CN102300182B - Short-message-based authentication method, system and device - Google Patents

Abstract

The invention discloses a short message-based identity verification method, system and device, and relates to the technical field of network security. The identity verification system includes a server, a client and a mobile phone, and the identity verification device, that is, the server includes a transceiver module, a storage module, a counting module, a judgment module, a generation module, a verification module, a control module and a calculation module. In the short message-based identity verification method, the server generates a verification code and records the time when the verification code is generated, and sends the generated verification code to the user's mobile phone through an external mode, and then the user enters the client, and the client sends it to the server for verification. Man-in-the-middle attacks can be prevented to a certain extent, and the verification code generated by the server is time-sensitive and becomes invalid after expiration.

Description

A method, system and device for identity verification based on short message

technical field

The invention relates to the technical field of network security, in particular to a short message-based identity verification method, system and device.

Background technique

At present, when a user uses the software or application program provided by the server with permission through the client, the server usually requires the user to enter the corresponding password and account information through the client to prevent illegal users from entering, but in a network where hacker software is prevalent In this environment, user passwords are often stolen, which seriously infringes the rights of legitimate users to use software or application programs with permission requirements provided by the server.

Commonly used identity verification technologies in the prior art include: static password authentication technology, which uses the user's account name and password to authenticate and identify the legitimacy of the user. Its main feature is to activate a specific account with a fixed password, but due to Passwords and account numbers are soft identifiers, static and unchanged, and they are transmitted in the network. There are many disadvantages and security holes. The cracking technology for it is constantly developing, and many tools and methods can be used to steal account passwords, such as stealing , deciphering, peeping, defrauding, etc. In addition, there are high requirements for users to create, remember, and modify passwords. If the password setting is too simple and easy to crack, if it is too complicated, it is easy to be forgotten.

Contents of the invention

Aiming at the deficiencies of the above-mentioned prior art, the present invention provides a method, system and device for identity verification based on short messages. The transmission of identity verification information is highly confidential, and no special authentication equipment is required.

The technical solution adopted by the present invention is that a short message-based identity verification device includes:

The first transceiver module is used to receive the user information, login request and verification code sent by the client and transmit them to the verification module, and to return the corresponding response result to the client; it is also used to receive the verification code transmitted by the generation module and send it to the verification module. Send a text message containing a verification code to the mobile phone number bound to the current login request;

The storage module is used to store user information, mobile phone number, initial reference time, verification code generation time, authentication base, timestamp, survival period, and user key;

The counting module is used to count the authentication base, and transmit the counting result, that is, the current authentication base, to the storage module, for clearing the time stamp and transmitting the zeroing result to the storage module;

Judging module, used to judge whether the current timestamp is zero, and also used to judge whether the current timestamp exceeds the survival period;

A generation module, used to obtain the current authentication base and user key in the storage module and generate a verification code or verification code, for transmitting the generated verification code to the first transceiver module, and transmitting the generated verification code to the verification module ;

The verification module is used to receive the verification code transmitted by the first transceiver module and the verification code transmitted by the generation module, and compare whether the two are consistent, and transmit the comparison result to the control module; it is also used to verify the first transceiver module Whether the user information transmitted by the module is consistent with the user information stored in the storage module, and the verification result is transmitted to the control module;

The control module is used to receive the comparison result and the verification result transmitted by the verification module, and send a return code of authentication success or failure to the first transceiver module according to the comparison result, and control the first transceiver module to send the verification result to the client according to the verification result. Responses passed provisional authentication;

The calculation module is used to calculate the difference between the current time and the initial reference time, and is used to calculate the pre-increment step size of the authentication base according to the difference and the life cycle.

The storage module is also used to store the verification code, and when the storage module receives the verification code sent by the generation module, it replaces the currently stored verification code with the received verification code; the generation module is also used to generate the generated verification code The code is transmitted to the storage module; the verification module is also used to directly obtain the verification code from the storage module, and compare whether the obtained verification code is consistent with the received verification code transmitted by the first transceiver module, and compare The result is transmitted to the control module.

An identity verification system based on short messages includes an identity verification device, a client and a mobile phone,

The identity verification device is used to receive the user login request and user information transmitted by the client, to generate a verification code and send it to the user's mobile phone, to receive the verification code transmitted by the client, and to verify whether the received verification code is Correct and return the verification result to the client;

The client is configured to receive a login request input by a user and send the user information and the login request to the identity verification device, to receive a verification code input by the user and send it to the identity verification device, and to receive the verification code input by the user. The verification result returned by the identity verification device;

The mobile phone is used to receive the verification code sent by the identity verification device and display it to the user.

The clients include:

The second transceiver module is used to receive the verification code and login request input by the user and send it to the identity verification device, and is used to receive the verification result returned by the identity verification device and the response of whether the temporary verification is passed;

Liquid crystal display module: used for displaying the verification result returned by the identity verification device received by the second transceiver module and the response of whether the temporary verification is passed.

The handsets include:

The third transceiver module is used to receive the short message sent by the identity verification device and transmit it to the short message storage module;

A short message storage module, configured to store short messages transmitted by the third transceiver module;

The display module is used to obtain and display short messages from the short message storage module.

