CN102231746A - Method for validating identification information and terminal thereof - Google Patents

Abstract

Embodiments of the present invention provide a method for verifying identification information and a terminal. The method for verifying identification information includes: the client on the terminal obtains the identification information that needs to be verified input by the user of the terminal, and the identification information is used to identify a terminal; the client generates Or obtain the verification code used for verification from the server; the client sends verification information to the terminal identified by the identification information through the terminal, and the verification information contains the verification code; when the client receives the verification information through the terminal, it Or verify whether the verification code in the verification information obtained from the server is legal, and if it is legal, the verification of the identification information is successful. The embodiment of the present invention can avoid the problem of the operator assigning the application identifier to the application server and configuring the application identifier in the operator's information gateway device, effectively reducing the dependence of the client corresponding to the application program on the operator, and at the same time reducing the The operator's configuration and maintenance costs are reduced.

Description

Method and terminal for verifying identification information

technical field

Embodiments of the present invention relate to communication technologies, and in particular to a method and terminal for verifying identification information.

Background technique

With the development of communication technology, more and more application functions are integrated into the terminal, such as Fetion and electronic payment. The application programs corresponding to these application functions need to use the identification information of the terminal (for example: telephone number, email address, etc.) as the basis for operation. Since the client corresponding to the application program cannot directly obtain the identification information of the terminal from the terminal, the user of the terminal needs to input the identification information. After the client obtains the identification information input by the user, it also verifies the identification information through the application server. For example: the application server generates a verification code according to the above identification information, and then calls the interface provided by the operator for sending short messages, and sends a short message containing the verification code to the terminal through the ShortMessage Service Center (SMSC). The client sends the verification code entered by the user according to the short message to the application server for verification. After passing the verification, the client can provide the terminal with the service of the application program and continue the corresponding business process.

However, in the above-mentioned prior art, the operator needs to provide the application server with an interface for sending short messages, so that the application server can be connected with the operator's SMS gateway device; in addition, the operator also needs to assign an application identifier to the application server , and the application identifier needs to be configured in the short message gateway device of the operator, so that the dependence on the operator is enhanced, thereby increasing the configuration and maintenance costs of the operator.

Contents of the invention

Embodiments of the present invention provide a method and a terminal for verifying identification information, so as to reduce the dependence of a client corresponding to an application program on an operator, and reduce the configuration and maintenance costs of the operator.

An embodiment of the present invention provides a method for verifying identification information, including:

The client on the terminal acquires identification information input by a user of the terminal and needs to be verified, where the identification information is used to identify a terminal;

The client generates or obtains a verification code for verification from the server;

The client sends verification information to the terminal identified by the identification information through the terminal, and the verification information includes the verification code;

When the client receives the verification information through the terminal, it verifies whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server, and if it is legal, then The identification information is verified successfully.

The embodiment of the present invention also provides a terminal, including:

The client is used to obtain the identification information input by the user of the terminal that needs to be verified, the identification information is used to identify a terminal, generate or obtain a verification code for verification from the server, and send the information to the said terminal through the information sending function system The terminal identified by the identification information sends verification information, the verification information includes the verification code; when receiving the verification information, verify the verification information in the verification information according to the verification code generated or obtained from the server Whether the verification code is legal, and if it is legal, the verification of the identification information is successful;

The information sending function system is configured to send verification information to the terminal identified by the identification information according to the instruction of the client.

It can be seen from the above technical solution that after the client on the terminal in the embodiment of the present invention obtains the identification information input by the user of the terminal that needs to be verified, it generates or obtains a verification code for verification from the server, and sends the verification code identified by the identification information to the terminal through the terminal. The terminal sends verification information. When the client receives the verification information through the terminal, it verifies whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server. If it is legal, the verification of the identification information is successful. The application server sends verification information to the terminal through the interface provided by the operator to the application server, which can avoid the problem of the operator assigning the application identification to the application server and configuring the application identification in the operator's information gateway device, effectively reducing the application correspondence. The client's dependence on the operator also reduces the operator's configuration and maintenance costs.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

