WO2015160983A1 - Method and apparatus of detecting weak password - Google Patents

Method and apparatus of detecting weak password Download PDF

Info

Publication number
WO2015160983A1
WO2015160983A1 PCT/US2015/026017 US2015026017W WO2015160983A1 WO 2015160983 A1 WO2015160983 A1 WO 2015160983A1 US 2015026017 W US2015026017 W US 2015026017W WO 2015160983 A1 WO2015160983 A1 WO 2015160983A1
Authority
WO
WIPO (PCT)
Prior art keywords
password
identity information
detected
detection
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2015/026017
Other languages
French (fr)
Inventor
Wen Zhang
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to JP2016557132A priority Critical patent/JP6502957B2/en
Priority to PL15780274T priority patent/PL3132371T3/en
Priority to ES15780274T priority patent/ES2804763T3/en
Priority to EP15780274.5A priority patent/EP3132371B1/en
Priority to KR1020167027814A priority patent/KR102088553B1/en
Publication of WO2015160983A1 publication Critical patent/WO2015160983A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/45—Structures or tools for the administration of authentication
    • G06F21/46—Structures or tools for the administration of authentication by designing passwords or checking the strength of passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks

Definitions

  • the present disclosure relates to the field of Internet technology, and in particular, to methods and apparatuses of detecting a weak password.
  • a commonly seen method of detecting a weak password of a user mainly includes: determining whether a password set up by a user is too simple by using a dictionary of commonly used weak passwords; or determining whether a password set up by the user is related to identity information thereof based on identity-related information of the user, such as an identity card number, a mobile phone number, a bank card number, etc.
  • An existing technology of detecting a weak password of a user can only perform detection based on commonly used weak passwords and identity-related information of the user.
  • some users always use identity information of the people who have a close relationship with them for setting up passwords, and weak passwords that are set up in such cases cannot be detected by the existing technology, thus failing to further improve the security of the passwords of the users.
  • a main objective of the present disclosure is to provide a method and an apparatus of detecting a weak password to solve the failure of detecting a password that is set up by a user using identity information of other users that are related to the user in the existing technology.
  • the present disclosure provides a method of detecting a weak password, which includes: receiving a password to be detected; acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and users related thereto; detecting whether identity information associated with the password to be detected exists in the identity information set; and determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
  • Another aspect of the present disclosure provides an apparatus of detecting a weak password, which includes: a receiving module used for receiving a password to be detected; an acquisition module used for acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and users related thereto; a detection module used for detecting whether identity information associated with the password to be detected exists in the identity information set; and a determination module used for determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
  • the technica l solution of the present disclosure can detect whether a password to be detected is set up by a user using identity information thereof or identity information of a user who is closely associated therewith, thereby determining whether the password to be detected is weak or prone to cracking, and thus further improving the security of the password of the user.
  • FIG. 1 is a flowchart of a method of detecting a weak password according to an embodiment of the present disclosure.
  • FIG. 2 is a flowchart of a procedure of acquiring an identity information set of a user of a password to be detected according to an embodiment of the present disclosure.
  • FIG. 3 is a flowchart of a procedure of detecting whether identity information associated with a password to be detected exists in an identity information set according to an embodiment of the present disclosure.
  • FIG. 4 is a flowchart of a procedure of determining whether a detection password that is identical with a password to be detected exists in one or more detection passwords split from each piece of identity information according to an embodiment of the present disclosure.
  • FIG. 5 is a flowchart of an apparatus of detecting a weak password according to an embodiment of the present disclosure.
  • An idea of the present disclosure is to determine one or more related users who are closely associated with a user based on activities of the user to acquire a plurality of pieces of identity information of the user and the associated users thereof, and to determine whether a password set up by the user is associated with the plurality of pieces of identity information based on the plurality of pieces of identity information, thereby determining whether the password to be detected is a weak password.
  • a method of detecting a weak password is provided.
  • FIG. 1 is a flowchart of a method of detecting a weak password according to an embodiment of the present disclosure.
  • the password to be detected may be a login password used when a user logs into an application such as a client application or a webpage application, a verification password used when the user uses the client application or the webpage application to perform a particular operation (the particular operation which is based on a service provided by a server), for example, a payment password during a payment transaction, etc. It should be understood that the password to be detected is not limited thereto, but may be any password that needs to be detected.
  • an identity information set of a user of the password to be detected is obtained.
  • the identity information set including a plurality of pieces of identity information of the user and users associated therewith.
  • FIG. 2 is a flowchart of a method block of acquiring an identity information set of a user of the password to be detected according to an embodiment of the present disclosure.
  • one or more associated users of the user are determined based on behavior data of the user.
  • the one or more associated users of the user may be one or more users closely associated with the user.
  • the users closely associated with the user may include, for example, relatives or friends of the user, etc.
  • the behavior data of the user may include: behavior data of interaction activities of the user, for example, users having a transaction activity (for example, a transfer, which includes transferring funds to other users or receiving funds transferred from other users) with the user; and behavior data of browsing activities of the user, for example, users that have been browsed by the user.
  • statistics about the behavior data of the user may be collected and analyzed to acquire one or more users most closely associated with the user as the associated users of the user.
  • a number of the one or more associated users may be determined according to specific situations. For example, by collecting statistics about users who have interacted with the user, a predetermined number of users (TopN) who have interacted with the user most frequently may be treated as the associated users of the user. Alternatively, one or more users who have interacted with the user for more than a predetermined number of times may be treated as the associated users of the user.
  • TopicN a predetermined number of users
  • one or more pieces of identity information of the user and one or more pieces of identity information of each associated user in the one or more associated users are acquired to form the identity information set of the user.
  • Each piece of identity information may be made up of multiple characters (for example, digits, letters), and the identity information may include information such as a name, an identity card number, a mobile phone number, a bank account number/card number, etc.
  • the identity information may include information such as a name, an identity card number, a mobile phone number, a bank account number/card number, etc.
  • one or more pieces of identity information in the aforementioned identity information of the user and one or more pieces of identity information in the aforementioned identity information of each associated user of the user may be acquired to form the identity information set of the user.
  • detection is made as to whether identity information associated with the password to be detected exists in the identity information set at S103. Specifically, detection is made as to whether the password to be detected is set up by the user using the identity information thereof or identity information of a user who is closely associated there
  • FIG. 3 shows a flowchart of a method block of detecting whether identity information associated with the password to be detected exists in the identity information set (i.e., S103) according to an embodiment of the present disclosure. It should be noted that FIG. 3 shows a flowchart of determining whether the identity information is associated with the password to be detected for each piece of identity information.
  • each piece of identity information in the identity information set is split into one or more detection passwords based on a length of the password to be detected.
  • a length of the password to be detected may first be acquired from a system. Each piece of identity information is then split into one or more detection passwords having the same length as the password to be detected based on the length of the password. The one or more detection passwords that are split from each piece of identity information are used for comparison with the password to be detected in a next method block to determine whether that piece of identity information is associated with the password.
