TWI837564B - Account registration and login system - Google Patents

Abstract

An account registration and login system includes a storage module, a password generation module and an account login interface. The storage module is configured to store an encryption algorithm. The password generation module is coupled to the storage module and configured to encode a plaintext password for an account according to the encryption algorithm to generate a ciphertext password. Different accounts for the same user respectively correspond to different plaintext passwords, and there are rules between the account and the plaintext password that are preset by the same user. The account login interface is coupled to the password generation module and includes a password input portion for receiving the plaintext password. When receiving a trigger signal from the password input portion, the password generation module transforms the plaintext password into the ciphertext password.

Description

Account registration and login system

The present invention relates to a registration and login system, and in particular to an account registration and login system.

With the booming development of the Internet business, more and more online platforms have emerged. Each online platform is accompanied by a user account and password for personalized management. For most users, they usually register on different platforms with the same password to prevent forgetting the password. However, if the password is set in this way, once the password is leaked on one platform, other platforms using the same password may face security concerns. To prevent this from happening, some users will register on different platforms with different passwords. However, human memory is limited, and users may still forget their passwords.

Therefore, there is an urgent need for an account registration and login system that allows users to generate different passwords for different accounts that are highly secure and difficult for others to crack by simply memorizing passwords.

The present invention relates to an account registration and login system, which enables users to generate different passwords for different accounts that are highly secure and difficult for others to crack by simply memorizing the passwords.

According to one aspect of the present invention, a system for registering and logging in an account is provided. The system for registering and logging in an account includes a storage module, a password generation module, and an account login interface. The storage module is used to store an encryption algorithm. The password generation module is coupled to the storage module and is used to encode a plaintext password of an account according to the encryption algorithm to generate a ciphertext password, wherein different accounts of the same user correspond to different plaintext passwords, and there are rules preset by the same user between the account and the plaintext password. The account login interface is coupled to the password generation module and includes a password input unit for receiving the plaintext password. When the password generation module receives a trigger signal from the password input unit, the password generation module converts the plaintext password into a ciphertext password.

In order to better understand the above and other aspects of the present invention, the following is a specific example and a detailed description with the attached drawings as follows:

10,230: Account login interface

11:Account

12,232: Password input section

100: Account password generation system

110,210: Storage module

120,220: Password generation module

122: Input interface

130: Encrypted variables

131: Key

132: Initialization vector

140: Plain text password

141: The first string

142: The second string

150: Ciphertext password

200: Account registration and login system

231: Account Input Department

233:Button

S100: Account password generation method

S110, S120: Steps

FIG. 1 is a block diagram of a password generation system for an account according to an embodiment of the present invention; FIG. 2 is a flow chart of a password generation method for an account according to an embodiment of the present invention; FIG. 3 is an embodiment of generating a ciphertext password for an account login interface to register and log in an account; FIG. 4A is an embodiment of a plaintext password corresponding to an account; FIG. 4B is another embodiment of a plaintext password corresponding to another different account; FIG. 5 is a block diagram of an account registration and login system according to an embodiment of the present invention; and FIG. 6 is an embodiment of an account login interface.

The following will describe in detail various embodiments of the present invention, with accompanying drawings as examples. In addition to these detailed descriptions, the present invention can also be widely implemented in other embodiments, and any easy replacement, modification, and equivalent changes of the embodiments are included in the scope of the present invention and are subject to the subsequent patent scope. In the description of the specification, in order to enable readers to have a more complete understanding of the present invention, many specific details and implementation examples are provided; however, these specific details and implementation examples should not be regarded as limitations of the present invention. In addition, well-known steps or components are not described in the details to avoid unnecessary limitations of the present invention.

Please refer to Figure 1, which is a block diagram of an account password generation system 100 according to an embodiment of the present invention. The account password generation system 100 includes a storage module 110 and a password generation module 120. The storage module 110 is coupled to the password generation module 120. The storage module 110 is, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory, hard disk, other similar devices or a combination of these devices, and the present invention is not limited thereto. The password generation module 120 can be implemented by hardware circuits or software, for example, by an integrated circuit or a processing unit.

FIG. 2 is a flow chart of a method S100 for generating a password for an account according to an embodiment of the present invention. Please refer to FIG. 1 and FIG. 2. In step S110, an encryption algorithm is set and the encryption algorithm is stored in the storage module 110.

The encryption algorithm may be, but is not limited to, the Advanced Encryption Standard (AES) algorithm, the Data Encryption Standard (DES) algorithm, the Triple Data Encryption Standard (3DES) algorithm, or a modified algorithm thereof. In the following embodiments, the encryption algorithm is described using the Advanced Encryption Standard algorithm as an example, but the actual application should not be limited thereto. The encryption algorithm may include an encryption variable. Taking the Advanced Encryption Standard algorithm as an example, the encryption variable may include an initialization vector (IV) and a key (KEY).

In step S120, the password generation module 120 is used to encode a plaintext password of an account according to an encryption algorithm to generate a ciphertext password for an account login interface to register and log in the account. For example, please refer to Figure 3, which shows an embodiment of generating a ciphertext password 150 for an account login interface 10 to register and log in an account 11. Here, the password generation module 120 may include an input interface 122, and the input interface 122 may be opened by a user through an APP, for example. The input interface 122 may display encryption variables 130, such as a key 131 and an initialization vector 132. In one embodiment, these encrypted variables 130 may be randomly generated strings; in other embodiments, these encrypted variables 130 may also be irregular strings set by the user.

After the encryption variable 130 is set, the user can enter the plain text password 140 in the plain text password 140 field. When the user presses the conversion button, the password generation module 120 converts the plain text password 140 into a cipher text password 150 according to the encryption variable 130 of the encryption algorithm. The user can copy and paste the cipher text password 150 into the password input part 12 of the account login interface 10 to register and log in the account 11. The cipher text password 150 converted by the password generation module 120 is highly complex and irregular, and therefore difficult to be cracked. Even if others accidentally learn one of the ciphertext passwords 150 set by the user, since the encrypted variable 130 is an irregular string, it is difficult for others to obtain the same encrypted variable 130, and therefore they cannot guess the plaintext passwords 140 of other accounts 11.

It should be particularly noted that there are rules preset by the user between the account 11 and the plaintext password 140. Specifically, the user can establish rules to distinguish different accounts 11 in his mind and decide different plaintext passwords 140 for different accounts 11, and these plaintext passwords 140 are easy to remember for the user. For example, FIG. 4A shows an embodiment of a plaintext password 140 corresponding to an account, and FIG. 4B shows another embodiment of a plaintext password 140 corresponding to another different account. Referring to FIG. 4A and FIG. 4B, the plaintext password 140 may include a first set of strings 141 and a second set of strings 142. The first set of strings 141 is a string that changes with different accounts 11, and is a string established by the user based on the rules preset by the user. For example, if the current account 11 belongs to the user's Google account, the user can set the first set of strings 141 to "google" by default, as shown in Figure 4A; if the current account 11 belongs to the user's Facebook account, the user can set the first set of strings 141 to "facebook" by default, as shown in Figure 4B. Therefore, the user can create different first sets of strings 141 for different accounts 11 according to their own preset rules, and simply obtain the corresponding first sets of strings 141 for different accounts 11 according to the preset rules. The different accounts 11 referred to here can be user accounts of the same user on different website platforms, or different user accounts of the same user on the same website platform, etc., as long as the user can obtain the corresponding first sets of strings 141 for different accounts 11 according to the rules established by himself.

The plain text password 140 may also include a second string 142. As can be seen from FIG. 4A and FIG. 4B, even if the accounts 11 are different, different accounts 11 still use the same second string 142. This second string 142 can also be determined by the user, and is generally a string that is easy for the user to remember. As shown in FIG. 4A and FIG. 4B, the second string 142 here can be exemplified as "password" that is easy for the user to remember. Of course, the second string 142 can also be other strings, such as the user's birthday, telephone number, etc., and the present invention is not limited to this.

For a user with many different accounts 11, he only needs to remember a simple string (i.e., the second string 142), and can obtain the corresponding first string 141 for different accounts 11 according to the rules established by himself, and can generate multiple sets of passwords for different accounts 11 through the password generation module 120. Therefore, the user does not need to spend energy to remember multiple sets of different passwords for different accounts 11. What the user really needs to remember is only the plaintext password 140 including the first string 141 and the second string 142. In addition, since different accounts 11 correspond to different plaintext passwords 140, different ciphertext passwords 150 will be generated. Even if the ciphertext password 150 of one of the accounts 11 may be cracked, the ciphertext password 150 corresponding to this account 11 cannot be used for another different account, so it still has full security.

In the above-mentioned embodiment, the plaintext password 140 is described as including the first set of strings 141 and the second set of strings 142. However, it should be understood that in other embodiments, the plaintext password 140 can also be composed of the first set of strings 141 alone. And because the first set of strings 141 corresponding to different accounts 11 are all different, different ciphertext passwords 150 can still be generated, and no more examples will be given here for explanation.

From the above, it can be understood that if the plaintext password 140 is the same, the generated ciphertext password 150 will also be the same when the encryption variable 130 remains unchanged. Therefore, for the same user, the encryption variable 130 should be kept fixed so that the same plaintext password 140 can be encrypted into the same ciphertext password 150 each time the plaintext password 140 is input. Now suppose that another user wants to use the password generation module 120, then another different encryption variable 130 can be used to prevent the other user from using the same plaintext password 140 as the previous user and obtaining the same ciphertext password 150.

FIG. 5 is a block diagram illustrating an account registration and login system 200 according to an embodiment of the present invention. Referring to FIG. 5, the account registration and login system 200 includes a storage module 210, a password generation module 220, and an account login interface 230. The storage module 210 and the password generation module 220 may be similar to the aforementioned storage module 110 and the password generation module 120, and will not be described in detail herein.

FIG. 6 illustrates an embodiment of the account login interface 230. Referring to FIG. 5 and FIG. 6, the account login interface 230 may include an account input unit 231 and a password input unit 232, and the account login interface 230 is coupled to the password generation module 220. The password input unit 232 may receive a plain text password input by a user. When the password generation module 220 receives a trigger signal from the password input unit 232, the password generation module 220 may convert the plain text password into a cipher text password. For example, the user may directly input the plain text password in the field of the password input unit 232. Then, a password conversion button 233 may appear directly on the account login interface 230, or may appear on the account login interface 230 by the user selecting all plain text passwords. When the user clicks this button 233, the password generation module 220 can receive a password conversion button signal (i.e., a trigger signal) from the password input unit 232, and the password generation module 220 can directly convert the plain text password into a cipher text password. After the plain text password is converted into a cipher text password, the account login interface 230 can automatically log in. In this way, the user does not need to open the input interface of the password generation module 220 (as shown in Figure 3) to register and log in the account immediately.

The present invention uses the above-mentioned account registration and login system to encode a plaintext password of an account according to an encryption algorithm to generate a ciphertext password for an account login interface to register and log in the account. Different accounts of the same user correspond to different plaintext passwords, and there are rules preset by the same user between the account and the plaintext password. The present invention allows users to generate different passwords for different accounts with high security by simply memorizing passwords, and even if others capture one set of ciphertext, it is difficult to crack different passwords for other accounts.

Although the present invention has been disclosed as above by the embodiments, it is not intended to limit the present invention. Those with common knowledge in the technical field to which the present invention belongs can make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the present invention shall be subject to the scope of the patent application attached hereto.

200: Account registration and login system

210: Storage module

220: Password generation module

230: Account login interface

231: Account Input Department

232: Password input section

Claims (8)

An account registration and login system includes: a storage module for storing an encryption algorithm; a password generation module coupled to the storage module for encoding a plain text password of an account according to the encryption algorithm to generate a ciphertext password, wherein different accounts of the same user correspond to different plain text passwords, and there is a rule preset by the same user between the account and the plain text password; and an account login module. The account login interface is coupled to the password generation module, the account login interface includes a password input unit for receiving the plain text password; wherein when the password generation module receives a trigger signal from the password input unit, the password generation module converts the plain text password into the cipher text password; wherein the encryption algorithm includes an encryption variable, and the password generation module is further used to encrypt the plain text password into the cipher text password according to the encryption variable. A registration and login system for an account as described in claim 1, wherein the encryption algorithm is the Advanced Encryption Standard (AES) algorithm. A registration and login system for an account as described in claim 1, wherein the encryption variable is a fixed encryption variable for the same user; and the encryption variable is a different encryption variable for different users. An account registration and login system as described in claim 1, wherein the encrypted variable is a randomly generated string. A registration and login system for an account as described in claim 1, wherein the rule is: The plain text password includes a first set of strings, and the first set of strings changes with different accounts. An account registration and login system as described in claim 5, wherein the plain text password also includes a second set of strings, and different accounts have the same second set of strings. A registration and login system for an account as described in claim 1, wherein the trigger signal is a password conversion button signal. An account registration and login system as described in claim 1, wherein the account login interface automatically logs in after the plaintext password is converted into the ciphertext password.

Images