CN114928483A - Method and device for changing login password - Google Patents

Method and device for changing login password Download PDF

Info

Publication number
CN114928483A
CN114928483A CN202210527063.7A CN202210527063A CN114928483A CN 114928483 A CN114928483 A CN 114928483A CN 202210527063 A CN202210527063 A CN 202210527063A CN 114928483 A CN114928483 A CN 114928483A
Authority
CN
China
Prior art keywords
login password
target user
short message
verification code
changing
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202210527063.7A
Other languages
Chinese (zh)
Inventor
罗璟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bank of China Ltd
Original Assignee
Bank of China Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bank of China Ltd filed Critical Bank of China Ltd
Priority to CN202210527063.7A priority Critical patent/CN114928483A/en
Publication of CN114928483A publication Critical patent/CN114928483A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H04L63/0846Network architectures or network communication protocols for network security for authentication of entities using passwords using time-dependent-passwords, e.g. periodically changing passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/18Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Collating Specific Patterns (AREA)

Abstract

The invention discloses a method and a device for changing a login password, which relate to the field of finance, wherein the method comprises the following steps: receiving a login password change request of a target user, wherein the login password change request comprises the following steps: the method comprises the steps of inputting an original login password, a new login password input for the first time and a new login password input for the second time; judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, if so, acquiring iris information of the target user; and judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity of the target user passes the authentication, and changing the pre-stored actual login password into the new login password. The method and the device can improve the security and the convenience degree of the login password change.