An identity verification method based on short messages, including a process of generating a verification code by a server and a process of verifying the received verification code by the server;

The process of generating the verification code by the server includes the following steps,

Step S1: the server receives a user login request;

Step S2: The server judges whether the current timestamp is invalid, if yes, execute step S3, otherwise execute step S4;

Step S3: the server generates a verification code and updates the current timestamp, and then executes step S5;

Step S4: The server judges whether the current time exceeds the survival period, and if so, generates a verification code and then executes the next step, otherwise generates a verification code and updates the current timestamp and then executes the next step; specifically, if the time value of the current time is greater than the current timestamp If the time value obtained by adding the survival period is added, the current time exceeds the survival period.

Step S5: the server sends the verification code to the mobile phone number bound to the user's login request;

The process of verifying the received verification code by the server includes the following steps,

Step S6: The server receives the verification code and the second user information, and judges whether the current time exceeds the survival period, if yes, the authentication fails, otherwise, the next step is executed;

Step S7: The server generates a verification code, compares the verification code with the received verification code, and if they are consistent, execute the next step, otherwise the authentication fails;

Step S8: the server invalidates the current timestamp;

Step S9: the authentication is successful.

The step S1 is specifically: the server receives the user login request sent by the client, extracts the first user information therefrom, searches the database for whether there is user information that matches the first user information, and if so, passes the temporary verification , the server extracts the mobile phone number bound to the first user information from the database, and if it does not exist, the authentication fails. The step S6 also includes the server receiving the verification code and the second user information, and judging whether the second user information is consistent with the stored first user information, and if they are consistent, judging whether the current time is If the survival period is exceeded, the authentication will fail. Before the step S2, it includes: the server acquires the current authentication base and the current timestamp from the database; in the step S3, the server generates a verification code and updates the current timestamp. Specifically, the server obtains the key according to the first user information, using The one-time password generation algorithm calculates the key and the current authentication base to generate a verification code, and updates the current timestamp to the time when the verification code is generated; if the current time in step S4 does not exceed the survival period, then the generation of the verification code is specifically The server obtains the key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a verification code; if the current time exceeds the survival period described in step S4, then generate a verification code and update the current The time stamp is specifically: the server calculates the current authentication base according to preset rules and updates the current authentication base with the calculation result; the server obtains the key according to the first user information, and the server uses a one-time password generation algorithm to Calculate with the current authentication base to generate a verification code, and update the current timestamp to the time when the verification code was generated. In step S7, the verification code generated by the server is specifically that the server obtains the current authentication base, obtains a key according to the second user information, and uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a check code;

The step S3 or step S8 further includes: the server calculates the current authentication base according to preset rules, records the calculation result, and updates the current authentication base with the calculation result.

The calculating the current authentication base according to preset rules is specifically to increase or decrease the current authentication base by a preset step size.

The step S6 of judging whether the current time exceeds the survival period is specifically judging whether the time value of the current time is greater than the time value obtained by adding the current timestamp and the survival period.

In step S8, the current time stamp is invalidated, preferably setting the current time stamp to zero.

Before the step S2, it may include: the server obtains the initial reference time, check code generation time, survival period, current authentication base and current timestamp from the database, and reads the current time from the internal clock source, and the server according to The initial reference time, current time, and survival period are calculated to obtain the first step length; the server in step S3 generates a verification code and updates the current timestamp including:

Step 205: Determine whether the current time exceeds the survival period, if yes, perform step 205-1, otherwise perform step 205-1'; specifically, determine whether the current time exceeds the time value obtained by adding the check code generation time plus the survival period.

Step 205-1': replace the current authentication base stored in the database with the result obtained by increasing the current authentication base by a second step, and then perform step 205-1;

Step 205-1: Calculate the first count value according to the current authentication base number and the first step length, and then execute step 205-2;

Step 205-2: Generate a verification code according to the first count value, and update the current timestamp to the time when the verification code was generated;

In step S4, if the current time does not exceed the survival period, the verification code is generated as follows:

The server calculates the second count value according to the current authentication base and the first step length;

The server obtains a key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the second count value to generate a verification code;

In step S4, if the current time exceeds the survival period, the verification code is generated and the current timestamp is updated as follows:

The server calculates the second count value according to the current authentication base and the first step length;

The server obtains the key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the second count value to generate a verification code, and the server updates the current timestamp to the time when the verification code is generated;

The verification code generated by the server described in step S7 is specifically:

Calculate the third step length according to the initial reference time, current time, and survival period;

The server obtains the current authentication base, and calculates the third count value according to the current authentication base and the third step length;

The server obtains a key according to the second user information, and uses a one-time password generation algorithm to calculate the key and the third count value to generate a check code;

Before step S8, record the verification code generation time.

The calculation method of the first step and the third step is to convert the current time into a relative value, the relative value refers to the difference between the current time and the initial reference time, and divide the relative value by the survival period and take the integer part.

Said step S3 may be replaced by step S3', said step S4 may be replaced by step S4', said step S7 may be replaced by step S7', and

The step S3' is that the server generates a verification code and uses the generated verification code to update the verification code stored in the database, and updates the current timestamp to the time when the verification code was generated;

The step S4' is that the server judges whether the current time exceeds the survival period, and then executes the next step;

If the current time does not exceed the survival period, then obtain the verification code stored in the database, if the current time exceeds the survival period, then the server generates a verification code and uses the generated verification code to update the verification code stored in the database, and the current timestamp is updated as The time when the verification code was generated;

The step S7' is, the server obtains the verification code stored in the database, the server compares the received verification code with the obtained verification code stored in the database, and if the comparison results are consistent, execute the following step, otherwise authentication fails.