  • the identity information may be split into (L-M+1) number of detection passwords which length is M according to an order of characters (such as digits, letters) in the identity information, wherein L is the length of the identity information, and M is the length of the password to be detected.
  • L is the length of the identity information
  • M is the length of the password to be detected.
  • FIG. 4 shows a flowchart of a method block of determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords split from each piece of identity information (i.e., S302) according to an embodiment of the present disclosure.
  • the one or more detection passwords are individually encrypted using a particular secret key to generate one or more detection ciphertexts corresponding to the one or more detection passwords at S401.
  • the system may use a particular secret key to encrypt the password inputted by the user to generate a ciphertext of the password to prevent the password of the user from being stolen in order to ensure the security of the password of the user. Therefore, the user-inputted password received (by the server) or the acquired user-preset password stored (on the server) is the ciphertext that is encrypted using the particular secret key. Therefore, when the password to be detected is received, what is actually received is the ciphertext generated by encrypting the password to be detected using the particular secret key. Therefore, the particular secret key may be acquired.
  • the one or more detection passwords are individually encrypted using the particular secret key to generate one or more detection ciphertexts corresponding to each detection password, in order to facilitate comparison between the one or more detection ciphertexts and the ciphertext of the password to be detected to determine whether a detection ciphertext that is identical with the ciphertext of the password to be detected exists.
  • the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key.
  • the one or more detection ciphertexts may be compared with the ciphertext of the password to be detected, to determine whether each detection ciphertext is identical with the ciphertext of the password to be detected one by one.
  • the one or more detection ciphertexts and the ciphertext of the password to be detected are generated by encryption using the same secret key (i.e., the particular secret key). Therefore, upon detecting any detection ciphertext that is identical with the ciphertext of the password to be detected, a determination is made that a detection password corresponding to the detection ciphertext (i.e., the detection password from which the detection ciphertext is generated) is identical with the password to be detected. Moreover, a determination is further made that a detection password that is identical with the password to be detected exists in the one or more detection passwords.
  • the plurality of pieces of identity information in the identity information set are processed according to the method blocks S301-S304 one by one to determine whether each piece of identity information is associated with the password to be detected separately. If any piece of identity information in the identity information set is associated with the password to be detected, this indicates that the user sets up the password to be detected using that piece of identity information. As such, the password to be detected may be prone to cracking, and thus is a weak password.
  • the password to be detected passes the detection at S105, i.e., the password to be detected is not a weak password, and passes the detection.
  • the technical solution of the present disclosure may be used for detecting whether a password of a user is set up by the user using identity information of the user or identity information of an associated user closely related thereto, and may be used before or after conducting a weak password detection that employs a weak password dictionary.
  • FIG. 5 schematically shows a structural block diagram of an apparatus of detecting a weak password according to an embodiment of the present disclosure.
  • the apparatus 500 includes: a receiving module 501, an acquisition module 502, a detection module 503, and a determination module 504.
  • the receiving module 501 may be used for receiving a password to be detected.
  • the acquisition module 502 may be used for acquiring an identity information set of a user of the password to be detected, the identity information set including multiple pieces of identity information of the user and associated users thereof.
  • the detection module 503 may be used for detecting whether identity information associated with the password to be detected exists in the identity information set.
  • the determination module 504 may be used for determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
  • the acquisition module 502 may include: an associated user determination module 505 and an identity information acquisition module 506.
  • the associated user determination module 505 may be used for determining one or more associated users of the user based on behavior data of the user.
  • the identity information acquisition module 506 may be used for obtaining one or more pieces of identity information of the user and one or more pieces of identity information of each associated user in the one or more associated users to form the identity information set of the user.
  • the detection module 503 may include: a splitting module 507, a judging module 508 and a first determination module 509.
  • the splitting module 507 may be used for dividing each piece of identity information in the identity information set into one or more detection passwords according to a length of the password to be detected.
  • the judging module 508 may be used for determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information.
  • the first determination module 509 may be used for determining that a piece of identity information is associated with the password to be detected when a detection password that is identical with the password to be detected exists in one or more detection passwords split from the piece of identity information.
  • the judging module 508 may include: a generation sub-module 510, a judging sub-module 511, and a determination sub-module 512.
  • the generation sub-module 510 may be used for individually encrypting the one or more detection passwords using a particular secret key to generate one or more detection ciphertexts corresponding to one or more detection passwords.
  • the judging sub-module 511 may be used for determining whether a detection ciphertext that is identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts, wherein the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key.
  • the determination sub-module 512 may be used for determining that a detection password that is identical with the password to be detected exists in the one or more detection passwords if a detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts.
  • a computing device includes one or more processors/central processing units (CPUs) 513, an input/output interface 514, a network interface 515 and memory 516.
  • processors/central processing units CPUs
  • input/output interface 514 input/output interface
  • network interface 515 network interface 515
  • memory 516 memory
  • the memory 516 may include a form of a computer readable media such as volatile memory, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash RAM.
  • RAM random access memory
  • ROM read-only memory
  • the memory 516 is an example of a computer readable media.
  • the computer readable media may include a permanent or non-permanent type, a removable or non-removable media, which may achieve storage of information using any method or technology.
  • the information may include a computer-readable instruction, a data structure, a program module or other data.
  • Examples of computer storage media include, but not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random-access memory (RAM), read-only memory (ROM), electronically erasable programmable read-only memory (EEPROM), quick flash memory or other internal storage technology, compact disk read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media, which may be used to store information that may be accessed by a computing device.
  • the computer readable media does not include transitory media, such as modulated data signals and carrier waves.
  • the memory 516 may include program module 517 and program data 518.
  • the foregoing modules and/or sub-modules may be included in the memory 516, e.g., program module 517. Details of these modules and sub-modules may be found in the foregoing description and are therefore not redundantly described herein.
  • the embodiments of the present disclosure may be provided as a method, a system or a computer program product. Therefore, the present disclosure may be implemented as a completely hardware embodiment, a completely software embodiment, or an embodiment which is a combination of software and hardware. Moreover, the present disclosure may be in a form of a computer program product implemented in one or more computer usable storage media (including, but not limited to, a magnetic disk storage device, a CD-ROM, an optical storage device, and the like) including computer usable program codes.
  • a computer usable storage media including, but not limited to, a magnetic disk storage device, a CD-ROM, an optical storage device, and the like

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Telephone Function (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Storage Device Security (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

A method and an apparatus of detecting a weak password are disclosed. The method comprises: receiving a password to be detected; acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and associated users thereof; detecting whether identity information associated with the password to be detected exists in the identity information set; and determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set. The technical solution of the present disclosure can detect whether a password to be detected is set up by a user using identity information thereof or identity information of a user who be closely associated therewith, thus determining whether the password to be detected is prone to cracking, and thereby further improving the security of the password of the user.

