WO2013081278A1

WO2013081278A1 - Apparatus and method for decrypting password

Info

Publication number: WO2013081278A1
Application number: PCT/KR2012/007139
Authority: WO
Inventors: 김태현
Original assignee: 주식회사 이스턴웨어
Priority date: 2011-11-29
Filing date: 2012-09-06
Publication date: 2013-06-06
Also published as: KR101133207B1

Abstract

A password decrypting apparatus detects candidate passwords according to rule conditions set according to the results of a statistical analysis for password setting patterns for types of password setting persons, confirms whether the candidate password corresponds to a decryption target password, and displays whether the decryption succeeds.

Description

Password decryption apparatus and method

The present invention relates to an apparatus and method for decrypting passwords.

As computer communication networks become more popular, unauthorized users access and illegally use computers, causing security problems. In general, users set a password on their computers to block other users' access. In addition, the user may protect the important document such as a text file or an image file and encrypt the document file by inputting a password so that only an authorized user can read the document.

However, if the user forgets or cannot remember the password, they will not be able to view the document file or even access the computer. In addition, if a password-protected document file or the like is used in the investigation process, such encryption makes it difficult to collect evidence during the investigation process. Therefore, there is a need for a method for decrypting a password set in a computer, a document file, or the like.

In general, in order to find a password set in a computer or a document file, a combination of numbers, letters, and special symbols is arbitrarily used. It takes a considerable time.

The technical problem to be solved by the present invention is to provide a password decryption apparatus and method that can reduce the time required to decrypt a password set in a computer or a document file.

According to an embodiment of the present invention, an apparatus for decrypting a decryption target password is provided. The password decryption apparatus includes a password analyzer and a password detector. The password analyzer is configured with at least one rule condition according to the password setting pattern analyzed for each password setter type, and performs password filtering according to the at least one rule condition to detect the candidate password. The password detector checks whether the candidate password matches the decryption target password and displays whether the decryption was successful.

The password decryption apparatus further includes an input unit. The input unit receives variable information to be set in the at least one rule condition from the password decryption program maker and delivers the variable information to the password analysis unit.

The at least one rule condition includes a profiling rule condition including information on the number of letters, numbers, and special characters set in the decryption target password, wherein the at least one rule condition includes letters, numbers, and the like in the decryption target password. At least one of a pattern rule condition including pattern information indicating an arrangement order of special characters, and a grouping rule condition including information specifying digits for each character or number set.

According to another embodiment of the present invention, a method for decrypting a password to be decrypted in a password decryption apparatus is provided. The password decryption method may further include receiving a password decryption command, performing password filtering according to at least one rule condition set according to a password setting pattern analyzed for each password setter type, and detecting a candidate password; Checking whether it matches the decrypted target password.

According to an embodiment of the present invention, it is possible to minimize the number of password decryption attempts, thereby reducing the time required for password decryption.

1 is a view showing a password decryption apparatus according to an embodiment of the present invention.

FIG. 2 is an example of the password analyzer illustrated in FIG. 1.

3 is a flowchart illustrating a method of decrypting a password in a password decrypting apparatus according to an embodiment of the present invention.

4 is a schematic diagram of a password decryption apparatus according to another embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.

In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification and claims, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise.

Now, a password decryption apparatus and method according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

Referring to FIG. 1, the password decryption apparatus 100 may include an input unit 110, a password analyzer 120, and a password detector 130.

The input unit 110 is preset to receive variable information on rule conditions, and transmits variable information on the received rule conditions to the password analyzer 120.

In the password analyzer 120, rule conditions for detecting candidate passwords are set. The password analysis unit 120 sets variable information received from the input unit 110 to a corresponding rule condition. Next, the password analysis unit 120 filters the password according to the set rule condition to detect the candidate password. Here, the rule condition may be set by the password decryption program maker according to a result of statistically analyzing the password setting pattern for each type of password setter.

According to an embodiment of the present disclosure, the rule condition may include at least one of a profiling rule condition, a pattern rule condition, and a grouping rule condition. The profiling rule condition includes information such as the number of characters and the presence or absence of characters set in the password of the decryption target such as a computer or a document file to be decrypted. That is, the profiling rule condition includes profile information such as how many characters each of letters, numbers, and special characters will occupy when the number of digits of the password is determined. The pattern rule condition includes pattern information indicating the order of placement of letters, numbers, or special characters where the password is to be determined. For example, the pattern rule may be set to three letters followed by one number. Grouping rule conditions contain information that groups a set of letters or numbers and specifies the number of digits per group.

The password analysis unit 120 performs password filtering according to at least one rule condition among a profiling rule condition, a pattern rule condition, and a grouping rule condition, thereby excluding a password that does not match the rule condition from the candidate password.

The password detector 130 checks whether the candidate password detected by the password analyzer 120 is the password of the decryption target and detects the password of the decryption target. The password detector 130 may display information on whether the candidate password matches the password to be decrypted. In this case, when the candidate password and the password of the decryption target do not match, the variable information on the rule condition may be changed by the password decryption program producer.

FIG. 2 is an example of the password analyzer illustrated in FIG. 1.

Referring to FIG. 2, the password analyzer 120 may include a plurality of filtering units, for example, first to

third filtering units

122, 124, and 126.

The profiling rule condition is set in the first filtering unit 122, and after setting variable information corresponding to the profiling rule condition received from the input unit 110, the password is filtered according to the profiling rule condition. Then, passwords satisfying the profiling rule condition are detected.

