TW202137032A - Dynamic password system and method for obtaining dynamic password - Google Patents

Abstract

A dynamic password system includes an account management host, a service host and a chat bot account. The account management host includes an account database and a dynamic password module. The account database includes a plurality of account information, wherein each of the account information includes a community account and real-time password information. The dynamic password module changes the real-time password information of each account information according to a change rules. The service host is connected to the account management host. When the service host receives the community account and a query instruction, the service host checks whether the community account exists in the account database and obtains the real-time password information corresponding the community account. The chat bot account is set on an instant messaging server. When a mobile device is connected the instant messaging server, the chat bot account sent the query instruction and the community account to the service host, and obtains the real-time password information corresponding to the community account.

Description

Dynamic password system and method for obtaining dynamic password

A cryptographic system, especially a dynamic cryptographic system.

In some companies, employees need to log in to the company's internal local network when they turn on their work computers every day when they go to work, and use the resources or messages in the internal local network to perform personal work. Each employee has his own work account and login password. After logging in to the intranet, he obtains his or her departmental authority or personal authority.

Therefore, in order to ensure the security of the internal local area network and avoid fraudulent use of work accounts by others, it is usually recommended that employees change their login passwords on a regular basis. However, due to inertia, most people will not change the login password before an accident occurs. Moreover, the password that is changed repeatedly is not easy to remember, and it is very inconvenient to use.

In view of the foregoing problems, the present invention provides a dynamic password system including an account management host, a service host, and a chat robot account. The account management host includes: account database, including plural account information, each account information includes community account and real-time password information; and dynamic password module, which changes the real-time password information of each account information according to the change rules. The service host is connected to the account management host, and when receiving the community account and the inquiry instruction, it checks whether the community account exists in the account database, and obtains the real-time password information of the corresponding community account according to the inquiry instruction. The chat bot account is set on the instant messaging server. When the mobile device is connected to the instant messaging server, a social account is used to send inquiry commands to the chat bot account. The chat bot account sends the community account and inquiry instructions to the service host and serves itself. The host obtains the real-time password information of the corresponding community account.

The present invention also provides a method for obtaining dynamic passwords, which includes the following steps: creating plural account information, each account information including community account and real-time password information; changing the real-time password information of each account information according to the change rule; using a community account Send inquiry commands to the chatbot account; send community accounts and query commands through the chatbot account; receive community accounts and query commands through the service host, obtain the real-time password information of the corresponding community accounts according to the query instructions; receive the correspondence through the chatbot account Real-time password information of the community account, and send real-time password information to the community account.

Through the dynamic password system and the method for obtaining the dynamic password disclosed in the present invention, the user does not need to install additional applications or go through complicated identity verification procedures to obtain the real-time password information of the exclusive user. In other words, since the user has already verified the identity when creating the community account, sending the inquiry command through the community account can omit the process of re-verifying the identity. Moreover, the user can query the password by entering text in the application interface, and the operation method is quite intuitive.

Specific embodiments are listed below to illustrate the content of the present invention in detail, and the drawings are used as an auxiliary description. The symbols mentioned in the manual refer to the symbol description.

Please refer to FIG. 1. FIG. 1 is a block diagram (1) of a dynamic password system according to an embodiment of the present invention. The dynamic password system of the present invention mainly includes an account management host 1, a service host 2, and a chat robot account 31.

The account management host 1 mainly includes an account database 11 and a dynamic password module 13. In an implementation aspect, the account database 11 includes plural account information, and each account information includes a social account 41 and real-time password information corresponding to the social account 41. Here, the social account 41 can be an account of various instant messaging software (Instant Messenger), such as Messenger, LINE, Wechat or WhatsApp, etc., or it can be an account of social network software (Social Network APP), such as Facebook Or Instagram, etc., but the present invention is not limited to this. For example, in the account information of the account information, the community account 41 can be employee A's LINE account, and the real-time password information can be the login password of employee A's work computer, not the password of employee A's LINE.