Description

METHOD AND APPARATUS OF DETECTING WEAK PASSWORD
CROSS REFERENCE TO RELATED PATENT APPLICATION
This application claims foreign priority to Chinese Patent Application No. 201410153728.8 filed on April 16, 2014, entitled "Method and Apparatus of Detecting Weak Password", which is hereby incorporated by reference in its entirety.
TECHNICAL FIELD
The present disclosure relates to the field of Internet technology, and in particular, to methods and apparatuses of detecting a weak password.
BACKGROUND
In the existing Internet environment, identity-related information of users is no longer private information, and the security of data and passwords of the users is severely affected. When setting up passwords, some users use passwords that are too simple or set up passwords using information that is associated with themselves or associated with their relatives or friends to remember the passwords easily, and such passwords are easily cracked.
At present, a commonly seen method of detecting a weak password of a user mainly includes: determining whether a password set up by a user is too simple by using a dictionary of commonly used weak passwords; or determining whether a password set up by the user is related to identity information thereof based on identity-related information of the user, such as an identity card number, a mobile phone number, a bank card number, etc.
An existing technology of detecting a weak password of a user can only perform detection based on commonly used weak passwords and identity-related information of the user. However, some users always use identity information of the people who have a close relationship with them for setting up passwords, and weak passwords that are set up in such cases cannot be detected by the existing technology, thus failing to further improve the security of the passwords of the users. SUMMARY
This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify all key features or essential features of the claimed subject matter, nor is it intended to be used alone as an aid in determining the scope of the claimed subject matter. The term "techniques," for instance, may refer to device(s), system(s), method(s) and/or computer-readable instructions as permitted by the context above and throughout the present disclosure.
A main objective of the present disclosure is to provide a method and an apparatus of detecting a weak password to solve the failure of detecting a password that is set up by a user using identity information of other users that are related to the user in the existing technology.
The present disclosure provides a method of detecting a weak password, which includes: receiving a password to be detected; acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and users related thereto; detecting whether identity information associated with the password to be detected exists in the identity information set; and determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
Another aspect of the present disclosure provides an apparatus of detecting a weak password, which includes: a receiving module used for receiving a password to be detected; an acquisition module used for acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and users related thereto; a detection module used for detecting whether identity information associated with the password to be detected exists in the identity information set; and a determination module used for determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set. Compared with the existing technology, the technica l solution of the present disclosure can detect whether a password to be detected is set up by a user using identity information thereof or identity information of a user who is closely associated therewith, thereby determining whether the password to be detected is weak or prone to cracking, and thus further improving the security of the password of the user.
BRIEF DESCRIPTION OF THE DRAWINGS
The accompanying drawings described herein are provided for further understanding of the present disclosure, and constitute a part of the present disclosure. The exemplary embodiments of the present disclosure and the description thereof are used for illustrating the present disclosure, and should not be construed as any improper limitations to the present disclosure. I n the accompanying drawings:
FIG. 1 is a flowchart of a method of detecting a weak password according to an embodiment of the present disclosure.
FIG. 2 is a flowchart of a procedure of acquiring an identity information set of a user of a password to be detected according to an embodiment of the present disclosure.
FIG. 3 is a flowchart of a procedure of detecting whether identity information associated with a password to be detected exists in an identity information set according to an embodiment of the present disclosure.
FIG. 4 is a flowchart of a procedure of determining whether a detection password that is identical with a password to be detected exists in one or more detection passwords split from each piece of identity information according to an embodiment of the present disclosure.
FIG. 5 is a flowchart of an apparatus of detecting a weak password according to an embodiment of the present disclosure.
DETAILED DESCRIPTION
An idea of the present disclosure is to determine one or more related users who are closely associated with a user based on activities of the user to acquire a plurality of pieces of identity information of the user and the associated users thereof, and to determine whether a password set up by the user is associated with the plurality of pieces of identity information based on the plurality of pieces of identity information, thereby determining whether the password to be detected is a weak password.
In order to make objectives, technical solutions, and advantages of the present disclosure clearer, the technical solutions of the present disclosure are described herein in a clear and complete manner with reference to the exemplary embodiments and corresponding accompanying drawings of the present disclosure. Apparently, the described embodiments are merely a part and not all of the embodiments of the present disclosure. Based on the embodiments in the present disclosure, all other embodiments obtained by one of ordinary skill in the art without making any creative efforts shall belong to the protection scope of the present disclosure.
According to an embodiment of the present disclosure, a method of detecting a weak password is provided.
Referring to FIG. 1, FIG. 1 is a flowchart of a method of detecting a weak password according to an embodiment of the present disclosure.
At S101, a password to be detected is received.
The password to be detected may be a login password used when a user logs into an application such as a client application or a webpage application, a verification password used when the user uses the client application or the webpage application to perform a particular operation (the particular operation which is based on a service provided by a server), for example, a payment password during a payment transaction, etc. It should be understood that the password to be detected is not limited thereto, but may be any password that needs to be detected.
At S102, an identity information set of a user of the password to be detected is obtained. The identity information set including a plurality of pieces of identity information of the user and users associated therewith.
In order to illustrate this method block more clearly, an optional example implementation of this method block is described with reference to FIG. 2. As shown in FIG. 2, FIG. 2 is a flowchart of a method block of acquiring an identity information set of a user of the password to be detected according to an embodiment of the present disclosure.
At S201, one or more associated users of the user are determined based on behavior data of the user.
The one or more associated users of the user may be one or more users closely associated with the user. The users closely associated with the user may include, for example, relatives or friends of the user, etc. The behavior data of the user may include: behavior data of interaction activities of the user, for example, users having a transaction activity (for example, a transfer, which includes transferring funds to other users or receiving funds transferred from other users) with the user; and behavior data of browsing activities of the user, for example, users that have been browsed by the user.
Specifically, statistics about the behavior data of the user may be collected and analyzed to acquire one or more users most closely associated with the user as the associated users of the user. A number of the one or more associated users may be determined according to specific situations. For example, by collecting statistics about users who have interacted with the user, a predetermined number of users (TopN) who have interacted with the user most frequently may be treated as the associated users of the user. Alternatively, one or more users who have interacted with the user for more than a predetermined number of times may be treated as the associated users of the user.
At S202, one or more pieces of identity information of the user and one or more pieces of identity information of each associated user in the one or more associated users are acquired to form the identity information set of the user. Each piece of identity information may be made up of multiple characters (for example, digits, letters), and the identity information may include information such as a name, an identity card number, a mobile phone number, a bank account number/card number, etc. Specifically, one or more pieces of identity information in the aforementioned identity information of the user and one or more pieces of identity information in the aforementioned identity information of each associated user of the user may be acquired to form the identity information set of the user. Returning to FIG. 1, detection is made as to whether identity information associated with the password to be detected exists in the identity information set at S103. Specifically, detection is made as to whether the password to be detected is set up by the user using the identity information thereof or identity information of a user who is closely associated therewith.
To illustrate this method block more clearly, an optional example implementation of this method block is described with reference to FIG. 3.
Referring to FIG. 3, FIG. 3 shows a flowchart of a method block of detecting whether identity information associated with the password to be detected exists in the identity information set (i.e., S103) according to an embodiment of the present disclosure. It should be noted that FIG. 3 shows a flowchart of determining whether the identity information is associated with the password to be detected for each piece of identity information.
At S301, each piece of identity information in the identity information set is split into one or more detection passwords based on a length of the password to be detected.
According to an embodiment of the present disclosure, a length of the password to be detected may first be acquired from a system. Each piece of identity information is then split into one or more detection passwords having the same length as the password to be detected based on the length of the password. The one or more detection passwords that are split from each piece of identity information are used for comparison with the password to be detected in a next method block to determine whether that piece of identity information is associated with the password.
Specifically, for any piece of identity information, the identity information may be split into (L-M+1) number of detection passwords which length is M according to an order of characters (such as digits, letters) in the identity information, wherein L is the length of the identity information, and M is the length of the password to be detected. For example, assuming that the length of the password to be detected is six, a piece of identity information "123456789" may be split into four detection passwords: "123456", "234567", "345678", and "456789". At S302, a determination is made as to whether a detection password that is identical with the password to be detected exists in the one or more detection passwords that are split from each piece of identity information.
Referring to FIG. 4, FIG. 4 shows a flowchart of a method block of determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords split from each piece of identity information (i.e., S302) according to an embodiment of the present disclosure.
As shown in FIG. 4, for one or more detection passwords split from each piece of identity information, the one or more detection passwords are individually encrypted using a particular secret key to generate one or more detection ciphertexts corresponding to the one or more detection passwords at S401.
Specifically, when the user inputs a password (for example, an input submitted when the user sets up a password or an input submitted when the user uses a password to perform a related verification), (the system) may use a particular secret key to encrypt the password inputted by the user to generate a ciphertext of the password to prevent the password of the user from being stolen in order to ensure the security of the password of the user. Therefore, the user-inputted password received (by the server) or the acquired user-preset password stored (on the server) is the ciphertext that is encrypted using the particular secret key. Therefore, when the password to be detected is received, what is actually received is the ciphertext generated by encrypting the password to be detected using the particular secret key. Therefore, the particular secret key may be acquired. The one or more detection passwords are individually encrypted using the particular secret key to generate one or more detection ciphertexts corresponding to each detection password, in order to facilitate comparison between the one or more detection ciphertexts and the ciphertext of the password to be detected to determine whether a detection ciphertext that is identical with the ciphertext of the password to be detected exists.
At S402, a determination is made as to whether a detection ciphertext that is identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts. The ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key. Specifically, the one or more detection ciphertexts may be compared with the ciphertext of the password to be detected, to determine whether each detection ciphertext is identical with the ciphertext of the password to be detected one by one.
At S403, if a detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts, a determination is made that a detection password that is identical with the password to be detected exists in the one or more detection passwords.
The one or more detection ciphertexts and the ciphertext of the password to be detected are generated by encryption using the same secret key (i.e., the particular secret key). Therefore, upon detecting any detection ciphertext that is identical with the ciphertext of the password to be detected, a determination is made that a detection password corresponding to the detection ciphertext (i.e., the detection password from which the detection ciphertext is generated) is identical with the password to be detected. Moreover, a determination is further made that a detection password that is identical with the password to be detected exists in the one or more detection passwords. If no detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts, a determination is made that no detection password that is identical with the password to be detected exists in the one or more detection passwords at S404.
Returning to FIG. 3, after each piece of identity information in the identity information set has individually gone through the method blocks S401-S404 as described above, if a detection password that is the same as the password to be detected is found to exist in one or more detection passwords split from any piece of identity information, a determination is made that this piece of identity information is associated with the password to be detected at S303, i.e., a determination is made that identity information associated with the password to be detected exists in the identity information set. If no detection password identical with the password to be detected is found to exist in the one or more detection passwords split from a piece of identity information, a determination is made that this piece of identity information is not associated with the password to be detected at S304. If no detection password that is identical with the password to be detected exists in one or more detection passwords split from any piece of identity information, a determination is made that no identity information associated with the password to be detected exists in the identity information set.
An implementation of the method block S103 is described with reference to FIGS. 3 and 4 above in detail, and FIG. 1 is returned hereinafter for subsequent description. At S104, if identity information associated with the password to be detected exists in the identity information set, a determination is made that the password to be detected is a weak password.
Specifically, the plurality of pieces of identity information in the identity information set are processed according to the method blocks S301-S304 one by one to determine whether each piece of identity information is associated with the password to be detected separately. If any piece of identity information in the identity information set is associated with the password to be detected, this indicates that the user sets up the password to be detected using that piece of identity information. As such, the password to be detected may be prone to cracking, and thus is a weak password.
If no identity information associated with the password to be detected exists in the identity information set, this indicates that the password to be detected is not associated with any piece of identity information in the identity information set. In other words, the user does not use any piece of identity information in the identity information set to set up the password to be detected. As such, a determination is made that the password to be detected passes the detection at S105, i.e., the password to be detected is not a weak password, and passes the detection.
The technical solution of the present disclosure may be used for detecting whether a password of a user is set up by the user using identity information of the user or identity information of an associated user closely related thereto, and may be used before or after conducting a weak password detection that employs a weak password dictionary.
The present disclosure further provides an apparatus of detecting a weak password. FIG. 5 schematically shows a structural block diagram of an apparatus of detecting a weak password according to an embodiment of the present disclosure. According to an embodiment of the present disclosure, the apparatus 500 includes: a receiving module 501, an acquisition module 502, a detection module 503, and a determination module 504.
The receiving module 501 may be used for receiving a password to be detected. The acquisition module 502 may be used for acquiring an identity information set of a user of the password to be detected, the identity information set including multiple pieces of identity information of the user and associated users thereof.
The detection module 503 may be used for detecting whether identity information associated with the password to be detected exists in the identity information set.
The determination module 504 may be used for determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
According to an embodiment of the present disclosure, the acquisition module 502 may include: an associated user determination module 505 and an identity information acquisition module 506.
The associated user determination module 505 may be used for determining one or more associated users of the user based on behavior data of the user.
The identity information acquisition module 506 may be used for obtaining one or more pieces of identity information of the user and one or more pieces of identity information of each associated user in the one or more associated users to form the identity information set of the user.
According to an embodiment of the present disclosure, the detection module 503 may include: a splitting module 507, a judging module 508 and a first determination module 509.
The splitting module 507 may be used for dividing each piece of identity information in the identity information set into one or more detection passwords according to a length of the password to be detected.
The judging module 508 may be used for determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information. The first determination module 509 may be used for determining that a piece of identity information is associated with the password to be detected when a detection password that is identical with the password to be detected exists in one or more detection passwords split from the piece of identity information.
According to an embodiment of the present disclosure, the judging module 508 may include: a generation sub-module 510, a judging sub-module 511, and a determination sub-module 512.
The generation sub-module 510 may be used for individually encrypting the one or more detection passwords using a particular secret key to generate one or more detection ciphertexts corresponding to one or more detection passwords.
The judging sub-module 511 may be used for determining whether a detection ciphertext that is identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts, wherein the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key.
The determination sub-module 512 may be used for determining that a detection password that is identical with the password to be detected exists in the one or more detection passwords if a detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts.
Since the functions implemented by the apparatus 500 of this embodiment basically correspond to the method embodiments as shown in FIGS. 1-4 above, parts that are not described in detail in this embodiment may be referenced to related description in the foregoing embodiments, and are not redundantly described herein.
Furthermore, the apparatus 500 may be implemented as one or more computing devices. In a typical configuration, a computing device includes one or more processors/central processing units (CPUs) 513, an input/output interface 514, a network interface 515 and memory 516.
The memory 516 may include a form of a computer readable media such as volatile memory, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash RAM. The memory 516 is an example of a computer readable media. The computer readable media may include a permanent or non-permanent type, a removable or non-removable media, which may achieve storage of information using any method or technology. The information may include a computer-readable instruction, a data structure, a program module or other data. Examples of computer storage media include, but not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random-access memory (RAM), read-only memory (ROM), electronically erasable programmable read-only memory (EEPROM), quick flash memory or other internal storage technology, compact disk read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media, which may be used to store information that may be accessed by a computing device. As defined herein, the computer readable media does not include transitory media, such as modulated data signals and carrier waves.
The memory 516 may include program module 517 and program data 518. The foregoing modules and/or sub-modules may be included in the memory 516, e.g., program module 517. Details of these modules and sub-modules may be found in the foregoing description and are therefore not redundantly described herein.
It should be further noted that, terms such as "comprise", "include" or any other variations thereof are meant to cover the non-exclusive inclusions. The process, method, product or apparatus that includes a series of elements not only includes those elements, but also includes other elements that are not explicitly listed, or further includes elements that already existed in such process, method, product or apparatus. In a condition without further limitations, an element defined by the phrase "include a/an ..." does not exclude any other similar elements from existing in the process, method, product or apparatus.
One skilled in the art should understand that the embodiments of the present disclosure may be provided as a method, a system or a computer program product. Therefore, the present disclosure may be implemented as a completely hardware embodiment, a completely software embodiment, or an embodiment which is a combination of software and hardware. Moreover, the present disclosure may be in a form of a computer program product implemented in one or more computer usable storage media (including, but not limited to, a magnetic disk storage device, a CD-ROM, an optical storage device, and the like) including computer usable program codes.
The above descriptions are merely exemplary embodiments of the present disclosure, and are not intended to limit the present disclosure. For one skilled in the art, the present disclosure may have various modifications and variations. Any modifications, equivalent replacements, improvements or the like made without departing from the spirit and principle of the present disclosure shall be included in the claim scope of the present disclosure.

