CN111859369A - A system and method for automatic unified management of passwords - Google Patents

Abstract

The invention provides a system and method for automated unified management of passwords, belonging to the technical field of python automation scripts and encryption algorithms. The invention includes five modules: a main control module, a password generation module, a password rule control module, a data backup and migration module, Data storage module. Using python automated script development, storage management based on json format, operating account password storage, query, deletion and modification and other functions through the command line; passwords are generated through MD5 salt encryption algorithm, and user password customization is also supported; Using the pdf file as the carrier, the data is backed up and migrated by encrypting/decrypting it. This application provides users with convenient and transparent unified password management, and ensures the security and uniqueness of passwords.

Description

A system and method for automatic unified management of passwords

technical field

The invention relates to python automation script and encryption algorithm technology, in particular to a system and method for password automation and unified management.

Background technique

In today's world where the Internet is developed, everyone will be involved in a lot of account and password information, such as email accounts, website accounts, database accounts, etc., especially in the Internet industry, the number of account passwords used is very large, which also leads to information difficulties. Management, record and query are time-consuming and labor-intensive; at the same time, there is also the phenomenon that multiple accounts share the same password. If any one of these websites has a security hole, other accounts will be in a dangerous state. At present, there are many softwares that can manage such information, but they are only simple record management, and the content of passwords depends on artificial fabrication, which cannot stably maintain the high security strength of passwords. It is difficult to come up with a large number of passwords that are unique and secure only by human thinking. At this time, an application that combines management and password encryption and other characteristics is required.

SUMMARY OF THE INVENTION

The invention provides a system for automatic and unified management of passwords, which mainly solves two types of problems: one is to manage multiple account passwords in a unified manner through script automation, and allows users to customize management and safely migrate data; the other is to use encryption algorithms Automatically generate stronger passwords with higher security to ensure the security and uniqueness of different account passwords.

The technical scheme of the present invention is:

A system for automated and unified management of passwords, developed with python automated scripts, based on json format for storage management, and operates multiple functions such as account password storage, query, deletion, and modification through command lines; passwords are generated through MD5 salt encryption algorithm , and also supports user password customization; using the pdf file as the carrier, the data is backed up and migrated by encrypting/decrypting it. This application provides users with convenient and transparent unified password management, and ensures the security and uniqueness of passwords.

It consists of five modules: main control module, password generation module, password rule control module, data storage module, data backup and migration module;

Main control module: process the command input and core functions of the terminal, and control the overall function scheduling;

Password generation module: generate strong passwords through MD5 salt encryption algorithm;

Password rule control module: access the control script, and encapsulate the password value output by the password generation module twice;

Data backup and migration module: use pdf encryption and decryption technology to migrate data;

Data storage module: used to store data.

further,

The main control module further includes a command control module and an operation set module;

The command control module is responsible for receiving system terminal command parameters, identifying and distributing commands mapped to the operation set module;

The operation set module contains all functional functions and interacts with the password generation module and the data storage module at the same time. According to the different mapping values sent from the command control module, respond to the corresponding functional operations. The main functions include viewing all description values (key), obtaining the corresponding account (user_name) and password (password) according to the description values, and customizing the storage. Password, use the MD5 salt encryption algorithm to store the password, modify the description value or account or password, delete the specified data.

When the user selects the corresponding account password according to the description value, the main control module will output the password to the system clipboard while displaying the information in the terminal, and the user can paste it directly.

further,

The password generation module includes:

Use strong passwords generated by the MD5 salt encryption algorithm to ensure the security and uniqueness of passwords;

It can be connected to the password rule control module to enrich password formats.

further,

The password rule restriction module is an optional module, including:

It is used for secondary encapsulation of the password output by the password generation module;

The opening of the module can be freely controlled by the switch;

Users can customize different restriction rules by accessing customized scripts.

Going further,

The password rule control module has a built-in control switch, which is off by default, that is, the password rule control is not performed; input the corresponding command line parameters to open the password rule control module through the main control module, and conduct rules for the password output by the password generation module. Constraints.

further,

The data backup and migration module includes:

Only operate on the data storage module, which is controlled by the command independently, and does not depend on the main module;

Convert json files to pdf files for easy viewing on different PC or mobile terminals;

Enhance the security of data migration by using encryption and decryption technology for pdf files.

further,

The data storage module, when the amount of data is small, uses a json file to store it locally; it is stored in the format of key-value pairs, the description information is used as the key value, and the user name (user_name) and password (password) are in the form of a set as value value; by default, the password field is a non-null value and must be assigned a value. If the username field is not assigned a value, it defaults to NULL.

