CN114244519A - Password verification method and device, computer equipment and storage medium - Google Patents
Password verification method and device, computer equipment and storage medium Download PDFInfo
- Publication number
- CN114244519A CN114244519A CN202111398531.7A CN202111398531A CN114244519A CN 114244519 A CN114244519 A CN 114244519A CN 202111398531 A CN202111398531 A CN 202111398531A CN 114244519 A CN114244519 A CN 114244519A
- Authority
- CN
- China
- Prior art keywords
- password
- encryption algorithm
- verified
- account
- verification
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
Abstract
The application relates to a password verification method, a password verification device, computer equipment and a storage medium. The method comprises the following steps: responding to a first account triggering operation of a user, acquiring a password to be verified and an account to be verified input by the user, determining the account type of the account to be verified, determining a first target encryption algorithm from a first encryption algorithm and a second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after the plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current verification bank; the efficiency of password verification can be improved, and the number of times of calling the second password algorithm interface of other lines can be reduced.
Description
Technical Field
The present application relates to the field of artificial intelligence recognition and classification technologies, and in particular, to a password verification method, apparatus, computer device, and storage medium.
Background
Along with the continuous expansion of banking business, the diversity and complexity of banking business are higher and higher, and more businesses can carry out business handling operation across banks in order to provide more convenient business handling service for users. For a bank (called a bank for short), account information (such as an account name, a card number, an account password, and the like) of a registered account of a different bank (called another bank for short) other than the bank (called the bank for short) needs to be stored, and the different bank adopts a different one-way encryption algorithm for encryption storage when storing the account information.
In the conventional technology, when the other-bank registered account performs the inter-bank operation in the bank, the bank needs to call a password encryption algorithm interface of the other bank to verify the password input by the user.
However, the existing password verification process is complex, which results in low efficiency of password verification.
Disclosure of Invention
Therefore, in order to solve the above technical problems, it is necessary to provide a password verification method, device, computer device and storage medium that can simplify the verification process of the current bank for verifying the password of the account of the other bank and improve the password verification efficiency.
In a first aspect, a method for verifying a password is provided, where the method includes:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
In one embodiment, the method further comprises:
responding to a second account triggering operation of the user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining a second target encryption algorithm according to the bank type of the account to be verified, and verifying the password to be verified by adopting the second target encryption algorithm;
and under the condition of successful verification, determining that the password to be verified is a legal plaintext password, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
In one embodiment, verifying the password to be verified by using the second target encryption algorithm includes:
encrypting the password to be verified by adopting the second target encryption algorithm to obtain a first password abstract;
judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified;
and determining that the verification is successful under the condition that the first password digest is consistent with second password data corresponding to the pre-stored account to be verified.
In one embodiment, after the first encryption algorithm is used to encrypt the legal plaintext password to obtain the first password data, the method further includes:
and replacing the second password data corresponding to the pre-stored account to be verified with the first password data, and marking the account to be verified as a marked account.
In one embodiment, determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by using the first target encryption algorithm includes:
and under the condition that the account type is the marked account type, determining that the first encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the first encryption algorithm.
In one embodiment, verifying the password to be verified by using the first encryption algorithm includes:
encrypting the password to be verified by adopting the first encryption algorithm to obtain a second password abstract;
judging whether the second password abstract is consistent with the pre-stored first password data corresponding to the account to be verified;
and determining that the verification is successful under the condition that the second password digest is consistent with the pre-stored first password data corresponding to the account to be verified.
In one embodiment, determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by using the first target encryption algorithm further includes:
and under the condition that the account type is the unmarked account type, determining that the second encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the second encryption algorithm.
In a second aspect, there is provided a device for verifying a password, the device comprising:
the first acquisition module is used for responding to a first account triggering operation of a user and acquiring a password to be verified and an account to be verified, which are input by the user;
the determining module is used for determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and the first verification module is used for determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type and verifying the password to be verified by adopting the first target encryption algorithm.
In one embodiment, the apparatus further comprises:
the second acquisition module is used for responding to a second account triggering operation of the user and acquiring the password to be verified and the account to be verified, which are input by the user;
the second verification module is used for determining a second target encryption algorithm according to the bank type of the account to be verified and verifying the password to be verified by adopting the second target encryption algorithm;
and the encryption module is used for determining that the password to be verified is a legal plaintext password under the condition of successful verification, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
In one embodiment, the second verification module is specifically configured to encrypt the password to be verified by using the second target encryption algorithm to obtain a first password digest;
judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified;
and determining that the verification is successful under the condition that the first password digest is consistent with second password data corresponding to the pre-stored account to be verified.