Claims

CLAIMS What is claimed is:
1. A method implemented by one or more computing devices, the method comprising:
receiving a password to be detected;
acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and associated users thereof;
detecting whether identity information associated with the password to be detected exists in the identity information set;
determining whether the password to be detected is a weak password based at least in part on a result of the detecting.
2. The method of claim 1, further comprising determining that the password to be detected is the weak password in response to detecting that the identity information associated with the password to be detected exists in the identity information set.
3. The method of claim 1, further comprising determining that the password to be detected is not the weak password in response to detecting that no identity information associated with the password to be detected exists in the identity information set.
4. The method of claim 1, wherein acquiring the identity information set of the user of the password to be detected comprises:
determining one or more associated users of the user based on behavior data of the user; and
acquiring one or more pieces of identity information of the user and one or more pieces of identity information of each associated user of the one or more associated users to form the identity information set of the user.
5. The method of claim 1, wherein detecting whether the identity information associated with the password to be detected exists in the identity information set comprises: dividing each piece of identity information in the identity information set into one or more detection passwords based on a length of the password to be detected; and
determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information.
6. The method of claim 5, further comprising determining that a piece of identity information is associated with the password to be detected if a detection password that is identical with the password to be detected exists in one or more detection passwords split from the piece of identity information.
7. The method of claim 5, further comprising determining that no identity information is associated with the password to be detected if no detection password identical with the password to be detected is found to exist in the one or more detection passwords divided from each piece of identity information.
8. The method of claim 5, wherein determining whether the detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information comprises:
individually encrypting the one or more detection passwords using a particular secret key to generate one or more detection ciphertexts corresponding to the one or more detection passwords; and
determining whether a detection ciphertext that is identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts, wherein the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key.
9. The method of claim 8, further comprising determining that the detection password that is identical with the password to be detected exists in the one or more detection passwords if the detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts.
10. An apparatus for detecting a weak password, comprising:
a receiving module used for receiving a password to be detected;
an acquisition module used for acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and associated users thereof;
a detection module used for detecting whether identity information associated with the password to be detected exists in the identity information set; and
a determination module used for determining that the password to be detected is a weak password if the identity information associated with the password to be detected exists in the identity information set.
11. The apparatus of claim 10, wherein the acquisition module comprises:
an associated user determination module used for determining one or more associated users of the user based on behavior data of the user; and
an identity information acquisition module used for acquiring one or more pieces of identity information of the user and one or more pieces of identity information of each associated user in the one or more associated users to form the identity information set of the user.
12. The apparatus of claim 10, wherein the detection module comprises:
a splitting module used for splitting each piece of identity information in the identity information set into one or more detection passwords according to a length of the password to be detected; a judging module used for determining whether a detection password identical with the password to be detected exists in the one or more detection passwords split from each piece of identity information; and
a first determination module used for determining that a piece of identity information is associated with the password to be detected if the detection password identical with the password to be detected exists in one or more detection passwords split from the piece of the identity information.
13. The apparatus of claim 12, wherein the judging module comprises:
a generation sub-module configured to separately encrypt the one or more detection passwords using a particular secret key to generate one or more detection ciphertexts corresponding to the one or more detection passwords;
a judging sub-module configured to determine whether a detection ciphertext identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts, wherein the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key; and
a determination sub-module used for determining that the detection password identical with the password to be detected exists in the one or more detection passwords if the detection ciphertext identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts.
14. One or more computer readable media storing executable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:
receiving a password to be detected;
acquiring an identity information set of a user of the password to be detected, the identity information set including a plurality of pieces of identity information of the user and associated users thereof;
detecting whether identity information associated with the password to be detected exists in the identity information set; determining whether the password to be detected is a weak password based at least in part on a result of the detecting.
15. The one or more computer readable media of claim 14, the acts further comprising determining that the password to be detected is the weak password in response to detecting that the identity information associated with the password to be detected exists in the identity information set.
16. The one or more computer readable media of claim 14, the acts further comprising determining that the password to be detected is not the weak password in response to detecting that no identity information associated with the password to be detected exists in the identity information set.
17. The one or more computer readable media of claim 14, wherein acquiring the identity information set of the user of the password to be detected comprises:
determining one or more associated users of the user based on behavior data of the user; and
acquiring one or more pieces of identity information of the user and one or more pieces of identity information of each associated user of the one or more associated users to form the identity information set of the user.
18. The one or more computer readable media of claim 14, wherein detecting whether the identity information associated with the password to be detected exists in the identity information set comprises:
dividing each piece of identity information in the identity information set into one or more detection passwords based on a length of the password to be detected; and
determining whether a detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information.
19. The one or more computer readable media of claim 18, the acts further comprising determining that a piece of identity information is associated with the password to be detected if a detection password that is identical with the password to be detected exists in one or more detection passwords split from the piece of identity information.
20. The one or more computer readable media of claim 18, wherein determining whether the detection password that is identical with the password to be detected exists in the one or more detection passwords divided from each piece of identity information comprises:
individually encrypting the one or more detection passwords using a particular secret key to generate one or more detection ciphertexts corresponding to the one or more detection passwords;
determining whether a detection ciphertext that is identical with a ciphertext of the password to be detected exists in the one or more detection ciphertexts, wherein the ciphertext of the password to be detected is generated by encrypting the password to be detected using the particular secret key; and
determining that the detection password that is identical with the password to be detected exists in the one or more detection passwords if the detection ciphertext that is identical with the ciphertext of the password to be detected exists in the one or more detection ciphertexts.
PCT/US2015/026017 2014-04-16 2015-04-15 Method and apparatus of detecting weak password Ceased WO2015160983A1 (en)

Priority Applications (5)

Application Number Priority Date Filing Date Title
JP2016557132A JP6502957B2 (en) 2014-04-16 2015-04-15 Method and apparatus for detecting weak passwords
PL15780274T PL3132371T3 (en) 2014-04-16 2015-04-15 Method and apparatus of detecting weak password
ES15780274T ES2804763T3 (en) 2014-04-16 2015-04-15 Weak password detection method and apparatus
EP15780274.5A EP3132371B1 (en) 2014-04-16 2015-04-15 Method and apparatus of detecting weak password
KR1020167027814A KR102088553B1 (en) 2014-04-16 2015-04-15 Method and apparatus of detecting weak password

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410153728.8 2014-04-16
CN201410153728.8A CN105095737B (en) 2014-04-16 2014-04-16 Method and apparatus for detecting weak passwords

Publications (1)

Publication Number Publication Date
WO2015160983A1 true WO2015160983A1 (en) 2015-10-22

Family

ID=54322979

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2015/026017 Ceased WO2015160983A1 (en) 2014-04-16 2015-04-15 Method and apparatus of detecting weak password

Country Status (9)

Country Link
US (1) US9722997B2 (en)
EP (1) EP3132371B1 (en)
JP (1) JP6502957B2 (en)
KR (1) KR102088553B1 (en)
CN (1) CN105095737B (en)
ES (1) ES2804763T3 (en)
PL (1) PL3132371T3 (en)
TW (1) TWI640890B (en)
WO (1) WO2015160983A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112613028A (en) * 2020-12-29 2021-04-06 北京天融信网络安全技术有限公司 Weak password detection method and device, electronic equipment and readable storage medium

