory 104 can include a high-speed random access memory, and can also include a non-volatile memory, such as one or more magnetic storage devices, flash memories, or other non-volatile solid-state memories. In some examples, the memory 104 can further include a memory remotely arranged with respect to the processor, which can be connected to the computer terminal 10 through a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0027] The display can be, for example, a touch screen type liquid crystal display (LCD), which can enable the user to interact with the user interface of the computer terminal 10.

[0028] Figure 2 is a flowchart of the power device password generation method according to the embodiments of the present application, as shown in Figure 2 The method comprises the following steps:

[0029] Step S202, randomly selecting in a preset password seed library to obtain a target password seed number.

[0030] In this step, the password seed library contains a large number of randomly generated numerical sequences, each of which can be regarded as a potential password seed. By randomly selecting in the password seed library, it can be ensured that the number of password seeds generated each time has a high degree of randomness. Since the seed number used each time the password is generated is randomly selected, even if the attacker knows some of the past passwords, they cannot predict the future password, because the change of the seed number is irregular. This greatly increases the difficulty of brute force or guessing the password. And the diversity of the password seed library ensures that even if the same rules are used to generate passwords, the generated password will be different because of the different seed numbers, thus avoiding password reuse and reducing the risk of password replay attacks.

[0031] The password seed library can be pre-designed and filled, and the management is relatively simple, because it does not store the real password, but the "seed" of password generation. This makes it easy for the password intelligent management plug-in to update or expand the seed library, or even share or synchronize the contents of the seed library between different devices. Each time a new password needs to be generated, the password intelligent management plug-in will randomly select a seed number from this pre-set password seed library. The selection process should ensure true randomness and avoid any patterns or preferences to maintain the unpredictability of the password. The selected password seed number will then be combined with the rules in the generation rule library to generate the final password through an algorithm. This process ensures that even if the rules are the same, different seed numbers will produce completely different passwords.

[0032] By randomly selecting the target password seed number in the pre-set password seed library, the power equipment password intelligent management system of the present application effectively overcomes many weaknesses in traditional password management, such as low password complexity, password reuse, and long-term non-change, thereby greatly improving the network security level of power equipment.

[0033] Step S204, randomly select in the pre-set generation rule library to obtain the target generation rule.

[0034] In this step, the generation rule library can contain a variety of different rules, for example, it can cover various methods of password transformation, such as character substitution, bit shift encryption, mixed uppercase and lowercase letters, numbers and special characters, etc. Randomly selecting rules makes each generated password use a different transformation logic, thereby significantly improving the complexity of the password and making it more difficult to be brute-forced or predicted.

[0035] By combining with the randomly selected password seed number, the target generation rule realizes the dynamic generation of the password. This means that the password not only changes based on the change of the seed number, but also produces a completely new password because of the different rules, even if the seed number is the same, different rules will produce different passwords, enhancing the security of the system.

[0036] If a fixed rule is used to generate the password, even if the seed number is random, the password may still exhibit a certain pattern, increasing the risk of being cracked. Randomly selecting rules ensures that even if the same seed number is used, the generated password will be significantly different due to the different rules, eliminating the possibility of repeating the password pattern.

[0037] Moreover, the generation rule library can be updated and expanded at any time, adding new rules or replacing outdated rules. This flexibility enables the system to adapt to the changing security environment, introducing more advanced password generation techniques, and continuously improving the security of the password.

[0038] Specifically, when a new password needs to be generated, the password intelligent management and control plug-in not only randomly generates a password seed number, but also randomly selects a rule from the generation rule library, which will be used for the conversion calculation of the password seed number. The selected target generation rule is applied to the password seed number, and through specific algorithms and transformation logic, the final password is calculated. This process ensures that each generated password is different, even if the same power equipment, the generated password will be different each time.

[0039] By randomly selecting a target generation rule in the preset generation rule library, the power equipment password intelligent management and control system of the present application can generate complex and random passwords, effectively resisting various attacks, while greatly reducing the workload of operation and maintenance personnel through automated management processes, improving the password security and management efficiency of power equipment.