In one embodiment, the apparatus further comprises:
and the replacing module is used for replacing second password data which is stored in advance and corresponds to the account to be verified with the first password data after the encryption module encrypts the legal plaintext password by adopting the first encryption algorithm to obtain the first password data, and marking the account to be verified as a marked account.
In one embodiment, the first verification module comprises a first verification unit;
the first verification unit is configured to determine that the first encryption algorithm is the first target encryption algorithm if the account type is the marked account type, and verify the password to be verified by using the first encryption algorithm.
In one embodiment, the first verification unit is specifically configured to encrypt the password to be verified by using the first encryption algorithm to obtain a second password digest;
judging whether the second password abstract is consistent with the pre-stored first password data corresponding to the account to be verified;
and determining that the verification is successful under the condition that the second password digest is consistent with the pre-stored first password data corresponding to the account to be verified.
In one embodiment, the first check module further comprises a second check unit;
the second verification unit is configured to determine that the second encryption algorithm is the first target encryption algorithm if the account type is the unmarked account type, and verify the password to be verified by using the second encryption algorithm.
In a third aspect, a computer device is provided, comprising a memory and a processor, the memory storing a computer program, the processor implementing the following steps when executing the computer program:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
In a fourth aspect, there is provided a computer readable storage medium having stored thereon a computer program which when executed by a processor performs the steps of:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
According to the password verification method, the password verification device, the computer equipment and the storage medium, the server responds to a first account triggering operation of a user to obtain a password to be verified and an account to be verified input by the user, then, the account type of the account to be verified is determined, a first target encryption algorithm is determined from the first encryption algorithm and the second encryption algorithm according to the account type, and the password to be verified is verified by adopting the first target encryption algorithm; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank; that is, when the current check bank is used for the other bank registered account, the current check bank stores both the second password data encrypted by the second encryption algorithm of the other bank and the first password data encrypted by the first encryption algorithm of the current check bank, namely when the password check of the other bank registered account is carried out, the password check can be carried out by using the first encryption algorithm of the current check bank or the second encryption algorithm of the other bank according to the type of the account to be checked, when the password check is carried out by using the first encryption algorithm of the current check bank, the password check can be carried out by directly using the first encryption algorithm of the other bank without calling the second encryption algorithm interface of the other bank, the calling process of the second encryption algorithm interface of the other bank is avoided, and the password check process is greatly simplified, furthermore, the efficiency of password verification can be improved, the number of times of calling the second password algorithm interface of other banks can be reduced, even under the condition that the password can be verified through the first encryption algorithm of the current verification bank, the second password algorithm interface of other banks does not need to be called, the relevance between the current verification bank and other banks is reduced, the independent operability of the current verification bank is improved, and the processing efficiency of the current verification bank on cross-bank services can be further improved.
Drawings
FIG. 1 is a diagram of an exemplary environment in which a method for verifying a password may be implemented;
FIG. 2 is a flowchart illustrating a password verification method according to a first embodiment;
FIG. 3 is a flowchart illustrating a password verification method according to a second embodiment;
FIG. 4 is a flowchart illustrating a method for verifying a password in a third embodiment;
FIG. 5 is a flowchart illustrating a method for verifying a password in a fourth embodiment;
FIG. 6 is a flowchart illustrating a method for verifying a password according to a fifth embodiment;
FIG. 7 is a block diagram showing the structure of a password verifying apparatus according to the first embodiment;
FIG. 8 is a block diagram showing the structure of a password verifying apparatus in the second embodiment;
FIG. 9 is a block diagram showing the structure of a password verifying apparatus in the third embodiment;
FIG. 10 is a diagram showing an internal structure of a computer device according to an embodiment.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The password verification method provided by the application can be applied to the application environment shown in fig. 1. Wherein the terminal 101 communicates with the server 102 via a network. The terminal 101 may be, but not limited to, a bank service terminal, various personal computers, a notebook computer, a smart phone, a tablet computer, and a portable wearable device, and the server 102 may be implemented by an independent server or a server cluster formed by a plurality of servers. Optionally, during the interaction between the terminal 101 and the server 102, the transmitted data may be encrypted by using a reversible encryption algorithm of a national secret, so as to improve the security and integrity of data transmission and avoid data leakage.
In one embodiment, as shown in fig. 2, a method for verifying a password is provided, which is described by taking the method as an example applied to the server in fig. 1, and includes the following steps:
The first account may be a registered account of any other bank except the registered account of the currently verified bank.
When a user uses a first account (for example, an account registered by other people) to perform transaction operation at a current verification bank, the user inputs an account password of the first account through a terminal device of the current verification bank, and the terminal device of the current verification bank responds to the triggering operation of the user on the first account to acquire a password to be verified (the account password of the first account) and an account to be verified (the first account) input by the user.
Wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after the plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank.