Families Citing this family (59)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105656891B (en) * 2015-12-31 2018-09-28 亿阳安全技术有限公司 A kind of weak passwurd check method and device
CN109155036B (en) 2016-02-23 2023-05-23 区块链控股有限公司 Systems and methods for controlling asset-related actions via blockchain
MX2018010056A (en) 2016-02-23 2019-01-21 Nchain Holdings Ltd A method and system for securing computer software using a distributed hash table and a blockchain.
SG11201805542TA (en) 2016-02-23 2018-09-27 Nchain Holdings Ltd Secure multiparty loss resistant storage and transfer of cryptographic keys for blockchain based systems in conjunction with a wallet management system
KR102777896B1 (en) 2016-02-23 2025-03-10 엔체인 홀딩스 리미티드 Blockchain-based exchange method using tokenization
KR102753021B1 (en) 2016-02-23 2025-01-14 엔체인 홀딩스 리미티드 Tokenization method and system for implementing exchanges on blockchain
EP3754901A1 (en) 2016-02-23 2020-12-23 Nchain Holdings Limited Blockchain implemented counting system and method for use in secure voting and distribution
US10652014B2 (en) 2016-02-23 2020-05-12 nChain Holdings Limited Determining a common secret for the secure exchange of information and hierarchical, deterministic cryptographic keys
CN109074580B (en) 2016-02-23 2022-09-30 区块链控股有限公司 Method and system for secure transfer of entities over a blockchain
MX2018010058A (en) 2016-02-23 2019-01-21 Nchain Holdings Ltd Method and system for efficient transfer of cryptocurrency associated with a payroll on a blockchain that leads to An Automated payroll method and system based on smart contracts.
JP7249148B2 (en) 2016-02-23 2023-03-30 エヌチェーン ライセンシング アーゲー Blockchain-based universal tokenization system
US12107952B2 (en) 2016-02-23 2024-10-01 Nchain Licensing Ag Methods and systems for efficient transfer of entities on a peer-to-peer distributed ledger using the blockchain
SG10202007907PA (en) 2016-02-23 2020-09-29 Nchain Holdings Ltd Blockchain-implemented method for control and distribution of digital content
GB2560274C (en) 2016-02-23 2022-06-15 Nchain Holdings Ltd Personal device security using elliptic curve cryptography for secret sharing
JP6995762B2 (en) 2016-02-23 2022-01-17 エヌチェーン ホールディングス リミテッド Cryptographic methods and systems for the secure extraction of data from the blockchain
IL278834B2 (en) 2016-02-23 2023-09-01 Nchain Holdings Ltd Registry and automated management method for blockchain-enforced smart contracts
CN105760748B (en) * 2016-02-26 2018-11-23 北京齐尔布莱特科技有限公司 A kind of weak password detection method, device and server
CN107437022B (en) * 2016-05-27 2019-08-20 北京神州泰岳软件股份有限公司 A kind of weak passwurd check method and device
CN108737094B (en) * 2017-04-21 2021-12-14 腾讯科技（深圳）有限公司 Domain password security detection method and related equipment
CN107872323B (en) * 2017-11-06 2020-05-22 中国科学院信息工程研究所 Password security evaluation method and system based on user information detection
CN108256317B (en) * 2017-12-05 2023-04-18 西安交大捷普网络科技有限公司 Weak password detection method
GB2569398B (en) * 2017-12-18 2022-03-02 V Auth Ltd Authentication method and device
CN108965264A (en) * 2018-06-26 2018-12-07 郑州云海信息技术有限公司 A kind of method and system of quick detection corporate intranet equipment SSH weak passwurd
CN109587110A (en) * 2018-10-09 2019-04-05 阿里巴巴集团控股有限公司 A kind of weak passwurd detection method, device, computer equipment and service server
CN109361518A (en) * 2018-10-16 2019-02-19 杭州安恒信息技术股份有限公司 A kind of weak passwurd detection method, device and computer readable storage medium
US11055398B2 (en) * 2018-11-02 2021-07-06 Rsa Security Llc Monitoring strength of passwords
CN109684850A (en) * 2018-11-09 2019-04-26 平安科技（深圳）有限公司 Test method, apparatus, computer equipment and the storage medium of password
CN110753027A (en) * 2019-06-05 2020-02-04 青岛海信网络科技股份有限公司 Method and device for verifying weak password of equipment of UPnP protocol
CN110519289B (en) * 2019-09-02 2022-03-11 杭州安恒信息技术股份有限公司 Method and device for weak password detection based on industrial control system
CN111339527B (en) * 2020-02-20 2022-10-21 北京天融信网络安全技术有限公司 Weak password detection method and system
CN111488581A (en) * 2020-03-26 2020-08-04 杭州迪普科技股份有限公司 Weak password vulnerability detection method and device, electronic equipment and computer readable medium
CN111641584A (en) * 2020-04-13 2020-09-08 国网浙江省电力有限公司杭州供电公司 Camera weak password monitoring method and device
CN112307462A (en) * 2020-07-20 2021-02-02 神州融安科技（北京）有限公司 Method and device for prompting weak password, electronic equipment and computer-readable storage medium
CN112583789B (en) * 2020-11-04 2023-03-14 杭州数梦工场科技有限公司 Method, device and equipment for determining illegally logged-in login interface
CN112702334B (en) * 2020-12-21 2022-11-29 中国人民解放军陆军炮兵防空兵学院 WEB weak password detection method combining static characteristics and dynamic page characteristics
CN112989360B (en) * 2021-03-26 2022-07-15 湖南匡安网络技术有限公司 Parallel binary tree-based automatic detection method and system for weak password vulnerability
CN113132380A (en) * 2021-04-18 2021-07-16 重庆化工职业学院 Security evaluation system, method, device and medium for cryptographic algorithm
CN113312610A (en) * 2021-06-17 2021-08-27 中国电信股份有限公司 Weak password detection method, device, medium and electronic equipment
US12505200B2 (en) * 2022-05-23 2025-12-23 Wiz, Inc. Techniques for improved virtual instance inspection utilizing disk cloning
US20240137382A1 (en) 2021-07-16 2024-04-25 Wiz, Inc. Techniques for cybersecurity identity risk detection utilizing disk cloning and unified identity mapping
US12219048B1 (en) 2021-12-27 2025-02-04 Wiz, Inc. Techniques for encrypted disk cybersecurity inspection utilizing disk cloning
US12081656B1 (en) 2021-12-27 2024-09-03 Wiz, Inc. Techniques for circumventing provider-imposed limitations in snapshot inspection of disks for cybersecurity
US11936785B1 (en) 2021-12-27 2024-03-19 Wiz, Inc. System and method for encrypted disk inspection utilizing disk cloning techniques
US12443720B2 (en) 2022-08-10 2025-10-14 Wiz, Inc. Techniques for detecting applications paths utilizing exposure analysis
US11936693B2 (en) 2022-04-13 2024-03-19 Wiz, Inc. System and method for applying a policy on a network path
US12267326B2 (en) 2022-04-13 2025-04-01 Wiz, Inc. Techniques for detecting resources without authentication using exposure analysis
US12395488B2 (en) 2022-04-13 2025-08-19 Wiz, Inc. Techniques for analyzing external exposure in cloud environments
US12244627B2 (en) 2022-04-13 2025-03-04 Wiz, Inc. Techniques for active inspection of vulnerability exploitation using exposure
US12212586B2 (en) 2022-05-23 2025-01-28 Wiz, Inc. Techniques for cybersecurity inspection based on runtime data and static analysis from cloned resources
US12506755B2 (en) 2022-05-23 2025-12-23 Wiz, Inc. Technology discovery techniques in cloud computing environments utilizing disk cloning
US12061719B2 (en) 2022-09-28 2024-08-13 Wiz, Inc. System and method for agentless detection of sensitive data in computing environments
US12287899B2 (en) 2022-05-23 2025-04-29 Wiz, Inc. Techniques for detecting sensitive data in cloud computing environments utilizing cloning
US12217079B2 (en) 2022-05-23 2025-02-04 Wiz, Inc. Detecting security exceptions across multiple compute environments
US12079328B1 (en) 2022-05-23 2024-09-03 Wiz, Inc. Techniques for inspecting running virtualizations for cybersecurity risks
US12061925B1 (en) 2022-05-26 2024-08-13 Wiz, Inc. Techniques for inspecting managed workloads deployed in a cloud computing environment
US12561128B2 (en) 2022-06-14 2026-02-24 Sailpoint Technologies, Inc. File upload validation
CN117034251B (en) * 2023-09-28 2024-01-05 杭州海康威视数字技术股份有限公司 Weak password self-adaptive screening method, device and equipment
US20250307378A1 (en) * 2024-03-27 2025-10-02 Security Savvy Ltd. Web Page Password Capture and Evaluation
CN119728258B (en) * 2024-12-24 2025-07-25 成都华栖云科技有限公司 A weak password review system and method supporting multiple systems

