METHOD AND SYSTEM FOR SECURE PASSWORD MIGRATION BETWEEN AUTHENTICATION SERVERS

원문 (중국어)

A method and a system for securely performing a password migration between authentication servers where the password is end-to-end encrypted and hashed are provided. The method includes: after the user has received first and second public keys from the first and second servers, and after the user has stored, in a memory, first and second encrypted versions of the password that are respectively encrypted by using the first and second public keys, transmitting a request to perform an authentication with the first server based on the first encrypted version of the password; after a validated token has been issued by the first server, receiving a request to update the password in the second server based on the token, and transmitting the request to the second server, together with the second encrypted version of the password and a request to migrate the user to the second server.