CN105208011A - Verification system and method - Google Patents
Verification system and method Download PDFInfo
- Publication number
- CN105208011A CN105208011A CN201510543545.1A CN201510543545A CN105208011A CN 105208011 A CN105208011 A CN 105208011A CN 201510543545 A CN201510543545 A CN 201510543545A CN 105208011 A CN105208011 A CN 105208011A
- Authority
- CN
- China
- Prior art keywords
- verified
- mobile terminal
- phone number
- application end
- physical address
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
- H04L63/0838—Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
Landscapes
- Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Power Engineering (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephone Function (AREA)
Abstract
The invention discloses a verification system and method and belongs to the communication technical field. The system includes an application end, a mobile terminal to be verified and an operator, wherein the application end is used for inputting a mobile phone number to be verified and transmitting a verification request containing the mobile phone number to be verified and application end information to the operator, the operator feeds back the application end information and verification codes to the mobile terminal to be verified corresponding to the mobile phone number to be verified, and the mobile terminal to be verified is used for receiving the application end information and the verification codes which are transmitted by the operator and comparing the mobile phone number to be verified and the physical address of the mobile terminal to be verified with the application end information so as to obtain verification results and providing risk prompts corresponding to the verification results. According to the verification system and method of the invention, whether security risks exist on verification codes is judged based on information matching of a mobile terminal applying for verification and the mobile terminal to be verified, and different risk prompts are provided automatically according to judgment results, and therefore, the security of the verification codes can be improved, and better user experience can be provided.
Description
Technical field
The present invention relates to communication technical field, particularly relate to a kind of verification system and method.
Background technology
Along with the social tool such as micro-letter, QQ are more and more universal, the use scenes of note becomes fewer and feweri, and along with user use third party software get more and more, third party software is more and more higher for the frequency of the authentication of user, one subtracts between an increasing, and identifying code occupies increasing ratio in the daily note received.
Also a lot of hoax has been expedited the emergence of thus, wherein the modal cheat of being exactly sends on identifying code to your mobile phone, then he asks for identifying code to you, if you give him identifying code, then be equivalent to the identity that he has been proved to be successful you, then he just can check your information, and the account stealing you even transfers your property.
In the prior art, there is provided in the note of identifying code and can write prompting " leakage identifying code has the stolen risk of fund ", but often user can ignore, in addition, present short message verification code is mostly is directly play window with one to occur, general only display identifying code and reproduction button, if user does not enter note application, this prompting all be can't see, and reduces the fail safe of account or property.
Summary of the invention
Main purpose of the present invention is to propose a kind of verification system and method, by the information matches to the mobile terminal and mobile terminal to be verified of applying for checking, whether what judge identifying code exists security risk, and automatically provide different indicating risks according to judged result, improve the fail safe of identifying code, provide better Consumer's Experience.
The technical scheme that the present invention solves the problems of the technologies described above is as follows:
According to an aspect of the present invention, a kind of verification system provided, comprising: application end, mobile terminal to be verified and operator, wherein,
Described application end, for inputting phone number to be verified, and send the checking request comprising described phone number to be verified and application client information to operator, described application client information comprises: application end phone number and application end physical address;
Described operator, holds the checking request of sending for receiving described application, and described application client information and identifying code is fed back to mobile terminal to be verified corresponding to phone number to be verified;
Described mobile terminal to be verified, for receiving the application client information and identifying code that operator sends, and phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
Preferably, described mobile terminal to be verified comprises: the first judging unit and the second judging unit, wherein
Whether described first judging unit is identical with described phone number to be verified for judging described application end phone number; If described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal to be verified;
Described second judging unit, for when described application end phone number is identical with described phone number to be verified, judges that whether described application end physical address is identical with described mobile terminal physical address to be verified; If described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal to be verified; If described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
Preferably, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address; Described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified.
Preferably, described application end comprises:
Input unit, inputs phone number to be verified for obtaining interface at the APP identifying code of application end, triggers " click and obtain " button;
Encryption transmitting element, for obtaining application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application end phone number and application end physical address;
Correspondingly, described operator comprises:
Receiving feedback unit, for receiving the application client information after encryption and identifying code, and the application client information after described encryption and identifying code being fed back to mobile terminal to be verified corresponding to phone number to be verified.
Preferably, be also provided with system framework in described mobile terminal to be verified, described system framework for receiving the application client information after encryption, and is decrypted, and obtains application end phone number and application end physical address.