FIG. 1 is a schematic flowchart of a method for verifying identification information provided by an embodiment of the present invention;

FIG. 2 is a schematic flowchart of a method for verifying identification information provided by another embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a terminal provided by another embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a terminal provided by another embodiment of the present invention;

Fig. 5 is a schematic structural diagram of a terminal provided by another embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

It should be noted that the terminals involved in the embodiments of the present invention may include, but are not limited to, mobile phones, personal digital assistants (Personal Digital Assistant, PDA for short), wireless handheld devices, wireless netbooks, personal computers, portable computers, MP3 players and MP4 player etc.

In a specific implementation, there may be various applications provided to the user on the terminal, some of which provide services for the terminal user, and the application will start to work only after the current user provides correct terminal identification information for successful registration. Therefore, a client for verifying identification information for each application is set on the terminal. The client can be set on each application separately, or can be integrated to provide a unified verification function for each application, which will not be described here.

Fig. 1 is a schematic flowchart of a method for verifying identification information provided by an embodiment of the present invention. As shown in Fig. 1, the method for verifying identification information in this embodiment may include:

101. A client on a terminal acquires identification information that needs to be verified and is input by a user of the terminal, where the identification information is used to identify a terminal.

Wherein, the above identification information may be any identification that can identify the terminal, including but not limited to Mobile Subscriber Integrated Service Digital Network Number (MSISDN for short), which is a telephone number, and the session initiation protocol (SIP) bound to the terminal. Session Initiation Protocol (SIP for short) address, or Internet application registration identifier, for example: email address (email address), etc.

102. The client generates or acquires a verification code for verification from the server.

Optionally, the client may obtain verification information from itself, and the verification information is generated by the above-mentioned client according to the above-mentioned identification information.

Optionally, the client may also obtain verification information from the application server, where the verification information is generated by the application server according to the identification information sent by the client.

103. The client sends verification information to the terminal identified by the identification information through the terminal, where the verification information includes the verification code.

The above-mentioned transmission channel of the verification message can use any P2P communication method, including but not limited to short message (SMS), multimedia message (MMS), instant message, email (Email) or Internet application private information, etc. Optionally, the above sending process may be a process that is not noticed by the user, and the client may call the verification information as silent information at this time.

Specifically, the above-mentioned client may call the information sending function system of the above-mentioned terminal to send the above-mentioned verification information. For example, the client may call the information sending function system of the terminal, and send the obtained verification information to the above terminal through the called information sending function system according to the identification information. That is to say, the client can communicate with the information gateway equipment of the operator through the existing terminal, such as: Short Message Service Center (Short Message Service Center, SMSC for short), Multimedia Message Service Center (Multimedia Message Service Center, MMSC for short), business access gateway The interface between them sends verification information. For example, the client may specifically send the verification information through short message, multimedia message, instant message, electronic mail (Email) or Internet application private information.

The verification information has a specified format that can be recognized by the client. Because authentication information and ordinary messages use the same transmission channel, the specified format is to distinguish it from ordinary messages. For example: "<application name>authentication: <verification code>", where <application name> is the name of the application itself; <verification code> is the verification code generated by the application server or client; "<" and ">" are Part of the message content, and the verification code needs to be encrypted. Such as "MyAPPauthentication: <123456789abcdefg>". Certainly, the designated format may also be in other forms, for example, it may contain a special information segment to indicate that the information is verification information. In order to facilitate the client to monitor the information received by the terminal in the future, it can recognize that the information is verification information according to the specified format.

104. If the above-mentioned client receives the above-mentioned verification information through the above-mentioned terminal, verify whether the verification code in the above-mentioned verification information is legal according to the verification code generated by the above-mentioned client or obtained from the above-mentioned server, and if it is legal, the verification of the above-mentioned identification information is successful .

Optionally, before step 104, the client may monitor the information receiving function system of the above-mentioned terminal, and if information conforming to the above-mentioned specified format is detected, then the information is used as the above-mentioned verification information for verification processing in step 104.

