摘要
文章针对目前浏览器内置口令管理器和一些第三方口令管理器,将用户口令密文数据存储在本地或者单个云上带来数据泄露的安全性问题,设计了一种基于多云的浏览器口令管理器。文章提出了将用户的口令密文信息通过秘密分享算法拆分后分散存储在多个云提供商处的方案。该方案能提高攻击者获取用户口令的难度,同时使用基于多云的存储技术也能提高口令管理器服务端的可用性。
The current browser built-in password manager and some third-party password manager store user＇s ciphertext data locally or bring in a single cloud, which may leak user＇s passwords. To address such problem, in this paper we proposed a browser built-in Password Manager based on multi-cloud storage. We disperse user＇s ciphertext information and then store them across multiple cloud storage provider. The proposal can improve the difficulty of gain ciphertext for an attacker. In this way we can improve the security of user information in plain text, in addition multi cloud storage technology can also improve the usability of Password Manager service.
出处
《信息网络安全》
2015年第9期124-128,共5页
Netinfo Security
关键词
口令管理器
多云存储
浏览器插件
password manager
multi cloud storage
browser plug-in