The pattern rule condition is set in the second filtering unit 124. After setting variable information corresponding to the pattern rule condition received from the input unit 110, the pattern detected by the first filtering unit 122 is patterned. Filter according to rule conditions. Then, passwords satisfying the pattern rule condition are detected among the passwords detected by the first filtering unit 122.

The grouping rule condition is set in the third filtering unit 124. After setting variable information corresponding to the grouping rule condition received from the input unit 110, the password detected by the second filtering unit 124 is grouped. Filter according to the condition. Then, passwords satisfying the group rule condition are detected among the passwords detected by the second filtering unit 124, and the detected passwords are candidate passwords.

Referring to FIG. 3, the input unit 110 of the password decryption apparatus 100 receives a password decryption command from the password decryption program producer (S310). The password decryption command may include variable information about rule conditions.

The password analysis unit 120 of the password decryption apparatus 100 starts password decryption according to the password decryption command. The password analyzer 120 sets variable information included in the password decryption command to the corresponding rule condition (S320).

Next, the password analysis unit 120 performs password filtering according to the set rule condition to detect the candidate password (S330). For example, the password analyzer 120 may detect the candidate password by filtering the password according to at least one rule condition among profiling rule conditions, pattern rule conditions, and grouping rule conditions.

The password detector 130 of the password decryption apparatus 100 checks whether the candidate password matches the password to be decrypted (S340).

If the candidate password matches the password to be decrypted, the password detection unit 130 displays the password decryption success (S350). In addition, the password detector 130 may display the candidate password.

On the other hand, if the candidate password matches the password to be decrypted, the password detection unit 130 notifies the password decryption failure (S360). Then, the password decryption program producer may change the variable information on the rule condition or set another rule condition, and the password decryption apparatus 100 may change the variable information or the rule condition on the rule condition to perform the steps S310 to S360. Decrypt the password again.

As described above, according to an exemplary embodiment of the present invention, the candidate password is detected according to a set rule condition according to the result of statistically analyzing the password setting pattern for each type of password setter. Compared to the method, the time required for password decryption can be shortened.

At least some of the functions of the password decryption apparatus and method according to the embodiment of the present invention described above may be implemented in hardware or software coupled to the hardware. Hereinafter, an embodiment in which a password decryption apparatus and method are coupled to a computer system will be described in detail with reference to FIG. 4.

4 is a schematic diagram of a password decryption apparatus according to another embodiment of the present invention, wherein at least one of the functions of the input unit 110, the password analyzer 120, and the password detector 130 described with reference to FIGS. 1 to 3 is described. Represents a system that can be used to perform some.

Referring to FIG. 4, the password decryption apparatus 400 includes a processor 410, a memory 420, at least a storage device 430, and an input / output (I / O) interface 440.

The processor 410 may be implemented as a central processing unit (CPU), other chipsets, microprocessors, or the like, and the memory 420 may include dynamic random access memory (DRAM) and rambus DRAM (rambus). DRAM, RDRAM), synchronous DRAM (synchronous DRAM, SDRAM), static RAM (RAM, etc.) may be implemented as a medium such as RAM. The storage device 430 may include a hard disk, a compact disk read only memory (CD-ROM), a CD rewritable (CD-RW), a digital video disk ROM (DVD-ROM), a DVD-RAM, and a DVD-RW disk. It may be implemented as a permanent or volatile storage device such as an optical disk such as a blu-ray disk, a flash memory, or various types of RAM. I / O interface 440 also allows processor 410 and / or memory 420 to access storage 430.

In this case, the processor 410 loads a program command for implementing at least some functions of the functions of the input unit 110, the password analyzer 120, and the password detector 130 into the memory 420, and FIGS. 1 to FIG. The operation described with reference to 3 may be controlled to be performed. The program command may be stored in the storage device 430 or may be stored in another system connected to a network.

The processor 410, the memory 420, the storage device 430, and the I / O interface 440 illustrated in FIG. 4 may be implemented in one computer or distributed in a plurality of computers.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

The present invention is a very useful invention for industrial use because it can minimize the number of password decryption attempts to shorten the time required for password decryption, and thus has high utility in criminal investigation fields requiring rapid password decryption.

Claims

In the device that decrypts the decrypted target password,

At least one rule condition is set according to a password setting pattern analyzed for each type of password setter, a password analyzer configured to detect a candidate password by performing password filtering according to the at least one rule condition, and

A password detector for checking whether the candidate password matches the decryption target password and indicating whether the decryption is successful;

The at least one rule condition is

A profiling rule condition including information on the number of letters, numbers, and special characters set in the decryption target password, a pattern rule condition including pattern information indicating an arrangement order of letters, numbers, and special characters in the decryption target password; Or at least one of a grouping rule condition comprising information specifying the number of digits for each set of numbers.
In claim 1,

And an input unit which receives variable information to be set in the at least one rule condition from a password decryption program maker and transmits the variable information to the password analysis unit.
What is claimed is: 1. A method for decrypting a target to be decrypted in a password decryption device,

Receiving a password decryption command that includes variable information about at least one rule condition;

Detecting a candidate password by performing password filtering according to variable information set in at least one rule condition set according to a password setting pattern analyzed for each password setter type;

Confirming that the candidate password matches the decryption target password, and

If the candidate password does not match the decryption target password, changing at least one of the variable information and the at least one rule condition,

The at least one rule condition is

A profiling rule condition including information on the number of letters, numbers, and special characters set in the decryption target password, a pattern rule condition including pattern information indicating the arrangement order of the letters, numbers, and special characters in the decryption target password; Or at least one of a grouping rule condition comprising information specifying the number of digits for each set of numbers.