Password protection method and apparatus, and medium

Patent metadata

Field	Value
Publication number	US-12223032-B2
Application number	US-202218565035-A
Country	US
Kind code	B2
Filing date	Apr 26, 2022
Priority date	Oct 26, 2021
Publication date	Feb 11, 2025
Grant date	Feb 11, 2025

Abstract

The present application discloses a password protection method. Aiming at the current problem that, when a plurality of passwords are used, the plurality of passwords may be invalidated after one password is compromised, a password protection method is provided, which comprises: after password authentication is successful, determining, according to a password currently passing the authentication, a specified bit of password invalidation enable identifiers stored in a storage medium, wherein there is only one specified bit because there is only one authenticated password; setting the specified bit to be in an allowed state and other bits to be in a non-allowed state, wherein the password invalidation enable identifiers are in one-to-one correspondence with passwords according to bits, and only when one bit of the password invalidation enable identifiers is in the allowed state, an invalidation operation on the passwords is allowed; determining whether a password invalidation request is received; and if a password invalidation request is received, performing invalidation operation on the password corresponding to the specified bit.

First claim

The invention claimed is:

1. A password protection method, applied to a password protection device comprising a storage medium, wherein the method comprises:
after a password authentication is passed, according to a password that is currently authenticated, determining a specified bit of an enabling identifier of password invalidation; wherein the enabling identifier of password invalidation is stored in the storage medium, and is configured for representing whether an invalidation operation is permitted to be performed to the password;
setting the specified bit of the enabling identifier of password invalidation to be in a permitting state, and setting other bits to be in a non-permitting state, wherein the enabling identifier of password invalidation is in one-to-one correspondence with each password according to bits, and merely when one of the bits of the enabling identifier of password invalidation is in the permitting state, the invalidation operation is permitted to be performed to the password; and
after an invalidation request of the password is received, performing the invalidation operation to the password corresponding to the specified bit.

2. The password protection method according to claim 1 , wherein an available password that is capable of passing the password authentication is unique in one time of the password authentication, the available password is determined by a password state identifier, and states of different bits of the password state identifier indicate whether different passwords are invalid or not, respectively.

3. The password protection method according to claim 2 , wherein the password state identifier is a string of binary numbers, wherein when the second bit is 1, that indicates that the second password is invalidated, when the third bit is 0, that indicates that the third password is valid.

4. The password protection method according to claim 2 , wherein the password state identifier is saved in the internal memory of an apparatus or an external storage medium.

5. The password protection method according to claim 2 , wherein the password state identifier is saved in a one-time programmable read-only memory.

6. The password protection method according to claim 1 , wherein the method further comprises: when all passwords are invalid, entering a locking state, to forbid an external input from operating.

7. The password protection method according to claim 6 , wherein the method further comprises: when entering the locking state, playing a prompt message.

8. The password protection method according to claim 6 , wherein the method further comprises:
after the password is reconfigured and a one-time programmable read-only memory storing the corresponding password state identifier is replaced, releasing the locking state.

9. The password protection method according to claim 8 , wherein in a noisy factory environment, the prompt message is provided in the form of an optical signal by adopting an indicator lamp.

10. The password protection method according to claim 1 , wherein the password is an encryption method for an apparatus, and it is, in terms of the effect, equivalent to a public key and a private key based on an encryption algorithm.

11. The password protection method according to claim 10 , wherein the encryption algorithm comprises an RSA algorithm.

12. The password protection method according to claim 1 , wherein after every time that the password authentication is passed, when an operator considers that the password is still safe, it is not required to perform the password invalidation operation; after a next password authentication, the operator decides whether it is required to perform the invalidation operation to the password.

13. The password protection method according to claim 1 , wherein a quantity of passwords that pass the authentication in one time of the password authentication comprises one password or multiple passwords.

14. The password protection method according to claim 1 , wherein the password that is uncapable to pass the authentication comprises a password that is invalidated and a password that is not invalidated but is unavailable in a current time of authentication.

15. The password protection method according to claim 1 , wherein the enabling identifier of password invalidation is a string of binary numbers, wherein when the second bit is 1, it is permitted to modify the second bit of the password state identifier.

16. The password protection method according to claim 1 , wherein passwords are sequentially arranged, and, according to the sequence of the passwords that are not invalidated, determining a password to be the available password of current time of the password authentication.

17. A password protection device, wherein the device comprises a memory and one or more processors, the memory stores a computer-readable instruction, and when the computer-readable instruction is executed by the one or more processors, making the one or more processors implement the password protection method according to claim 1 .

18. The password protection device according to claim 17 , wherein an available password that is capable of passing the password authentication is unique in one time of the password authentication, the available password is determined by a password state identifier, and states of different bits of the password state identifier indicate whether different passwords are invalid or not, respectively.

19. One or more non-transitory computer-readable storage mediums storing a computer-readable instruction, wherein when the computer-readable instruction is executed by one or more processors, making the one or more processors implement the operations comprising:
after a password authentication is passed, according to a password that is currently authenticated, determining a specified bit of an enabling identifier of password invalidation; wherein the enabling identifier of password invalidation is stored in the storage medium, and is configured for representing whether an invalidation operation is permitted to be performed to the password;
setting the specified bit of the enabling identifier of password invalidation to be in a permitting state, and setting other bits to be in a non-permitting state, wherein the enabling identifier of password invalidation is in one-to-one correspondence with each password according to bits, and merely when one of the bits of the enabling identifier of password invalidation is in the permitting state, the invalidation operation is permitted to be performed to the password; and
after an invalidation request of the password is received, performing the invalidation operation to the password corresponding to the specified bit.

Assignees

• Suzhou Metabrain Intelligent Technology Co Ltd

Inventors

• Li Dengwei
• Li Rengang

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/46 Primary

  by designing passwords or checking the strength of passwords · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title