摘要
为解决现有技术中预先存储的账号和密码被泄露后所造成的安全隐患问题,文章介绍一种账户分配方法,该方法的流程包括:操作员在操作设备之前发起操作请求;管理设备根据该操作请求,为其生成一个临时账户和密码;由于该密码存在有效期,因而在操作员对设备执行完申请的操作后,之前生成的临时账户和密码将会被禁止继续登录设备。通过申请临时账号的方式,避免了由于密码泄露而造成的安全事件,并且有效地降低了维护的成本。
In order to solve the potential safety problems caused by the leakage of prestored account and password, this paper introduces a new kind of account assignment method. First, operators initiate operation request before operating the equipment, then the management equipment generates a temporary account and password according to the operation request. Because the password has an expiry date, the temporary account and password will be forbidden after the operator finish the operation of the equipment. By applying for a temporary account, we could avoid the security incidents caused by passwords leakage, and effectively reduce the cost of maintenance.
出处
《信息通信技术》
2015年第1期72-76,共5页
Information and communications Technologies
关键词
操作审计
账户分配
临时账户
密码有效期
Operation Audit
Account Assignment
Temporary Account
Password's Period of Validity