The present invention has following beneficial effects:

1. The verification code is generated by the server and sent to the user through a takeaway method, which can prevent man-in-the-middle attacks to a certain extent;

2. The verification code is time-sensitive and becomes invalid after it expires.

Description of drawings

Fig. 1 is a kind of short message-based identity verification system schematic diagram that embodiment 1 provides;

Fig. 2 is a kind of composition block diagram based on short message authentication device that embodiment 2 provides;

Fig. 3 is a kind of flow chart of the authentication method based on short message that embodiment 3 provides;

Fig. 4 is another kind of short message-based identity verification method flowchart that embodiment 4 provides;

FIG. 5 is a flow chart of another SMS-based identity verification method provided in Embodiment 4.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but not as a limitation of the present invention.

Example 1

Embodiment 1 provides an identity verification system based on short messages, including a server 10, a client 20, and a mobile phone 30. The server 10 is equivalent to an identity verification device, wherein,

The server 10 is used to receive the user login request and user information transmitted by the client 20, to generate a verification code and send it to the user's mobile phone 30, to receive the verification code transmitted by the client 20, and to verify the received verification code Whether it is correct and return the verification result to the client 20;

The client 20 is used to receive the login request input by the user and send the user information and the login request to the server 10, to receive the verification code input by the user and send it to the server 10 and to receive the verification result returned by the server 10;

The mobile phone 30 is used to receive the verification code sent by the server 10 and display it to the user.

The server 10 includes a first transceiver module 101, a storage module 102, a counting module 103, a judgment module 104, a generation module 105, a verification module 106, a control module 107 and a calculation module 108;

The first transceiver module 101 is used to send and receive the data transmitted between the client 20 and the server 10, receive the verification code transmitted by the generation module 105 and send a short message containing the verification code to the bound mobile phone number;

In this embodiment, the first transceiver module 101 is specifically configured to receive the user information, login request and verification code sent by the client 20 and transmit them to the verification module 106 for returning a corresponding response result to the client 20 .

The storage module 102 is used to store user information, mobile phone number, initial reference time, verification code generation time, authentication base, timestamp, survival period, and user key;

The storage module 102 can also be used to store the verification code. When the server receives the login request, if the current time stamp is not zero and the current time has not exceeded the survival period, the server directly obtains the verification code from the storage module 102 and sends it to the server. The mobile phone number bound to the current user; correspondingly, when the server receives the verification code, it directly obtains the currently stored verification code from the storage module 102 and compares it with the received verification code to obtain a verification result.

The counting module 103 is used to count the authentication base, and transmit the counting result, that is, the current authentication base, to the storage module 102, for clearing the timestamp and transmitting the zeroing result to the storage module 102;

Judging module 104, for judging whether the current timestamp is zero, judging whether the current time exceeds the survival period;

The generating module 105 is used to obtain the current authentication base and user key in the storage module 102, and generate a verification code or verification code according to the current authentication base and user key, and transmit the generated verification code to the first transceiver Module 101, which transmits the generated verification code to the verification module 106;

The generating module 105 is also configured to transmit the generated verification code to the storage module 102 .

The verification module 106 is used to receive the verification code transmitted by the first transceiver module 101 and the verification code transmitted by the generation module 105, and compare whether the two are consistent, and transmit the comparison result to the control module 107; for verification Whether the user information transmitted by the first transceiver module 101 is consistent with the user information stored in the storage module 102, and the verification result is transmitted to the control module 107;

The verification module 106 can also be used to compare whether the verification code transmitted by the first transceiver module 101 is consistent with the verification code obtained from the storage module 102, and transmit the comparison result to the control module 107;

The control module 107 is used to receive the comparison result and verification result transmitted by the verification module 106, and send a return code of authentication success or failure to the first transceiver module 101 according to the comparison result, and control the first transceiver module 101 to The client 20 sends a response whether the temporary verification is passed;

Calculation module 108: used to calculate the difference between the current time and the initial reference time, and used to calculate the pre-increment step size of the authentication base according to the difference and the survival period;

The counting module 103 calls the step size calculated by the calculation module 108 when counting the authentication base.

The client 20 includes a second transceiver module 201 and a liquid crystal display module 202, wherein,

The second transceiver module 201 is used to receive the verification code and login request input by the user and send it to the server 10, and is used to receive the verification result returned by the server 10 and the response of whether the temporary verification is passed;

Liquid crystal display module 202: used to display the verification result returned by the server 10 received by the second transceiver module 201 and the response of whether the temporary verification is passed;

The mobile phone 30 includes a third transceiver module 301, a short message storage module 302 and a display module 303, wherein

The third transceiver module 301 is used to receive the short message sent by the server 10 and transmit it to the short message storage module 302;

The short message storage module 302 is used for storing the short message transmitted by the third transceiver module 301;

The display module 303 is configured to acquire the short message from the short message storage module 302 and display it.