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040073815A1 (en) * 2002-10-11 2004-04-15 Yamatake Corporation Password strength checking method and apparatus and program and recording medium thereof, password creation assisting method and program thereof, and password creating method and program thereof
US20050198537A1 (en) * 2004-03-05 2005-09-08 Erwin Rojewski Technique for evaluating computer system passwords
US8407784B2 (en) * 2008-03-19 2013-03-26 Websense, Inc. Method and system for protection against information stealing software
US20130179970A1 (en) * 2011-10-03 2013-07-11 International Business Machines Corporation Receiving Security Risk Feedback From Linked Contacts Due to a User's System Actions and Behaviors
US20140068731A1 (en) * 2012-08-31 2014-03-06 International Business Machines Corporation Managing password strength

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7685431B1 (en) 2000-03-20 2010-03-23 Netscape Communications Corporation System and method for determining relative strength and crackability of a user's security password in real time
US8886950B2 (en) 2008-12-17 2014-11-11 At&T Intellectual Property I, L.P. Apparatus, methods, and computer program products for facilitating secure password creation and management
TWI502524B (en) * 2010-03-05 2015-10-01 Alibaba Group Holding Ltd Payment data processing method, system, payment terminal and payment server
US9258296B2 (en) * 2010-07-29 2016-02-09 Nirmal Juthani System and method for generating a strong multi factor personalized server key from a simple user password
US8539599B2 (en) * 2010-12-28 2013-09-17 Sap Ag Password protection using personal information
US8769607B1 (en) 2011-01-26 2014-07-01 Intuit Inc. Systems and methods for evaluating a password policy
US9471772B2 (en) * 2011-06-01 2016-10-18 Paypal, Inc. Password check by decomposing password
US8850536B2 (en) * 2011-08-05 2014-09-30 Safefaces LLC Methods and systems for identity verification in a social network using ratings
US20130055379A1 (en) 2011-08-23 2013-02-28 Research In Motion Limited System, device and method for authentication
US8973116B2 (en) * 2012-04-10 2015-03-03 Dropbox, Inc. Pattern entropy password strength estimator
US20130318578A1 (en) * 2012-05-24 2013-11-28 Ca, Inc. Password management and smart honey pot system
CN102819701B (en) * 2012-06-29 2015-06-17 北京奇虎科技有限公司 Method and device for prompting password security of form filling component
CN103973651B (en) * 2013-02-01 2018-02-27 腾讯科技（深圳）有限公司 Setting, querying method and device are identified based on the account password of salt cryptographic libraries is added
CN103177204B (en) * 2013-03-29 2016-09-28 北京奇虎科技有限公司 Password information tip method and device
CN103227992A (en) * 2013-04-01 2013-07-31 南京理工大学常熟研究院有限公司 Android terminal-based vulnerability scanning system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040073815A1 (en) * 2002-10-11 2004-04-15 Yamatake Corporation Password strength checking method and apparatus and program and recording medium thereof, password creation assisting method and program thereof, and password creating method and program thereof
US20050198537A1 (en) * 2004-03-05 2005-09-08 Erwin Rojewski Technique for evaluating computer system passwords
US8407784B2 (en) * 2008-03-19 2013-03-26 Websense, Inc. Method and system for protection against information stealing software
US20130179970A1 (en) * 2011-10-03 2013-07-11 International Business Machines Corporation Receiving Security Risk Feedback From Linked Contacts Due to a User's System Actions and Behaviors
US20140068731A1 (en) * 2012-08-31 2014-03-06 International Business Machines Corporation Managing password strength

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112613028A (en) * 2020-12-29 2021-04-06 北京天融信网络安全技术有限公司 Weak password detection method and device, electronic equipment and readable storage medium

Also Published As

Publication number Publication date
JP6502957B2 (en) 2019-04-17
ES2804763T3 (en) 2021-02-09
PL3132371T3 (en) 2020-11-16
EP3132371B1 (en) 2020-06-03
US20150304302A1 (en) 2015-10-22
HK1213342A1 (en) 2016-06-30
CN105095737A (en) 2015-11-25
TW201541277A (en) 2015-11-01
JP2017517048A (en) 2017-06-22
KR20160144995A (en) 2016-12-19
KR102088553B1 (en) 2020-03-13
US9722997B2 (en) 2017-08-01
EP3132371A4 (en) 2017-11-22
CN105095737B (en) 2019-03-01
EP3132371A1 (en) 2017-02-22
TWI640890B (en) 2018-11-11

Similar Documents

Publication Publication Date Title
US9722997B2 (en) Method and apparatus of detecting weak password
US12141265B2 (en) Method and apparatus for facilitating the login of an account
TWI587672B (en) Login authentication method, client, server and system
US12452307B2 (en) Advanced detection of identity-based attacks to assure identity fidelity in information technology environments
US9578004B2 (en) Authentication of API-based endpoints
US9998441B2 (en) Client authentication using social relationship data
US20180183777A1 (en) Methods and systems for user authentication
US9038159B2 (en) Authentication system
Díaz de León Guillén et al. A systematic review of security threats and countermeasures in SaaS
US20230113332A1 (en) Advanced detection of identity-based attacks to assure identity fidelity in information technology environments
US10769270B2 (en) Password protection question setting method and device
EP2989745B1 (en) Anonymous server based user settings protection
CN104468110B (en) Command identifying method, equipment and system
CN111953637A (en) Application service method and device
HK1213342B (en) Method and device for detecting weak password
CN112883415A (en) Data checking method and device based on privacy protection and server
CN112866258A (en) Data checking method and device based on privacy protection and server
HK1204730B (en) Method for password authentication, device and system thereof

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15780274

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2016557132

Country of ref document: JP

Kind code of ref document: A

REEP Request for entry into the european phase

Ref document number: 2015780274

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2015780274

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 20167027814

Country of ref document: KR

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE