A password security management system and method

Abstract

The invention provides a password security management system and method. The system comprises an access interface module, a password storage module and an encryption module. The password storage module comprises a first password file and a second password file. The first password file is used for storing a password of a common account, and the second password file is used for storing a password ofan administrator account. The access interface module is used for receiving an access request instruction of the application program and accessing the first password file or the second password fileaccording to the access request instruction. The encryption module is used for encrypting the password of the common account in the first password file and the password of the administrator account inthe second password file. According to the system and the method, the password of the administrator account is stored in the safer second password file, so that the password storage security of the administrator account is improved, and the security and autonomous controllability of password encryption are further improved by adopting the domestic password algorithm SM3.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a password security management system and method. Background technique [0002] At present, the account password storage technology of almost all Linux distributions uses shadow technology, that is, the account information is saved in the / etc / passwd file, and the account password is encrypted and stored in the / etc / shadow file. The encryption algorithm of the password uses International cryptographic algorithms such as MD5, SHA256 and SHA512. There are two problems with the above scheme. First, almost all Linux users and developers know that the password is stored in the / etc / shadow file. Even though the / etc / shadow file is protected by mandatory access control, there are still criminals. Bypass the mandatory access control by some means, access the / etc / shadow file, and steal the ciphertext of the password of the administrator account. Once the ciphertext of the admi...

AI Technical Summary

Problems solved by technology

There are two problems with the above scheme. First, almost all Linux users and developers know that the password is stored in the / etc / shadow file. Even though the / etc / shadow file is protected by mandatory access control, there are still criminals. Bypass the mandatory access control by some means, access the / etc / shadow file, and steal the ciphertext of the password of the administrator account. Once the ciphertext of the administrator password is leaked, the hacker can crack the password of the administrator account through brute force or dictionary attack The plaintext of the password of the administrator account, the hacker can do whatever he wants after obtaining the plaintext of the password of the administrator account; secondly, the password encryption algorithm is an international encryption algorithm, which is uncontrollable in terms of technology and security

Images