[0040] Step S206, determining the target password of the target power equipment based on the target password seed number and the target generation rule.

[0041] In this step, a target password seed number is randomly selected from the preset password seed library, and a target generation rule is randomly selected from the preset generation rule library. These two elements together constitute the basis of password generation. Next, the target generation rule will be applied to the target password seed number for a series of mathematical operations or logical transformations. This process may include but is not limited to character replacement, bit shift encryption, case conversion, addition of special characters, etc. to generate a new password. The specific operation depends on the definition of the selected generation rule.

[0042] For example, a password seed number is randomly generated by calling the password seed library, such as generating a 10-digit random number 3478910256; then a rule is randomly obtained by calling the generation rule library; the rule is substituted into the password seed number to obtain the password, for example, the generation rule is 1, the first five digits of the password seed number are +8; 2, the sixth to tenth digits of the password seed number are unchanged; 3, shift + the sixth to tenth digits of the password seed number to generate the eleventh to fifteenth digits. The specific rule calling method is as follows:

[0043] Step1:

[0044] First bit + 8: 3 + 8 = b;

[0045] Second bit + 8: 4 + 8 = c;

[0046] Third bit + 8: 7 + 8 = f;

[0047] Fourth bit + 8: 8 + 8 = A;

[0048] Fifth bit + 8: 9 + 8 = B;

[0049] Step2:

[0050] Sixth bit unchanged: 1;

[0051] Seventh bit unchanged: 0;

[0052] Eighth bit unchanged: 2;

[0053] Ninth bit unchanged: 5;

[0054] Tenth bit unchanged: 6;

[0055] Step3:

[0056] Eleventh bit supplemented with Shift+Sixth bit: shift+1 =!;

[0057] Twelfth bit supplemented with Shift+Seventh bit: shift+0 = );

[0058] Thirteenth bit supplemented with Shift+Eighth bit: shift+2 = @;

[0059] Fourteenth bit supplemented with Shift+Ninth bit: shift+5 = %;

[0060] Fifteenth bit supplemented with Shift+Tenth bit: shift+6 = ^;

[0061] Then the password is: bcfAB10256!) @ % ^.

[0062] That is, the password seed number is a random generated pseudo-random number, which has randomness and is not easy to be cracked, and the application does not use the password seed number as the password, but further generates the password based on the randomly selected rule calculation on this basis, while ensuring the randomness and complexity of the password, only the authenticated device can obtain the specific calculation rule, so as to calculate the password, improve the security level of the system password, and meet the corresponding system security requirements.

[0063] The application of the target generation rule ensures the complexity of the password, including the mixed use of letters, numbers and special characters, and the length is usually longer, usually more than 15 bits. At the same time, since the password seed number and the generation rule are randomly selected, the generated password has high randomness and is difficult to be predicted or brute-forced. By designing a double trigger mechanism, that is, when the target password is successfully used for login or reaches the preset update period (N days), the system will re-execute the above process to generate a new target password, ensuring the regular replacement of the password, complying with the regulations of the power system on password management, and reducing the risk of long-term monitoring and recording of the password.

[0064] Step S208, transmitting the target password seed number and the target generation rule to the authentication terminal.

[0065] In this step, the password seed number, the target generation rule and other information related to the target password (such as the IP address and username of the power equipment) can be packaged in a so-called "password formula". This formula is an instruction set for calculating the password, not the password itself. After receiving the password formula, the authentication terminal can calculate the target password according to the received password seed number and target generation rule, and then return the calculation result to the authentication terminal.

[0066] By transmitting the target password seed number and the target generation rule to the authentication terminal instead of directly transmitting the password, the security of the password can be effectively protected, avoiding interception or cracking during transmission. Since the generation and update of the password are determined by the random combination of the password seed number and the generation rule, it also means that each generated password is new, even if the previously used password seed number or generation rule is known by the attacker, the current password cannot be predicted or reused, thereby greatly enhancing the defense ability of the system. This secure transmission and verification mechanism is crucial for protecting the power system from unauthorized access and attacks, ensuring the safety and stability of the power equipment operation.