Example 2

As shown in Figure 2, the present invention proposes a kind of identity verification device based on short message, described device comprises first transceiver module 1001, storage module 1002, counting module 1003, judging module 1004, generation module 1005, verification module 1006, control module 1007 and computing module 1008;

The first transceiver module 1001 is used to send and receive data transmitted between the client and the server, to receive the verification code transmitted by the generation module 1005 and to send a short message containing the verification code to the mobile phone number bound to the current login request;

In this embodiment, the first transceiver module 1001 is specifically configured to receive user information, a login request, and a verification code sent by the client and transmit them to the verification module 1006 for returning a corresponding response result to the client.

The storage module 1002 is used to store user information, mobile phone number, initial reference time, verification code generation time, authentication base, timestamp, survival period, and user key;

The storage module 1002 can also be used to store the verification code, and when the storage module 1002 receives the verification code sent by the generating module 1005, it replaces the currently stored verification code with the newly received verification code.

The counting module 1003 is used to count the authentication base number, and transmit the counting result, that is, the current authentication base number, to the storage module 1002 for storage, and is used to clear the time stamp and transmit the zeroing result to the storage module 1002;

In this embodiment, specifically, each time the authentication is completed, the authentication base is incremented or decremented according to the preset step size; for example, it is preferably set that the initial value of the authentication base is 0, and after one authentication is completed, the authentication base is increased by 1. Every time the authentication is completed, the current time stamp is cleared and recorded in the storage module 1002 .

Judging module 1004, for judging whether the current time stamp is zero, for judging whether the current time stamp exceeds the survival period;

The generating module 1005 is used to obtain the current authentication base and user key in the storage module 1002 and generate a verification code or verification code, which is used to transmit the generated verification code to the first transceiver module 1001, and transmit the generated verification code to the first transceiver module 1001. to the verification module 1006;

The generating module 1005 is also configured to transmit the generated verification code to the storage module 1002 for storage.

The verification module 1006 is used to receive the verification code transmitted by the first transceiver module 1001 and the verification code transmitted by the generation module 1005, and compare whether the two are consistent, and transmit the comparison result to the control module 1007; for verification Whether the user information transmitted by the first transceiver module 1001 is consistent with the user information stored in the storage module 1002, and transmit the verification result to the control module 1007;

The verification module 1006 is also used to obtain the verification code directly from the storage module 1002, and compare whether the obtained verification code is consistent with the received verification code transmitted by the first transceiver module 1001, and transmit the comparison result to Control module 1007.

The control module 1007 is used to receive the comparison result and verification result transmitted by the verification module 1006, and send a return code of authentication success or failure to the first transceiver module 1001 according to the comparison result, and control the first transceiver module 1001 to The client sends a response whether it passes the temporary authentication.

The calculation module 1008 is used to calculate the difference between the current time and the initial reference time, and is used to calculate the pre-increment step of the authentication base according to the difference and the lifetime. The step size obtained by calling the calculation module 1008 when the counting module 1003 counts the authentication base.

Example 3

This embodiment provides a short message-based identity verification method,

The process for the server to generate the verification code includes the following steps:

Step S1: the server receives a user login request;

Step S2: The server judges whether the current timestamp is invalid, if yes, execute step S3, otherwise execute step S4;

Step S3: the server generates a verification code and updates the current timestamp, and then executes step S5;

Step S4: The server judges whether the current time exceeds the survival period, if yes, generates a verification code and then executes the next step, otherwise generates a verification code and updates the current timestamp and then executes the next step;

Step S5: The server sends the verification code to the mobile phone number bound to the user's login request.

Wherein, the process of verifying the received verification code by the server includes the following steps:

Step S6: The server receives the verification code and the second user information, and judges whether the current time exceeds the survival period, if yes, the authentication fails, otherwise, the next step is executed;

Step S7: The server generates a verification code, compares the verification code with the received verification code, and if they are consistent, execute the next step, otherwise the authentication fails;

Step S8: the server invalidates the current timestamp;

Step S9: the authentication is successful. Example 4

This embodiment is based on a short message-based identity verification method of Embodiment 3, as shown in Figure 3. The method proposed by this embodiment includes the following steps:

Step 101: the server receives the login request, and extracts the mobile phone number and first user information bound to the login request;

In this embodiment, before step 101, it includes: the client receives the login request of the user, and sends the login request to the server;

Specifically, when a login window appears on the client, the user sends a login request to the client by inputting first user information in the login window, and the client sends the received login request to the server. The first user information input by the user in the login window may specifically be a user account, a password, or a combination of both.

Further, the client sends the received first user information to the server while sending the login request to the server.

The step 101 is specifically: the server receives the first user information sent by the client, and searches it in the database, and if the first user information such as the user account number matches the information retrieved by the server in the database, the temporary verification is passed. , the server extracts the mobile phone number bound to the user account.

Further, after receiving the login request, the server will store the user information of the currently logged-in user until it receives the logout request sent by the client.

Step 102: the server acquires the current authentication base and the current timestamp;

The current authentication base is recorded in the database of the server, which is a specific value used to generate the verification code;

The current timestamp is recorded in the database of the server and is a specific time value.

In this embodiment, it is preferably set: if the server receives a login request for the first time, the current authentication base value is 0.

Step 103: the server judges whether the current timestamp is invalid, if yes, execute step 106, otherwise execute step 104;

In this embodiment, the current timestamp is set to be invalid. It is preferably set to clear the current timestamp. Correspondingly, in this step, judging whether the current timestamp is invalid is determined by judging whether the current timestamp is zero.

Step 104: The server judges whether the current time exceeds the survival period, if so, execute step 105, otherwise execute step 107;

The survival period is a specific value in units of time, for example, the survival period is 600s;

The method of judging whether the current time exceeds the survival period is as follows: if the time value of the current time is greater than the time value obtained by adding the current timestamp to the survival period, the current time exceeds the survival period. For example, the current timestamp is 1:20, and the survival period is 600s, if the current time exceeds 1:30, it is judged that the current time exceeds the survival period.

Step 105: Calculate the current certification base according to preset rules and update the current certification base with the calculation result;

Specifically, in this embodiment, the server uses the counter to calculate the increment or decrement of the first authentication base, and uses the calculation result to update the current authentication base. Preferably, the calculation of the current authentication base according to preset rules is specifically the calculation of adding 1 to the current authentication base.

Step 106: Generate a verification code according to the current authentication base, update the current timestamp to the time when the verification code was generated, and execute step 108;

Specifically in this embodiment: the server obtains the key bound to the current user according to the currently stored user information, the server uses a one-time password generation algorithm to calculate the key and the current authentication base to obtain a verification code, and records the verification code Generation time. If the current timestamp is updated to the time when the verification code is generated, the current timestamp is valid.

If the current time stamp is equal to the time when the verification code is generated, the current time stamp is considered valid, and then jumping from step 103 to step 106 is the process of setting the current time stamp as valid. The process of updating the current timestamp, the updated timestamp is still valid.

Step 107: Generate a verification code according to the current authentication base;

Specifically in this embodiment: the server obtains the key bound to the current user according to the currently stored user information, and the server uses a one-time password generation algorithm to calculate the key and the current authentication base to obtain a verification code.

Step 108: The server sends a verification code to the mobile phone number bound to the current login request by SMS;

Step 109: the client receives the verification code input by the user, and sends the verification code and the second user information to the server;

Step 110: The server receives the verification code and the second user information, and judges whether the second user information is consistent with the stored first user information, and if they are consistent, execute step 111, otherwise, the authentication fails;

Step 111: The server judges whether the current time exceeds the survival period, if it exceeds, the authentication fails, otherwise, execute step 112;

Specifically: the server reads the current time from the internal clock source, obtains the current timestamp from the database, and judges whether the current time exceeds the time value obtained by adding the current timestamp and the survival period. If it exceeds, the verification code will be invalid and the authentication will fail. Then proceed to the next step;

Step 112: The server obtains the current authentication base, and calculates and generates a check code according to the current authentication base;

Specifically, the server obtains the key bound to the second user according to the second user information, and uses a one-time password generation algorithm to calculate the key and the current authentication base to obtain a check code.

Step 113: The server compares the received verification code with the generated verification code, and if the comparison results are consistent, execute step 114, otherwise the authentication fails;

Step 114: The server calculates the current authentication base according to preset rules and records the calculation result, and uses the calculation result to update the current authentication base stored in the database;

The preset rule is the same as the preset rule in step 105 .

Further, step 114 can also be adjusted to be executed after step 103, specifically, when step 103 determines that the current timestamp is invalid, execute step 114, and then execute step 106 to generate a verification code based on the current authentication base, and update the current timestamp is the time to generate the verification code.

Step 115: the server invalidates the current timestamp, and the authentication is successful.

In this embodiment, every time the server authenticates successfully, it will perform the operations of steps 114 and 115, that is, update the current authentication base, invalidate the current time stamp, and prepare for the next authentication.

Specifically, in this embodiment, after the authentication is completed, the server will return the authentication result of authentication success or authentication failure to the client.

Further, the above steps 106, 107, 112 and 113 in this embodiment can be replaced by steps 106', 107', 112' and 113' respectively, as follows:

Step 106': Generate a verification code according to the current authentication base and use the generated verification code to update the verification code stored in the database, update the current timestamp to the time when the verification code was generated, and execute step 108;

Specifically in this embodiment, the update duration of the verification code stored in the server database is equal to the survival period; if the current timestamp is updated to the time when the verification code is generated, the current timestamp is valid.

Step 107': Obtain the verification code stored in the database;

Specifically, when the current timestamp is valid and the current time has not exceeded the survival period, the verification code is directly obtained from the database.

Step 112': the server acquires the current authentication base and the verification code stored in the current database;

Step 113': The server compares the received verification code with the obtained verification code stored in the database, and if the comparison result is consistent, execute step 114, otherwise the authentication fails.

Example 5

This embodiment is based on a short message-based identity verification method of Embodiment 3, as shown in Figure 4. The method proposed by this embodiment includes the following steps:

Step 201: the server receives the login request, and extracts the mobile phone number and first user information bound to the login request;

Step 202: Obtain the initial reference time, check code generation time, survival period, current time, current authentication base, and current timestamp;

Step 203: Calculate the length of the first step according to the initial reference time, current time, and survival period;

Specifically in this embodiment: convert the current time into a relative value, the relative value refers to the difference between the current time and the initial reference time, divide the relative value by the survival period and take the integer part to obtain the first step size.