Description

Method and device for changing login password
Technical Field
The invention relates to the technical field of data processing, in particular to a login password changing method and device.
Background
This section is intended to provide a background or context to the embodiments of the invention that are recited in the claims. The description herein is not admitted to be prior art by inclusion in this section.
When a user changes an APP login password of a mobile phone bank, security verification needs to be carried out on a security tool, and a common verification mode at present is a dynamic password; the dynamic password is based on the physical dynamic password, and if the physical dynamic password is not carried with a user or the dynamic password is lost, the user cannot modify the login password, and the current user who changes the login password of the mobile phone bank cannot be ensured to be the user of the mobile phone bank by the mode, so that the operation is complex and the safety risk exists.
Disclosure of Invention
The embodiment of the invention provides a login password changing method, which is used for improving the security and the convenience degree of login password changing and comprises the following steps:
receiving a login password change request of a target user, wherein the login password change request comprises: the method comprises the steps of inputting an original login password, a new login password input for the first time and a new login password input for the second time;
judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the first input new login password is the same as the second input new login password, if so, acquiring iris information of the target user;
and judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password.
Further, the acquiring iris information of the target user includes:
acquiring an iris image of the target user;
and inputting the iris image into a preset iris recognition model, and determining an output result of the preset iris recognition model as the iris information of the target user.
Further, the login password change request further includes: a first short message verification code;
correspondingly, the acquiring the iris information of the target user includes:
and judging whether the first short message verification code is consistent with a pre-stored second short message verification code, if so, acquiring the iris information of the target user.
Further, still include:
and dynamically generating a second short message verification code, storing the second short message verification code and sending the second short message verification code to the terminal equipment of the target user, and if the number of times of sending the short message verification code to the terminal equipment within a preset time range exceeds a number threshold, stopping current operation and outputting alarm information.
The embodiment of the invention also provides a login password changing device, which is used for improving the security and the convenience degree of the login password changing and comprises the following components:
a receiving module, configured to receive a login password change request of a target user, where the login password change request includes: the method comprises the steps of inputting an original login password, a new login password input for the first time and a new login password input for the second time;
the judging module is used for judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, and if so, acquiring iris information of the target user;
and the changing module is used for judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password.
Further, the determining module includes:
the acquisition unit is used for acquiring the iris image of the target user;
and the determining unit is used for inputting the iris image into a preset iris recognition model and determining the output result of the preset iris recognition model as the iris information of the target user.
Further, the login password change request further includes: a first short message authentication code;
correspondingly, the judging module comprises:
and the judging unit is used for judging whether the first short message verification code is consistent with a pre-stored second short message verification code or not, and if so, acquiring the iris information of the target user.
Further, the login password changing apparatus further includes:
and the early warning module is used for dynamically generating a second short message verification code, storing the second short message verification code and sending the second short message verification code to the terminal equipment of the target user, and if the number of times of sending the short message verification code to the terminal equipment within a preset time range exceeds a number threshold, stopping current operation and outputting alarm information.
The embodiment of the invention also provides computer equipment which comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the login password changing method is realized when the processor executes the computer program.
An embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored, and when the computer program is executed by a processor, the method for changing a login password is implemented.
An embodiment of the present invention further provides a computer program product, where the computer program product includes a computer program, and when executed by a processor, the computer program implements the above login password changing method.
Compared with the technical scheme that security verification is carried out by using a dynamic password when the login password is modified in the prior art, the login password change method and the device in the embodiment of the invention receive the login password change request of a target user, wherein the login password change request comprises the following steps: the method comprises the steps of inputting an original login password, a new login password input for the first time and a new login password input for the second time; judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, if so, acquiring iris information of the target user; judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password, so that the security and the convenience degree of login password change can be improved; the method not only ensures the asset safety of the user, but also is simple and convenient to operate.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the prior art descriptions will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts. In the drawings:
fig. 1 is a schematic flowchart of a login password changing method in an embodiment of the present application;
fig. 2 is a schematic flowchart of step 201 and step 202 of the login password changing method in the embodiment of the present application;
FIG. 3 is a schematic structural diagram of a credit risk assessment device in an embodiment of the present application;
FIG. 4 is a schematic structural diagram of a determining module in the embodiment of the present application;
fig. 5 is a schematic structural diagram of a credit risk assessment apparatus in another embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the embodiments of the present invention are further described in detail below with reference to the accompanying drawings. The exemplary embodiments and descriptions of the present invention are provided to explain the present invention, but not to limit the present invention.
It should be noted that the credit risk assessment method and apparatus disclosed in the present application may be used in the field of financial technology, and may also be used in any field other than the field of financial technology. According to the technical scheme, the data acquisition, storage, use, processing and the like meet relevant regulations of national laws and regulations.
In order to improve the security and convenience of changing the login password, the present embodiment provides a method for changing the login password, in which the execution subject is a login password changing apparatus, the login password changing apparatus includes but is not limited to a server, as shown in fig. 1, and the method specifically includes the following steps:
step 101: receiving a login password change request of a target user, wherein the login password change request comprises: the original login password, the new login password input for the first time and the new login password input for the second time.
Specifically, an original login password input by a target user from a front-end page, a new login password input for the first time and a new login password input for the second time can be received; the new login password input for the second time is used for verifying whether the new login password input for the first time is wrong; the login password change request may be a login password change request of an APP.
Step 102: and judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, if so, acquiring the iris information of the target user.
Specifically, the login password change request may further include a unique identifier of the target user, such as an identification number, a mobile phone number, an account, and the like; the actual login password of the target user can be obtained from a local database of the login password changing device according to the unique identifier of the target user; the iris information may be derived based on a currently acquired iris image.
Step 103: and judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password.
Specifically, if the iris information is different from the pre-stored actual iris information corresponding to the target user in multiple verifications, it may be determined that the current user is not the target user, and the warning information may be output to the terminal device of the target user.
In one example, when a user changes a mobile phone bank login password, an original login password and a new login password are required to be input (for 2 times), whether the original login password is correct or not is verified, whether the new login passwords input twice are consistent or not is verified, if the verification is passed, iris recognition is used for acquiring iris information of the user who carries out operation currently and whether the iris information is consistent with the mobile phone bank user information in a bank system or not, and if the iris information is consistent, the mobile phone bank login password is successfully modified; otherwise, the mobile banking login password is not modified.
In order to further improve the intelligence and accuracy of the login password change, referring to fig. 2, in an embodiment of the present application, the acquiring iris information of the target user in step 102 includes:
step 201: and acquiring an iris image of the target user.
Step 202: and inputting the iris image into a preset iris recognition model, and determining an output result of the preset iris recognition model as the iris information of the target user.
Specifically, the iris recognition model may be obtained by pre-training a CNN model based on batch iris images and real iris information corresponding to the batch iris images.
In order to further improve the reliability of the user identity authentication and further improve the security of the login password modification, in an embodiment of the present application, the login password change request further includes: a first short message verification code; correspondingly, the acquiring of the iris information of the target user in step 102 includes:
and judging whether the first short message verification code is consistent with a pre-stored second short message verification code, if so, acquiring the iris information of the target user.
Specifically, the first short message verification code may represent a short message verification code input by a target user on a front-end page; the second short message verification code can represent a short message verification code sent to the terminal equipment of the target user; the second short message verification code can be pre-stored in the local of the login password changing device.
In order to avoid sending a large number of short messages to a user in a short time and improve user experience, in an embodiment of the present application, the method for changing a login password further includes:
and dynamically generating a second short message verification code, storing the second short message verification code and sending the second short message verification code to the terminal equipment of the target user, and if the number of times of sending the short message verification code to the terminal equipment within a preset time range exceeds a number threshold, stopping the current operation and outputting alarm information.
Specifically, the preset time range may be set according to actual needs, which is not limited in this application; after the second short message authentication code is dynamically generated, the locally old second short message authentication code of the login password changing device can be deleted.
The embodiment of the invention also provides a login password changing device, which is described in the following embodiment. Because the principle of the device for solving the problems is similar to the login password changing method, the implementation of the device can refer to the implementation of the login password changing method, and repeated parts are not described again.
Referring to fig. 3, in an embodiment of the present application, the login password changing apparatus includes:
a receiving module 10, configured to receive a login password change request of a target user, where the login password change request includes: the method comprises the steps of firstly inputting a new login password, a new login password and a new login password, wherein the new login password is input for the first time;
a judging module 20, configured to judge whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the first input new login password is the same as the second input new login password, and if yes, obtain iris information of the target user;
and a changing module 30, configured to determine whether the iris information is the same as pre-stored actual iris information corresponding to the target user, and if so, determine that the identity authentication of the target user passes, and change the pre-stored actual login password to the new login password.
Referring to fig. 4, in an embodiment of the present application, the determining module 20 includes:
an acquisition unit 21 configured to acquire an iris image of the target user;
a determining unit 22, configured to input the iris image into a preset iris recognition model, and determine an output result of the preset iris recognition model as the iris information of the target user.
In an embodiment of the present application, the login password change request further includes: a first short message authentication code;
correspondingly, the judging module comprises:
and the judging unit is used for judging whether the first short message verification code is consistent with a pre-stored second short message verification code or not, and if so, acquiring the iris information of the target user.
Referring to fig. 5, in an embodiment of the present application, the login password changing apparatus further includes:
and the early warning module 40 is configured to dynamically generate a second short message verification code, store the second short message verification code, and send the second short message verification code to the terminal device of the target user, and if the number of times of sending the short message verification code to the terminal device within a preset time range exceeds a number threshold, suspend the current operation and output warning information.
The embodiment of the invention also provides computer equipment which comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the login password changing method is realized when the processor executes the computer program.
The embodiment of the invention also provides a computer readable storage medium, wherein a computer program is stored in the computer readable storage medium, and when being executed by a processor, the computer program realizes the login password changing method.
An embodiment of the present invention further provides a computer program product, where the computer program product includes a computer program, and when executed by a processor, the computer program implements the above login password changing method.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are only exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (11)

1. A method for changing a login password, comprising:
receiving a login password change request of a target user, wherein the login password change request comprises the following steps: the method comprises the steps of firstly inputting a new login password, a new login password and a new login password, wherein the new login password is input for the first time;
judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, if so, acquiring iris information of the target user;
and judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password.
2. The method for changing a login password according to claim 1, wherein the acquiring iris information of the target user includes:
acquiring an iris image of the target user;
and inputting the iris image into a preset iris recognition model, and determining an output result of the preset iris recognition model as the iris information of the target user.
3. The method according to claim 1, wherein the login password change request further includes: a first short message authentication code;
correspondingly, the acquiring the iris information of the target user includes:
and judging whether the first short message verification code is consistent with a pre-stored second short message verification code, if so, acquiring the iris information of the target user.
4. The login password changing method according to claim 3, further comprising:
and dynamically generating a second short message verification code, storing the second short message verification code and sending the second short message verification code to the terminal equipment of the target user, and if the number of times of sending the short message verification code to the terminal equipment within a preset time range exceeds a number threshold, stopping current operation and outputting alarm information.
5. A login password changing apparatus, comprising:
a receiving module, configured to receive a login password change request of a target user, where the login password change request includes: the method comprises the steps of firstly inputting a new login password, a new login password and a new login password, wherein the new login password is input for the first time;
the judging module is used for judging whether the original login password is the same as a pre-stored actual login password corresponding to the target user, and whether the new login password input for the first time is the same as the new login password input for the second time, and if so, acquiring iris information of the target user;
and the changing module is used for judging whether the iris information is the same as the pre-stored actual iris information corresponding to the target user, if so, determining that the identity authentication of the target user passes, and changing the pre-stored actual login password into the new login password.
6. The login password changing apparatus according to claim 5, wherein the determining means includes:
the acquisition unit is used for acquiring the iris image of the target user;
and the determining unit is used for inputting the iris image into a preset iris recognition model and determining the output result of the preset iris recognition model as the iris information of the target user.
7. The login password change apparatus according to claim 5, wherein the login password change request further includes: a first short message authentication code;
correspondingly, the judging module comprises:
and the judging unit is used for judging whether the first short message verification code is consistent with a pre-stored second short message verification code or not, and if so, acquiring the iris information of the target user.
8. The login password changing apparatus according to claim 7, further comprising:
and the early warning module is used for dynamically generating a second short message verification code, storing the second short message verification code and sending the second short message verification code to the terminal equipment of the target user, and if the number of times of sending the short message verification code to the terminal equipment within a preset time range exceeds a number threshold, stopping current operation and outputting alarm information.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the login password changing method according to any one of claims 1 to 4 when executing the computer program.
10. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program which, when executed by a processor, implements the login password changing method according to any one of claims 1 to 4.
11. A computer program product, characterized in that the computer program product comprises a computer program which, when executed by a processor, implements the login password change method of any one of claims 1 to 4.
CN202210527063.7A 2022-05-16 2022-05-16 Method and device for changing login password Pending CN114928483A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210527063.7A CN114928483A (en) 2022-05-16 2022-05-16 Method and device for changing login password