Optionally, all registered account information (which may include an account and an account password) of any other bank may be stored in advance in the database of the current check bank, and all registered accounts of the other banks are marked as unmarked accounts; the database of the current checking bank can also store the account information of any other bank account used by the current checking bank, and mark the used account of other bank as the marked account. In addition, a second encryption algorithm corresponding to each other bank can be stored in the database of the current verification bank, wherein the second encryption algorithm corresponding to each other bank can be different.
Optionally, in a case that it is determined that the account to be verified is a registered account of other banks except the current verification bank, the account type of the account to be verified may be determined, and it may be determined whether the current verification account is a marked account or a non-marked account.
Optionally, after the account type of the account to be verified is determined, a first target encryption algorithm for performing password verification on the password to be verified corresponding to the account to be verified can be determined according to the account type, and according to the steps, the marked account corresponds to the first encryption algorithm of the current verification bank, and the unmarked account corresponds to the second encryption algorithm of other banks.
Optionally, in a case that the account type is a token account type, it may be determined that the first encryption algorithm is the first target encryption algorithm, and the password to be verified is verified by using the first encryption algorithm; and if the account type is the unmarked account type, determining that the second encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the second encryption algorithm.
In the password verification method, a server acquires a password to be verified and an account to be verified, which are input by a user, through a triggering operation in response to a first account of the user, then determines the account type of the account to be verified, determines a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifies the password to be verified by adopting the first target encryption algorithm; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank; that is, when the current check bank is used for the other bank registered account, the current check bank stores both the second password data encrypted by the second encryption algorithm of the other bank and the first password data encrypted by the first encryption algorithm of the current check bank, namely when the password check of the other bank registered account is carried out, the password check can be carried out by using the first encryption algorithm of the current check bank or the second encryption algorithm of the other bank according to the type of the account to be checked, when the password check is carried out by using the first encryption algorithm of the current check bank, the password check can be carried out by directly using the first encryption algorithm of the other bank without calling the second encryption algorithm interface of the other bank, the calling process of the second encryption algorithm interface of the other bank is avoided, and the password check process is greatly simplified, furthermore, the efficiency of password verification can be improved, the number of times of calling the second password algorithm interface of other banks can be reduced, even under the condition that the password can be verified through the first encryption algorithm of the current verification bank, the second password algorithm interface of other banks does not need to be called, the relevance between the current verification bank and other banks is reduced, the independent operability of the current verification bank is improved, and the processing efficiency of the current verification bank on cross-bank services can be further improved.
Fig. 3 is a flowchart illustrating a password verification method according to another embodiment. The embodiment relates to an optional implementation process of password verification when a current verification bank carries out transaction operation by using a bank card of other banks for the first time; on the basis of the above embodiment, as shown in fig. 3, the method further includes:
Wherein the second account can be an account of the registered account of other lines when the current check bank is used for the first time.
Optionally, when the other registered bank account is used for the first time in the current verification bank, the current verification bank responds to a trigger operation of the user on the other registered bank account (i.e. the second account), and may acquire the password to be verified (the account password corresponding to the other registered bank account) and the account to be verified (the other registered bank account) input by the user.
Optionally, the current verification bank may pre-store a corresponding relationship between the bank types of different banks in other banks and second encryption algorithms used by the banks in other banks, and after the account to be verified is obtained, the second encryption algorithm corresponding to the bank type to which the account to be verified belongs may be determined according to the bank type to which the account to be verified belongs and the corresponding relationship, and is used as a second target encryption algorithm for performing password verification on the account to be verified; then, the password to be verified can be verified by adopting the second target encryption algorithm.
Optionally, the second target encryption algorithm may be a one-way encryption algorithm or a two-way encryption algorithm; when the second target encryption algorithm is a bidirectional encryption algorithm, the password to be verified can be encrypted through the second target encryption algorithm to obtain an encrypted ciphertext, whether the encrypted ciphertext is consistent with a prestored ciphertext of the account to be verified or not can be compared, and the encrypted ciphertext can be determined to be successfully verified under the condition that the encrypted ciphertext is consistent with the prestored ciphertext of the account to be verified; in addition, when the second target encryption algorithm is a bidirectional encryption algorithm, the second target encryption algorithm may be further used to decrypt a pre-stored ciphertext of the account to be verified to obtain a decrypted initial plaintext password, and then, whether the initial plaintext password is consistent with the password to be verified may be compared, and when it is determined that the password to be verified is consistent with the initial plaintext password, it may be determined that the verification is successful.