Step 204: Determine whether the current timestamp is invalid, if yes, execute step 205, otherwise execute step 206;

In this embodiment, the current timestamp is set to be invalid. It is preferably set to clear the current timestamp. Correspondingly, in this step, judging whether the current timestamp is invalid is determined by judging whether the current timestamp is zero.

Step 205: Determine whether the current time exceeds the survival period, if yes, execute step 205-1, otherwise execute step 205-1',

In this embodiment, it is specifically: judging whether the current time exceeds the time value obtained by adding the check code generation time to the survival period.

Step 205-1': replace the current authentication base stored in the database with the result obtained after the current authentication base is increased by the second step, and return to step 205-1;

The second step is a preset value. For example, the second step can be set to a value of 1, and the current authentication base is updated to the calculation result of the current authentication base plus 1;

Step 205-1: Calculate the first count value according to the current authentication base number and the first step length, and then execute step 205-2;

The first count value is calculated by adding the current authentication base to the first step.

Step 205-2: Generate a verification code according to the first count value, and then perform step 207;

The process of generating the verification code in this embodiment is specifically: the server obtains the key bound to the first user according to the first user information, and uses a one-time password generation algorithm to calculate the key and the first count value to obtain verification code.

Step 206: Calculate the second count value according to the current authentication base number and the first step length, and then perform step 206-1;

The second count value is calculated by adding the first step to the current authentication base.

Step 206-1: Generate a verification code according to the second count value;

The process of generating the verification code in this embodiment is the same as step 205-2, and will not be repeated here.

Step 206-2: Determine whether the current time exceeds the survival period, if yes, execute step 207, otherwise execute step 208;

The method for judging whether the current time exceeds the survival period is specifically: if the current time exceeds the time value obtained by adding the current timestamp and the survival period, then the current time exceeds the survival period. For example, the current timestamp is 1:20, and the survival period is 600s, if the current time exceeds 1:30, it is judged that the current time exceeds the survival period.

Step 207: update the current timestamp to the time when the verification code was generated, and then execute step 208;

Specifically, in this embodiment, when the current timestamp is updated to the time when the verification code is generated, the current timestamp is valid.

Step 208: the server sends a verification code to the mobile phone number by SMS;

The mobile phone number is the mobile phone number obtained in step 201 and bound to the login request.

Step 209: the client receives the verification code input by the user, and sends the verification code and the second user information to the server;

Step 210: The server receives the verification code and the second user information, and judges whether the second user information is consistent with the first user information, if yes, execute step 211, otherwise the authentication fails;

Steps 209 and 210 in this embodiment are specifically: the client prompts the user to input the verification code and user information, the client sends the received verification code and user information to the server, and the server verifies whether the currently received user information is consistent with the login request The user information acquired in is consistent, if consistent, execute step 211, if not consistent, authentication fails.

Step 211: the server obtains the current time, and judges whether the current time exceeds the survival period, if so, the authentication fails, otherwise, the next step is executed;

In this embodiment, judging whether the current time exceeds the survival period is specifically: judging whether the current time exceeds the time value obtained by adding the current timestamp recorded in step 207 to the survival period. If it exceeds, the authentication fails; otherwise, step 212 is performed.

Step 212: Calculate and obtain the third step length according to the initial reference time, the current time, and the lifetime;

The specific calculation method in this embodiment is: calculate the difference between the current time and the initial reference time, divide the difference by the survival period and take the integer part to obtain the third step length; for example: the initial reference time is T0, the relative seconds between the current time and the initial reference time is S, and the survival period is I, then the third step length is equal to S/I and takes the integer part.

The current time is a variable, and the initial reference time and survival period are constants.

Step 213: The server acquires the current authentication base, and calculates the third count value according to the current authentication base and the third step;

Step 214: Generate a check code according to the third count value;

Specifically, in this embodiment, the server obtains the key of the current user, and uses a one-time password generation algorithm to calculate the key and the current authentication base to obtain a check code.

Step 215: compare the verification code generated in step 214 with the verification code received in step 210, if they are consistent, then execute the next step, otherwise the authentication fails;

Step 216: record the generation time of the verification code described in step 214;

Step 217: invalidate the current timestamp.

In this embodiment, setting the current time stamp as invalid is preferably set to clear the current time stamp to zero.

If the sequence is executed to step 217, the authentication is successful, and the server returns a prompt of successful authentication to the client, and the client displays a prompt message to the user to perform other operations.

Further, the above step 205-2 in this embodiment can be replaced by step 205-2', specifically as follows:

Step 205-2': Generate a verification code according to the first count value and use the generated verification code to update the verification code stored in the database, and execute step 207;

The process of generating the verification code in this embodiment is specifically: the server obtains the key bound to the first user according to the first user information, and uses a one-time password generation algorithm to calculate the key and the first count value to obtain verification code.

Above-mentioned steps 206 to 207 can be replaced by the method shown in Figure 5, specifically as follows:

Step 206': Determine whether the current time exceeds the survival period, if yes, execute step 206-1', otherwise execute step 206-3';

Step 206-1': Calculate the second count value according to the current authentication base; then execute step 206-2';

The second count value is calculated by adding the first step to the current authentication base.

Step 206-2': Generate a verification code according to the second count value and use the generated verification code to update the verification code stored in the database, and then perform step 207;

The process of generating the verification code in this embodiment is the same as step 205-2', and will not be repeated here.

Step 206-3': Obtain the verification code stored in the database;

Above-mentioned step 214 can be replaced by step 214', and step 215 is replaced by step 215'. Meanwhile, steps 212 and 213 can be omitted, and step 214' is directly executed after step 211 is performed, as follows:

Step 214': the server obtains the verification code stored in the current database;

Step 215': The server compares the received verification code with the obtained verification code stored in the database, and if the comparison result is consistent, execute step 216, otherwise the authentication fails.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, any changes or variations that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention Replacement should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (11)

1. A kind of identity verification system based on short message, comprises identity verification device, client and mobile phone, is characterized in that: The identity verification device is used to receive the user login request and user information transmitted by the client, to generate a verification code and send it to the user's mobile phone, to receive the verification code transmitted from the client, and to verify the received verification code. Check whether the code is correct and return the verification result to the client; The identity verification device is further configured to extract first user information from the user login request transmitted from the client, and to search the database for whether there is user information that matches the first user information, and if so The identity verification device extracts the mobile phone number bound to the first user information from the database, and if it does not exist, the identity verification device returns authentication failure to the client; for obtaining the current authentication base number and the current time from the database Stamp; used to judge whether the current time exceeds the survival period, if the current time does not exceed the survival period, the identity verification device obtains the key according to the first user information, and uses the one-time password generation algorithm to calculate the key and the current authentication base Generate a verification code; if the current time exceeds the survival period, the identity verification device calculates the current authentication base according to preset rules and updates the current authentication base with the calculation result, obtains a key according to the first user information, and uses a one-time password generation algorithm for the The key and the current authentication base are calculated to generate a verification code, and the current timestamp is updated to the time when the verification code was generated; The identity verification device is also used to receive the second user information transmitted by the client, and determine whether the second user information is consistent with the stored first user information, and if they are consistent, continue to determine whether the current time exceeds the survival time. period, if inconsistent, the identity verification device returns authentication failure to the client; if the current time exceeds the survival period, the identity verification device returns authentication failure to the client; if the current time does not exceed the survival period, the identity verification device acquires For the current authentication base, the key is obtained according to the second user information, and a one-time password generation algorithm is used to calculate the key and the current authentication base to generate a check code; The verifying whether the received verification code is correct is specifically comparing whether the received verification code is consistent with the generated verification code; if they are consistent, the identity verification device is also used to calculate the current authentication base The preset rule calculates and uses the calculation result to update the current authentication base, and invalidates the current timestamp; The client is configured to receive a login request input by a user and send the user information and the login request to the identity verification device, to receive a verification code input by the user and send it to the identity verification device, and to receive the verification code input by the user. The verification result returned by the identity verification device; The mobile phone is used to receive the verification code sent by the identity verification device and display it to the user. 2. The system according to claim 1, wherein the client includes The second transceiver module is used to receive the verification code and login request input by the user and send it to the identity verification device, and is used to receive the verification result returned by the identity verification device and the response of whether the temporary verification is passed; Liquid crystal display module: used for displaying the verification result returned by the identity verification device received by the second transceiver module and the response of whether the temporary verification is passed. 3. The system according to claim 1, characterized in that: the mobile phone includes The third transceiver module is used to receive the short message sent by the identity verification device and transmit it to the short message storage module; A short message storage module, configured to store short messages transmitted by the third transceiver module; The display module is used to obtain and display short messages from the short message storage module. 4. A kind of authentication method based on short message, it is characterized in that: comprise the process that server generates verification code and the process that described server verifies the verification code that receives; The process of generating the verification code by the server includes the following steps, Step S1: the server receives a user login request; Step S2: The server judges whether the current timestamp is invalid, if yes, execute step S3, otherwise execute step S4; Step S3: the server generates a verification code and updates the current timestamp, and then executes step S5; Step S4: The server judges whether the current time exceeds the survival period, otherwise generates a verification code and then executes the next step; if yes, generates a verification code and updates the current timestamp and then executes the next step; Step S5: the server sends the verification code to the mobile phone number bound to the user's login request; The process of verifying the received verification code by the server includes the following steps, Step S6: The server receives the verification code and the second user information, and judges whether the current time exceeds the survival period, if yes, the authentication fails, otherwise, the next step is executed; Step S7: The server generates a verification code, compares the verification code with the received verification code, and if they are consistent, execute the next step, otherwise the authentication fails; Step S8: the server invalidates the current timestamp; Step S9: the authentication is successful; The step S1 is specifically, the server receives the user login request sent by the client, extracts the first user information therefrom, searches the database whether there is user information that matches the first user information, and passes the temporary verification if it exists. , the server extracts the mobile phone number bound to the first user information from the database, and if it does not exist, the authentication fails; The step S6 also includes the server receiving the verification code and the second user information, and judging whether the second user information is consistent with the stored first user information, and continuing to judge the current time if they are consistent Whether the survival period is exceeded, if not consistent, the authentication will fail; Before the step S2, it includes: the server obtains the current authentication base number and the current time stamp from the database; In step S3, the server generates a verification code and updates the current timestamp. Specifically, the server obtains a key according to the first user information, uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a verification code, and uses the current The timestamp is updated to the time when the verification code was generated; In step S4, if the current time does not exceed the survival period, then generating a verification code is specifically that the server obtains a key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a verification code; In step S4, if the current time exceeds the survival period, the verification code is generated and the current timestamp is updated as follows: The server calculates the current authentication base according to preset rules and updates the current authentication base with the calculation result; The server obtains the key according to the first user information, the server uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a verification code, and updates the current timestamp to the time when the verification code was generated; In step S7, the verification code generated by the server is specifically that the server obtains the current authentication base, obtains a key according to the second user information, and uses a one-time password generation algorithm to calculate the key and the current authentication base to generate a check code; The step S3 or step S8 further includes: the server calculates the current authentication base according to preset rules and records the calculation result, and updates the current authentication base with the calculation result. 5. The identity verification method according to claim 4, characterized in that: the judging method of whether the current time exceeds the survival period in the step S4 is, if the time value of the current time is greater than the time value obtained by adding the survival period to the current timestamp , the current time exceeds the survival period. 6. The identity verification method according to claim 4, characterized in that: said calculating the current authentication base according to preset rules is specifically increasing or decreasing the current authentication base by a preset step. 7. The identity verification method according to claim 4, characterized in that: in step S6, judging whether the current time exceeds the survival period is specifically judging whether the time value of the current time is greater than the time value obtained by adding the survival period to the current timestamp. 8. The identity verification method according to claim 4, characterized in that: in step S8, the current time stamp is invalidated, preferably setting the current time stamp to zero. 9. A method for identity verification based on short messages, characterized in that: the process of generating a verification code by the server and the process of verifying the verification code received by the server; The process of generating the verification code by the server includes the following steps, Step S1: the server receives a user login request; Step S2: The server judges whether the current timestamp is invalid, if yes, execute step S3, otherwise execute step S4; Step S3: the server generates a verification code and updates the current timestamp, and then executes step S5; Step S4: The server judges whether the current time exceeds the survival period, if yes, generates a verification code and then executes the next step, otherwise generates a verification code and updates the current timestamp and then executes the next step; Step S5: the server sends the verification code to the mobile phone number bound to the user's login request; The process of verifying the received verification code by the server includes the following steps, Step S6: The server receives the verification code and the second user information, and judges whether the current time exceeds the survival period, if yes, the authentication fails, otherwise, the next step is executed; Step S7: The server generates a verification code, compares the verification code with the received verification code, and if they are consistent, execute the next step, otherwise the authentication fails; Step S8: the server invalidates the current timestamp; Step S9: the authentication is successful; The step S1 is specifically, the server receives the user login request sent by the client, extracts the first user information therefrom, searches the database whether there is user information that matches the first user information, and passes the temporary verification if it exists. , the server extracts the mobile phone number bound to the first user information from the database, and if it does not exist, the authentication fails; The step S6 also includes the server receiving the verification code and the second user information, and judging whether the second user information is consistent with the stored first user information, and continuing to judge the current time if they are consistent Whether the survival period is exceeded, if not consistent, the authentication will fail; Before the step S2, the server obtains the initial reference time, check code generation time, survival period, current authentication base and current timestamp from the database, and reads the current time from the internal clock source, and the server reads the current time according to the starting time Calculate the first step length based on the initial reference time, current time, and lifetime; The server generating the verification code and updating the current timestamp in step S3 includes: Step 205: Determine whether the current time exceeds the survival period, if yes, execute step 205-1, otherwise execute step 205-1'; Step 205-1': replace the current authentication base stored in the database with the result obtained after increasing the current authentication base by a second step, and then perform step 205-1; Step 205-1: Calculate the first count value according to the current authentication base number and the first step length, and then execute step 205-2; Step 205-2: Generate a verification code according to the first count value, and update the current timestamp to the time when the verification code was generated; In step S4, if the current time does not exceed the survival period, the verification code is generated as follows: The server calculates the second count value according to the current authentication base and the first step length; The server obtains a key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the second count value to generate a verification code; In step S4, if the current time exceeds the survival period, the verification code is generated and the current timestamp is updated as follows: The server calculates the second count value according to the current authentication base and the first step length; The server obtains the key according to the first user information, and uses a one-time password generation algorithm to calculate the key and the second count value to generate a verification code, and the server updates the current timestamp to the time when the verification code is generated; The verification code generated by the server described in step S7 is specifically: Calculate the third step length according to the initial reference time, current time, and survival period; The server obtains the current authentication base, and calculates the third count value according to the current authentication base and the third step length; The server obtains a key according to the second user information, and uses a one-time password generation algorithm to calculate the key and the third count value to generate a check code; Before step S8, record the verification code generation time. 10. The identity verification method according to claim 9, characterized in that: the first step and the third step are calculated by converting the current time into a relative value, and the relative value refers to the difference between the current time and the third step. For the difference of the starting reference time, divide the relative value by the survival period and take the integer part. 11. The identity verification method according to claim 9, characterized in that: in step 205, judging whether the current time exceeds the survival period is specifically judging whether the current time exceeds the time value obtained by adding the check code generation time to the survival period.

Images