However, in another implementation aspect, each account information includes not only a social account 41 and a real-time password information corresponding to the social account 41, but also the identity information of a corresponding social account 41. The identity information is, for example, Employee ID or ID number, etc., that is to say, in the account information of account information, the social account 41 can be employee A’s LINE account, and the identity information is, for example, employee A’s employee number or ID number, in real time The password information can be the login password of employee A’s work computer. Therefore, in the account database 11, employee A’s social account 41 can be used to query (or obtain) employee A’s identity information (such as employee number or identity card) Font size) and employee A’s real-time password information (such as the login password of the work computer), and employee A’s identity information can also be used to query (or obtain) employee A’s social account 41 and real-time password information.

The dynamic password module 13 changes the real-time password information of each account information according to the change rules. Here, the change rule is, for example, a password setting rule, for example, the password must consist of a capital letter plus a number, a total of eight digits, etc. In addition, the dynamic password module 13 can periodically change the real-time password information of each account information according to the change rule. For example, the dynamic password module 13 changes the password corresponding to each account at 5 o'clock every morning. In addition, the dynamic password module 13 can also change the real-time password information from time to time according to the change rules, for example, randomly change the password corresponding to each account at an interval of 3, 4, 5, or 6 hours. Prevent illegal persons from stealing information on the internal network after obtaining the password, or destroying the information on the internal network.

The chat robot account 31 is set on the instant messaging server 3. Here, the instant communication server 3 is a server of the aforementioned communication software or social network software, and the chat robot account 31 is an account of a chat robot set in the aforementioned instant communication software or social network software. After establishing a connection between the social account 41 of the user (such as an employee of an enterprise) and the chatbot account 31 (that is, adding the chatbot as a friend in the aforementioned instant messaging software or social network software), they can use the application program interface (API , Application Interface) interact with community account 41.

Please refer to FIG. 1 and FIG. 3A. FIG. 3A is a schematic diagram (1) of the appearance of a mobile device of a dynamic password system according to an embodiment of the present invention. A user, such as employee A of a company, sends an inquiry command through the social account 41. For example, employee A enters the text "I want a password" or "password" on the LINE chat interface of mobile device 4, and then the chat robot Account 31 sends employee A’s social account 41 (ie employee A’s LINE ID) and the query command to IM server 3 according to the query command, and then IM server 3 obtains the corresponding social account of employee A from service host 2 41 real-time password information. Here, the service host 2 is, for example, the host of an enterprise intranet, and the mobile device 4 is, for example, a mobile phone, a tablet computer, etc., or other portable electronic devices such as a smart watch.

Next, after the service host 2 receives the social account 41 and the inquiry command, it obtains the real-time password information of the corresponding social account 41 in the account management host 1 according to the social account 41 of employee A, and sends it to the instant messaging server 3 for chat After the robot account 31 can obtain the real-time password information, it will be displayed on the LINE chat interface of employee A on mobile device 4 (ie the communication software installed on mobile device 4). At this time, employee A can obtain the real-time password information and can log in Computer program, and after employee A’s work computer is logged in, he enters the internal area network and obtains work information according to his departmental authority or personal authority.

From the foregoing, it can be seen that multiple users (meaning multiple employees) can use their community accounts 41 to establish a connection with the same chatbot account 31 (meaning add as friends), and different users use different community accounts 41. Get their personal real-time password information through the chatbot account 31. Because the community account 41 has binding functions, such as binding a mobile phone number, users cannot use another’s community account 41 to obtain real-time password information that is not their own, which can avoid the theft of real-time passwords by colleagues or others News.

Therefore, through the dynamic password system disclosed in the present invention, users can obtain their own real-time password information without installing additional applications or going through complicated identity verification procedures, and no one can use another's social account 41 Obtain real-time password information that is not yours. In addition, the user can query the password by entering text in the application interface, and the operation method is quite intuitive.

Please refer to FIG. 2. FIG. 2 is a block diagram (2) of a dynamic password system according to an embodiment of the present invention. In an implementation aspect, the user can scan the barcode information 5 via the mobile device 4 to establish a connection relationship between the social account 41 and the chat robot account 31. Here, the mobile device 4 may further include a scanning module 42. After scanning the barcode information 5 and obtaining the ID of the chat robot account 31, the chat robot account 31 can establish a connection relationship and interact with the chat robot account 31. Here, the barcode information 5 can be printed on prints such as employee handbooks, posters, stickers, etc., or sent by mail and displayed on the display screen.

