System and method for password validation

摘要

A method and system for password validation. A user identifier (ID), a user password, and a sequence of user values are received from a user. The user password consists of plain text characters. The sequence of user values consists of at least one non plain-text parameter associated with each plain-text character of the user password. The user password is appended to the sequence of user values to form a user password string. The user password string is hashed to form a user digest. It is determined whether the user digest is equal to a reference digest. The reference digest is configured in accordance with password validation rules. The password validation rules specify an expected value for the at least one non plain-text parameter associated with each plain-text character of the user password.