CN110941810A

CN110941810A - Password resetting method and device, terminal equipment, server and storage medium

Info

Publication number: CN110941810A
Application number: CN201811105853.6A
Authority: CN
Inventors: 金礼青; 陈学明
Original assignee: Hangzhou Hikvision Digital Technology Co Ltd
Current assignee: Hangzhou Hikvision Digital Technology Co Ltd
Priority date: 2018-09-21
Filing date: 2018-09-21
Publication date: 2020-03-31

Abstract

The embodiment of the invention provides a password resetting method, a password resetting device, terminal equipment, a server and a storage medium, wherein the method comprises the following steps: the terminal equipment encrypts the target character string and the user reservation information to obtain ciphertext information, converts the ciphertext information into the two-dimensional code, displays the two-dimensional code so that an administrator user can conveniently acquire the two-dimensional code and send the two-dimensional code to the server, and after the server acquires the two-dimensional code, the server converts and decrypts the two-dimensional code to generate the security code and sends the security code according to the user contact mode in the user reservation information so that an administrator receiving the security code can input the security code into the terminal equipment. After the terminal equipment acquires the security code, if the security code is matched with the target character string, the password is reset. The method and the system have the advantages that the administrator user does not need to contact the equipment manufacturer of the terminal equipment, and the authenticity of the administrator user does not need to be judged, so that the labor cost is reduced, and the password resetting efficiency is improved.

Description

Password resetting method and device, terminal equipment, server and storage medium

Technical Field

The present invention relates to the field of computer technologies, and in particular, to a method and an apparatus for resetting a password, a terminal device, a server, and a storage medium.

Background

With the technical progress, various electronic devices are widely used, for example, in the field of video monitoring, various cameras, network video recorders, digital video recorders, servers and other devices are widely used.

In the actual use process, different use authorities are set for the consideration of various factors such as safety of part of electronic equipment. In order to distinguish between different usage rights, an administrator password may be provided in the electronic device. For example, an administrator password may be set in an intelligent camera, an NVR (Network Video Recorder), or other devices in the monitoring device. The administrator can log in with the administrator password to set important operation parameters of the electronic device or perform high-level authority operations, such as extracting recorded video information and the like. Through the administrator password, other people can hardly operate the electronic equipment with high authority, and therefore the reliability and the safety of the electronic equipment are guaranteed.

Inevitably, however, the administrator is likely to forget the set password, so the electronic device needs to implement the password resetting function. In the prior art, when the password of the electronic device needs to be reset, related personnel, such as an administrator, need to manually contact the device manufacturer. The equipment manufacturer needs to verify that the person is the legitimate owner of the equipment through various types of evidence. Then, the password of the electronic device can be reset in a remote control mode, or the password with higher authority can be sent to the manager, so that the user can reset the password. For example, when the password needs to be reset, the administrator contacts customer service staff of the equipment manufacturer, proves that the customer service staff is a legal owner of the electronic equipment by buying invoices, contract numbers and the like, and then the customer service staff can reset the password of the electronic equipment by means of background control and the like.

When resetting the password in the prior art, a large amount of time and labor are needed, the efficiency is low, and the labor cost is high.

Disclosure of Invention

The embodiment of the invention aims to provide a password resetting method, a password resetting device, terminal equipment, a server and a storage medium, so that the labor cost is reduced, and the password resetting efficiency is improved. The specific technical scheme is as follows:

in a first aspect, an embodiment of the present invention provides a password resetting method, which is applied to a terminal device, and the method includes:

encrypting the target character string and user reservation information to obtain ciphertext information, wherein the user reservation information comprises a user contact way;

converting the ciphertext information into a two-dimensional code, and displaying the two-dimensional code;

acquiring a security code corresponding to the two-dimensional code, wherein the security code is a security code which is generated according to the target character string in the decrypted ciphertext information and sent according to the user contact way in the user reserved information after the server acquires the two-dimensional code and converts the two-dimensional code to obtain the ciphertext information;

and if the security code is matched with the target character string, resetting the password.

Optionally, before the step of encrypting the target character string and the user reservation information to obtain the ciphertext information, the method further includes:

generating a set of random character strings as a target character string, wherein the target character string has a preset validity period which is calculated from the generation of the set of random character strings;

if the security code matches the target character string, resetting the password, including:

and if the security code is matched with the target character string and the time for acquiring the security code does not exceed the preset validity period, resetting the password.

Optionally, the encrypting the target character string and the user reservation information to obtain ciphertext information includes:

encrypting the equipment serial number, the target character string and the user reserved information to obtain the ciphertext information;

the converting the ciphertext information into a two-dimensional code and displaying the two-dimensional code comprises:

and coding the ciphertext information and the additional information to obtain a coded ciphertext, wherein the additional information comprises: encrypting the adopted algorithm type and the key number;

and converting the coded ciphertext into the two-dimension code, and displaying the two-dimension code.

Optionally, when the security code is a digital signature calculated by a message digest algorithm;

analyzing the security code according to the message digest algorithm to obtain an analyzed character string;

and if the analysis character string is matched with the target character string, resetting the password.