Please refer to Figure 2 again. In an implementation aspect, the account database 11 automatically generates real-time password information corresponding to the ID of the community account 41 when a new community account is created. Here, the account management host 1 may further include a password generation module 15 to automatically generate real-time password information corresponding to the community account 41. For example, when there is a new employee and their community account 41 (such as LINE ID) is created in the account database 11, the password generation module 15 will automatically generate a real-time corresponding to the new employee’s community account 41. Password information, but the present invention is not limited to this. When the account database 11 creates a new community account 41, users (such as new employees or information management personnel) can also set corresponding real-time password information by themselves.

Please refer to FIG. 3B, which is a schematic diagram (2) of the appearance of a mobile device of a dynamic password system according to an embodiment of the present invention. In an implementation aspect, the user can also choose to opt out of the dynamic password system of the present invention. Specifically, the user sends an opt-out command through the social account 41, such as inputting "I want to quit" on the LINE chat interface of the mobile device 4 or "Logout" and other text, and then the chatbot account 31 sends the network address according to the logout command. The user can connect to the web page through the network address and operate the exit procedure on the web page. After logout, the dynamic password module 13 No longer change the real-time password information of its account information, or after logging out, the chatbot account 31 no longer provides the function of querying or obtaining real-time password information.

Please refer to FIG. 4, which is a flowchart of the method for obtaining a dynamic password according to some embodiments of the present invention. The method of obtaining a dynamic password includes the following steps:

Step S01: Create plural account information, and each account information includes community account 41 and real-time password information.

The plural account information is established in the account database 11. Each account information includes a community account 41 and a real-time password information corresponding to the community account 41, which are the same as the above description, so it will not be repeated here.

Step S02: Change the real-time password information of each account information according to the change rule.

The real-time password information is changed through the dynamic password module 13 of the account management host 1. The dynamic password module 13 can periodically or irregularly change the real-time password information of each account information, which is the same as the previous example, so it will not be repeated here.

Step S03: Use a community account 41 to send an inquiry command to the chat robot account 31.

After the user establishes a link between his social account 41 and the chat robot account 31 with the mobile device 4 (that is, the chat robot is added as a friend in the aforementioned instant messaging software or social network software), the user sends an inquiry command to the chat robot account 31. For example, the user enters the text "I want a password" or "password" on the LINE chat interface of the mobile device 4. Here, the mobile device 4 and the chat robot account 31 are the same as the above description, so they will not be repeated here.

Step S04: Use the chat robot account 31 to transmit the community account 41 and the inquiry instruction.

The chat bot account 31 is set on the instant messaging server 3. The query command is sent to the instant messaging server 3 through the chat bot account 31. The instant messaging server 3 further sends the aforementioned social account 41 and query command to the service host 2. It is the same as the above description, so it will not be repeated here.

Step S05: The service host 2 receives the ID of the community account 41 and the query instruction, and obtains the real-time password information of the corresponding community account 41 according to the query instruction.

After receiving the community account 41 and the inquiry command, the service host 2 obtains the real-time password information of the corresponding community account 41 in the account management host 1 according to the community account 41, and sends it to the instant messaging server 3, which is the same as the above description, so I will not repeat it here.

Step S06: Use the chat robot account 31 to receive the real-time password information corresponding to the community account 41, and send the real-time password information to the community account 41.

The service host 2 sends the real-time password information corresponding to the social account 41 to the instant messaging server 3 and displays it on the mobile device 4 in the chat room containing the chat robot account 31 and the social account 41, which means that the real-time password information is sent to the social account 41. At this time, the user obtains the real-time password information and can perform the subsequent login procedure, which is the same as the above description, so it will not be repeated here.

In an implementation aspect, in the step S01, the step of creating plural account information, it further includes the step of automatically generating real-time password information corresponding to the social account 41. In other words, creating plural account information at the same time as the account management host 1 The real-time password information corresponding to the community account 41 is automatically generated.

Here, as mentioned above, the account management host 1 may further include a password generation module 15 to generate real-time password information of the ID unique to the community account 41. It should be noted that, however, the present invention is not limited to this, and the password can also be set by the user.