According to another aspect of the present invention, a kind of verification method provided, comprising:
Application end input phone number to be verified, and the checking request comprising described phone number to be verified and application client information is sent to operator, described application client information comprises: application end phone number and application end physical address;
Described application client information and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by operator;
Phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
Preferably, describedly phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and provide the indicating risk corresponding with the result to be specially:
Judge that whether described application end phone number is identical with described phone number to be verified;
If described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal to be verified;
If described application end phone number is identical with described phone number to be verified, judge that whether described application end physical address is identical with described mobile terminal physical address to be verified;
If described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal to be verified;
If described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
Preferably, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address; Described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified.
Preferably, described application end input phone number to be verified, and be specially to the checking request that operator's transmission comprises described phone number to be verified and application client information:
Obtain interface at the APP identifying code of application end and input phone number to be verified, trigger " click and obtain " button;
Obtain application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application end phone number and application end physical address;
Correspondingly, the mobile terminal to be verified that described application client information and identifying code are fed back to phone number to be verified corresponding by described operator is specially:
Application client information after encryption and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by described operator.
Preferably, be provided with system framework in described mobile terminal to be verified, described system framework for receiving the application client information after encryption, and is decrypted, and obtains application end phone number and application end physical address.
The invention provides a kind of verification system and method, this system comprises: application end, mobile terminal to be verified and operator, wherein, described application end, for inputting phone number to be verified, and the checking request comprising described phone number to be verified and application client information is sent to operator, described application client information comprises: application end phone number and application end physical address; Described operator, holds the checking request of sending for receiving described application, and described application client information and identifying code is fed back to mobile terminal to be verified corresponding to phone number to be verified; Described mobile terminal to be verified, for receiving the application client information and identifying code that operator sends, and phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided, the present invention is by the information matches to the mobile terminal and mobile terminal to be verified of applying for checking, whether what judge identifying code exists security risk, and automatically provide different indicating risks according to judged result, improve the fail safe of identifying code, provide better Consumer's Experience.
Accompanying drawing explanation
Fig. 1 is the hardware configuration schematic diagram of the mobile terminal realizing each embodiment of the present invention;
Fig. 2 is the wireless communication system schematic diagram of mobile terminal as shown in Figure 1;
Fig. 3 is the exemplary block diagram of a kind of verification system of embodiments of the invention one;
Fig. 4 is that a kind of third party application APP identifying code of embodiments of the invention one obtains interface;
Fig. 5 is the first indicating risk information interface of embodiments of the invention one;
Fig. 6 is the second indicating risk information interface of embodiments of the invention one;
Fig. 7 is the exemplary block diagram of the mobile terminal to be verified of embodiments of the invention two;
Fig. 8 is the exemplary block diagram of the application end of embodiments of the invention three;
Fig. 9 is the exemplary block diagram of the operator of embodiments of the invention three;
Figure 10 is the flow chart of a kind of verification method of embodiments of the invention four;
Figure 11 is the flow chart of a kind of verification method of embodiments of the invention five;
Figure 12 is the flow chart of a kind of verification method of embodiments of the invention six.
Embodiment
Should be appreciated that specific embodiment described herein only in order to explain the present invention, be not intended to limit the present invention.Mobile terminal can be implemented in a variety of manners.Such as, the terminal described in the present invention can comprise the such as mobile terminal of mobile phone, smart phone, notebook computer, digit broadcasting receiver, PDA (personal digital assistant), PAD (panel computer), PMP (portable media player), guider etc. and the fixed terminal of such as digital TV, desktop computer etc.Below, suppose that terminal is mobile terminal.But it will be appreciated by those skilled in the art that except the element except being used in particular for mobile object, structure according to the embodiment of the present invention also can be applied to the terminal of fixed type.
Fig. 1 is the hardware configuration signal of the mobile terminal realizing each embodiment of the present invention.
Mobile terminal 100 can comprise wireless communication unit 110, A/V (audio/video) input unit 120, user input unit 130, sensing cell 140, output unit 150, memory 160, interface unit 170, controller 180 and power subsystem 190 etc.Fig. 1 shows the mobile terminal with various assembly, it should be understood that, does not require to implement all assemblies illustrated.Can alternatively implement more or less assembly.Will be discussed in more detail below the element of mobile terminal.
Wireless communication unit 110 generally includes one or more assembly, and it allows the radio communication between mobile terminal 100 and wireless communication system or network.Such as, wireless communication unit can comprise at least one in broadcast reception module 111, mobile communication module 112, wireless Internet module 113, short range communication module 114 and positional information module 115.