[0067] Step S210, receiving the input password determined by the authentication terminal based on the target password seed number and the target generation rule.

[0068] In this step, after receiving the input password, the target password is recalculated based on the target password seed number and the target generation rule to verify whether the input password matches the current password of the target power equipment. This verification ensures the accuracy and timeliness of the password. If the input password matches the current password of the target power equipment, the authentication terminal will allow the management and control authentication mobile terminal to log in to the target power equipment. Conversely, if the password does not match, the authentication terminal will reject the access request, thereby protecting the power equipment from unauthorized access.

[0069] Step S212, determining to log in to the target power equipment if the input password matches the target password.

[0070] In this step, if the target password is exactly the same as the returned input password, the authentication terminal can confirm that the user has the right to log in to the target power device. This matching verification ensures the accuracy and timeliness of the password. Once the authentication terminal confirms that the input password matches the target password, it will send a login request to the power device with the username and password to complete the login process. Whether the login is successful or not, the authentication terminal will record the details of this login attempt, including but not limited to IP address, username, login time, verification result, etc. These records are crucial for subsequent security audits, event tracking, and system optimization.

[0071] Through two-way verification and login confirmation, the high confidentiality and dynamicity of the password are ensured. Users do not need to manually remember or input complex passwords, reducing the risk of human operation errors, while also avoiding the leakage of passwords during transmission, improving the overall security of the system.

[0072] In addition, through the automatic calculation and verification process, the system can quickly respond to login requests, improving the operation and maintenance efficiency of the power device. At the same time, the real-time matching verification of the input password and the target password also ensures the security and accuracy of the login process, preventing unauthorized users from illegal access.

[0073] In summary, in the case of matching the input password and the target password, the process of determining the login target power device not only embodies the security protection mechanism of the system, but also embodies its automation, efficiency and user-friendly features. It is a key link for the smooth operation of the power device password intelligent management and control system and the protection of the security of the power network.

[0074] Through the above steps, the purpose of not needing users to remember or input passwords is achieved, thereby realizing the technical effects of improving password management efficiency and security, and further solving the technical problems of numerous power devices in the substation, difficult password management and certain security risks.

[0075] As an optional embodiment, before transmitting the target password seed number and the target generation rule to the authentication terminal, the IP address of the target power device and the user identification are sent to the authentication terminal, wherein the authentication terminal is used to detect whether the IP address and the user identification match; the detection result returned by the authentication terminal is received; and in the case that the detection result is a match success, the target password seed number and the target generation rule are transmitted to the authentication terminal.

[0076] Optionally, after receiving the IP address and user identifier, the authentication terminal performs a check to verify whether this information matches a pre-stored or expected record. The check process may include verifying the legitimate user ID and corresponding device IP address recorded in the database to ensure the access request originates from an authorized user and the correct power device. Once the authentication terminal completes the check, it returns the result to the requesting terminal. If the IP address and user identifier match successfully, the authentication terminal prepares to accept further password verification information; if the match fails, it assumes a problem occurred during transmission or that the access was unauthorized, and no further password verification is performed.

[0077] Only after the authentication terminal confirms a successful match between the IP address and the user identifier will the managing authentication mobile terminal send the target password seed and target generation rule to the authentication terminal. This information is used to recalculate the password on the authentication terminal to verify the legitimacy of the login request. Upon receiving the password seed and generation rule, the authentication terminal processes the seed using the same rule, generates the input password, and sends it back to the password management plugin. The password management plugin then compares the target password with the input password received from the authentication terminal to complete the final login verification.

[0078] This process ensures that every login request undergoes rigorous testing and verification, effectively preventing unauthorized access and potential security threats. Furthermore, this process reflects the multi-factor authentication principle in the system design; in addition to the password itself, it requires the visitor to provide a valid IP address and user identifier, increasing the difficulty of unauthorized access and further enhancing the overall security level of the system.

[0079] As an optional embodiment, transmitting the target password seed number and target generation rule to the authentication terminal includes: encrypting the target password seed number and target generation rule to obtain encrypted ciphertext; and transmitting the encrypted ciphertext to the authentication terminal.

[0080] Optionally, one or more suitable encryption algorithms can be selected. The selection of encryption algorithms is based on factors including, but not limited to, security, efficiency, and compatibility with existing systems. Common encryption algorithms include AES (Advanced Encryption Standard), RSA, and DES (Data Encryption Standard). Encryption algorithms typically require a key to perform the encryption operation. The system generates an encryption key, which should be strong enough to be difficult to crack, and only the authentication terminal and the sender should possess this key. The target cipher seed and target generation rule are encrypted using the selected encryption algorithm and key. This process transforms plaintext information into ciphertext, which, even if intercepted during network transmission, cannot be directly deciphered by an attacker. The ciphertext is then transmitted over the network to the authentication terminal. To further enhance security, the transmission process may use SSL / TLS or other security protocols to ensure the integrity and confidentiality of the data during transmission. A secure communication channel, such as an HTTPS connection, should be established between the authentication terminal and the sender to prevent data from being eavesdropped on or tampered with during transmission.

[0081] After receiving the encrypted ciphertext, the authentication terminal decrypts it using the same encryption algorithm and key KeyA to recover the original target password seed number and generation rule. Based on this information, the authentication terminal can then reconstruct the target password and complete subsequent verification steps.

[0082] By encrypting the target password seed number and generation rules, converting it into encrypted ciphertext and securely transmitting it to the authentication terminal, sensitive information can be effectively protected, unauthorized access can be prevented, and the login process for power equipment can be both efficient and secure.

[0083] As an optional embodiment, if the target power device is successfully logged in based on the target password, a new password seed number is randomly selected from the password seed library; a new generation rule is randomly selected from the generation rule library; and a new password for the target power device is determined based on the new password seed number and the new generation rule.

[0084] Optionally, once the target power device is successfully logged into, a password modification mechanism is triggered. The password generation process is then repeated, randomly selecting a new password seed from a pre-defined password seed database. A new generation rule is then randomly selected from a generation rule database. Based on the new password seed and the new generation rule, a new password is generated. Once the new target password is determined, it is immediately applied to the target power device, replacing the old password.

[0085] By employing a mechanism that immediately updates passwords, even if an attacker intercepts the target password within a short period, they cannot use it in the future because the password has changed. This method, combining dynamic password generation and random selection rules, significantly increases password security and unpredictability, making it an effective means of preventing password attacks and unauthorized access in intelligent password management systems for power equipment.

[0086] As an optional embodiment, if the target power device is detected to have not been logged in for more than a preset number of days, the target password of the target power device is modified.

[0087] Optionally, login activity of the target power device can be continuously monitored, recording each successful login attempt and its timestamp. A preset number of days threshold can be set, such as N days (N is a positive integer and is usually less than or equal to 90 days to comply with power system specifications). If the preset number of days is 30 days, and 31 days have passed since a power device's last successful login, the system will detect that the device has exceeded the preset inactivity period. Once the target power device is detected to have been inactive for more than the preset number of days, a password modification process will be automatically triggered. For example, a password seed library can be called to randomly generate a new password seed. Then, a generation rule can be randomly selected from the generation rule library, and a new target password can be calculated based on the new password seed and the generation rule, and immediately set as the new password for the target power device.

[0088] Regularly and automatically changing the passwords of unlogged power devices enhances system security, reduces the frequency of manual intervention, avoids password management oversights caused by human factors, and improves password complexity and security through dynamic password strategies, reducing the risks associated with passwords remaining unchanged for a long time.

[0089] In summary, automatically changing the target password when a target power device has not been logged into for more than a preset number of days is an important security measure in the intelligent password management system for power equipment. It generates new, unpredictable passwords through a random combination of password seeds and generation rules, further strengthening access control and data security for power system equipment.

[0090] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that the present invention is not limited to the described order of actions, because according to the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions and modules involved are not necessarily essential to the present invention.

[0091] Through the above description of the embodiments, those skilled in the art can clearly understand that the password generation method for power equipment according to the above embodiments can be implemented by means of software plus necessary general-purpose hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0092] According to another aspect of the present invention, a password management system for power equipment is also provided. Figure 3 This is a schematic diagram of a password management system for power equipment provided according to an embodiment of the present invention, such as... Figure 3 As shown, it includes: a password management plugin, used to generate a password corresponding to the power equipment based on any of the above-mentioned password generation methods for power equipment; a management terminal, used to generate an authentication QR code based on the password corresponding to the power equipment; and an authentication terminal, used to scan the authentication QR code to complete authentication, obtain the password seed number and generation rules, and generate the input password based on the password seed number and generation rules.

[0093] The key management plugin, deployed on power equipment, is primarily responsible for dynamically generating passwords for the power equipment based on a preset password generation method. This includes randomly selecting password seeds from a password seed library and randomly selecting generation rules from a generation rule library. This process ensures the randomness and complexity of the passwords, thereby improving their security. According to established rules, if login is successful or the password has not been modified within a certain timeframe, the password management plugin will automatically update the power equipment's password, maintaining its validity and security.

[0094] The control terminal establishes a communication connection with the password control plugin on the power equipment, receiving a password formula containing the power equipment's IP address, username, number of newly generated password seeds, and generation rules. The control terminal does not directly access the password; instead, it indirectly obtains the encrypted password seeds and rules through the password formula. Based on the received password formula, the control terminal generates an authentication QR code containing the power equipment's IP address, username, number of password seeds, and generation rule information. This QR code serves as the entry point for the control authentication mobile terminal to obtain the necessary information.

[0095] Power equipment maintenance personnel use an authentication terminal (usually a handheld device or a mobile device with a dedicated app installed) to scan an authentication QR code generated by the control terminal. This scan retrieves information from the password formula, including the power equipment's IP address, username, password seed, and generation rules. The authentication terminal also has a rule base and can parse the retrieved rules, combine them with the password seed, and use the same algorithm logic as the password control plugin to calculate the corresponding input password. After calculating the input password, the authentication terminal sends it back to the control terminal. Based on the returned information, including the username and the calculated password, the control terminal initiates a secure login request to the power equipment. If the input password matches the power equipment's current password, the login is approved; otherwise, the login request is rejected, ensuring that only legitimate authentication terminals can access the power equipment.

[0096] The entire system requires multiple independent information points to verify user identity, including the number of password seeds, knowledge of the generation rules, and the physical or logical access permissions of the authentication terminal. Even if an attacker obtains some of this information, without the complete three elements (password seed, generation rules, and authentication terminal), they cannot generate a valid password and thus cannot log in to the power equipment.

[0097] Through this design, the system not only enhances the dynamism and security of passwords, but also simplifies the operation process for maintenance personnel, avoids the burden of remembering and managing complex passwords, reduces the risk of password leakage, and ensures that access control of power equipment complies with industry standards and security management requirements.

[0098] According to an embodiment of the present invention, a password generation apparatus for power equipment for implementing the above-described password generation method for power equipment is also provided. Figure 4 This is a structural block diagram of a password generation device for power equipment provided according to an embodiment of the present invention, such as... Figure 4 As shown, the password generation device for the power equipment includes: a first selection module 402, a second selection module 404, a determination module 406, a transmission module 408, a receiving module 410, and a login module 412. The password generation device for the power equipment will be described below.

[0099] The first selection module 402 is used to randomly select from a preset password seed library to obtain the target password seed number.

[0100] The second selection module 404 is connected to the first selection module 402 and is used to randomly select from a preset generation rule library to obtain the target generation rule.

[0101] The determination module 406, connected to the second selection module 404, is used to determine the target password of the target power equipment based on the target password seed number and the target generation rule.

[0102] The transmission module 408, connected to the determination module 406, is used to transmit the target password seed number and the target generation rule to the authentication terminal.

[0103] The receiving module 410, connected to the transmitting module 408, is used to receive the input password determined by the authentication terminal based on the target password seed number and the target generation rule.

[0104] The login module 412, connected to the receiving module 410, is used to determine the target power device to log in when the entered password matches the target password.

[0105] It should be noted that the first selection module 402, the second selection module 404, the determination module 406, the transmission module 408, the receiving module 410, and the login module 412 mentioned above correspond to steps S202 to S212 in the embodiments. Multiple modules implement the same instances and application scenarios as their corresponding steps, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0106] Embodiments of the present invention may provide a computer device. Optionally, in this embodiment, the computer device may be located in at least one of a plurality of network devices in a computer network. The computer device includes a memory and a processor.

[0107] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the password generation method and apparatus for power equipment in this embodiment of the invention. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby realizing the aforementioned password generation method for power equipment. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to a computer terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0108] The processor can access information and applications stored in the memory via a transmission device to perform the following steps: randomly select from a preset password seed library to obtain the target password seed number; randomly select from a preset generation rule library to obtain the target generation rule; determine the target password for the target power device based on the target password seed number and the target generation rule; transmit the target password seed number and the target generation rule to the authentication terminal; receive the input password determined by the authentication terminal based on the target password seed number and the target generation rule; and confirm login to the target power device if the input password matches the target password.

[0109] Optionally, the processor may also execute program code that performs the following steps: before transmitting the target password seed number and target generation rule to the authentication terminal, including: sending the IP address and user identifier of the target power device to the authentication terminal, wherein the authentication terminal is used to detect whether the IP address and user identifier match; receiving the detection result returned by the authentication terminal; and transmitting the target password seed number and target generation rule to the authentication terminal if the detection result is a successful match.

[0110] Optionally, the processor may also execute program code that performs the following steps: transmitting the target password seed number and the target generation rule to the authentication terminal, including: encrypting the target password seed number and the target generation rule to obtain encrypted ciphertext; and transmitting the encrypted ciphertext to the authentication terminal.

[0111] Optionally, the processor may also execute program code that performs the following steps: if the target power device is successfully logged into based on the target password, a new password seed number is randomly selected from the password seed library; a new generation rule is randomly selected from the generation rule library; and a new password for the target power device is determined based on the new password seed number and the new generation rule.

[0112] Optionally, the processor may also execute program code that modifies the target password of the target power device if it is detected that the target power device has not been logged in for more than a preset number of days.

[0113] This invention provides a method for generating passwords for power equipment. The method involves randomly selecting a target password seed from a preset password seed library; randomly selecting a target generation rule from a preset generation rule library; determining a target password for the target power equipment based on the target password seed and the target generation rule; transmitting the target password seed and the target generation rule to an authentication terminal; receiving the input password determined by the authentication terminal based on the target password seed and the target generation rule; and confirming login to the target power equipment if the input password matches the target password. This method eliminates the need for users to remember or input passwords, thereby improving the efficiency and security of password management. It also solves the technical problem of managing passwords for numerous power devices in substations, which presents certain security risks.

[0114] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a non-volatile storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc.

[0115] Embodiments of the present invention also provide a non-volatile storage medium. Optionally, in this embodiment, the aforementioned non-volatile storage medium can be used to store the program code executed by the password generation method for power equipment provided in the above embodiments.

[0116] Optionally, in this embodiment, the non-volatile storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0117] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: randomly selecting from a preset password seed library to obtain a target password seed number; randomly selecting from a preset generation rule library to obtain a target generation rule; determining a target password for the target power device based on the target password seed number and the target generation rule; transmitting the target password seed number and the target generation rule to the authentication terminal; receiving the input password determined by the authentication terminal based on the target password seed number and the target generation rule; and confirming login to the target power device if the input password matches the target password.

[0118] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: before transmitting the target password seed number and target generation rule to the authentication terminal, the steps include: sending the IP address and user identifier of the target power device to the authentication terminal, wherein the authentication terminal is used to detect whether the IP address and user identifier match; receiving the detection result returned by the authentication terminal; and transmitting the target password seed number and target generation rule to the authentication terminal if the detection result indicates a successful match.

[0119] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: transmitting the target password seed number and the target generation rule to the authentication terminal, including: encrypting the target password seed number and the target generation rule to obtain encrypted ciphertext; and transmitting the encrypted ciphertext to the authentication terminal.

[0120] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: if the target power device is successfully logged in based on the target password, a new password seed number is randomly selected from the password seed library; a new generation rule is randomly selected from the generation rule library; and a new password for the target power device is determined based on the new password seed number and the new generation rule.

[0121] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: modifying the target password of the target power device when it is detected that the target power device has not been logged in for more than a preset number of days.

[0122] Embodiments of the present invention also provide a computer program product, including a computer program. Optionally, in this embodiment, when the computer program is executed by a processor, it can: randomly select from a preset password seed library to obtain a target password seed number; randomly select from a preset generation rule library to obtain a target generation rule; determine a target password for a target power device based on the target password seed number and the target generation rule; transmit the target password seed number and the target generation rule to an authentication terminal; receive an input password determined by the authentication terminal based on the target password seed number and the target generation rule; and, if the input password matches the target password, confirm login to the target power device.

[0123] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0124] In the above embodiments of the present invention, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0125] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For instance, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0126] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0127] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0128] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a non-volatile storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.

[0129] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A method for generating a password for power equipment, characterized in that, include: The target number of password seeds is obtained by randomly selecting from a preset password seed library; The target generation rule is obtained by randomly selecting from the preset generation rule base; Based on the target password seed number and the target generation rule, the target password for the target power equipment is determined; The target password seed number and the target generation rule are transmitted to the authentication terminal; Receive the input password determined by the authentication terminal based on the target password seed number and the target generation rule; If the entered password matches the target password, login to the target power device is confirmed.

2. The method according to claim 1, characterized in that, Before transmitting the target password seed number and the target generation rule to the authentication terminal, the process includes: The IP address and user identifier of the target power device are sent to the authentication terminal, wherein the authentication terminal is used to detect whether the IP address and the user identifier match; Receive the detection result returned by the authentication terminal; If the detection result indicates a successful match, the target password seed number and the target generation rule are transmitted to the authentication terminal.

3. The method according to claim 1, characterized in that, The step of transmitting the target password seed number and the target generation rule to the authentication terminal includes: The target cryptographic seed number and the target generation rule are encrypted to obtain encrypted ciphertext; The encrypted ciphertext is transmitted to the authentication terminal.

4. The method according to claim 1, characterized in that, Also includes: If the target power device is successfully logged into based on the target password, a new password seed number is randomly selected from the password seed library. New generation rules are randomly selected from the aforementioned rule base. Based on the new password seed number and the new generation rule, a new password for the target power equipment is determined.

5. The method according to claim 1, characterized in that, Also includes: If the target power device is detected to have not been logged in for more than a preset number of days, the target password of the target power device shall be modified.

6. A password management system for power equipment, characterized in that, include: A password control plugin is used to generate a password for a power device based on the password generation method for power devices as described in any one of claims 1 to 5. A control terminal is used to generate an authentication QR code based on the password corresponding to the power equipment. An authentication terminal is used to scan the authentication QR code to complete authentication, obtain the password seed number and generation rule, and generate the input password based on the password seed number and the generation rule.

7. A password generation device for power equipment, characterized in that, include: The first selection module is used to randomly select from a preset password seed library to obtain the target number of password seeds; The second selection module is used to randomly select from the preset generation rule base to obtain the target generation rule; The determining module is used to determine the target password for the target power equipment based on the target password seed number and the target generation rule; The transmission module is used to transmit the target password seed number and the target generation rule to the authentication terminal; The receiving module is used to receive the input password determined by the authentication terminal based on the target password seed number and the target generation rule; The login module is used to determine whether to log in to the target power device if the entered password matches the target password.

8. A non-volatile storage medium, characterized in that, The non-volatile storage medium includes a stored program, wherein, when the program is executed, it controls the device containing the non-volatile storage medium to execute the password generation method of the power equipment according to any one of claims 1 to 5.

9. A computer device, characterized in that, include: Memory and processor The memory stores computer programs; The processor is configured to execute a computer program stored in the memory, wherein when the computer program is executed, the processor performs the password generation method for the power equipment according to any one of claims 1 to 5.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the password generation method for the power equipment according to any one of claims 1 to 5.

Images