In addition, the present invention also provides a password automatic unified management method,

The working steps are as follows:

Step 1: input relevant commands in the system terminal, the command control module of the main control module receives the command parameters, identifies, judges and maps to the specific function functions in the operation set module;

Step 2: the operation set module of the main control module responds to the specified function, and connects the data storage module and the password generation module;

Step 3: Before responding to all functions of the operation set module, it will first determine whether there is a json file in the same directory. If it does not exist, create a new one, and if it exists, continue to read and write;

Step 4: For the storage function in the operation set module, if the user does not need a custom password, the password generation module will be called to automatically generate a strong password generated by the MD5 salt encryption algorithm;

Step 5: In Step 1, if the command line parameter does not control the opening of the password rule control module, this step is ignored, otherwise the password control module will perform secondary encapsulation after the output of the password generation module, and then return the encapsulated value to the operation set module;

Step 6: The operation set module will output interactive data to the terminal console, including the description value, user name, and password, and output the password value to the system clipboard for the user to use directly;

Step 7: If data backup and migration are required, execute the script of the data backup and migration module separately, which operates on the json file and outputs the encrypted pdf file.

The beneficial effects of the present invention are

(1) It provides users with a convenient and transparent unified password management, which saves time and effort, and can be easily operated by commands at the system terminal;

(2) The automatic management and generation of passwords are realized, and the security and uniqueness of passwords are guaranteed.

Description of drawings

Fig. 1 is a schematic diagram of the main control module structure and interaction flow;

Figure 2 is a schematic diagram of the overall architecture.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work are protected by the present invention. scope.

The present invention is based on the MD5 (Message-Digest Algorithm) salt encryption algorithm, and includes five modules: a main control module, a password generation module, a password rule control module, a data storage module, and a data backup and migration module. The main control module also includes a command control module and an operation set module. The command control module receives command line parameters, maps them to the operation set module, and invokes the corresponding function method; at the same time, the main control module integrates the other four modules to perform overall function scheduling. The password generation module generates a unique 128-bit hash value through the MD5 salt encryption algorithm, and also allows users to customize the password. The password rule control module is a "pluggable" script, and the output value of the password generation module is encapsulated twice, and the use of the module can be freely controlled. The data storage module is responsible for storing data locally. The data backup and migration module is responsible for converting database files into pdf format and implementing data backup and transfer through encryption/decryption.

The main functions of each module are as follows:

Main control module: contains command control module and operation set module. The command control module is responsible for receiving the command line parameters of the terminal and mapping them to the operation set module; the operation set module responds to the corresponding functional operations according to the different mapping values transmitted from the command control module, and the main functions include viewing all description values (key ), select the corresponding account (user_name) and password (password) according to the description value, customize the save password, use the MD5 salt encryption algorithm to save the password, modify the description value or account or password, and delete the specified data. When the user selects the corresponding account password according to the description value, the main control module will output the password to the system clipboard while displaying the information in the terminal, and the user can paste it directly.

Password generation module: This module is mainly responsible for outputting strong passwords through the MD5 salt encryption algorithm. The MD5 algorithm will generate a unique 128-bit hash value (16 bytes) for the input string. Even if only one character of the input string changes, the output hash value will be greatly different, with better security. and irreversibility. In order to obtain a password with higher security strength, the "salt" encryption operation is used on the basis of the MD5 algorithm, using letters, numbers, and special symbols as the native strings, shuffling the order, and then randomly selecting characters with a specified range of lengths. A new string is formed, and then encrypted by the MD5 algorithm. This process is the salt encryption operation. This method provides input strings with different lengths, different contents, and different orders for each invocation of the MD5 algorithm, so that the generated hash value has the lowest regularity.

Password rule control module: This module is an optional module, which is mainly responsible for the secondary encapsulation of the output value of the password generation module. The output value of the MD5 salt encryption algorithm is always 16 characters, which are a combination of letters and numbers. The login passwords of different websites will have different regulations, such as length restrictions, or the characters at the beginning are not allowed to be numbers, etc. This module is a "pluggable" module with a built-in control switch, which is turned off by default, that is, it is not restricted by password rules. Enter the corresponding command line parameters to open the password rule control module through the main control module, and perform rule control for the password output by the password generation module. The restriction rules can be freely defined, and the module can be accessed by writing a script, which is highly flexible.

Data storage module: This module is mainly used to store data. When the amount of data is small, you can use a json file to store it locally. It is stored in the format of key-value pairs, the description information is used as the key value, and the user name (user_name) and the password (password) are used as the value value in the form of a set. By default, the password field is a non-null value and must be assigned a value. If the username field is not assigned a value, it defaults to NULL.

Data backup and migration module: This module is responsible for converting json files into pdf files for data backup or migration. The purpose of converting to pdf files is to facilitate viewing on other PCs or mobiles, but when we transmit password files over the network, there is a danger of being intercepted, especially if there are important passwords in the file. At this time, the sender needs to encrypt and transmit the pdf, and the receiver decrypts the pdf file through the password. Even if it is intercepted in the middle, the content of the pdf file will not be exposed.

The overall cooperation steps of the five modules are as follows:

Step 1: input relevant commands in the system terminal, the command control module of the main control module receives the command parameters, identifies, judges and maps to the specific function functions in the operation set module;

Step 2: the operation set module of the main control module responds to the specified function, and connects the data storage module and the password generation module;

Step 3: Before responding to all functions of the operation set module, it will first determine whether there is a json file in the same directory. If it does not exist, create a new one, and if it exists, continue to read and write;

Step 4: For the storage function in the operation set module, if the user does not need a custom password, the password generation module will be called to automatically generate a strong password generated by the MD5 salt encryption algorithm;

Step 5: In Step 1, if the command line parameter does not control the opening of the password rule control module, this step is ignored, otherwise the password control module will perform secondary encapsulation after the output of the password generation module, and then return the encapsulated value to the operation set module;

Step 6: The operation set module will output interactive data to the terminal console, including the description value, user name, and password, and output the password value to the system clipboard for the user to use directly;

Step 7: If data backup and migration are required, execute the script of the data backup and migration module separately, which operates on the json file and outputs the encrypted pdf file.

The above descriptions are only preferred embodiments of the present invention, and are only used to illustrate the technical solutions of the present invention, but not to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims (10)

1. An automatic unified management system for passwords is characterized in that,

the system comprises five modules in total: the system comprises a main control module, a password generation module, a password rule restriction module, a data storage module and a data backup and migration module; wherein

The main control module: processing command input and core functions of the terminal, and controlling overall function scheduling;

a password generation module: generating a strong password by an MD5 salt encryption algorithm;

a cipher rule restriction module: accessing a restriction script, and secondarily packaging the password value output by the password generation module;

the data backup and migration module: migrating data using pdf encryption and decryption technology;

a data storage module: for storing data.

2. The system of claim 1,

the main control module also comprises a command control module and an operation set module;

the command control module is responsible for receiving system terminal command parameters, identifying and distributing commands to be mapped to the operation set module;

the operation set module comprises all function functions and interacts with the password generation module and the data storage module simultaneously.

3. The system of claim 2,

the operation set module responds to the corresponding functional operation according to different mapping values transmitted by the command control module, and the main functions comprise checking all description values (key), taking corresponding account numbers (user _ name) and passwords (password) according to the description values, storing the passwords in a user-defined mode, storing the passwords by using an MD5 salting encryption algorithm, modifying the description values or the account numbers or the passwords and deleting specified data.

4. The system of claim 3,

when the user takes the corresponding account password according to the description value, the main control module outputs the password to the system shear plate while displaying information in the terminal, and the user can directly paste the password for use.

5. The system of claim 2,

the password generation module comprises:

the strong password generated by using the MD5 salt-adding encryption algorithm ensures the security and uniqueness of the password;

the method can be used for connecting a password rule restriction module and enriching password formats.

6. The system of claim 2,

the cipher rule restriction module is an optional module and comprises:

the password generating module is used for generating a password;

the module can be freely controlled to be opened through a switch;

the user can customize different restriction rules by accessing the self-defined script.

7. The system of claim 6,

a control switch is arranged in the password rule restriction module, and the password rule restriction module is in an off state under the default condition, namely the password rule restriction is not carried out; and when the corresponding command line parameters are input, the password rule restriction module can be opened through the main control module, and the rule restriction is performed on the password output by the password generation module.

8. The system of claim 2,

the data backup and migration module comprises:

only the data storage module is operated and is independently controlled by a command without depending on the main module;

converting the json file into a pdf file, so that different PC terminals or mobile terminals can look up the pdf file conveniently;

the security of data migration is enhanced by using encryption and decryption technology for the pdf file.

9. The system of claim 2,

the data storage module is stored locally by using a json file; storing in a key value pair format, wherein the description information is used as a key value, and a user name (user _ name) and a password (password) are used as value values in a set form; and under the default condition, the password field is a non-NULL value and must be assigned, and if the user name field is not assigned, the default value is NULL.

10. An automatic unified management method for passwords is characterized in that,

the working steps are as follows:

the method comprises the following steps: inputting related commands in the system terminal, receiving command parameters by a command control module of the main control module, and identifying, judging and mapping specific function functions in the operation set module;

step two: the operation set module of the main control module performs appointed function response, and is connected with the data storage module and the password generation module;

step three: before all functions of the operation set module respond, judging whether json files exist in the same directory or not, if yes, creating new files, and if yes, continuing reading and writing;

step four: aiming at the storage function in the operation set module, if the user does not need to define the password by self, the password generation module is called to automatically generate a strong password generated by an MD5 salt-adding encryption algorithm;

step five: in the first step, if the command line parameter does not control to open the password rule restriction module, the step is omitted, otherwise, the password restriction module performs secondary packaging after the password generation module outputs, and then returns a packaging value to the operation set module;

step six: the operation set module outputs interactive data to the terminal console, wherein the interactive data comprises description values, user names and passwords, and the password values are output to a system shear plate to be used by a user directly;

step seven: and if data backup and migration are needed, independently executing the script of the data backup and migration module, operating the module aiming at the json file, and outputting the encrypted pdf file.

Images