Research And Implementation Of IPFS-based Password Management Scheme

In the present day,people's productive activities are more and more closely integrated with the Internet.More and more application services are now moving from offline to online.In the past,people only needed to manage passwords for bank accounts,to now they need to manage various complicated passwords for web application accounts.With the increase of account data,user privacy data security issues are frequent,moreover,it brings a great challenge to the user's data management ability.How to efficiently and securely manage the ever-increasing account data in life has become a pain point that everyone in society has to face.Therefore,it is urgent to design an efficient and secure password management solution.In terms of traditional password management solutions,centralized server-hosted data is more likely to be the target of hackers' attacks.User privacy data hosted by a third party centrally also exists to be monitored and stolen by unscrupulous data managers,resulting in leakage of user privacy data.To solve the above problems,this paper proposes an IPFS-based password management solution.For this solution,this paper carries out the following work.(1)The account passwords encrypted by AES algorithm are stored using the decentralized,consistent,peer-to-peer hypermedia distributed deployment storage features of IPFS.It also uses smart contract technology to manage the data,realizing the separation of data storage and data management,effectively avoiding problems such as internal theft and external attacks on passwords stored in the centralized database.Improved the security of password management(2)To address the pain points of password management,a requirement analysis was first conducted and the business model of the application was explored.Then the solution is designed.The solution is divided into user login and registration module,password management module,password strength detection module,and password periodic update module by module.The solution implements a password strength detection algorithm,a high-strength password generation algorithm,and an integrated password leak detection function to improve the convenience of managing account passwords for users.Finally,functional tests and security analysis of the solution were conducted to verify the security and efficiency of the solution.This scheme is the first time to apply IPFS in the field of password management to solve the risks of single point of failure and data leakage that are prone to occur in the data centered management of user privacy.The proposed scheme has good application value and practical significance to the research in the field of password management.