CN104796410B

CN104796410B - A kind of account protection method of the more passwords of different priorities

Info

Publication number: CN104796410B
Application number: CN201510143750.9A
Authority: CN
Inventors: 邓庚盛; 邹伟平; 曾勍炜; 付爱英
Original assignee: Nanchang University
Current assignee: Nanchang University
Priority date: 2015-03-30
Filing date: 2015-03-30
Publication date: 2018-03-02
Anticipated expiration: 2035-03-30
Also published as: CN104796410A

Abstract

A kind of account protection method of the more passwords of different priorities, by the quantity and the corresponding effective term of each priority level and the quantity of settable password of system initial setting up password priority；Multiple passwords of the different priorities of my account are set during user's registration account, user can be by the low password authorization of priority level to the people trusted；, can not Successful login account even if having grasped corresponding password when the priority level does not meet effective term.Advantages of the present invention：(1) configuration is flexible, and for the scope of application than wide, Accounting system is suitable for various different demands by setting and adjusting relevant parameter；(2) because user can set the password of multiple priority levels, the low password of priority level not only user can be grasped, so that even if after user's generation accident, it still is able in the case of not needing the manual intervention of application system side after the failure period, the people that user authorizes can continue with the account when eligible.

Description

A kind of account protection method of the more passwords of different priorities

Technical field

The invention belongs to computer application field.

Background technology

Computer application system largely employs account and the mode of password login at present, is produced during system use Personal information it is associated with account, this allows user to have different functions, interface etc. when using application system Personalized information.

The account name and password that set when usual user inputs oneself registration during existing Account Logon, after login system, Begin to use system and application.There is certain applications system also to allow when user forgets Password, can be by giving the work(of password for change Can, the password protected information that input user has been set gives password and logon account for change；Also certain applications system also provides postal The mode for giving password for change of part or short message.It is account password and cryptoguard that user is set etc. that such method, which has a feature, Information is all private information, and only user grasps, if user reveals these information, may cause account by other people profits With.Therefore will cause after user forgets that accident occurs for the information such as account password and cryptoguard, or user simultaneously The account turns into be sunk into sleep account or corpse account.And on the one hand these accounts take the resource of system, on the other hand some Caused information is also likely to be a valuable wealth for its household during use, this for such as QQ, The websites such as FaceBook, mailing system and application embody particularly evident.There is the method that small part website such as QQ provides statement, But the processing of these statements is required for manual examination and verification and confirmation.

The content of the invention

It is an object of the present invention to provide a kind of computer application system account protection method, system can set password priority Quantity and the corresponding password of each priority level quantity, by setting network account during user's registration account after being provided with Multiple passwords of different priorities so that after user forgets account password information, or even accident occurs for user, still can In the case of enough not needing the manual intervention of application system side, possessing the people of different priorities password authorization can be with when eligible Continue with account.Meanwhile when respective priority does not meet effective term, it can not be logged in using the password of the priority level Account, ensure the security of user account.

The present invention is realized by below scheme.

In the present invention Accounting system by password priority quantity Y, the corresponding password of each priority level quantity X1, X2 ... XY, and the essential element composition such as each priority level password effective term T1, T2 ... TY.Current system is set by Accounting system The quantity Y of password priority and quantity X1, X2 ... the XY of the corresponding password of each priority level, and each priority level come into force Condition T1, T2 ... TY, the TY etc. that realizes T1, T2 for the ease of Accounting system ... can be solidified into certain a kind of or several class and predefine Pulldown conditions option, the numerical parameter by setting such reaches the purpose to impose a condition.User sets when initializing account Account name USERID and multiple priority passwords (M_1_1, M_1_2 ... M_1_X1), (M_2_1, M_2_2 ... M_2_X2) ... (M_Y_X1、M_Y_2…M_Y_XY)；Wherein password M_1_1, M_1_2 ... M_1_X1 of limit priority should for daily login Being used during with system, not only user grasps the password of other priority, can also license to the people of users to trust, as long as When corresponding first rank does not meet effective term, it can not be logged in even if grasping the password of the priority level；It is when users log on The priority level set to the password of user's input by system of uniting and effective term match successively from high to low, first detect whether Meet effective term, the login failure if not meeting, if meeting effective term, detect whether passwords, if matching Login successfully, if it does not match, detecting whether to meet next priority conditions and password.

Login authentication method of the present invention is made up of following steps：

S1, system initialization set the quantity Y of current system password priority P, Y >=2；

S2, system initialization set each priority level P_iThe quantity X of corresponding password_i, and priority level P_iIt is corresponding raw Effect condition：Failure period D_iWith continuous login failure number E_i, wherein Y >=i >=1, D_i+1≥D_i, D₁=0, E₁=0；

S3, user set and preserve network account name USERID and multiple password M of one group of different priorities_ij, wherein Y >=i >=1, X_i>=j >=1, system set the last Successful login time T=present system time of user, continuous login failure automatically Number E is 0, and password preserves after can using unidirectional non-reversible AES encryption in systems；

S4, user's logging in network account, input account name USERID, password mm1；

S5, i=1 is set；

Whether S6, system detectio account name USERID current state meets priority level P_iEffective term：Current system M- user's last Successful login time T >=D during system_i, the continuous login failure number E >=E of user_i；It is no if all met into S7 Then enter S13；

S7, j=1 is set；

Whether S8, system detectio password mm1 are equal to M_ij, it is equal to enter S14, otherwise into S9；

S9, j=j+1 is set；

S10, judge whether j is more than X_i, it is to enter S11, otherwise into S8；

S11, i=i+1 is set；

S12, judge whether i is more than Y, be to enter S13, otherwise into S6；

S13, prompt cipher error message, record the continuous login failure number E=E+1 of user, and user enters S4 after confirming Circulation；

S14, certification are by recording the time T=present system time of the last Successful login of user, recording user and continuously step on Frequency of failure E=0 is recorded, user logins successfully.

Failure period D described in step S2 of the present invention_i, can be set according to the concrete condition of application system unit as day, hour, Second etc..

Originally it is close that the account password information grasped completely from user can be changed into part by method of the present invention Code information is semi-over, concurrently sets the priority level of password, when respective priority does not meet effective term, even if other people slap The password of the priority level has been held, can not Successful login account.This method is set flexibly, and usable condition is than wide, together When after system sets priority ratio, it is not necessary to the manual intervention of application system side, it is workable.

It is an advantage of the invention that：(1) present invention configuration is flexible, the scope of application than wide, Accounting system by setting and Adjust corresponding parameter and be adapted to a variety of demands；(2) because user can set different close of multiple priority levels Code, the low password of priority level not only user can be grasped so that user forgets that login password information even user occurs After accident, remain able in the case of not needing the manual intervention of application system side after the failure period, the people that user authorizes is according with Account can be continued with during conjunction condition.

Brief description of the drawings

Fig. 1 is flow chart of the present invention.

Embodiment

The present invention will be further described by following examples.

Embodiment：Social network sites system with three-level password.

Social network sites system sets the password for allowing user to set three priority levels, according to priority level from high to low point Not Wei a login password, a unlocking pin, two are given for change password, and login password has limit priority, come into force all the time, solution The effective term of lock cipher is user's continuous login failure X times, and the effective term for giving password for change is the continuous login failure (X+ of user 10) secondary and current time is with the last Successful login time difference more than Y days.User is when social network sites are registered, it is necessary to set certainly Oneself login password A, unlocking pin B and give password C1 and C2 for change；If so user have forgotten login password A, retrying X times Unlocking pin B login systems can be inputted afterwards；The password C1 therein that gives for change can be set as the password simpler, easy to remember recalled certainly Oneself grasps, and can also will give password C2 for change and tell the people that can trust, and after the condition for giving password for change meets and come into force, I can be with Using password C1 login systems are given for change, equally grasped after accident occurs for user and give password C2 user for change and can also log in System.As long as user keeps the normal login of website simultaneously, login system can not be used to even if giving password for change and being grasped.

Claims

A kind of 1. account protection method of the more passwords of different priorities, it is characterized in that comprising the steps of：

S1, system initialization set current system password priority level P quantity Y, Y >=2；

S2, system initialization set each priority level P_iThe quantity X of corresponding password_i, and priority level P_iThe judgement ginseng to come into force Number：Failure period D_iWith continuous login failure number E_i, wherein Y >=i >=1, D_i+1≥D_i, D₁=0, E₁=0；

S3, user set and preserve network account name USERID and multiple password M of one group of different priorities_ij, wherein Y >= I >=1, X_i>=j >=1, system set the last Successful login time T=present system time of user, continuous login failure number automatically E is 0, and password preserves after can using unidirectional non-reversible AES encryption in systems；

S4, user's logging in network account, input account name USERID, password mm1；

S5, i=1 is set；

Whether S6, system detectio account name USERID current state meets priority level P_iEffective term：During current system M- user's last Successful login time T >=D_i, the continuous login failure number E >=E of user_i；If all met into S7, otherwise enter Enter S13；

S7, j=1 is set；

Whether S8, system detectio password mm1 are equal to M_ij, it is equal to enter S14, otherwise into S9；

S9, j=j+1 is set；

S10, judge whether j is more than X_i, it is to enter S11, otherwise into S8；

S11, i=i+1 is set；

S12, judge whether i is more than Y, be to enter S13, otherwise into S6；

S13, prompt cipher error message, record the continuous login failure number E=E+1 of user, and user enters S4 after confirming and circulated；

S14, certification are by recording time T=present system time of the last Successful login of user, recording user and continuously log in mistake Number E=0 is lost, user logins successfully.