Broadcast reception module 111 via broadcast channel from external broadcasting management server receiving broadcast signal and/or broadcast related information.Broadcast channel can comprise satellite channel and/or terrestrial channel.Broadcast management server can be generate and send the server of broadcast singal and/or broadcast related information or the broadcast singal generated before receiving and/or broadcast related information and send it to the server of terminal.Broadcast singal can comprise TV broadcast singal, radio signals, data broadcasting signal etc.And broadcast singal may further include the broadcast singal combined with TV or radio signals.Broadcast related information also can provide via mobile communications network, and in this case, broadcast related information can be received by mobile communication module 112.Broadcast singal can exist in a variety of manners, such as, it can exist with the form of the electronic service guidebooks (ESG) of the electronic program guides of DMB (DMB) (EPG), digital video broadcast-handheld (DVB-H) etc.Broadcast reception module 111 can by using the broadcast of various types of broadcast system Received signal strength.Especially, broadcast reception module 111 can by using such as multimedia broadcasting-ground (DMB-T), DMB-satellite (DMB-S), digital video broadcasting-hand-held (DVB-H), forward link media (MediaFLO
) the digit broadcasting system receiving digital broadcast of Radio Data System, received terrestrial digital broadcasting integrated service (ISDB-T) etc.Broadcast reception module 111 can be constructed to be applicable to providing the various broadcast system of broadcast singal and above-mentioned digit broadcasting system.The broadcast singal received via broadcast reception module 111 and/or broadcast related information can be stored in memory 160 (or storage medium of other type).
Radio signal is sent at least one in base station (such as, access point, Node B etc.), exterior terminal and server and/or receives radio signals from it by mobile communication module 112.Various types of data that such radio signal can comprise voice call signal, video calling signal or send according to text and/or Multimedia Message and/or receive.
Wireless Internet module 113 supports the Wi-Fi (Wireless Internet Access) of mobile terminal.This module can be inner or be externally couple to terminal.Wi-Fi (Wireless Internet Access) technology involved by this module can comprise WLAN (WLAN) (Wi-Fi), Wibro (WiMAX), Wimax (worldwide interoperability for microwave access), HSDPA (high-speed downlink packet access) etc.
Short range communication module 114 is the modules for supporting junction service.Some examples of short-range communication technology comprise bluetooth
tM, radio-frequency (RF) identification (RFID), Infrared Data Association (IrDA), ultra broadband (UWB), purple honeybee
tMetc..
Positional information module 115 is the modules of positional information for checking or obtain mobile terminal.The typical case of positional information module is GPS (global positioning system).According to current technology, GPS module 115 calculates from the range information of three or more satellite and correct time information and for the Information application triangulation calculated, thus calculates three-dimensional current location information according to longitude, latitude and pin-point accuracy.Current, the method for calculating location and temporal information uses three satellites and by the error of the position that uses an other satellite correction calculation to go out and temporal information.In addition, GPS module 115 can carry out computational speed information by Continuous plus current location information in real time.
A/V input unit 120 is for audio reception or vision signal.A/V input unit 120 can comprise camera 121 and microphone 1220, and the view data of camera 121 to the static images obtained by image capture apparatus in Video Capture pattern or image capture mode or video processes.Picture frame after process may be displayed on display module 151.Picture frame after camera 121 processes can be stored in memory 160 (or other storage medium) or via wireless communication unit 110 and send, and can provide two or more cameras 1210 according to the structure of mobile terminal.Such acoustic processing can via microphones sound (voice data) in telephone calling model, logging mode, speech recognition mode etc. operational mode, and can be voice data by microphone 122.Audio frequency (voice) data after process can be converted to the formatted output that can be sent to mobile communication base station via mobile communication module 112 when telephone calling model.Microphone 122 can be implemented various types of noise and eliminate (or suppress) algorithm and receiving and sending to eliminate (or suppression) noise or interference that produce in the process of audio signal.
User input unit 130 can generate key input data to control the various operations of mobile terminal according to the order of user's input.User input unit 130 allows user to input various types of information, and keyboard, the young sheet of pot, touch pad (such as, detecting the touch-sensitive assembly of the change of the resistance, pressure, electric capacity etc. that cause owing to being touched), roller, rocking bar etc. can be comprised.Especially, when touch pad is superimposed upon on display module 151 as a layer, touch-screen can be formed.
Sensing cell 140 detects the current state of mobile terminal 100, (such as, mobile terminal 100 open or close state), the position of mobile terminal 100, user for mobile terminal 100 contact (namely, touch input) presence or absence, the orientation of mobile terminal 100, the acceleration or deceleration of mobile terminal 100 move and direction etc., and generate order or the signal of the operation for controlling mobile terminal 100.Such as, when mobile terminal 100 is embodied as sliding-type mobile phone, sensing cell 140 can sense this sliding-type phone and open or close.In addition, whether whether sensing cell 140 can detect power subsystem 190 provides electric power or interface unit 170 to couple with external device (ED).Sensing cell 140 can comprise proximity transducer 1410 and will be described this in conjunction with touch-screen below.
Interface unit 170 is used as at least one external device (ED) and is connected the interface that can pass through with mobile terminal 100.Such as, external device (ED) can comprise wired or wireless head-band earphone port, external power source (or battery charger) port, wired or wireless FPDP, memory card port, for connecting the port, audio frequency I/O (I/O) port, video i/o port, ear port etc. of the device with identification module.Identification module can be that storage uses the various information of mobile terminal 100 for authentication of users and can comprise subscriber identification module (UIM), client identification module (SIM), Universal Subscriber identification module (USIM) etc.In addition, the device (hereinafter referred to " recognition device ") with identification module can take the form of smart card, and therefore, recognition device can be connected with mobile terminal 100 via port or other jockey.Interface unit 170 may be used for receive from external device (ED) input (such as, data message, electric power etc.) and the input received be transferred to the one or more element in mobile terminal 100 or may be used for transmitting data between mobile terminal and external device (ED).
In addition, when mobile terminal 100 is connected with external base, interface unit 170 can be used as to allow by it electric power to be provided to the path of mobile terminal 100 from base or can be used as the path that allows to be transferred to mobile terminal by it from the various command signals of base input.The various command signal inputted from base or electric power can be used as and identify whether mobile terminal is arranged on the signal base exactly.Output unit 150 is constructed to provide output signal (such as, audio signal, vision signal, alarm signal, vibration signal etc.) with vision, audio frequency and/or tactile manner.Output unit 150 can comprise display module 151, dio Output Modules 152, alarm modules 153 etc.
Display module 151 may be displayed on the information of process in mobile terminal 100.Such as, when mobile terminal 100 is in telephone calling model, display module 151 can show with call or other communicate (such as, text messaging, multimedia file are downloaded etc.) be correlated with user interface (UI) or graphic user interface (GUI).When mobile terminal 100 is in video calling pattern or image capture mode, display module 151 can the image of display capture and/or the image of reception, UI or GUI that video or image and correlation function are shown etc.
Meanwhile, when display module 151 and touch pad as a layer superposed on one another to form touch-screen time, display module 151 can be used as input unit and output device.Display module 151 can comprise at least one in liquid crystal display (LCD), thin-film transistor LCD (TFT-LCD), Organic Light Emitting Diode (OLED) display, flexible display, three-dimensional (3D) display etc.Some in these displays can be constructed to transparence and watch from outside to allow user, and this can be called transparent display, and typical transparent display can be such as TOLED (transparent organic light emitting diode) display etc.According to the specific execution mode wanted, mobile terminal 100 can comprise two or more display modules (or other display unit), such as, mobile terminal can comprise outside display module (not shown) and inner display module (not shown).Touch-screen can be used for detecting touch input pressure and touch input position and touch and inputs area.
When dio Output Modules 152 can be under the isotypes such as call signal receiving mode, call mode, logging mode, speech recognition mode, broadcast reception mode at mobile terminal, voice data convert audio signals that is that wireless communication unit 110 is received or that store in memory 160 and exporting as sound.And dio Output Modules 152 can provide the audio frequency relevant to the specific function that mobile terminal 100 performs to export (such as, call signal receives sound, message sink sound etc.).Dio Output Modules 152 can comprise loud speaker, buzzer etc.
Alarm modules 153 can provide and export that event informed to mobile terminal 100.Typical event can comprise calling reception, message sink, key signals input, touch input etc.Except audio or video exports, alarm modules 153 can provide in a different manner and export with the generation of notification event.Such as, alarm modules 153 can provide output with the form of vibration, when receive calling, message or some other enter communication (incomingcommunication) time, alarm modules 153 can provide sense of touch to export (that is, vibrating) to notify to user.By providing such sense of touch to export, even if when the mobile phone of user is in the pocket of user, user also can identify the generation of various event.Alarm modules 153 also can provide the output of the generation of notification event via display module 151 or dio Output Modules 152.