In a second aspect, an embodiment of the present invention provides a password resetting method, which is applied to a server, and the method includes:

acquiring a two-dimensional code, wherein the two-dimensional code is obtained by encrypting a target character string and user reservation information by a terminal device to obtain ciphertext information and then converting the ciphertext information, and the user reservation information comprises a user contact way;

converting the two-dimensional code into the ciphertext information;

decrypting the ciphertext information to obtain the target character string and the user reservation information;

all or part of characters in the target character string are used as security codes;

and sending the security code according to the user contact information in the user reservation information, wherein the security code is used for matching with the local target character string of the terminal equipment, and if the security code is matched with the local target character string of the terminal equipment, the terminal equipment resets the password.

Optionally, the converting the two-dimensional code into the ciphertext information includes:

converting the two-dimensional code to obtain a coded ciphertext;

decoding the encoded ciphertext to obtain the ciphertext information and additional information, wherein the additional information comprises: encrypting the adopted algorithm type and the key number;

the decrypting the ciphertext information to obtain the target character string and the user reservation information comprises:

and decrypting the ciphertext information by adopting a corresponding algorithm and a corresponding key according to the additional information to obtain a target character string and user reserved information.

Optionally, when the ciphertext information includes the device serial number, the sending the security code according to the user contact information in the user reservation information includes:

and sending the equipment serial number and the security code according to the user contact information in the user reservation information.

Optionally, the using all or part of the characters in the target character string as a security code includes:

coding all or part of characters in the target character string according to a message digest algorithm to obtain a digital signature;

and using the digital signature as the security code.

In a third aspect, an embodiment of the present invention provides a password resetting apparatus, which is applied to a terminal device, and the apparatus includes:

the encryption module is used for encrypting the target character string and the user reservation information to obtain ciphertext information, wherein the user reservation information comprises a user contact way;

the conversion module is used for converting the ciphertext information into a two-dimensional code and displaying the two-dimensional code;

the acquisition module is used for acquiring a security code corresponding to the two-dimensional code, wherein the security code is a security code which is generated according to the target character string in the decrypted ciphertext information and sent according to the user contact way in the user reserved information after the server acquires the two-dimensional code and converts the two-dimensional code to obtain the ciphertext information;

and the resetting module is used for resetting the password if the security code is matched with the target character string.

In a fourth aspect, an embodiment of the present invention provides an apparatus for resetting a password, which is applied to a server, and the apparatus includes:

the acquisition module is used for acquiring a two-dimensional code, wherein the two-dimensional code is obtained by encrypting a target character string and user reservation information by terminal equipment to obtain ciphertext information and then converting the ciphertext information, and the user reservation information comprises a user contact way;

the conversion module is used for converting the two-dimensional code into the ciphertext information;

the decryption module is used for decrypting the ciphertext information to obtain the target character string and the user reservation information, and the user reservation information comprises a user contact way;

the generating module is used for taking all or part of characters in the target character string as a security code;

and the sending module is used for sending the security code according to the user contact information in the user reservation information, the security code is used for matching with the local target character string of the terminal equipment, and if the security code is matched with the local target character string of the terminal equipment, the terminal equipment resets a password.

In a fifth aspect, an embodiment of the present invention provides a terminal device, including a processor, a communication interface, a memory, and a communication bus, where the processor and the communication interface complete communication between the memory and the processor through the communication bus;

a memory for storing a computer program;

the processor is configured to implement the steps of the password resetting method provided in the first aspect of the embodiment of the present invention when executing the program stored in the memory.

In a sixth aspect, an embodiment of the present invention provides a server, including a processor, a communication interface, a memory, and a communication bus, where the processor and the communication interface complete communication between the memory and the processor through the communication bus;

a memory for storing a computer program;

the processor is configured to implement the steps of the password resetting method provided in the second aspect of the embodiment of the present invention when executing the program stored in the memory.

In a seventh aspect, an embodiment of the present invention provides a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements the steps of the password resetting method provided in the first aspect of the embodiment of the present invention.

In an eighth aspect, the embodiment of the present invention provides a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements the steps of the password resetting method provided in the second aspect of the embodiment of the present invention.

