CN101465733A

CN101465733A - Identity authentication method based on telephone

Info

Publication number: CN101465733A
Application number: CNA2007101917234A
Authority: CN
Inventors: 彭勇
Original assignee: Individual
Current assignee: Individual
Priority date: 2007-12-17
Filing date: 2007-12-17
Publication date: 2009-06-24

Abstract

Disclosed is a telephone-based identity authentication method, which is characterized in that: a user reserves a telephone number or a plurality of telephone numbers; when the user requests authentication, the user dials the telephone number reserved by the user, and then an auth-code is played in voice form; the user needs to acquire the auth-code to pass the identity authentication. The invention supports common telephone terminal and reduces the user application threshold; users have no need to purchase new equipment, so the user application cost is reduced; users have no need to carry extra hardware devices. The telephone-based identity authentication method has simple technical implantation, no technical obstacle and no special privacy algorithm, lower cost and risk.

Description

A kind of identity identifying method based on phone

Technical field

The present invention relates to information security field, particularly relate to a kind of method for authenticating user identity.

Background technology

Authentication generally is meant the process of computer and network system affirmation operator identity, yet digital identity and the physical identity in real world of user in the virtual network world is difficult to corresponding one by one.Computer and computer network have been formed a virtual digital world, and the digital identity that computer can only authenticated user also carries out for user's mandate at the number identity.And our real world of life is a real physical world, and everyone has unique physical identity.How to guarantee with the visitor that digital identity is operated to be exactly the lawful owner of this digital identity, how to guarantee that promptly operator's physical identity is corresponding with digital identity, just become an important safety problem.

The birth of identity identifying technology is exactly in order to address this problem.At present, identity identifying technology has been widely used in fields such as the Internet, financial sector, e-commerce system.

Commonly used in the prior art of information security field have two kinds of identity identifying methods:

A kind of is static identity identifying method, and this method comes the user is carried out authentication by the predefined character string of user, for example the user name, the password that use in daily life of people.

Another kind is the dynamic identity authentication method, and each authentication uses the content of dynamic change to confirm user identity.For example, general mobile phone authenticates on the Internet at present, and the cell-phone number of reserving by the user authenticates exactly, and when needs were confirmed identity, system sent a note that comprises identifying code to user mobile phone, by the identity of identifying code authenticated user.

Cipher type authorization information in the static identity identifying method is a static strings, need propagate into server end by approach such as keyboard input or Network Transmission, monitor very easily by keyboard, means such as network interception are stolen and are revealed, its fail safe is relatively low, and because password is permanently effective, in case be stolen or reveal, the user will be subjected to infringement without redemption.

The dynamic identity authentication method is each to produce interim password, and generally all is can only use once and have ageingly, even monitored and intercept and capture, also is difficult to illegally be used.But generally need to buy special terminal.Adopt SMS to authenticate the communication modes that this people generally use, although need not additionally to buy special-purpose terminal or equipment because the delay that sms technique itself might cause, lose, response speed waits problem more slowly, usually brings inconvenience to the user.

In a word, in the existing identity identifying technology, how to improve the fail safe of authentication, reduce user's use cost, user friendly operation is the technical problem that presses for solution.

Summary of the invention

Technical problem to be solved by this invention provides a kind of identity identifying method based on phone, to improve the fail safe of authentication, prevents that user identity from illegally being used.And do not need additionally to buy or carry special-purpose terminal or equipment.

For addressing the above problem, the invention provides a kind of identity identifying method based on phone, comprising:

A kind of identity identifying method based on phone is characterized in that: the user reserves one or more telephone number; During the customer requirements authentication, dial the telephone number that the user reserves, use identifying code of speech play; The user obtains this identifying code could be by authentication.

Preferably, in the described method, the user can reserve one or more telephone number, comprises landline telephone, mobile phone or Personal Handyphone System.

Preferably, in the described method, this identifying code generally is a numeric string at random.

Preferably, in the described method, this identifying code can be once effective.

Preferably, in the described method, this identifying code can be only effective in a period of time.

Preferably, in the described method, only hold this telephone number, receive identifying code, just can finish authentication.

Compared with prior art, the present invention has the following advantages:

1. the present invention accepts an identifying code by the telephone number that the user reserves, and only obtains this

Identifying code could be by authentication.In this case, though the usersaccount information leakage,

Still can guarantee the safety of authentication, improve the fail safe of identification effectively.

2. the present invention does not need the user additionally to buy or carries special-purpose terminal or establish in actual applications

Be equipped with.

3. the present invention supports communicating terminals commonly used such as landline telephone, mobile phone, Personal Handyphone System, has reduced the user and has made

With threshold.

4. the present invention does not need the user to carry extra hardware device.

For the service provider, technology realizes simple, and no technology barrier does not have special secret algorithm, only needs to build private telephone, and cost and risk is lower.

Description of drawings

Do not have.

Embodiment

For above-mentioned purpose of the present invention, feature and advantage can be become apparent more, below to further detailed explanation of embodiment.

1. the user reserves one or more telephone number;

2. the user uses the username and password login system;

3. system generates an identifying code at random;

4., then allow the selected telephone number that needs clawback of user if the user has reserved a plurality of telephone numbers; If the user has only reserved a telephone number, then use the telephone number of this telephone number as clawback.The user initiates the telephone redialing request;

5. the automatic clawback user's telephone number of system is used this identifying code at random of speech play.If dial unsuccessfully, then repeat to try each 15 seconds at interval three times;

6., advise that then the user repeats to initiate the phone authentication request if the user did not receive the phone of clawback in 3 minutes;

7. the identifying code of user's uppick speech play, manual input system;

8. system is by user's authentication.

More than to a kind of identity identifying method provided by the present invention based on phone, be described in detail, used specific embodiment herein principle of the present invention and execution mode are set forth, the explanation of above examples of implementation just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that all can change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.

Claims

A kind of identity identifying method based on phone is characterized in that:

1. the user reserves one or more telephone number.

2. when customer requirements authenticates, dial the telephone number that the user reserves, use identifying code of speech play.

The user obtain this identifying code could be by authentication.