Further, after the information receiving function system receives the information, it can store the information in the memory of the above-mentioned terminal. Optionally, the client may further delete the verification information from the storage of the terminal, so that the terminal does not perceive the existence of the information, and the information does not occupy storage resources of the terminal.

Optionally, in step 104, if the client verifies that the verification code in the verification information is consistent with the verification code generated by the client or obtained from the server, then the verification code in the verification information is legal.

Optionally, in step 104, if the client verifies that the verification code in the verification information and the verification code generated by the client or obtained from the server meet the correlation requirement, then the verification code in the verification information is legal. Among them, satisfying the association requirement can be understood as a binding relationship between the verification code in the verification information and the verification code generated by the client or obtained from the server, for example: the verification code generated by the client or obtained from the server is the The user name of the user in an application, and the verification code in the verification information may be identification information of the terminal. In this embodiment, preferably, the information storage system on the terminal maintains the above association relationship: that is, whether there is a binding relationship between the identification information of the terminal and the verification code. In addition, the above association relationship may also be maintained by the server.

Optionally, if the above-mentioned client does not receive the above-mentioned verification information through the above-mentioned terminal within the set time, the verification of the above-mentioned identification information fails; or, during the above-mentioned verification process, it is found that the verification code in the above-mentioned verification information is Information verification failed.

In this way, only after the client in 104 passes the verification of the verification code in the above-mentioned verification information, the application on the terminal can provide the user with the business of the application program and continue the corresponding business process, such as: registration process, query process Or various entertainment applications, etc.

In this embodiment, after the client on the terminal obtains the identification information input by the user of the terminal that needs to be verified, it generates or obtains a verification code for verification from the server, and sends verification information to the terminal identified by the identification information through the terminal. When the client receives the verification information through the terminal, it will verify whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server. If it is legal, the verification of the identification information is successful. The interface provided by the server sends verification information to the terminal, which can avoid the problem of the operator assigning the application identifier to the application server and configuring the application identifier in the operator's information gateway device, effectively reducing the communication service system in the process of the terminal providing application services. Simplification and conservation of communication system resources.

In order to make the method provided by the embodiment of the present invention more clear, the identification information of the terminal is the MSISDN (namely the phone number) of the mobile phone and the verification information is the short message as an example. 2 is a schematic flowchart of a method for verifying identification information provided by another embodiment of the present invention. In this embodiment, a user registers through a client in a terminal, and the input terminal identification information is MSISDN (ie, a telephone number). As shown in Figure 2, the method for verifying identification information in this embodiment may include:

201. The client obtains the MSISDN of the terminal input by the user and the initially set password;

Specifically, the user opens the registration page of the client, enters the MSISDN and a password (Password), and clicks a registration button. The client can now prompt the user that the MSISDN is being verified.

202. The client sends a request message to the application server to request the application server to obtain a verification code, and the request message includes the MSISDN;

203. The application server generates a verification code according to a preset generation rule and MSISDN;

It is understandable that the verification code generated by the application server needs to be globally unique. For example: the verification code can contain at least one of English letters, numbers, and underscores, and cannot contain special characters, and the maximum length cannot exceed 100 bytes to ensure that it can be sent through a text message.

204. The application server sends a verification code to the client;

Optionally, steps 202 to 204 may not be executed, and the client generates a verification code by itself.

205. The client sends a short message to the terminal identified by the MSISDN through the SMSC through the terminal's interface for sending short messages, and the short message includes a verification code;

Specifically, the format of the short message can be specified, so as to distinguish it from general short messages. For example, the verification ID can be included, and the format of the SMS message is "verification ID: <verification code>", where the format of the verification ID can be "<application name>authentication". <Application Name> is the name of the application program corresponding to the client, which may not exceed 10 bytes; <Verification Code> is the verification code generated by the application server or the client. It should be noted that: "<" and ">" are part of the SMS content, and the verification code can be further encrypted, for example: "<MyAPP>authentication: <123456789abcdefg>".