In an implementation aspect, before the step of sending an inquiry command to the chat robot account 31 with a social account 41 in the aforementioned step S03, it may include the step of scanning the barcode information 5, and the social account 41 and the chat robot account 31 are established Connection relationship.

The mobile device 4 may further include a scanning module 42. After scanning the barcode information 5, the ID of the chat robot account 31 is obtained, and the chat robot account 31 can be interacted with. This is the same as the above description, so it will not be repeated here.

In summary, through the dynamic password and the method for obtaining the dynamic password disclosed in the present invention, users can obtain their own real-time password information without installing additional applications or going through complicated identity verification procedures. It is not possible to use another's social account 41 to obtain real-time password information that is not his own. In addition, the user can query the password by entering text in the application interface, and the operation method is quite intuitive.

Although the technical content of the present invention has been disclosed in the preferred embodiments as above, it is not intended to limit the present invention. Anyone who is familiar with this technique and makes some changes and modifications without departing from the spirit of the present invention should be covered by the present invention. Therefore, the scope of protection of the present invention shall be subject to the scope of the attached patent application.

1: Account management host 11: Account database 13: Dynamic password module 15: Password generation module 2: service host 3: instant messaging server 31: Chatbot account 4: mobile device 41: Community Account 42: Scanning module 5: Barcode information S01, S02, S03, S04, S05, S06: steps

[Figure 1] is a system block diagram (1) of a dynamic password according to an embodiment of the present invention. [Figure 2] is a system block diagram (2) of a dynamic password according to an embodiment of the present invention. [Fig. 3A] is a schematic diagram (1) of the appearance of a mobile device of a dynamic password system according to an embodiment of the present invention. [Figure 3B] is a schematic diagram (2) of the external appearance of a mobile device of a dynamic password system according to an embodiment of the present invention. [Figure 4] is a flowchart of the steps of the method for obtaining a dynamic password in some embodiments of the present invention.

1: Account management host

11: Account database

13: Dynamic password module

2: service host

3: instant messaging server

31: Chatbot account

4: mobile device

41: Community Account

Claims (9)

A dynamic password system, including: An account management host, including: An account database, including plural account information, each of which includes a community account and a real-time password information; and A dynamic password module to change the real-time password information of each account information according to a change rule; A service host, connected to the account management host, when receiving the community account and an inquiry command, compare whether the community account exists in the account database, and obtain the real-time information corresponding to the community account according to the inquiry command. Password information; and A chat bot account is set on an instant messaging server. When a mobile device is connected to the instant messaging server, a query command is sent to the chat bot account with a community account, and the chat bot account sends the community account and The inquiry command is sent to the service host, and the real-time password information corresponding to the community account is obtained from the service host. In the dynamic password system described in claim 1, each of the account information further includes an identity information, and the identity information corresponds to a community account. The dynamic password system according to claim 1, wherein the dynamic password module periodically or irregularly changes the real-time password information of each account information according to the change rule. The dynamic password system according to claim 1, wherein the mobile device scans a piece of code information to establish a connection relationship between the social account and the chat robot account. The dynamic password system according to claim 1, wherein the account database automatically generates the real-time password information corresponding to the community account when a new community account is created. A method for obtaining dynamic passwords, including: Create plural account information, each of which includes a community account and a real-time password information; Change the real-time password information of each account information according to a change rule; Use a community account to send an inquiry command to a chatbot account; Use the chatbot account to send the community account and the inquiry instruction; A service host receives the community account and the query command, and obtains the real-time password information corresponding to the community account according to the query command; and Use the chat robot account to receive the real-time password information corresponding to the community account, and send the real-time password information to the community account. The method for obtaining a dynamic password as described in claim 6, wherein in the step of creating the account information, the real-time password information corresponding to the community account is automatically generated. The method for obtaining a dynamic password as described in claim 6, wherein in the step of changing according to the change rule, the real-time password information of each account information is changed regularly or irregularly according to the change rule. The method for obtaining a dynamic password as described in claim 6, wherein before the step of sending the inquiry command with a community account, it further includes: scanning a piece of code information to establish a connection relationship between the community account and the chatbot account .

Images