In the embodiment of the invention, the terminal equipment encrypts a target character string and user reserved information to obtain ciphertext information, then converts the ciphertext information into a two-dimensional code, displays the two-dimensional code to enable an administrator user to conveniently obtain the two-dimensional code and send the two-dimensional code to the server, and after the server obtains the two-dimensional code, the server converts and decrypts the two-dimensional code to generate a security code and sends the security code according to a user contact mode in the user reserved information, so that an administrator who receives the security code can input the security code into the terminal equipment. After the terminal equipment acquires the security code, if the security code is matched with the target character string, the password is reset. Through the process, the administrator user of the terminal equipment does not need to contact the equipment manufacturer of the terminal equipment, and the equipment manufacturer does not need to judge the authenticity of the administrator user. Through the user reservation information set in the terminal equipment and the corresponding secret key only existing in the server, the fact that the personnel who finally obtain the security code is necessarily the legal owner or administrator user of the terminal equipment is guaranteed. Therefore, as long as the security code is matched with the target character string, the password can be reset, the labor cost is reduced, and the password resetting efficiency is improved. Because the authenticity of the administrator user does not need to be judged manually any more, the safety of the electronic equipment when the password is reset can be improved. And in many cases because the terminal device cannot be directly connected to the server. So the form of converting the ciphertext information into the two-dimensional code is adopted. Make terminal equipment and administrator user realize more convenient information interaction through the two-dimensional code, can sweep modes such as sign indicating number through shooting and directly obtain this two-dimensional code, send this two-dimensional code to the server by the user again. Of course, it is not necessary for any product or method of practicing the invention to achieve all of the above-described advantages at the same time.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a flowchart illustrating a password resetting method applied to a terminal device according to an embodiment of the present invention;

fig. 2 is a flowchart illustrating a password resetting method applied to a server according to an embodiment of the present invention;

FIG. 3 is a block diagram of a password resetting apparatus according to an embodiment of the present invention;

FIG. 4 is another block diagram of a password resetting apparatus according to an embodiment of the present invention;

fig. 5 is a structural diagram of a terminal device according to an embodiment of the present invention;

fig. 6 is a block diagram of a server according to an embodiment of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Referring to fig. 1, fig. 1 is a flowchart of a password resetting method applied to a terminal device according to an embodiment of the present invention, where the method includes:

and step 110, encrypting the target character string and the user reservation information to obtain ciphertext information, wherein the user reservation information comprises a user contact way.

The terminal device in the embodiment of the present invention may be a variety of electronic devices capable of setting passwords such as an administrator password, for example, an intelligent camera, NVR, DVR (Digital Video Recorder), a monitoring server, and the like.

The target character string may include a set of numbers and/or characters, and the target character string may be preset in the terminal device or may be randomly generated. For example, a set of random string words may be generated by the dev/random program as the target string.

The user reservation information is information that is preset in the terminal device when the password is set for the first time, and is an administrator user of the terminal device. The user reservation information may include at least a contact information of the user, for example, a mobile phone number, an email, and the like.

When the administrator user uses the electronic equipment for the first time, a password such as an administrator password with high authority needs to be set, and when the password is set, contact ways such as a mobile phone number and an electronic mailbox can be input to serve as user reserved information. The terminal device may store the user reservation information in a memory, a hard disk, or the like.

When the administrator user forgets the password, an instruction to reset the password may be sent to the terminal device, for example, the user clicks a control button for forgetting the password on the operation interface. Thereby enabling the terminal device to encrypt the target string together with the user reservation information. In practical applications, there may be many ways of encryption, and in the embodiment of the present invention, an asymmetric encryption RAS algorithm may be adopted to encrypt the target string and the user reservation information. The RAS algorithm is an asymmetric encryption algorithm, decryption can be completed under the condition that a secret key is not directly transmitted, information safety is guaranteed, and the secret key is prevented from being cracked. By adopting the RAS algorithm, the security of the target character string and the user reservation information can be improved.

The ciphertext information can be obtained by encrypting the target character string and the user reservation information. The encrypted message contains encrypted target character string and user reservation information.

And step 130, converting the ciphertext information into a two-dimensional code, and displaying the two-dimensional code.

After the ciphertext information is obtained, the ciphertext information can be converted into the two-dimensional code. The two-dimensional code can be generated in any feasible manner in the prior art. The embodiment of the present invention can be applied as long as ciphertext information can be converted into a two-dimensional code.

In the embodiment of the invention, in order to prevent the large data volume of the ciphertext information from being incapable of being completely converted into the two-dimensional code, and further improve the security of the ciphertext information. The cipher text information can be encoded first, thereby reducing the data volume of the cipher text information. Therefore, all contents of the ciphertext information can be converted into the two-dimensional code. The process of simultaneous encoding can also be considered as one more encryption, thereby improving security. The ciphertext information may be encoded in various manners, and in the embodiment of the present invention, the ciphertext information may be encoded in a base64 encoding manner. After the coding is carried out by using base64, the ciphertext information can be converted into the coded ciphertext. The encoded ciphertext may be in the form of a string of characters or the like.

After the coded ciphertext is obtained, the coded ciphertext can be converted into the two-dimensional code by adopting various existing modes.

After the terminal device obtains the two-dimensional code through the steps of encryption, encoding and the like, the two-dimensional code can be displayed to a user through the connected display device, such as a display or a liquid crystal display. Alternatively, the terminal device may transmit the two-dimensional code to another terminal device of the administrator user for display. For example, the terminal device may be connected to a mobile phone, a computer, etc. of the administrator user in a wired or wireless manner, for example, connected to the computer through a network cable, and connected to the mobile phone of the administrator user through a bluetooth or wireless network. Therefore, the obtained two-dimensional code can be sent to another terminal device of the administrator user and displayed.

