基于云服务器应用的密码管理方案设计  

Design of password management scheme based on cloud server application

作　　者：陈金木[1] 陈少英 黄朝阳[1] CHEN Jinmu;CHEN Shaoying;HUANG Chaoyang(School of Information Engineering,Xiamen Ocean Vocational College,Xiamen 361102,China)

机构地区：[1]厦门海洋职业技术学院信息工程学院,福建厦门361102

出　　处：《河南工程学院学报（自然科学版）》2023年第2期54-57,共4页Journal of Henan University of Engineering：Natural Science Edition

基　　金：福建省中青年教师教育科研项目(JAT191316);2022年度校级教科研项目(KYZY202201)。

摘　　要：为保证数据在网络传输过程中的信息安全,提出了一种在云服务器上存储密码加密信息的密码管理方案,将加密密钥拆分为用户共享份额和云服务器共享份额,其中用户共享份额仅基于选定的密码短语,而云服务器的共享份额由用户共享份额和加密密钥生成,通过在客户端执行加密和解密来实现数据的安全性,并引入迭代哈希操作来保护分割密钥方案免受字典式攻击。分析表明,所提出的基于云服务器的密码管理方案与其他密码管理方案相比,具备更优的功能性与安全性。In order to ensure the information security of data in the process of network transmission,a password management scheme is proposed,which stores password encrypted information on the cloud server.The encryption key is divided into user share and cloud server share,in which the user share is only based on the selected passphrase,while the cloud server share is generated by the user share and encryption key,data security is achieved by performing encryption and decryption on the client,and the split key scheme is protected from dictionary attacks by introducing iterative Hash operations.The analysis shows that the proposed password management scheme based on cloud server has better functionality and security than other password management schemes.

关 键 词：密码管理 密码加密 密钥分割 迭代哈希操作 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]