储粮信息系统弱密码增强多重散列保护方法研究  

Enhancement Multiple-hashing Protection Method on Weak Password in Grain Storage Information System

作　　者：阎磊[1,2] 罗桃英 段刚 白春启 李亮[4] 尹正富 YAN Lei;LUO Tao-ying;DUAN Gang;BAI Chun-qi;LI Liang;YIN Zheng-fu(School of Food and Strategic Reserves,Henan University of Technology,Zhengzhou,Henan 450001,China;National Engineering Research Center of Grain Storage and Logistics,Zhengzhou,Henan 450001,China;Henan Yuxin Digital Intelligence Technology Co.,Ltd.,Zhengzhou,Henan 450001,China;Shaanxi Xirui(Group)Co.,Ltd.,Xi’an,Shaanxi 710003,China;China Grain Reserves Group Ltd.,Company,Beijing 100039,China)

机构地区：[1]河南工业大学粮食和物资储备学院,河南郑州450001 [2]粮食储运国家工程研究中心,河南郑州450001 [3]河南豫信数智科技有限公司,河南郑州450001 [4]陕西西瑞(集团)有限责任公司,陕西西安710003 [5]中国储备粮管理集团有限公司,北京100039

出　　处：《粮油食品科技》2024年第5期26-34,共9页Science and Technology of Cereals,Oils and Foods

基　　金：陕西省重点研发计划项目(2020ZDLNY05-09);国家粮食和物资储备局标准制订项目(质检办便函[2019]25号)。

摘　　要：使用弱密码是计算机信息系统安全的重要漏洞,在粮食储藏信息化应用中亦是如此。单纯的哈希散列加密算法对弱密码存在明显局限性。结合粮库软件系统应用实际,本文提出以哈希散列算法为基础,混入盐值和引入高进制映射等进行增强处理,多次复用散列运算的弱密码保护方法。验证分析表明,方法增加了弱密码的加密值强度,阻断了字典攻击或彩虹表攻击,实现了对弱密码传递和存储的有效保护,且复杂度较低,程序实现难度低,运算耗时均值约2.5ms,对用户无感。方法用于粮食储藏信息化建设管理,可提供良好的安全保障。The use of weak passwords is a significant vulnerability in computer information system security,and this issue is also present in the digital applications of grain storage information systems.Simple hashing algorithms have obvious limitations when dealing with weak passwords.Based on the actual application of grain storage software systems,this paper proposed a method to enhance weak password protection by using a hashing algorithm as the foundation,combined with the introduction of salt values and high-order reflections for strengthening,along with multiple rehashing operations.Validation and analysis showed that this method increased the hashing strength of weak passwords,and effectively prevented dictionary attacks or rainbow table attacks,which could achieve the effective protection for the transmission and storage of weak passwords.Additionally,it had low complexity,and was easy to implement.It also had an average computational latency of approximately 2.5 ms,which was imperceptible to users.This method is suitable for the construction and management of digital grain storage information systems,providing robust security protection.

关 键 词：粮食储藏 储粮 智慧粮库 弱密码 哈希散列 

分 类 号：TS205[轻工技术与工程—食品科学]