And step 140, acquiring a security code corresponding to the two-dimensional code. The security code is generated according to the target character string in the decrypted ciphertext information and is sent according to the user contact way in the user reserved information.

In the embodiment of the present invention, the terminal device provided by the embodiment of the present invention may not be connected to the internet, or may be connected to a local area network. For example, NVR devices may be connected only to the lan of the monitoring system. The terminal device cannot directly transmit the generated two-dimensional code to the server. The server is used for realizing password resetting. For example, the server system may be configured for a manufacturer of the terminal device, and is used to implement password resetting on the terminal device.

After the terminal device displays the two-dimensional code, the administrator user can store the two-dimensional code through another terminal device such as a mobile phone and a computer, for example, the two-dimensional code can be photographed or a screen shot. Then, the administrator user can send the two-dimensional code to the server through another terminal device such as a mobile phone and a computer. Specifically, the administrator user may send the stored two-dimensional code to a special preset mailbox, so that the server can obtain the two-dimensional code.

Or, in another mode of the embodiment of the present invention, a corresponding program may be preset on a device such as a mobile phone of an administrator user. When the administrator user scans the two-dimensional code displayed by the terminal device through the program, the two-dimensional code can be sent to the server according to the mode set by the program.

After the server acquires the two-dimensional code, the server can analyze the two-dimensional code. For example, the two-dimensional code may be converted into ciphertext information; or the two-dimensional code can be converted into an encoded ciphertext, and the encoded ciphertext is decoded according to a decoding mode corresponding to the base64 encoding mode, so that ciphertext information is obtained.

After the ciphertext information is obtained, a decryption method corresponding to the encryption method can be adopted for decryption, so that the target character string and the user reservation information can be obtained. For example, the cipher text information is decrypted by a key in the RAS algorithm, so as to obtain the target character string and the user reservation information. Only the server has the corresponding key, so that the security of the ciphertext information is ensured.

After the server obtains the target character string and the user reservation information, all characters or part of characters in the target character string can be directly used as the security code, for example, if the target character string is a 16-byte number or character string, all characters can be used as the security code, or only the first 8-bit characters can be used as the security code.

Alternatively, the server may compute the target string using a Message Digest Algorithm, such as MD5(Message-Digest Algorithm5, fifth edition of Message Digest Algorithm), etc., to obtain a digital signature in the form of a string, and then use the digital signature as a security code.

After the security code is obtained, the server can send the security code to the administrator user according to the user contact way in the user reservation information, for example, if the user contact way is a mobile phone number, the security code can be sent to the mobile phone of the administrator user in a short message way; and if the user contact way is an email, the security code can be sent to the administrator user in an email way.

After the administrator user acquires the security code, the security code may be manually input to the terminal device through interaction with the terminal device, or the security code may be sent to the terminal device through bluetooth, lan transmission, or the like, so that the terminal device obtains the security code.

In the embodiment of the present invention, the terminal device provided by the embodiment of the present invention may also be in a networking state, for example, the terminal device may be connected to the internet, so that the terminal device may directly send the two-dimensional code to the server after generating the two-dimensional code, so that the server converts and decrypts the two-dimensional code, and then sends the security code to the administrator user according to the user contact information in the user reservation information.

Step 150, if the security code matches the target string, then the password is reset.

After the terminal device obtains the security code, the security code can be matched with a local target character string of the terminal device. The security code can be all characters or partial characters in a target character string obtained by analyzing the two-dimensional code by the server. Therefore, the security code is completely or partially identical to the target character string local to the terminal device, and the security code can be considered to be matched with the target character string. When there is a match, it indicates that the security code is legitimate and correct.

The user reservation information set in the terminal equipment by the administrator user is reliable and accurate information. And only the server has a corresponding key, and the ciphertext information obtained after the two-dimensional code conversion can be decrypted. Only the server can get the correct security code and send it in the user contact way in the user reservation information. The person who finally obtains the security code must be the legal owner or administrator user of the terminal device. Therefore, when the security code matches the target character string, the terminal device may reset the password, for example, a corresponding password reset page may be popped up, the administrator user may reset the password on the page, the terminal device may store a new password after the reset, and the original password may not be used any more.

In the embodiment of the invention, if the server analyzes the two-dimensional code to obtain the target character string, the target character string is calculated by adopting a message digest algorithm to obtain the security code in the form of the digital signature.

Accordingly, step 150, resetting the password if the security code matches the target string, may include:

firstly, analyzing the security code according to a message digest algorithm to obtain an analyzed character string.

When the terminal device obtains the security code, the security code cannot be directly adopted to match with the local target character string. The security code in the form of a digital signature needs to be parsed according to a corresponding message digest algorithm, for example, by the MD5 algorithm, so that a parsed character string can be obtained. By using a security code in the form of a digital signature, the security of the security code can be guaranteed.

And secondly, resetting the password if the analyzed character string is matched with the target character string.

And then matching the obtained analysis character string with a local target character string, wherein if the analysis character string is completely the same as the target character string or is partially the same as the target character string, for example, the target character string is a 16-byte character string, the analyzed analysis character string is an 8-byte character string, but the 8-byte character string is completely the same as the first 8-bit character of the target character string, the analysis character string is considered to be matched with the target character string.

Similarly, when the parsed character string matches the target character string, the obtained security code is true and valid, so the password can be reset.

In the embodiment of the invention, the terminal equipment can encrypt the target character string and the user reserved information to obtain the ciphertext information, then the ciphertext information is converted into the two-dimensional code, the two-dimensional code is displayed, so that an administrator user can conveniently acquire the two-dimensional code and send the two-dimensional code to the server, after the server acquires the two-dimensional code, the two-dimensional code is converted and decrypted to generate the security code and the security code is sent according to the user contact mode in the user reserved information, so that the administrator receiving the security code can input the security code into the terminal equipment. After the terminal equipment acquires the security code, if the security code is matched with the target character string, the password is reset. Through the process, the administrator user of the terminal equipment does not need to contact the equipment manufacturer of the terminal equipment, and the equipment manufacturer does not need to judge the authenticity of the administrator user. Through the user reservation information set in the terminal equipment and the corresponding secret key only in the server, the fact that the personnel who finally obtain the security code is necessarily the legal owner or administrator user of the terminal equipment is guaranteed. Therefore, as long as the security code is matched with the target character string, the password can be reset, the labor cost is reduced, and the password resetting efficiency is improved. Because the authenticity of the administrator user does not need to be judged manually any more, the safety of the electronic equipment when the password is reset can be improved. And in many cases because the terminal device cannot be directly connected to the server. So the form of converting the ciphertext information into the two-dimensional code is adopted. Make terminal equipment and administrator user realize more convenient information interaction through the two-dimensional code, can sweep modes such as sign indicating number through shooting and directly obtain this two-dimensional code, send this two-dimensional code to the server by the user again.

With reference to the foregoing embodiment, in the method for resetting a password provided in the embodiment of the present invention, before the step of encrypting the target character string and the user reservation information to obtain the ciphertext information, the method further includes:

step 100, generating a set of random character strings as a target character string, wherein the target character string has a preset validity period, and the preset validity period is calculated from the generation of the set of random character strings.

In order to further improve the security of the target character string, it is preferable that the terminal device may generate a set of random character strings as the target character string. The terminal device may calculate a set of random strings through a built-in algorithm or program, and the random strings may be in the form of pure numbers or numbers plus characters. For example, a set of random string words may be generated by the dev/random program as the target string.

The target character string is finally obtained by the server through subsequent steps, the server generates a security code based on the preset data, and after the terminal device obtains the security code, whether the security code is matched with the target character string can be determined. So that it can be judged whether the password can be reset. Therefore, the randomly generated target character string has timeliness, that is, after a certain time, the security code obtained by the terminal device can be considered invalid. Therefore, a preset validity period may be set for the randomly generated target character string, which may be 12 hours, 24 hours, or the like, i.e., if 12 hours or 24 hours are exceeded, the target character string may be invalidated, and even if a security code matching the target character string is received, resetting of the password may not be performed.

Accordingly, step 150, resetting the password if the security code matches the target string may include:

Due to the timeliness of the preset data, after the security code is obtained, whether the security code is matched with the target character string or not is judged, whether the time for obtaining the security code exceeds the preset validity period or not is judged, and the password can be reset only on the premise that the preset validity period is not exceeded.

In the embodiment of the invention, the preset validity period is set for the randomly generated target character string, so that the real-time property of password resetting is ensured, the target character string is not easy to crack, and the safety of the target character string is improved.

With reference to the foregoing embodiments, optionally, in the method for resetting a password provided in the embodiment of the present invention, step 120, encrypting the target character string and the user reservation information to obtain ciphertext information includes:

and encrypting the equipment serial number, the target character string and the user reserved information to obtain ciphertext information.

The equipment serial number is the displacement identification code of the terminal equipment, and the equipment can be uniquely determined. And encrypting the equipment serial number, the target character string and the user reservation information together, and generating a two-dimensional code containing the equipment serial number. After the server acquires the two-dimensional code, the server can also acquire the equipment serial number from the two-dimensional code. The device serial number may also be included when the security code is subsequently sent to the administrator user. When the administrator user resets the passwords of the plurality of terminal devices at the same time, the terminal device which needs to be reset and corresponds to the security code can be uniquely determined through the device serial number.

Step 130, converting the ciphertext information into a two-dimensional code, and displaying the two-dimensional code, including:

step 131, encoding the ciphertext information and the additional information to obtain an encoded ciphertext, wherein the additional information includes: the type of algorithm and key number used for encryption.

When the ciphertext information is converted into the two-dimensional code, the ciphertext information and the additional information may be encoded together, for example, in a base64 encoding manner, to obtain an encoded ciphertext. The additional information may contain a 2-byte algorithm number for indicating the algorithm type and a 2-byte key number.

In practical applications, multiple corresponding encryption-decryption methods may be preset between the terminal device and the server, and multiple pairs of public keys and secret keys may be set for the same encryption-decryption method. Therefore, the ciphertext information may be encoded together with the additional information so that the server may also obtain the additional information. And according to the content in the additional information, decrypting by adopting a corresponding decryption algorithm or decrypting by adopting a corresponding key.

Step 132, the encoded ciphertext is converted into a two-dimensional code, and the two-dimensional code is displayed.

And coding the ciphertext information and the additional information together to obtain a coded ciphertext. The coded ciphertext can be converted into the two-dimensional code according to a corresponding method, and the two-dimensional code is displayed. Therefore, the administrator user can conveniently and quickly acquire the two-dimensional code and send the two-dimensional code to the server through modes of scanning the code, photographing and the like by the mobile phone. After the server obtains the two-dimensional code, ciphertext information and additional information can be obtained through decoding, and the ciphertext information can be accurately decrypted according to the content in the additional information. Thereby, the device serial number, the target character string and the user reservation information can be obtained.

In the embodiment of the invention, a plurality of encryption modes can be adopted for encryption, the encryption mode and type are determined through the additional information, and the corresponding key is determined, so that the safety and the reliability of the ciphertext information are further improved.

Referring to fig. 2, fig. 2 is a flowchart illustrating a password resetting method applied to a server according to an embodiment of the present invention, where the method includes:

step 210, obtaining a two-dimensional code, where the two-dimensional code is obtained by encrypting the target character string and the user reservation information by the terminal device to obtain ciphertext information and then converting the ciphertext information, where the user reservation information includes a user contact way.

The server may obtain the two-dimensional code in a variety of ways. For example, the administrator user may send the two-dimensional code generated by the terminal device, which is acquired by a mobile phone, a computer, or the like, to a preset mailbox of the server, so that the server may acquire the two-dimensional code from the preset mailbox. Or, a corresponding program may be preset in the device such as the mobile phone of the administrator user, and when the two-dimensional code is photographed or scanned, the two-dimensional code may be directly sent to the server according to the corresponding program.

Step 220, converting the two-dimensional code into ciphertext information.

And step 230, decrypting the ciphertext information to obtain the target character string and user reservation information, wherein the user reservation information comprises a user contact way.

After the server obtains the ciphertext information, the server can decrypt the ciphertext information by adopting a decryption method corresponding to the encryption method, so that the target character string and the user reservation information can be obtained. For example, the cipher text information is decrypted by a key in the RAS algorithm, so as to obtain the target character string and the user reservation information. The server is preset with a decryption algorithm or a key corresponding to the encryption algorithm of the terminal device, for example, the terminal device encrypts the encrypted message by using the public key of the RAS algorithm, and the server is provided with the corresponding key, so that only the server can decrypt the encrypted message of the terminal device, and the security of the message of the encrypted message is ensured.

And step 240, using all or part of characters in the target character string as a security code.

In order to further improve the security and reliability of the security code, in the embodiment of the present invention, optionally, step 240, using all or part of the characters in the target character string as the security code may include:

and 241, coding all or part of characters in the target character string according to a message digest algorithm to obtain a digital signature.

In step 242, the digital signature is used as a security code.

After the server obtains the target string through decryption, the server may perform calculation on the target string by using a message digest algorithm, such as the MD5 algorithm. The server can calculate all characters or numbers in the target character string, and can also calculate partial characters or numbers in the target character string, so as to obtain the digital signature. For example, the target string is a 16-byte string, and the digital signature may be obtained by calculating all 16-byte characters or by calculating only the first 8-bit characters thereof according to the MD5 algorithm.

After the digital signature is obtained, the digital signature can be used as a security code. The target character string is calculated according to the message digest algorithm, which is equivalent to that the target character string is encrypted once, so that the safety of the safety code is improved in the process of safety code transmission.

And 250, sending a security code according to the user contact information in the user reservation information, wherein the security code is used for matching with the local target character string of the terminal equipment, and if the security code is matched with the local target character string of the terminal equipment, the terminal equipment resets the password.

After obtaining the security code, the server may send the security code to the administrator user according to the user contact information in the user reservation information, for example, if the user contact information is a mobile phone number, the server may send the security code to the mobile phone of the administrator user in a short message manner; and if the user contact way is an email, the security code can be sent to the administrator user in an email way. In practical application, the terminal equipment can be in foreign areas and the like, and the server can be arranged in China, so that the security code is not easy to be sent by the mobile phone short message. Therefore, in the embodiment of the present invention, the security code is preferably sent to the administrator user by means of e-mail.

After the administrator user acquires the security code, the security code may be manually input to the terminal device through interaction with the terminal device, or the security code may be sent to the terminal device through bluetooth, lan transmission, or the like, so that the terminal device obtains the security code. And the terminal equipment matches the security code with a local target character string, and resets the password if the security code is matched with the local target character string.

In the embodiment of the invention, the administrator user of the terminal equipment does not need to contact the equipment manufacturer of the terminal equipment, and the equipment manufacturer does not need to judge the authenticity of the administrator user. Thereby reducing the labor cost and improving the efficiency of password resetting. Because the authenticity of the administrator user does not need to be judged manually any more, the safety of the electronic equipment when the password is reset can be improved. The adoption converts the form of ciphertext information into the two-dimensional code, makes terminal equipment and administrator user realize more convenient information interaction through the two-dimensional code, can directly obtain this two-dimensional code through modes such as shooting, scanning the sign indicating number. Meanwhile, the administrator user can conveniently send the two-dimension code to the server.

With reference to the foregoing embodiment, optionally, in the method for resetting a password provided in the embodiment of the present invention, in step 220, the converting the two-dimensional code into ciphertext information includes:

firstly, converting the two-dimensional code to obtain a coded ciphertext.

After the server obtains the two-dimensional code, the server can firstly convert the two-dimensional code by adopting a corresponding method in the prior art, so that the information in the form of the two-dimensional code is converted into the information in the form of the coded ciphertext.

And secondly, decoding the coded ciphertext to obtain ciphertext information and additional information, wherein the additional information comprises: the type of algorithm and key number used for encryption.

When the terminal equipment generates the two-dimensional code, the ciphertext information and the additional information can be coded together, so that a coded ciphertext is formed. Therefore, after obtaining the encoded ciphertext, the server may perform decoding in a corresponding manner, for example, decoding by using a base64 decoding method, so as to obtain the ciphertext information and the additional information.

Correspondingly, step 230, decrypting the ciphertext information to obtain the target character string and the user reservation information, including:

and decrypting the ciphertext information by adopting a corresponding algorithm and a corresponding key according to the additional information to obtain the target character string and the user reserved information.

Since a plurality of encryption-decryption methods and a plurality of pairs of public key-secret keys can be set between the terminal device and the server. Therefore, the type of the encryption method adopted by the terminal equipment and the number of the adopted public key or secret key can be determined through the additional information, so that the server can decrypt the ciphertext information by adopting a corresponding decryption algorithm or secret key according to the additional information, and the target character string and the user reserved information can be obtained.

With reference to the foregoing embodiment, optionally, in this embodiment of the present invention, when the ciphertext information includes the device serial number, step 250, sending the security code according to the user contact information in the user reservation information, includes:

The equipment serial number is the displacement identification code of the terminal equipment, and the equipment can be uniquely determined. The terminal device can encrypt the device serial number, the user reservation information and the target character string together to form ciphertext information. The server can obtain the equipment serial number by decrypting the ciphertext information. The device serial number may then be sent to the administrator user along with the security code when the security code is sent. For example, the content of the mail sent by the server to the administrator user is as follows, the device security code of your device serial number without 12345678 is a6bcdfd9, the validity period is 48 hours, and the user is careful about keeping secret.

When the administrator user resets the passwords of the plurality of terminal devices at the same time, the terminal device which needs to be reset and corresponds to the security code can be uniquely determined through the device serial number.

Referring to fig. 3, fig. 3 is a structural diagram of a password resetting apparatus provided in an embodiment of the present invention, applied to a terminal device, where the structural diagram includes:

the encryption module 301 is configured to encrypt the target character string and the user reservation information to obtain ciphertext information, where the user reservation information includes a user contact information;

a conversion module 302, configured to convert the ciphertext information into a two-dimensional code, and display the two-dimensional code;

an obtaining module 303, configured to obtain a security code corresponding to the two-dimensional code, where the security code is a security code that is generated according to the target character string in the decrypted ciphertext information and sent according to the user contact information in the user reservation information, and is generated by a server after obtaining the ciphertext information and converting the two-dimensional code;

a resetting module 304, configured to reset a password if the security code matches the target character string.

Optionally, in the password resetting device provided in the embodiment of the present invention, the device further includes:

a random module for generating a set of random character strings as the target character string, wherein the target character string has a preset validity period, and the preset validity period is calculated from the generation of the set of random character strings;

the reset module 304 is specifically configured to:

Optionally, in the password resetting device provided in the embodiment of the present invention, the encryption module 301 is specifically configured to:

the conversion module 302 is specifically configured to:

and coding the ciphertext information and the additional information to obtain a coded ciphertext, wherein the additional information comprises: encrypting the adopted algorithm type and the key number; and converting the coded ciphertext into the two-dimension code, and displaying the two-dimension code.

Optionally, in the password resetting device provided in the embodiment of the present invention, when the security code is a digital signature calculated by a message digest algorithm;

the reset module 304 is specifically configured to:

analyzing the security code according to the message digest algorithm to obtain an analyzed character string; and if the analysis character string is matched with the target character string, resetting the password.

Referring to fig. 4, fig. 4 is another structural diagram of a password resetting apparatus provided in an embodiment of the present invention, which is applied to a server, and includes:

an obtaining module 401, configured to obtain a two-dimensional code, where the two-dimensional code is obtained by encrypting a target character string and user reservation information by a terminal device to obtain ciphertext information and then converting the ciphertext information, where the user reservation information includes a user contact information;

a conversion module 402, configured to convert the two-dimensional code into ciphertext information;

a decryption module 403, configured to decrypt the ciphertext information to obtain a target character string and user reservation information, where the user reservation information includes a user contact information;

a generating module 404, configured to use all or part of the characters in the target character string as a security code;

a sending module 405, configured to send the security code according to the user contact information in the user reservation information, where the security code is used to match the target character string local to the terminal device, and if the security code is matched with the target character string local to the terminal device, the terminal device resets a password.

Optionally, in the password resetting device provided in the embodiment of the present invention, the conversion module 402 is specifically configured to:

converting the two-dimensional code to obtain a coded ciphertext; decoding the coded ciphertext to obtain ciphertext information and additional information, wherein the additional information comprises: encrypting the adopted algorithm type and the key number;

the decryption module 403 is specifically configured to:

Optionally, in the password resetting apparatus provided in the embodiment of the present invention, when the ciphertext information includes the device serial number, the sending module 405 is specifically configured to:

Optionally, in the password resetting apparatus provided in the embodiment of the present invention, the generating module 404 is specifically configured to:

coding all or part of characters in the target character string according to a message digest algorithm to obtain a digital signature; and using the digital signature as the security code.

The embodiment of the present invention further provides a terminal device, as shown in fig. 5, which includes a processor 501, a communication interface 502, a memory 503 and a communication bus 504, wherein the processor 501, the communication interface 502 and the memory 503 complete mutual communication through the communication bus 504,

a memory 503 for storing a computer program;

the processor 501, when executing the program stored in the memory 503, implements the following steps:

The embodiment of the present invention further provides a server, as shown in fig. 6, including a processor 601, a communication interface 602, a memory 603, and a communication bus 604, where the processor 601, the communication interface 602, and the memory 603 complete mutual communication through the communication bus 604,

a memory 603 for storing a computer program;

the processor 601 is configured to implement the following steps when executing the program stored in the memory 603:

converting the two-dimensional code into the ciphertext information;

The communication bus mentioned above for the terminal device and the server may be a PCI (Peripheral component interconnect) bus, an EISA (Extended Industry standard architecture) bus, or the like. The communication bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the electronic equipment and other equipment.

The Memory may include a RAM (Random Access Memory) or an NVM (Non-Volatile Memory), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the processor.

The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or other Programmable logic device, discrete Gate or transistor logic device, discrete hardware component.

In another embodiment of the present invention, a computer-readable storage medium is further provided, which stores instructions that, when executed on a computer, cause the computer to execute the method for resetting a password applied to a terminal device described in any of the above embodiments.

In another embodiment of the present invention, there is also provided a computer-readable storage medium, which stores instructions that, when executed on a computer, cause the computer to execute the reset password method applied to a server as described in any of the above embodiments.

In a further embodiment of the present invention, there is also provided a computer program product containing instructions which, when run on a computer, cause the computer to perform the method for resetting a password of a terminal device as described in any of the above embodiments.

In yet another embodiment, the present invention further provides a computer program product containing instructions which, when run on a computer, cause the computer to perform the server reset password method according to any one of the above embodiments.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the invention to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website site, computer, server, or data center to another website site, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.

Claims

1. A password resetting method is applied to terminal equipment, and comprises the following steps:

2. The method of claim 1, wherein before the step of encrypting the target string and the user reservation information to obtain the ciphertext information, the method further comprises:

3. The method of claim 1, wherein the encrypting the target string and the user reservation information to obtain ciphertext information comprises:

4. The method of claim 1, wherein when the security code is a digital signature calculated by a message digest algorithm;

5. A method for resetting a password, applied to a server, the method comprising:

converting the two-dimensional code into the ciphertext information;

6. The method of claim 5, wherein the converting the two-dimensional code into the ciphertext information comprises:

converting the two-dimensional code to obtain a coded ciphertext;

7. The method of claim 5, wherein when the ciphertext message includes the device serial number, the sending the security code in the user contact manner of the user reservation message comprises:

8. The method of claim 5, wherein the using all or part of the characters in the target character string as a security code comprises:

and using the digital signature as the security code.

9. An apparatus for resetting a password, applied to a terminal device, the apparatus comprising:

10. An apparatus for resetting a password, applied to a server, the apparatus comprising:

11. The terminal equipment is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor and the communication interface are used for realizing the communication between the processor and the memory through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of any of claims 1 to 4 when executing a program stored in the memory.

12. A server is characterized by comprising a processor, a communication interface, a memory and a communication bus, wherein the processor and the communication interface are used for realizing the communication between the processor and the memory through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of any of claims 5 to 8 when executing a program stored in the memory.

13. A computer-readable storage medium, characterized in that a computer program is stored in the computer-readable storage medium, which computer program, when being executed by a processor, carries out the method steps of any one of claims 1 to 4.

14. A computer-readable storage medium, characterized in that a computer program is stored in the computer-readable storage medium, which computer program, when being executed by a processor, carries out the method steps of any of the claims 5-8.