Optionally, after the password to be verified is successfully verified by using a second target encryption algorithm corresponding to the bank type to which the account to be verified belongs, the password to be verified can be determined to be a legal plaintext password, and then, the legal plaintext password (the password to be verified) can be encrypted by using a first encryption algorithm corresponding to the current verification bank, so as to obtain first encrypted data of the password to be verified of the account to be verified of other banks in the current verification bank; in addition, the account type of the account to be verified can be marked as a marked account type, that is, the account type of the account to be verified is modified from an initial unmarked account type to a marked account type.
And 304, sending a password error reminding message to the user terminal to indicate the user to input the password to be verified again under the condition of failed verification.
In the embodiment, when the registered account of other banks is used for the first time in the current verification bank, the server of the current verification bank acquires the password to be verified and the account to be verified, which are input by the user, by responding to the triggering operation of the second account of the user; determining a second target encryption algorithm according to the bank type of the account to be verified, and verifying the password to be verified by adopting the second target encryption algorithm; under the condition of successful verification, determining that the password to be verified is a legal plaintext password, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain first password data; that is to say, during the inter-bank operation, if the current verification bank successfully verifies the password to be verified by using the second target encryption algorithm of the other bank when the transaction operation is performed on the current verification bank by using the other registered account for the first time, the current verification bank may encrypt the password to be verified (plaintext password) by using the first encryption algorithm of the current bank to obtain encrypted first password data, and modify the account type of the account to be verified into the marked account type, so that when the transaction operation is performed on the current verification bank again on the account to be verified, the password verification can be performed on the password to be verified of the account to be verified by directly using the first encryption algorithm of the current verification bank, which can greatly improve the efficiency of performing the password verification on the account to be verified of the other registered bank, and simplify the password verification process. In addition, as more and more other bank registered accounts perform transaction operation on the bank, the bank can obtain more and more first password data corresponding to the other bank registered accounts, and when the other bank registered accounts perform cross-bank business transaction on the bank again, the efficiency of checking the passwords of the other bank registered accounts by the bank can be greatly improved.
Fig. 4 is a flowchart illustrating a password verification method according to another embodiment. The embodiment relates to an optional implementation process for carrying out password verification on a password to be verified by adopting a second target encryption algorithm of other banks when a current verification bank carries out transaction operation by using the bank card of other banks for the first time; on the basis of the above embodiment, as shown in fig. 4, the step 302 includes:
Optionally, when the second target encryption algorithm is a one-way encryption algorithm, the plaintext cannot be obtained through ciphertext decryption after the plaintext is encrypted by the one-way encryption algorithm to obtain a ciphertext; therefore, the account password information is registered for the other line with one-way encryption, and the password to be verified can be encrypted by adopting the second target encryption algorithm of the other line to obtain the encrypted first password digest.
Optionally, the current verification bank may determine, according to the account to be verified, second password data corresponding to the account to be verified from all registered account information of the other bank pre-stored in the database, and determine whether the first password digest is consistent with the second password data corresponding to the pre-stored account to be verified.
And step 403, determining that the verification is successful under the condition that the first password digest is consistent with the second password data corresponding to the pre-stored account to be verified.
In this embodiment, the current verification bank encrypts the password to be verified by using the second target encryption algorithm to obtain a first password digest, and determines whether the first password digest is consistent with the second password data corresponding to the pre-stored account to be verified, and when the first password digest is consistent with the second password data corresponding to the pre-stored account to be verified, it is determined that the verification is successful, thereby implementing the verification of the password to be verified and improving the feasibility of the password verification.
In an optional embodiment of the present application, after "the first encryption algorithm is used to encrypt the legal plaintext password to obtain the first password data" in step 303, "the method may further include replacing the pre-stored second password data corresponding to the account to be verified with the first password data, and marking the account to be verified as a marked account; that is to say, after the current verification bank obtains the first password data corresponding to the plaintext password of the account to be verified of the other bank by using the first encrypted data of the current bank, the first password data can be used for replacing the pre-stored second password data encrypted by using the second encryption algorithm of the other bank; by the method, the second password data can be gradually replaced by the first password data, so that the password data obtained by encrypting the password of the registered account of the other bank through the first encryption algorithm of the bank is obtained, the bank can conveniently and uniformly manage the password data of the registered account of the other bank, and the data storage amount is reduced; and when the other row of registered accounts is used in the row, the password to be verified is directly verified by adopting the first encryption algorithm of the row, the encryption algorithm interface of the other row does not need to be additionally called, the password verification process is simplified, and the password verification efficiency is improved.
Fig. 5 is a flowchart illustrating a password verification method according to another embodiment. The embodiment relates to an optional implementation process for verifying a verification password by a current verification bank by adopting a first encryption algorithm of the bank; on the basis of the foregoing embodiment, as shown in fig. 5, the step of "verifying the password to be verified by using the first encryption algorithm" may include:
Optionally, in a case that the first target encryption algorithm is a one-way encryption algorithm, the first encryption algorithm may be used to encrypt the password to be verified, so as to obtain a second password digest. Preferably, the first target encryption algorithm may employ a one-way encryption algorithm of a national secret.
And step 504, determining that the verification fails under the condition that the second password digest is inconsistent with the pre-stored first password data corresponding to the account to be verified.
In this embodiment, the current verification bank encrypts the password to be verified by using the first encryption algorithm of the current bank to obtain a second password digest, and determines whether the second password digest is consistent with the first password data corresponding to the pre-stored account to be verified, and determines that the verification is successful when the second password digest is consistent with the first password data corresponding to the pre-stored account to be verified, so as to verify the password to be verified, and improve the feasibility of password verification.
FIG. 6 is a flowchart illustrating a method for verifying a password according to an embodiment. On the basis of the above embodiment, as shown in fig. 6, the method includes:
601, when a registered account of other bank is used for the first time in the current verification bank, the current verification bank responds to the second account triggering operation of the user to acquire a password to be verified and an account to be verified, which are input by the user;
step 602, determining a second target encryption algorithm corresponding to the account to be verified according to the non-marked account type to which the account to be verified belongs and the bank type to which the account to be verified belongs;
step 609, replacing the second password data corresponding to the pre-stored account to be verified with the first password data, and marking the account to be verified as a marked account;
step 610, when the registered account of the other bank is used again in the current verification bank, the current verification bank responds to the first account triggering operation of the user to acquire the password to be verified and the account to be verified, which are input by the user;
611, determining a first encryption algorithm of the current verification bank according to the marked account type of the account to be verified;
It should be understood that although the various steps in the flow charts of fig. 2-6 are shown in order as indicated by the arrows, the steps are not necessarily performed in order as indicated by the arrows. The steps are not performed in the exact order shown and described, and may be performed in other orders, unless explicitly stated otherwise. Moreover, at least some of the steps in fig. 2-6 may include multiple steps or multiple stages, which are not necessarily performed at the same time, but may be performed at different times, which are not necessarily performed in sequence, but may be performed in turn or alternately with other steps or at least some of the other steps.
In one embodiment, as shown in fig. 7, there is provided a password verification apparatus including: a first obtaining module 701, a determining module 702 and a first verifying module 703, wherein:
a first obtaining module 701, configured to obtain, in response to a first account triggering operation of a user, a password to be verified and an account to be verified, which are input by the user;
a determining module 702, configured to determine an account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
the first verifying module 703 is configured to determine a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verify the password to be verified by using the first target encryption algorithm.
In one embodiment, as shown in fig. 8, the apparatus further comprises:
a second obtaining module 704, configured to obtain, in response to a second account triggering operation of the user, a password to be verified and an account to be verified, which are input by the user;
the second verification module 705 is configured to determine a second target encryption algorithm according to the bank type to which the account to be verified belongs, and verify the password to be verified by using the second target encryption algorithm;
the encrypting module 706 is configured to determine that the password to be verified is a legal plaintext password under the condition that the verification is successful, and encrypt the legal plaintext password by using the first encryption algorithm to obtain the first password data.
In one embodiment, the second checking module 705 is specifically configured to encrypt the password to be checked by using the second target encryption algorithm to obtain a first password digest; judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified; and determining that the verification is successful under the condition that the first password digest is consistent with second password data corresponding to the pre-stored account to be verified.
In one embodiment, as shown in fig. 9, the apparatus further comprises: a replacing module 707, configured to, after the encrypting module encrypts the valid plaintext password by using the first encryption algorithm to obtain the first password data, replace the pre-stored second password data corresponding to the account to be verified with the first password data, and mark the account to be verified as a marked account.
In one embodiment, the first verification module 703 includes a first verification unit;
the first verification unit is configured to determine that the first encryption algorithm is the first target encryption algorithm if the account type is the marked account type, and verify the password to be verified by using the first encryption algorithm.
In one embodiment, the first verification unit is specifically configured to encrypt the password to be verified by using the first encryption algorithm to obtain a second password digest; judging whether the second password abstract is consistent with the pre-stored first password data corresponding to the account to be verified; and determining that the verification is successful under the condition that the second password digest is consistent with the pre-stored first password data corresponding to the account to be verified.
In one embodiment, the first verification module 703 further includes a second verification unit;
the second verification unit is configured to determine that the second encryption algorithm is the first target encryption algorithm if the account type is the unmarked account type, and verify the password to be verified by using the second encryption algorithm.
For the specific definition of the password verification device, reference may be made to the above definition of the password verification method, which is not described herein again. All or part of each module in the password verifying device can be realized by software, hardware and a combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.
In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as shown in fig. 10. The computer device includes a processor, a memory, and a network interface connected by a system bus. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device comprises a nonvolatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of an operating system and computer programs in the non-volatile storage medium. The database of the computer equipment is used for storing second password data of all registered accounts of other rows except the current verification bank and first password data of the registered accounts of other rows except the current verification bank in the current verification bank. The network interface of the computer device is used for communicating with an external terminal through a network connection. The computer program is executed by a processor to implement a method of verifying a password.
Those skilled in the art will appreciate that the architecture shown in fig. 10 is merely a block diagram of some of the structures associated with the disclosed aspects and is not intended to limit the computing devices to which the disclosed aspects apply, as particular computing devices may include more or less components than those shown, or may combine certain components, or have a different arrangement of components.
In one embodiment, a computer device is provided, comprising a memory and a processor, the memory having a computer program stored therein, the processor implementing the following steps when executing the computer program:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
In one embodiment, the processor, when executing the computer program, further performs the steps of: responding to a second account triggering operation of the user, and acquiring a password to be verified and an account to be verified, which are input by the user; determining a second target encryption algorithm according to the bank type of the account to be verified, and verifying the password to be verified by adopting the second target encryption algorithm; and under the condition of successful verification, determining that the password to be verified is a legal plaintext password, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
In one embodiment, the processor, when executing the computer program, further performs the steps of: encrypting the password to be verified by adopting the second target encryption algorithm to obtain a first password abstract; judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified; and determining that the verification is successful under the condition that the first password digest is consistent with second password data corresponding to the pre-stored account to be verified.
In one embodiment, the processor, when executing the computer program, further performs the steps of: and after the first encryption algorithm is adopted to encrypt the legal plaintext password to obtain the first password data, replacing the prestored second password data corresponding to the account to be verified with the first password data, and marking the account to be verified as a marked account.
In one embodiment, the processor, when executing the computer program, further performs the steps of: and under the condition that the account type is the marked account type, determining that the first encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the first encryption algorithm.
In one embodiment, the processor, when executing the computer program, further performs the steps of: encrypting the password to be verified by adopting the first encryption algorithm to obtain a second password abstract; judging whether the second password abstract is consistent with the pre-stored first password data corresponding to the account to be verified; and determining that the verification is successful under the condition that the second password digest is consistent with the pre-stored first password data corresponding to the account to be verified.
In one embodiment, the processor, when executing the computer program, further performs the steps of: and under the condition that the account type is the unmarked account type, determining that the second encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the second encryption algorithm.
In one embodiment, a computer-readable storage medium is provided, having a computer program stored thereon, which when executed by a processor, performs the steps of:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current check bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
In one embodiment, the computer program when executed by the processor further performs the steps of: responding to a second account triggering operation of the user, and acquiring a password to be verified and an account to be verified, which are input by the user; determining a second target encryption algorithm according to the bank type of the account to be verified, and verifying the password to be verified by adopting the second target encryption algorithm; and under the condition of successful verification, determining that the password to be verified is a legal plaintext password, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
In one embodiment, the computer program when executed by the processor further performs the steps of: encrypting the password to be verified by adopting the second target encryption algorithm to obtain a first password abstract; judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified; and determining that the verification is successful under the condition that the first password digest is consistent with second password data corresponding to the pre-stored account to be verified.
In one embodiment, the computer program when executed by the processor further performs the steps of: and after the first encryption algorithm is adopted to encrypt the legal plaintext password to obtain the first password data, replacing the prestored second password data corresponding to the account to be verified with the first password data, and marking the account to be verified as a marked account.
In one embodiment, the computer program when executed by the processor further performs the steps of: and under the condition that the account type is the marked account type, determining that the first encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the first encryption algorithm.
In one embodiment, the computer program when executed by the processor further performs the steps of: encrypting the password to be verified by adopting the first encryption algorithm to obtain a second password abstract; judging whether the second password abstract is consistent with the pre-stored first password data corresponding to the account to be verified; and determining that the verification is successful under the condition that the second password digest is consistent with the pre-stored first password data corresponding to the account to be verified.
In one embodiment, the computer program when executed by the processor further performs the steps of: and under the condition that the account type is the unmarked account type, determining that the second encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the second encryption algorithm.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware instructions of a computer program, which can be stored in a non-volatile computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. Any reference to memory, storage, database or other medium used in the embodiments provided herein can include at least one of non-volatile and volatile memory. Non-volatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical storage, or the like. Volatile Memory can include Random Access Memory (RAM) or external cache Memory. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM), among others.
The technical features of the above embodiments can be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the above embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.
The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present patent shall be subject to the appended claims.
Claims (16)
1. A method for verifying a password, the method comprising:
responding to a first account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current verification bank;
and determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by adopting the first target encryption algorithm.
2. The method of claim 1, further comprising:
responding to a second account triggering operation of a user, and acquiring a password to be verified and an account to be verified, which are input by the user;
determining a second target encryption algorithm according to the bank type of the account to be verified, and verifying the password to be verified by adopting the second target encryption algorithm;
if the verification is successful, determining that the password to be verified is a legal plaintext password, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
3. The method according to claim 2, wherein the verifying the password to be verified by using the second target encryption algorithm comprises:
encrypting the password to be verified by adopting the second target encryption algorithm to obtain a first password abstract;
judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified;
and if the two are consistent, the verification is determined to be successful.
4. The method of claim 3, wherein after the encrypting the legitimate plaintext cipher with the first encryption algorithm to obtain the first cipher data, the method further comprises:
and replacing second password data corresponding to the pre-stored account to be verified with the first password data, and marking the account to be verified as a marked account.
5. The method according to any one of claims 1 to 4, wherein the determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type and verifying the password to be verified by using the first target encryption algorithm comprises:
and if the account type is the marked account type, determining that the first encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the first encryption algorithm.
6. The method according to claim 5, wherein the verifying the password to be verified by using the first encryption algorithm comprises:
encrypting the password to be verified by adopting the first encryption algorithm to obtain a second password abstract;
judging whether the second password abstract is consistent with first password data corresponding to the pre-stored account to be verified;
and if the two are consistent, the verification is determined to be successful.
7. The method according to claim 5, wherein the determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type, and verifying the password to be verified by using the first target encryption algorithm further comprises:
and if the account type is a non-marked account type, determining that the second encryption algorithm is the first target encryption algorithm, and verifying the password to be verified by adopting the second encryption algorithm.
8. An apparatus for verifying a password, the apparatus comprising:
the first acquisition module is used for responding to a first account triggering operation of a user and acquiring a password to be verified and an account to be verified, which are input by the user;
the determining module is used for determining the account type of the account to be verified; wherein the account type comprises a marked account type or a non-marked account type; the first password data corresponding to the marked account type is data generated after a plaintext password is encrypted by adopting a first encryption algorithm of a current verification bank; the second password data corresponding to the unmarked account type is data generated after a plaintext password is encrypted by adopting a second encryption algorithm of other lines except the current verification bank;
and the first verification module is used for determining a first target encryption algorithm from the first encryption algorithm and the second encryption algorithm according to the account type and verifying the password to be verified by adopting the first target encryption algorithm.
9. The apparatus of claim 8, further comprising:
the second acquisition module is used for responding to a second account triggering operation of the user and acquiring the password to be verified and the account to be verified, which are input by the user;
the second verification module is used for determining a second target encryption algorithm according to the bank type of the account to be verified and verifying the password to be verified by adopting the second target encryption algorithm;
and the encryption module is used for determining that the password to be verified is a legal plaintext password if the verification is successful, and encrypting the legal plaintext password by adopting the first encryption algorithm to obtain the first password data.
10. The apparatus of claim 9,
the second verification module is specifically configured to encrypt the password to be verified by using the second target encryption algorithm to obtain a first password digest;
judging whether the first password abstract is consistent with second password data corresponding to the pre-stored account to be verified;
and if the two are consistent, the verification is determined to be successful.
11. The apparatus of claim 10, further comprising:
and the replacing module is used for replacing second password data which are stored in advance and correspond to the account to be verified with the first password data after the encryption module encrypts the legal plaintext password by adopting the first encryption algorithm to obtain the first password data, and marking the account to be verified as a marked account.
12. The apparatus of any one of claims 8 to 11, wherein the first verification module comprises a first verification unit;
the first verification unit is configured to determine that the first encryption algorithm is the first target encryption algorithm if the account type is a marked account type, and verify the password to be verified by using the first encryption algorithm.
13. The apparatus of claim 12,
the first verification unit is specifically configured to encrypt the password to be verified by using the first encryption algorithm to obtain a second password digest;
judging whether the second password abstract is consistent with first password data corresponding to the pre-stored account to be verified;
and if the two are consistent, the verification is determined to be successful.
14. The apparatus of claim 12, wherein the first verification module further comprises a second verification unit;
the second verification unit is configured to determine that the second encryption algorithm is the first target encryption algorithm if the account type is a non-signed account type, and verify the password to be verified by using the second encryption algorithm.
15. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that the processor, when executing the computer program, implements the steps of the method of any of claims 1 to 7.
16. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111398531.7A CN114244519B (en) | 2021-11-19 | 2021-11-19 | Password verification method, password verification device, computer equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111398531.7A CN114244519B (en) | 2021-11-19 | 2021-11-19 | Password verification method, password verification device, computer equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114244519A true CN114244519A (en) | 2022-03-25 |
| CN114244519B CN114244519B (en) | 2023-05-23 |
Family
ID=80750718
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111398531.7A Active CN114244519B (en) | 2021-11-19 | 2021-11-19 | Password verification method, password verification device, computer equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114244519B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116094764A (en) * | 2022-12-07 | 2023-05-09 | 南方电网数字电网研究院有限公司 | Power grid data storage method, device and equipment of power monitoring system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20020007343A1 (en) * | 1996-10-16 | 2002-01-17 | Fujitsu Limitedof Kawasaki, Japan | Network transaction system with authentication based on existing bank account |
| CN104408611A (en) * | 2014-10-29 | 2015-03-11 | 中国建设银行股份有限公司 | Method and system for electronic banking transactions of other bank cards |
| CN107948155A (en) * | 2017-11-24 | 2018-04-20 | 重庆金融资产交易所有限责任公司 | Cryptographic check method, apparatus, computer equipment and computer-readable recording medium |
| CN109933973A (en) * | 2019-01-24 | 2019-06-25 | 平安科技（深圳）有限公司 | Cryptographic check method, apparatus, computer equipment and storage medium |
| US10515368B1 (en) * | 2013-10-01 | 2019-12-24 | Wells Fargo Bank, N.A. | Interbank account verification and funds transfer system and method |
-
2021
- 2021-11-19 CN CN202111398531.7A patent/CN114244519B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20020007343A1 (en) * | 1996-10-16 | 2002-01-17 | Fujitsu Limitedof Kawasaki, Japan | Network transaction system with authentication based on existing bank account |
| US10515368B1 (en) * | 2013-10-01 | 2019-12-24 | Wells Fargo Bank, N.A. | Interbank account verification and funds transfer system and method |
| CN104408611A (en) * | 2014-10-29 | 2015-03-11 | 中国建设银行股份有限公司 | Method and system for electronic banking transactions of other bank cards |
| CN107948155A (en) * | 2017-11-24 | 2018-04-20 | 重庆金融资产交易所有限责任公司 | Cryptographic check method, apparatus, computer equipment and computer-readable recording medium |
| CN109933973A (en) * | 2019-01-24 | 2019-06-25 | 平安科技（深圳）有限公司 | Cryptographic check method, apparatus, computer equipment and storage medium |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116094764A (en) * | 2022-12-07 | 2023-05-09 | 南方电网数字电网研究院有限公司 | Power grid data storage method, device and equipment of power monitoring system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114244519B (en) | 2023-05-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108306876B (en) | Client identity authentication method, device, computer equipment and storage medium | |
| CN109325342B (en) | Identity information management method, device, computer equipment and storage medium | |
| CN109347625B (en) | Password operation method, work key creation method, password service platform and equipment | |
| CN112287379B (en) | Service data using method, device, equipment, storage medium and program product | |
| CN111193740B (en) | Encryption method, device, decryption method, computer device and storage medium | |
| CN110135175A (en) | Information processing, acquisition methods, device, equipment and medium based on block chain | |
| CN109587154A (en) | Digital identity verification method, device, computer equipment and storage medium | |
| CN113572743A (en) | Data encryption and decryption method and device, computer equipment and storage medium | |
| CN110768784A (en) | Password transmission method, device, computer equipment and storage medium | |
| CN110445757A (en) | Personnel information encryption method, device, computer equipment and storage medium | |
| CN114244519A (en) | Password verification method and device, computer equipment and storage medium | |
| CN116049802B (en) | Application single sign-on method, system, computer equipment and storage medium | |
| CN116962021A (en) | Method, device, equipment and medium for user real name authentication in financial cooperative institution | |
| CN108390758B (en) | User password processing method and device and internal control security monitoring system | |
| CN114448722B (en) | Cross-browser login method and device, computer equipment and storage medium | |
| CN114745178A (en) | Identity authentication method, identity authentication device, computer equipment, storage medium and program product | |
| CN110071908B (en) | Terminal binding method and device, computer equipment and storage medium | |
| CN114238914A (en) | Digital certificate application system, method, device, computer equipment and storage medium | |
| US20210359853A1 (en) | Hashing Schemes for Cryptographic Private Key Generation | |
| CN109561093B (en) | Unauthorized behavior detection method and device, computer equipment and storage medium | |
| CN110401535B (en) | Digital certificate generation, secure communication and identity authentication method and device | |
| CN111740980B (en) | Method and device for logging in application, mobile terminal and storage medium | |
| CN108537052A (en) | The access response method, apparatus and internal control safety monitor system of observation system file | |
| CN116910721A (en) | User identity authentication method, device, computer equipment and storage medium | |
| CN115174260A (en) | Data verification method, data verification device, computer, storage medium and program product |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |