個人密碼管理系統

Abstract

有爆炸性成長的網際網路提供了使用者為數眾多的服務項目，舉凡綜合性質的入口網站、打著web 2.0口號的Blog、相簿、個人化入口網站、維基百科，甚至網路購物、網路ATM、網路報稅…等等，性質五花八門；然而網路的匿名性質造成使用者必須針對不同的網路服務來註冊個別的使用者帳戶。 對於眾多網路服務的註冊需求，多數的使用者傾向使用簡單的帳號/密碼以方便記憶，不良的使用習慣使得大部分的帳號/密碼都擁有類似的形式，若是遭受網路釣魚等攻擊則會承受很大的損失；而某些例如由系統管理者所指定有著特殊形式的帳號/密碼，或是使用者鮮少登入的網路服務，又常遭使用者遺忘。對於數量不斷增長的使用者密碼的管理是一個重要的議題。 本論文提出一個能夠安全管理使用者帳戶資訊的個人密碼管理系統，利用加密演算法的混合使用來達到保護資料的高安全性；加密演算法與金鑰的使用藉由一份Key-File來做管理，並可將其匯出與存有帳戶資訊的Data-File分別保存於不同地方增加系統的安全性。 個人密碼管理系統建構在Java平台上，利用其跨平台的特性來達到Portable的需求；並設計直觀且簡易操作的GUI介面增加系統的親和力，User Friendly亦是本系統強調的重點。

The rapid expansion of the Internet has provided user with a divers range of services. For example, a comprehensive portal、the websites which hits “web 2.0” slogans like blog、album、personalized start page、Wikipedia; Even the online shopping、web ATM、eTAX…and so on. However, the anonymous nature of Internet makes people need to registered users of individual accounts for different network service. To multitudinous Internet service registration demand, using simple Account/Password to facilitate memory is the majority tendency. The poor user habit makes most of the Account/Password pair have similar forms, it will result in the losses if encounter the phishing attacks. Some Account/Password pair which not frequently to use or have some specific form are forgotten easily. It's an important issue for the growing number of users password management. This paper presents a secure user account information manager called Personal Password Management, mixed using the encryption algorithms achieves data high security. The using of encryption algorithms and secret keys is managed by a Key-File, which can exports and stores in different places with the account information Data-File to increase the system's security. Personal Password Management System developed on Java platform, use its cross-platform characteristic to achieve the demand for Portable. It design an intuitive and easy to use GUI interface to increase system accessibility. User Friendly is the focus in the system.