CN103051447A

CN103051447A - Method for user security management of important system

Info

Publication number: CN103051447A
Application number: CN2011103052517A
Authority: CN
Inventors: 曾凡玉
Original assignee: ZHENJIANG JINGYING SOFTWARE TECHNOLOGY Co Ltd
Current assignee: ZHENJIANG JINGYING SOFTWARE TECHNOLOGY Co Ltd
Priority date: 2011-10-11
Filing date: 2011-10-11
Publication date: 2013-04-17

Abstract

The invention relates to a method for user security management of an important software system, which aims at solving the current situation that users of a traditional system are lack of security awareness and hardly voluntarily change user passwords. The method is characterized in that for the important software system, after a user logs in the system every time, the system generates a verification code in real time and transmits the verification code onto a mobile phone of the user through a background management program, and then the user inputs the verification code to verify, so that a purpose for security management of the user password can be realized.

Description

A kind of method of important system user safety management

Technical field

The present invention relates to the safety method of a kind of critical software system user safety management, the present invention is directed to the important system software of user/pin mode login, add a SMS transmitting apparatus at the server end machine, it is user's oneself phone number that system bundlees 1 for each user, when the user inputs the password login system, system's backstage management procedure generates at random 6 new bit digital check codes and sends to the user, the user carries out verification at the input validation code, successful then could login system, this user cipher login system mode generates in real time check code by secondary and confirms to prevent that the disabled user from inputting pin mode and obtain malice use system behind the password by peeping the user, has improved greatly security of system.

Background technology

In the information system, user's authentication is had a variety of methods, usemame/password be the simplest also be the most frequently used identity identifying method, it is based on the checking means of " what you know ".Each user's password is set by this user oneself, only has him just to know by oneself, as long as therefore can correctly input password, computer just thinks that he is exactly this user.Yet in fact, because many users forget Password in order to prevent, often employing such as own or household's birthday, telephone number etc. are guessed that by other people the significant character string that arrives is as password easily, perhaps password is copied at one and oneself thought safe place, this all exists many potential safety hazards, very easily causes password to reveal.

The software systems that normal operation usemame/password mode is carried out authentication, user cipher generally all are that the user initiatively removes Modify password by the password modify feature, and a lot of users may not revise in 1 year in design is used; The password of the system designer that security of system designs any general all force users when design must be modified once after how many days, is stolen to prevent the user, and system is maliciously used.More than two kinds of situations show that the General System user seldom initiatively removes Modify password, for the responsible consumer of important system or system, this present situation is breakneck, in actual life, system password is stolen, the thing that system is maliciously used happens occasionally.

Summary of the invention

The object of the invention is to: for system user awareness of safety in the past not by force, seldom initiatively go to revise this present situation of user cipher, the present invention be directed to the critical software system, after the each login system of user, system generates in real time check code and the hypervisor by the backstage sends on user's the mobile phone, the user verifies at the input validation code, reaches the purpose of safety management user cipher.

Embodiment

Embodiment one

Vehicle administration office's post test system, this system adopts the development mode of C/S, after system user was inputted user name, password success login system, system's backstage management procedure generated at random at once 6 bit digital check codes and sends to the user, and the user verifies at the input validation code.

The process of present embodiment is:

When the operator safeguards, each operator has bundled this user's phone number, disposed the note transmitting apparatus on the machine of operation backstage management procedure, but during this user's success login system, system writes the log-on message table to log-on message, backstage management procedure just can know that within several seconds that user logins successfully, and system generates 6 figure place check codes at once at random, and system reads simultaneously this user's phone number and by the note transmitting apparatus check code sent to the user and carries out in checking.

Claims

1. the method for an important system user safety management is characterized in that:

Cipher random generates---user cipher all regenerates after each successful user's login---after each user successfully logins, and system all automatically generates 6 new figure place check codes and sends to the user by mobile phone short messages and carries out in checking;

2. described a kind of safety method of managing the important system user according to claim 1, it is characterized in that: initiatively generate at random the mode leading subscriber password that 6 figure place check codes are issued the passive receive that the user verifies in real time by system, make system's safety and reliability, avoid user cipher to be stolen, system is maliciously used.