209 results about "Password management" patented technology

The invention belongs to the technical field of distributed key management. The invention provides a distributed password management system and method based on a block chain. The distributed password management system comprises a user side and a server side, the server side receives a key application request sent by a user side through a user side interface or an API interface, wherein the key application request specifies a key type and a purpose; an intelligent contract system in the server side receives and verifies an application request of the user side, confirms the identity and authority of the user side, calls a key management module after the identity and authority of the user side are confirmed, generates a key pair by using a secure random number generator and a strong encryption algorithm, and sends the key pair to the server side; a public key in the generated key pair is recorded on the block chain, and a private key in the key pair is encrypted and transmitted to the user side; according to the invention, through the block chain, a safe, transparent and efficient decentralized key management system is provided, and the security and manageability of the user key are ensured.

Systems and methods are disclosed herein for a user to use a mobile device with a camera and a terminal device with a camera to manage and use passwords via QR (Quick Response) codes. The terminal device may generate and display a QR code for a user account or data. The user running a password manager app on the mobile device may scan the QR code of the user account or the QR code of the data to generate, store, and retrieve a password, and to display a QR code for the password. The terminal device may scan the QR code of the password to receive and use the password in sign-up, sign-in, data encryption, and data decryption procedures.

The invention discloses an electric power production management system safety operation and maintenance management method based on a national secret algorithm. According to the method, the key and the real-time running state of the equipment are deeply bound through a dynamic key derivation mechanism, so that the key is dynamically adjusted along with parameters such as the load rate, the temperature and the bit error rate, state change, namely key updating, is realized, and the anti-cracking capability of the key is greatly improved; the SM2, SM3, SM4 and other national cryptographic standards are adopted from root key generation, identity authentication, data transmission encryption and log tampering prevention of the full-link application of the national cryptographic algorithm system, it is ensured that the encryption strength meets the national password management requirement, and the overall encryption protection level of the system is improved. Closed-loop protection is formed through deep linkage among multiple steps, fragmentation of a safety mechanism is avoided, meanwhile, the traceability and the fault recovery efficiency of system operation are further improved through the whole-process encryption archiving and emergency response rapid recovery process of audit logs, and transmission and storage safety of power production core data is guaranteed.

The invention discloses a disk data encryption and decryption method and device, equipment and a storage medium, and relates to the technical field of information security, and the disk data encryption and decryption method comprises the following steps: sending a first key to a volume encryption application component through a virtual computing node controller program by using a virtual encryption volume constructed based on a created virtual machine mirror image; triggering an encryption and decryption thread handle pool creation process by using an encrypted second key obtained based on the first key through the volume encryption application component; when encryption task information is received through the password management component, determining a first target password computing resource chain table based on an encryption and decryption thread handle pool corresponding to the encryption task information, and performing data encryption by using a resource chain table scheduling rule and the first target password computing resource chain table to complete disk data writing; when decryption task information is received through the password management component, the resource chain table scheduling rule and the second target password are used for computing the resource chain table for decryption, and data reading is completed. And the encryption and decryption efficiency is effectively improved.

The invention discloses a cloud cipher machine cluster management method and device, and the device comprises a cloud cipher machine management platform, a cloud cipher machine host and a file server, does not depend on the equipment of a specific manufacturer, has certain universality, reduces the logic complexity of the cloud cipher machine management platform, improves the development and construction efficiency of a cipher management platform, and reduces the cost. Management of cloud password devices of different manufacturers is supported; the method comprises the following steps: receiving a cluster management request, and analyzing the cluster management request; analyzing the cluster management request, and calling a cluster management command line tool to complete cluster management work according to the cluster management instruction; obtaining a cluster node state according to the cluster state monitoring request, and calling a cluster monitoring command line tool according to the cluster monitoring instruction to obtain a current virtual machine state; and making a corresponding processing strategy according to the state of the virtual machine. Automatic drifting of fault nodes is supported, automatic fault repairing is achieved, fault time is shortened, operation and maintenance cost is reduced, and usability and reliability of a cloud cipher machine cluster are improved.

The invention relates to the technical field of information, in particular to a system for realizing multi-application integration based on a middle platform architecture. Comprising a middle station service module which supports cross-application service calling and data sharing by constructing a middle station service layer; the resource management module is used for optimizing resource allocation by utilizing a virtualization technology and cloud load balancing; the security control module is used for implementing unified password management and encrypted transmission to guarantee data security; the interface specification module adopts a unified butt joint mode to simplify an application integration process; and the data analysis module is used for collecting user behavior data and mining and analyzing the data. Therefore, government affair service efficiency and quality are effectively improved, and deepening development of government affair digital transformation is promoted.

A system for generating passwords in real-time based on biometric factors is disclosed. The system registers users by computing a Secret-Key from biometric samples, generating a Public-Key, and storing them securely. User authentication involves capturing a real-time biometric sample, generating a Secret-Key, and comparing a computed Real-Time-Unique-Number with a stored Unique-Number. For password setting, the system detects application requirements, authenticates the user, generates a password by computing a Unique-Number using a stored Random-Number and the Secret-Key, and submits the password. For login, the system authenticates the user, retrieves the stored Random-Number, computes the Unique-Number, regenerates the password, and submits it. This biometric-based password generation system provides secure, user-friendly access without requiring password memorization. The method offers a novel approach to password management, enhancing security and user experience.

A data monitoring system comprising a server communicatively coupled to a client device and a data module via a network. The server is configured to store a private key of a public-private key pair associated with the data module, receive a request from the client device for authenticated access to the data module, and generate an authentication key based at least on the private key and a time. The client device is configured to generate the request for authenticated access to the data module and transmit the request to the server. The data module is configured to store the private key of the public-private key pair associated with the data module, generate the authentication key based at least on the private key and the time, and grant access to the data module if the authentication key generated by the data module and the authentication key generated by the server match.

A collaborative security management system and methods are presented. The system includes a processor communicating with two or more user devices and memory communicating with the processor. The memory stores instructions that when executed result in the processor storing two or more data structures in memory. Each data structure includes secured information. The processor establishes at least one safe associated with the data structures and defines security rules for the safe. Each rule governs one of an access and an operations privilege. The access privilege grants or denies access to the safe by the user devices via an interface. The operations privilege enables or disables performance of operations upon the safe initiated by the user device from the interface. The processor controls, by the security rules, at least one of access to and operations performed upon the safes and data structures associated therewith by the user devices.

The invention relates to the field of secret key data processing, in particular to a dynamic secret key protection method and system based on AI context awareness, and the method comprises the steps: firstly responding to a login credential input by a user at a platform end, then calling a preset AI scene recognition module to judge the legality of a platform end page, and if the platform end page is legal, judging whether the platform end page is legal or not; according to the method, a short-term token is generated and returned to the front end of the platform, and in the execution process of the process, the sensitive calling behavior can be recognized in real time, and a preset key interception module is called to intercept the sensitive calling behavior. Compared with the prior art, the method of the invention combines the AI technology to realize certificate encryption and abnormal operation interception, and solves the problem of low security of the existing password management technology.

The present disclosure according to at least one embodiment provides a passkey management method for a multi-platform environment, the method being performed by a computing device. The method comprises in response to receipt of a passkey generation request from a passkey agent installed on a first terminal based on a first platform, generating a first passkey usable on multiple platforms, and transmitting the first passkey to the first terminal, in response to receipt of a passkey list request from a passkey agent installed on a second terminal based on a second platform, different from the first platform, providing information regarding a registered passkey list to the second terminal, and in response to receipt of a request for the first passkey, among passkeys included in the registered passkey list, from the passkey agent of the second terminal, transmitting the first passkey to the second terminal.

An information-security method for securely accessing a web site through non-password user authentication to an intermediary portal is disclosed. A hardware / biometric login authenticates a user to a portal, which provides 1-click user access to web sites. The portal generates a strong password for each web site. Private keys with the passwords embedded therein are generated by the portal and stored along with public keys for the web sites. Communications between the portal and web sites are asymmetrically encrypted using the keys. Passwords for the web sites are updated or autorotated by the portal on-demand, at periodic intervals, and / or in response to data breaches or threat vectors to provide enhanced security. Updated login credentials are communicated to the web sites when the passwords are changed by the portal. Passwords are managed transparently to the user such that users need not be aware or keep track of their passwords.

The invention provides a database account information management method and device and electronic equipment, and is applied to a password management system, the password management system manages resources of an application server and a database server, and the method comprises the following steps: in response to receiving a token acquisition request sent by the application server, acquiring a target token; the target token is fed back to the application server, so that the application server generates a database access request based on the target token; in response to the received database access request, determining target account information corresponding to a to-be-accessed database server based on the database access request; and sending the target account information to the application server, so that the application server accesses the database server to be accessed based on the target account information. According to the scheme, right confirmation protection aiming at the account and the password of the user database is realized, meanwhile, the use of a terminal user is not influenced, and the security and the flexibility of database access are realized.

The invention belongs to the field of network security, and relates to a password generation and management method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining information needing to be encrypted; extracting feature information according to the information needing to be encrypted; setting a password generation rule and a password management rule according to the feature information; generating an encrypted password for the information needing to be encrypted according to the password generation rule; and storing the encrypted password, and managing the stored encrypted password according to the password management rule. The password is generated by combining the characteristics of the information needing to be encrypted, so that the generated password has pertinence, the protection on the information needing to be encrypted is enhanced, memory can be recovered through the characteristics of the information needing to be encrypted even if the password is forgotten, and a traditional encryption mode breaks away from the basic characteristics of the information needing to be encrypted and is convenient to use. Compared with a traditional encryption mode, the encryption mode is more flexible and diversified and can be universally applied to the field of electronics.

The invention discloses a hard disk encryption control method and device, equipment and a program product, and the method comprises the steps: responding to the configuration of an encrypted hard disk to trigger a system interruption management mode under the condition that an operating system enters a running stage; in the system interrupt management mode, calling a password management program loaded in a power-on self-test stage so as to obtain a password of the encrypted hard disk by utilizing the password management program; and configuring the encrypted hard disk by using the password.

Disclosed are techniques for populating a password manager. In an aspect, a processing system of a user device or a remote server scans an email account of a user of a user device to identify a set of service providers from which the email account of the user has received one or more emails, optionally displays, via a user interface of the user device, a list of the set of service providers, optionally receives, via the user interface of the user device, a selection of at least a subset of the set of service providers, and populates a password manager with login information for the user for each of a set of service provider accounts corresponding to at least the subset of the set of service providers.

The invention discloses a user management password generation method. The password generation method comprises the following steps: carrying out Hash operation by utilizing an SM3 algorithm; extracting the first bytes of the hash value to generate the same random sequence; selecting characters from a predefined character set one by one according to a password length specified by a user; when characters are selected every time, type verification is carried out, and it is ensured that the generated password meets the condition; a user provides a universal password and a platform name to realize password management; for the same universal password and platform name, the password generated by the key workshop every time is consistent. A user only needs to provide a universal password and a platform name, and password management is easily achieved. For the same universal password and platform name, the password generated by the key workshop every time is consistent.

The invention discloses a distributed password service system and method based on interlayer interface decoupling. The distributed password service system comprises a hardware layer, a service layer and an interface layer, the hardware layer comprises a security processor, and the security processor is used for providing business and management capability and externally providing a channel with interaction capability through a hardware interface; the service layer is used for a password operation service, a password management service and a middle layer API (Application Program Interface); and the interface layer is used for providing a password operation service and a password management service provided by the password suite for an external system in a unified interface mode, and when the interface layer interacts with the external system, the interface layer provides a function of processing and authenticating request data so as to ensure the security of interface access. According to the invention, triple technical effects are realized through the architecture of ''interlayer interface decoupling + service separation'', the collaborative breakthrough of safety, performance and expansibility is finally achieved, and a new generation of infrastructure support is provided for high-concurrency and cross-platform distributed password services.

The invention belongs to the technical field of enterprise management, and particularly relates to a hidden asset equipment account and password security management method and system, an account and password management platform required by an enterprise is selected, all asset account and passwords of the enterprise are integrated into the platform, and access control is performed on the management platform; in combination with a security policy of an enterprise, multi-factor authentication is started, and the generation, updating and application processes of a dynamic password are managed through a platform; the account is linked with a person in charge, and a user of the account is traced; an account list system is established, regular examination and updating are carried out, and the use permission, the use condition and the holder of each account are confirmed; an automatic account forbidding and password resetting mechanism is realized through the platform, the corresponding account will be automatically locked within the specified time when the employee is designed or changed, password updating is triggered, comprehensive password resetting is carried out within the specified time after the employee is designed, and the method has the advantages that the account and the password can be effectively prevented from being leaked, and the user experience is improved. And the safe operation effect of the hidden asset equipment is ensured.

The present invention provides an application platform security device, which is connected to the external application platform network when working, including: a password management system, which is connected to the application platform network when working; a cipher machine, which is connected to the password management system network when working; and a quantum random number generator, which is connected to the password machine network when working; wherein, when working, when the password management system sends a request content to the cipher machine, which is any one of generating a random number, generating a key, and encoding a digital envelope, the cipher machine receiving the request content sends a request to generate a quantum random number to the quantum random number generator, and the quantum random number generator receives the request to generate a quantum random number and sends it to the cipher machine after generating a quantum random number; the cipher machine sends corresponding content to the password management system based on the received request content of the password management system. It has the characteristics of high security.

The embodiments of the present disclosure provide a cryptographic configuration method, a cryptographic service method, a cryptographic management device, a server, a cryptographic service system and a storage medium. The cryptographic configuration method is applied to a cryptographic management device for managing cryptographic modules of a plurality of servers, and comprises: sending, to a first cryptographic module, key configuration information at least comprising a key for the first cryptographic module to execute a cryptographic service, wherein the first cryptographic module is any cryptographic module of any server; acquiring from the first cryptographic module a first key mirror image including the key; and forwarding the first key mirror image to a second cryptographic module, so that the second cryptographic module acquires the key, so as to use the key for a cryptographic operation when the second cryptographic module is called by a corresponding server, wherein the second cryptographic module is another cryptographic module configured on a different server.

The application provides a mimic system account password dynamic management method, which comprises the following steps: in an initial state, the same user account has different passwords on different mimic components and executors; a password cracking detector is arranged on the executor or mimic component of the mimic system to detect whether the executor or mimic component is subjected to a password cracking attack in real time; when it is detected that the executor or mimic component is subjected to a password cracking attack, the current user account is locked, the executor or mimic component is informed to enable a traffic filtering rule to block the network attack cracking, and a password regeneration request message is sent to a password manager to change the password of the current user account; wherein the password cracking attack detection step comprises the following steps: detecting whether the number of login requests in a certain time range exceeds a preset threshold value, and if yes, and the return result of each login request is failure, it is considered that a password cracking attack occurs.

The present invention relates to a password management system for managing a password for accessing a plurality of service devices. The password management system comprises: a password algorithm defining a rule for generating a password on the basis of a plurality of keys; a server for providing the plurality of keys to the plurality of service devices and a worker terminal, and changing at least one key according to whether a password change condition is satisfied; the worker terminal for generating a first password according to the password algorithm on the basis of the at least one key provided from the server, and inputting the first password to any one of the plurality of service devices; and the plurality of service devices for generating a second password according to the password algorithm on the basis of the at least one key provided from the server, and when the first password input from the worker terminal matches the second password, allowing access of the worker terminal and providing a service according to a request of the worker terminal.

The invention discloses a session key distribution management method and system. The session key distribution management method is used for a service management platform, and comprises the following steps: in a first time window, counting the number of participating terminals which have obtained session keys; calculating a current access rate according to the number of the participating terminals and the total number of preset access terminals; and when the current access rate is greater than or equal to a preset access rate threshold and no new access information is received within a preset time threshold after the preset access rate threshold is reached, sending a closing instruction to the password management service platform. Therefore, through a mode of combining dynamic statistics of the key acquisition condition of the participating terminal with access rate judgment, timely closing of a key application channel is realized, the redundant opening time of a key application window is eliminated to a certain extent, the window attack period of an illegal user is shortened, the security risk that the key is illegally acquired is effectively reduced, and the user experience is improved. And the security of encrypted communication is improved.

The application discloses a quantum security infrastructure system and a user terminal access method based on the system, belongs to the field of quantum security communication and cryptography, and comprises the following steps: a cryptographic management service platform (CMSP) responds to an access request of a user terminal, determines an identity and access management system (IAM) and a key management system (KMS) that need to be accessed by the user terminal; if the IAM and the KMS belong to the same region, the CMSP sends IAM information of the IAM to the user terminal; the user terminal accesses the IAM based on the IAM information; if the IAM and the KMS do not belong to the same region, the IAM performs a key relay process through the CMSP, generates a service authentication token and access token ciphertext, and sends the service authentication token and the access token ciphertext to the user terminal; and the user terminal accesses the IAM based on the service authentication token and the access token ciphertext. The application improves the resistance to quantum attacks and the security of the system.

The present invention relates to the field of servers, and in particular to a server reset password management method, apparatus, device, and storage medium. The method comprises: splitting a key to generate a first key fragment kept by a server, and multiple second key fragments kept by multiple terminals respectively; using the server to generate a random reset password and encrypting it with a key to generate an encrypted reset password kept by the server; in response to the need to reset the server account password, a preset number of terminals send the corresponding second key fragments to the server; the server performs a recovery operation based on the first key fragment and the received part of the second key fragment and decrypts the encrypted reset password using the recovery key to obtain the reset password; the server sends the decrypted reset password to at least one terminal. In the solution of the present invention, the reset password is randomly generated and encrypted and stored, and the key split storage makes reset password management secure and flexible.

The present invention relates to the field of information security technology, and discloses a method, device, equipment and storage medium for enhancing the security of password management applications, which is used to eliminate the plaintext password embedded in the user login request information, reduce the risk of the application password being intercepted, avoid the loss of all sub-account information caused by a single password leakage, realize the traceability of the application access history, enhance the security of the password management application, and reduce the risk of password loss. The method for enhancing the security of password management applications includes: obtaining user login request information; converting the identity verification code according to the preset conversion rule and the request login time to obtain a time-limited dynamic code; performing multi-level encryption on the user login request information to obtain a first encrypted data packet; sending the first encrypted data packet to the server; receiving a target signal; collecting face recognition information and performing identity authentication, and after passing, displaying the target access content according to the target access purpose information and generating an access record.

The invention discloses a user password management method and system based on a national cryptographic algorithm, and the method comprises the steps: a user terminal USER obtains a login verification request, builds password verification information, completes password verification based on the password verification information, and achieves the secure connection with a secure access server KDC after the verification is passed; the USER of the user terminal obtains the password modification request and completes password modification, so that the USER of the user terminal can log in by using the new password; the user management server UADMIN obtains the password resetting request and completes password resetting work; after the password is reset, the USER of the user terminal obtains a login request, and the USER of the user terminal achieves login; and after the password is reset, the application server SERVER obtains the login request, and the application server SERVER realizes login.

The present application discloses a password management method, an electronic device, and a computer-readable storage medium. The password management method includes: a first device receives a first password for unlocking a second device; the first device obtains keyboard information of the second device; the first device converts the first password into a second password adapted to the keyboard of the second device. By the above method, the present application can generate passwords adapted to multiple keyboard modes at low cost.

The invention discloses a password service management method and system, and relates to the technical field of password management, and the method comprises the steps: receiving a password service creation message through a message queue service; after acquiring a password service mirror image file according to the password service creation message, creating a configuration file required for password service operation; after the configuration file is created, judging whether host resources support to start a container or not; when judging that the host resource supports the startup container, judging whether the password service port is occupied or not; and when it is judged that the password service port is not occupied, creating a password service container, so that the monitoring center starts a monitoring strategy after the password service container is started, and the authorization center deploys a new actuator node according to authorization details after the password service container is started. The password service management process is realized by combining the message queue service and the container technology, and the whole links can be reduced and the fault tolerance can be improved by adopting a completely localized deployment mode.