206. The client monitors the short message received by the terminal, and if the short message received by the terminal is in the above-mentioned specified format (for example, includes a verification mark), the client parses the short message to obtain the verification code contained in the message;

Specifically, if the client does not detect a short message containing the verification identifier received by the terminal within a preset time after sending a short message to the terminal identified by the MSISDN through the terminal's interface for sending short messages, it prompts the user to fail to register.

207. The client compares the verification code obtained through 205-206 with the verification code obtained from the application server through 204 or generated by itself. If they are consistent, the verification passes and 208 is executed. Otherwise, the verification fails and the user is prompted to fail to register. end of process;

208. After the verification is successful, the client sends a registration request message to the application server, and the registration request message includes the MSISDN and the password;

209. The application server registers the terminal, and returns successful registration information to the terminal.

In this embodiment, the client sends the obtained verification code to the terminal through the interface for sending short messages of the terminal where the client is located, without the need for the application server to send the verification code to the terminal through the interface provided by the operator to the application server, which can avoid operating Providers assign application identifiers to application servers, and configure the application identifiers in the operator's information gateway equipment, which effectively reduces the dependence of the application client on the operator, and also reduces the operator's configuration and maintenance. cost.

It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. Because of the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

FIG. 3 is a schematic structural diagram of a terminal provided by another embodiment of the present invention. As shown in FIG. 3 , the terminal in this embodiment may include a client 31 and an information sending function system 32 . Wherein, the client 31 is used to obtain the identification information input by the user of the above-mentioned terminal that needs to be verified. The above-mentioned identification information is used to identify a terminal, generate or obtain a verification code for verification from the server, and send the verification code to the above-mentioned terminal through the information sending function system 32. The terminal identified by the identification information sends verification information, the verification information includes the verification code, and when the verification information is received, verify whether the verification code in the verification information is legal according to the verification code generated or obtained from the server, If it is valid, the above identification information is successfully verified; the information sending function system 32 is configured to send the verification information to the terminal identified by the above identification information acquired by the client 31 .

Wherein, the above-mentioned identification information may include but not limited to MSISDN (phone number), an Internet application registration identifier bound to the terminal, or a SIP address bound to the terminal, for example, an email address (email address) and the like.

All the functions of the client in the embodiment corresponding to FIG. 1 and FIG. 2 above can be implemented by the client 31 in the terminal provided by this embodiment.

Further, if the client 31 in this embodiment does not receive the verification information within a set time, the verification of the identification information fails.

Specifically, the client 31 in this embodiment may specifically call the information sending function system 32 to send the above-mentioned verification information, and the above-mentioned verification information has a specified format that the above-mentioned client can recognize.

Further, as shown in FIG. 4 , the terminal in this embodiment may further include an information receiving function system 41 for receiving information sent to the terminal.

Furthermore, the client 31 in this embodiment can further monitor the information receiving function system 41, and if information conforming to the above-mentioned specified format is detected, use the information as the above-mentioned verification information to perform the above-mentioned verification processing.

Further, as shown in FIG. 5 , the terminal provided in this embodiment may further include a memory 51 for storing the above verification information received by the information receiving function system 41; Delete the above verification information in .

Specifically, the client 31 in this embodiment verifies whether the verification code in the above-mentioned verification information is legal according to the verification code generated or obtained from the above-mentioned server. or the verification code obtained from the above-mentioned server is consistent, the verification code in the above-mentioned verification information is legal; requirements, the verification code in the above verification information is valid.

In this embodiment, after the client obtains the identification information that needs to be verified input by the user of the terminal, it generates or obtains a verification code for verification from the server, and sends verification information to the terminal identified by the identification information through the information sending function system, if When the client receives the verification information through the information receiving function system, it will verify whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server. The interface provided by the application server sends verification information to the terminal, which can avoid the problem of the operator assigning the application identification to the application server and configuring the application identification in the operator's information gateway device, effectively reducing the client's corresponding application program. The dependence on the operator is reduced, and the configuration and maintenance costs of the operator are also reduced.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware, or in the form of hardware plus software functional units.

The above-mentioned integrated units implemented in the form of software functional units may be stored in a computer-readable storage medium. The above-mentioned software functional units are stored in a storage medium, and include several instructions to enable a computer device (which may be a personal computer, server, or network device, etc.) to execute some steps of the methods described in various embodiments of the present invention. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), magnetic disk or optical disc, etc., which can store program codes. medium.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (15)

1. A method for verifying identification information, comprising: The client on the terminal acquires identification information input by a user of the terminal and needs to be verified, where the identification information is used to identify a terminal; The client generates or obtains a verification code for verification from the server; The client sends verification information to the terminal identified by the identification information through the terminal, and the verification information includes the verification code; When the client receives the verification information through the terminal, it verifies whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server, and if it is legal, then The identification information is verified successfully. 2. The method according to claim 1, further comprising: If the client does not receive the verification information through the terminal within a set time, the verification of the identification information fails; or, In the step of verifying, by the client, whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server, if it is not legal, the verification of the identification information fails. 3. The method according to claim 1, wherein the client sends verification information to the terminal identified by the identification information through the terminal, comprising: The client invokes the information sending function system of the terminal to send the verification information, and the verification information has a specified format that the client can recognize. 4. The method according to claim 1, wherein the method further comprises: The client monitors the information receiving function system of the terminal, and if information conforming to the specified format is detected, the information is used as the verification information to perform the verification process. 5. The method according to claim 4, wherein the client monitors the information receiving function system of the terminal, and if information conforming to the specified format is detected, the information is used as the verification information for verification. After the verification process, it also includes: The client deletes the verification information from the memory of the terminal. 6. The method according to claim 1, wherein the client verifies whether the verification code in the verification information is legal according to the verification code generated by the client or obtained from the server, comprising: If the client verifies that the verification code in the verification information is consistent with the verification code generated by the client or obtained from the server, the verification code in the verification information is legal; or, If the client verifies that the verification code in the verification information and the verification code generated by the client or obtained from the server meet the association requirement, then the verification code in the verification information is legal. 7. The method according to any one of claims 1-6, wherein the identification information is the MSISDN of the terminal, an Internet application registration identifier bound to the terminal, or a SIP address bound to the terminal. 8. The method according to any one of claims 1-6, wherein the verification information is silent information. 9. The method according to any one of claims 1-6, wherein the verification information is a short message, a multimedia message, an instant message, an email, or an Internet application private information. 10. A terminal, characterized in that, comprising: The client is used to obtain the identification information input by the user of the terminal that needs to be verified, the identification information is used to identify a terminal, generate or obtain a verification code for verification from the server, and send the information to the said terminal through the information sending function system The terminal identified by the identification information sends verification information, the verification information includes the verification code; when receiving the verification information, verify the verification information in the verification information according to the verification code generated or obtained from the server Whether the verification code is legal, and if it is legal, the verification of the identification information is successful; The information sending function system is configured to send verification information to the terminal identified by the identification information according to the instruction of the client. 11. The terminal according to claim 10, wherein the client is further used to If the verification information is not received within the set time, the verification of the identification information fails. 12. The terminal according to claim 10, wherein the verification information has a specified format that can be recognized by the client. 13. The terminal according to claim 12, further comprising an information receiving function system for receiving information sent to the terminal; The client terminal is also used for monitoring the information receiving function system, and if information conforming to the specified format is detected, the information is used as the verification information to perform the verification process. 14. The terminal according to claim 10, characterized in that, The terminal also includes a memory for storing the verification information; The client is further configured to delete the verification information from the memory. 15. The terminal according to any one of claims 10-14, wherein the client is specifically used for When it is verified that the verification code in the verification information is consistent with the verification code generated by the client or obtained from the server, the verification code in the verification information is legal; or, When it is verified that the verification code in the verification information and the verification code generated by the client or obtained from the server meet the association requirement, the verification code in the verification information is valid.

Images