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210527063.7A CN114928483A (en) 2022-05-16 2022-05-16 Method and device for changing login password

Publications (1)

Publication Number Publication Date
CN114928483A true CN114928483A (en) 2022-08-19

Family

ID=82808378

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210527063.7A Pending CN114928483A (en) 2022-05-16 2022-05-16 Method and device for changing login password

Country Status (1)

Country Link
CN (1) CN114928483A (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105335638A (en) * 2014-07-23 2016-02-17 小米科技有限责任公司 Method and device for resetting password
CN108335026A (en) * 2018-01-24 2018-07-27 平安科技(深圳)有限公司 Bank password information changes implementation method, equipment, system and storage medium
CN109522695A (en) * 2018-11-30 2019-03-26 努比亚技术有限公司 Application program login method, computer end, mobile terminal, system and storage medium

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105335638A (en) * 2014-07-23 2016-02-17 小米科技有限责任公司 Method and device for resetting password
CN108335026A (en) * 2018-01-24 2018-07-27 平安科技(深圳)有限公司 Bank password information changes implementation method, equipment, system and storage medium
CN109522695A (en) * 2018-11-30 2019-03-26 努比亚技术有限公司 Application program login method, computer end, mobile terminal, system and storage medium

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
一只产品喵: "注册、登录、找回密码、注销账号模块的设计构思", Retrieved from the Internet <URL:https://www.woshipm.com/it/4466703.html> *

Similar Documents

Publication Publication Date Title
CN106899567B (en) User body checking method, device and system
CN109756458B (en) Identity authentication method and system
CN108875404B (en) Data desensitization method and device based on machine learning and storage medium
JP2017511910A (en) Barcode generation and barcode-based authentication
CN106357694A (en) Method and device for processing access request
CN108234441B (en) Method, apparatus, electronic device and storage medium for determining forged access request
CN113938408A (en) Data traffic testing method and device, server and storage medium
CN107294981B (en) Authentication method and equipment
CN113222612B (en) Medical insurance card swiping transaction system and method based on blockchain
CN114928483A (en) Method and device for changing login password
CN114926175A (en) Transaction quota configuration method and device
CN113962700A (en) Bank business auditing method and system
CN113592630A (en) Credit card surface-signing method and device based on block chain
CN113191874A (en) Credit card activation method, system and terminals based on 5G message and voiceprint recognition
CN111784352A (en) Authentication risk identification method and device and electronic equipment
CN113313888B (en) ATM card-free withdrawal system and method based on block chain
CN110675158A (en) Transaction payment method and device
CN113301569B (en) Reserved mobile phone number replacement method and device
CN114679336B (en) Authentication method, authentication system, authentication device, and readable storage medium
CN115001803B (en) Mobile phone bank login method and device
CN111460422B (en) Method and device for generating verification code
CN111327576B (en) Identity verification method, client and server
CN115391368A (en) Certificate information updating method and device
CN115564431A (en) Two-dimensional code payment method based on 5G message, terminal and server
CN117014152A (en) Method and device for testing activation link of industry card and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination