Password management system based on encryption algorithm

Abstract

The invention discloses a password management system based on an encryption algorithm, belongs to the technical field of key management, and aims to solve the technical problem of how to provide a safer and more convenient password management mode for a user. Comprising a PC end user interaction module used for sending a password generation parameter to a data transmission module based on a password generation instruction; the data transmission module is used for encrypting the password generation parameters to form parameter ciphertexts and sending the parameter ciphertexts to the logic calculation module; the logic calculation module is used for generating a password through a predefined password generation rule based on the key generation parameters and sending the password to the data transmission module; correspondingly, the data transmission module sends the password ciphertext to the user side data storage module, and sends the password ciphertext to the equipment side user interaction module in a two-dimensional code form; and the device end user interaction module supports a user to scan the password ciphertext in the form of the two-dimensional code, decrypts the password ciphertext to obtain a key, and stores the password to the device end data storage module.

Description

Technical Field

[0001] This invention relates to the field of key management technology, and more specifically to a cryptographic management system based on encryption algorithms. Background Technology

[0002] Key management services offer a one-stop solution for key management and data encryption, providing simple, reliable, secure, and compliant data encryption protection. The key technical challenge is how to provide users with a more secure and convenient password management method. Summary of the Invention

[0003] The technical objective of this invention is to address the above-mentioned shortcomings by providing a password management system based on encryption algorithms, thereby solving the technical problem of how to provide users with a more secure and convenient password management method.

[0004] The present invention provides a password management system based on an encryption algorithm, comprising a user interaction module, a logic calculation module, a data transmission module, and a data storage module. The user interaction module includes a PC-side user interaction module and a device-side user interaction module, and the data storage module includes a PC-side data storage module and a device-side data storage module. The PC-side user interaction module and the PC-side data storage module are configured on a PC device, and the device-side user interaction module and the device-side data storage module are configured on a handheld terminal device with a camera. The PC-side user interaction module provides a password generation interface, which allows users to input password generation parameters and trigger password generation commands. Based on the password generation commands, the password generation parameters are sent to the data transmission module. The data transmission module is used to encrypt the password generation parameters based on a predetermined encryption algorithm to form parameter ciphertext, and then send the parameter ciphertext to the logic calculation module; The logic calculation module is used to decrypt the parameter ciphertext to obtain the key generation parameters, generate the password based on the key generation parameters and according to the predefined password generation rules, and send the password to the data transmission module; correspondingly, the data transmission module is used to encrypt the password based on the predefined encryption algorithm to generate the password ciphertext, send the password ciphertext to the user terminal data storage module, and send the password ciphertext to the device terminal user interaction module in the form of a QR code. The device-side user interaction module interacts with users through a key management interface. It supports users in scanning password ciphertext in the form of a QR code and decrypting the password ciphertext to obtain the key. The key management interface displays the password and stores it in the device-side data storage module.

[0005] Preferably, the key generation parameters include the user key, username, and website domain name.

[0006] As a preferred option, the PC-based password generation interface provides a graphical interface, which includes input boxes and buttons. The input boxes allow users to enter password generation parameters, and the buttons allow users to initiate password generation commands.

[0007] Preferably, the data transmission layer is used to generate encrypted parameter ciphertext for the key based on the AES-256 algorithm, and to encrypt the key to generate key ciphertext.

[0008] Preferably, the data transmission module is used to form a QR code from the key ciphertext using Base64 encoding and CRC check, and a timestamp is added to the ciphertext in QR code form. Correspondingly, the device-side user interaction module scans the QR code within a predetermined time range based on the timestamp to obtain the key ciphertext. If the predetermined time is exceeded, the password becomes invalid.

[0009] Preferably, when generating a password based on key generation parameters and according to predefined password generation rules, the password must contain uppercase and lowercase letters, numbers, and symbols.

[0010] Preferably, the device-side user management module displays the keys in a list format.

[0011] As a preferred option, for each user, the PC-side data storage module and the device-side storage module are respectively configured with a key file and an encryption database corresponding to the user, and the key file and the encryption database store the user-related keys and key generation parameters.

[0012] Preferably, the handheld terminal device is equipped with a biometric recognition function, which provides fingerprint and facial recognition authentication. The biometric recognition function, together with the device-side user interaction module and the device-side data storage module, supports authentication through password, fingerprint and facial recognition.

[0013] The password management system based on encryption algorithm of the present invention has the following advantages: it realizes password management of different accounts through encryption technology, realizes multi-terminal interoperability through QR code transmission of keys, facilitates password management for users, eliminates the need to remember complex passwords, and the password can be synchronized across multiple terminals through a shared key. Detailed Implementation

[0014] The present invention will be further described below with reference to specific embodiments, so that those skilled in the art can better understand and implement the present invention. However, the embodiments are not intended to limit the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments can be combined with each other.

[0015] This invention provides a password management system based on encryption algorithms to address the technical problem of how to provide users with a more secure and convenient password management method. Example

[0016] This invention discloses a cryptographic management system based on an encryption algorithm, comprising a user interaction module, a logic calculation module, a data transmission module, and a data storage module. The user interaction module includes a PC-side user interaction module and a device-side user interaction module. The data storage module also includes a PC-side data storage module and a device-side data storage module. The PC-side user interaction module and the PC-side data storage module are configured on a PC device, and the device-side user interaction module and the device-side data storage module are configured on a handheld terminal device equipped with a camera. The PC device is based on the Qt framework (Windows / macOS), and the handheld terminal device includes an Android device based on Jetpack Compose.

[0017] The PC-side user interaction module provides a password generation interface, which allows users to input password generation parameters and trigger password generation commands. Based on these commands, the password generation parameters are then sent to the data transmission module.

[0018] The PC-based password generation interface provides a graphical interface with input boxes and buttons. The input boxes allow users to enter password generation parameters, and the buttons allow users to trigger password generation commands. Key generation parameters include user key, username, and website domain name.

[0019] The data transmission module is used to encrypt the password generation parameters based on a predetermined encryption algorithm to form parameter ciphertext, and then send the parameter ciphertext to the logic calculation module.

[0020] The data transmission layer is used to generate encrypted parameters for the key based on the AES-256 algorithm, and then encrypts the key to generate the encrypted key. The data transmission module is used to form a QR code from the encrypted key using Base64 encoding and CRC checksum.

[0021] The logic calculation module is used to decrypt the parameter ciphertext to obtain the key generation parameters, generate the password based on the key generation parameters and according to the predefined password generation rules, and send the password to the data transmission module. Correspondingly, the data transmission module is used to encrypt the password based on the predefined encryption algorithm to generate the password ciphertext, send the password ciphertext to the user terminal data storage module, and send the password ciphertext to the device terminal user interaction module in the form of a QR code.

[0022] When generating a password based on key generation parameters and predefined password generation rules, the password must contain uppercase and lowercase letters, numbers, and symbols (e.g., G3n!P@ssW0rd). In this embodiment, the logic calculation module is based on the HMAC-SHA256 algorithm: Password = HMAC(MasterKey, Username + Domain), and the generation logic is as follows: def generate_password(master_key, username, domain): seed = username + "@" + domain # Example: user@example.com hmac_hash = HMAC(master_key, seed, SHA256) password = base64_encode(hmac_hash)[:16] # Get 16-bit password return password.replace('=', '!') # Replace special characters.

[0023] The device-side user interaction module interacts with users through a key management interface. It supports users in scanning password ciphertext in the form of a QR code and decrypting the password ciphertext to obtain the key. The key management interface displays the password and stores it in the device-side data storage module.

[0024] The device-side user management module displays the keys in a list format.

[0025] In this embodiment, a timestamp is added to the password ciphertext in the form of a QR code. Correspondingly, the user interaction module on the device scans the QR code to obtain the key ciphertext based on the timestamp within a predetermined time range. If the predetermined time is exceeded, the password becomes invalid.

[0026] For each user, both the PC-side data storage module and the device-side storage module are configured with a key file and an encrypted database corresponding to that user. These key files and databases store the user's relevant keys and key generation parameters. Specifically, the PC-side uses an SQLite encrypted database (with keys derived from the user's master password) for storage, while the Android-side uses an Android Keystore for data storage.

[0027] The handheld terminal device is equipped with biometric recognition function, which provides fingerprint and facial recognition authentication. The biometric recognition function works in conjunction with the device's user interaction module and data storage module to support authentication through password, fingerprint and facial recognition.

[0028] The system in this embodiment supports dynamic password generation: a unique password is generated based on the user key (Master Key), username, and website domain name through an encryption algorithm.

[0029] The system in this embodiment supports cross-device synchronization: it uses a QR code to encrypt the transmission key, enabling data synchronization between PCs (Windows / macOS) and Android devices.

[0030] The system in this embodiment achieves zero storage risk: the system does not store plaintext passwords, but only saves generation parameters, thus avoiding the risk of database leakage.

[0031] This embodiment prioritizes system security: it uses the AES-256 encryption algorithm to protect the key and supports two-factor authentication (2FA).

[0032] The system in this embodiment is user-friendly: a simple interactive interface, one-click password generation / filling, and support for biometric unlocking.

[0033] The system in this embodiment is cross-platform compatible: it is adapted for PC (C++ / Python) and Android (Java / Kotlin).

[0034] Based on the system disclosed in this embodiment, the following case is given.

[0035] PC interface (example) Password generation panel: Input boxes: website domain, username, and key (displayed with a mask).

[0036] Buttons: "Generate Password" and "Copy to Clipboard".

[0037] Password synchronization: Click the QR code generation button → An encrypted QR code pop-up window will appear.

[0038] Android interface (example) Homepage: Website Password List (Categories: Social / Finance / Shopping); QR code scanning page: Use the camera to scan the QR code on the PC, automatically decrypt it and display "Synchronization successful".

[0039] Security settings: Biometric switch, emergency contact binding.

[0040] The system in this embodiment has a password generation delay of ≤50ms (PC i5 processor), a QR code parsing time of ≤1s (Android mid-range device), and provides a fault tolerance mechanism. Key loss recovery: restored through security questions and backup files; network interruption handling: passwords are generated normally in offline mode and synchronized after connecting to the network.

[0041] The system in this embodiment calculates the password for the corresponding account using the username and domain name, and a key that can be transmitted via QR code, ensuring password security, complexity, and multi-terminal compatibility and ease of use.

[0042] The foregoing has provided a detailed description of a cryptographic management system based on an encryption algorithm provided by the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A password management system based on an encryption algorithm, characterized in that, It includes a user interaction module, a logic calculation module, a data transmission module, and a data storage module. The user interaction module includes a PC-side user interaction module and a device-side user interaction module. The data storage module includes a PC-side data storage module and a device-side data storage module. The PC-side user interaction module and the PC-side data storage module are configured on a PC device, and the device-side user interaction module and the device-side data storage module are configured on a handheld terminal device with a camera. The PC-side user interaction module provides a password generation interface, which allows users to input password generation parameters and trigger password generation commands. Based on the password generation commands, the password generation parameters are sent to the data transmission module. The data transmission module is used to encrypt the password generation parameters based on a predetermined encryption algorithm to form parameter ciphertext, and then send the parameter ciphertext to the logic calculation module; The logic calculation module is used to decrypt the parameter ciphertext to obtain the key generation parameters, generate the password based on the key generation parameters and according to the predefined password generation rules, and send the password to the data transmission module; correspondingly, the data transmission module is used to encrypt the password based on the predefined encryption algorithm to generate the password ciphertext, send the password ciphertext to the user terminal data storage module, and send the password ciphertext to the device terminal user interaction module in the form of a QR code. The device-side user interaction module interacts with users through a key management interface. It supports users in scanning password ciphertext in the form of a QR code and decrypting the password ciphertext to obtain the key. The key management interface displays the password and stores it in the device-side data storage module.

2. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, The key generation parameters include the user key, username, and website domain.

3. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, The PC-based password generation interface provides a graphical interface with input boxes and buttons. The input boxes allow users to enter password generation parameters, and the buttons allow users to trigger password generation commands.

4. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, The data transmission layer is used to generate encrypted parameter ciphertext for the key based on the AES-256 algorithm, and to encrypt the key to generate key ciphertext.

5. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, The data transmission module is used to form a QR code from the key ciphertext using Base64 encoding and CRC check, and the QR code ciphertext contains a timestamp. Correspondingly, the device-side user interaction module scans the QR code within a predetermined time range based on the timestamp to obtain the key ciphertext. If the predetermined time is exceeded, the password becomes invalid.

6. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, When generating a password based on key generation parameters and according to predefined password generation rules, the password must contain uppercase and lowercase letters, numbers, and symbols.

7. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, The device-side user management module displays the keys in a list format.

8. The cryptographic management system based on encryption algorithms according to claim 1, characterized in that, For each user, the PC-side data storage module and the device-side storage module are respectively configured with a key file and an encryption database corresponding to the user. The key file and the encryption database store the user's related keys and key generation parameters.

9. The cryptographic management system based on the encryption algorithm according to claim 1, characterized in that, The handheld terminal device is equipped with biometric recognition function, which provides fingerprint and facial recognition authentication. The biometric recognition function works in conjunction with the device-side user interaction module and the device-side data storage module to support identity authentication through password, fingerprint and facial recognition.