Memory 160 software program that can store process and the control operation performed by controller 180 etc., or temporarily can store oneself through exporting the data (such as, telephone directory, message, still image, video etc.) that maybe will export.And, memory 160 can store about when touch be applied to touch-screen time the vibration of various modes that exports and the data of audio signal.
Memory 160 can comprise the storage medium of at least one type, described storage medium comprises flash memory, hard disk, multimedia card, card-type memory (such as, SD or DX memory etc.), random access storage device (RAM), static random-access memory (SRAM), read-only memory (ROM), Electrically Erasable Read Only Memory (EEPROM), programmable read only memory (PROM), magnetic storage, disk, CD etc.And mobile terminal 100 can be connected the memory function of execute store 160 network storage device with by network cooperates.
Controller 180 controls the overall operation of mobile terminal usually.Such as, controller 180 performs the control relevant to voice call, data communication, video calling etc. and process.In addition, controller 180 can comprise the multi-media module 1810 for reproducing (or playback) multi-medium data, and multi-media module 1810 can be configured in controller 180, or can be configured to be separated with controller 180.Controller 180 can pattern recognition process, is identified as character or image so that input is drawn in the handwriting input performed on the touchscreen or picture.
Power subsystem 190 receives external power or internal power and provides each element of operation and the suitable electric power needed for assembly under the control of controller 180.
Various execution mode described herein can to use such as computer software, the computer-readable medium of hardware or its any combination implements.For hardware implementation, execution mode described herein can by using application-specific IC (ASIC), digital signal processor (DSP), digital signal processing device (DSPD), programmable logic device (PLD), field programmable gate array (FPGA), processor, controller, microcontroller, microprocessor, being designed at least one performed in the electronic unit of function described herein and implementing, in some cases, such execution mode can be implemented in controller 180.For implement software, the execution mode of such as process or function can be implemented with allowing the independent software module performing at least one function or operation.Software code can be implemented by the software application (or program) write with any suitable programming language, and software code can be stored in memory 160 and to be performed by controller 180.
So far, oneself is through the mobile terminal according to its functional description.Below, for the sake of brevity, by the slide type mobile terminal that describes in various types of mobile terminals of such as folded form, board-type, oscillating-type, slide type mobile terminal etc. exemplarily.Therefore, the present invention can be applied to the mobile terminal of any type, and is not limited to slide type mobile terminal.
Mobile terminal 100 as shown in Figure 1 can be constructed to utilize and send the such as wired and wireless communication system of data via frame or grouping and satellite-based communication system operates.
Describe wherein according to the communication system that mobile terminal of the present invention can operate referring now to Fig. 2.
Such communication system can use different air interfaces and/or physical layer.Such as, the air interface used by communication system comprises such as frequency division multiple access (FDMA), time division multiple access (TDMA), code division multiple access (CDMA) and universal mobile telecommunications system (UMTS) (especially, Long Term Evolution (LTE)), global system for mobile communications (GSM) etc.As non-limiting example, description below relates to cdma communication system, but such instruction is equally applicable to the system of other type.
With reference to figure 2, cdma wireless communication system can comprise multiple mobile terminal 100, multiple base station (BS) 270, base station controller (BSC) 275 and mobile switching centre (MSC) 280.MSC280 is constructed to form interface with Public Switched Telephony Network (PSTN) 290.MSC280 is also constructed to form interface with the BSC275 that can be couple to base station 270 via back haul link.Back haul link can construct according to any one in some interfaces that oneself knows, described interface comprises such as E1/T1, ATM, IP, PPP, frame relay, HDSL, ADSL or xDSL.Will be appreciated that system as shown in Figure 2 can comprise multiple BSC2750.
Each BS270 can serve one or more subregion (or region), by multidirectional antenna or point to specific direction each subregion of antenna cover radially away from BS270.Or each subregion can by two or more antenna covers for diversity reception.Each BS270 can be constructed to support multiple parallel compensate, and each parallel compensate has specific frequency spectrum (such as, 1.25MHz, 5MHz etc.).
Subregion can be called as CDMA Channel with intersecting of parallel compensate.BS270 also can be called as base station transceiver subsystem (BTS) or other equivalent terms.Under these circumstances, term " base station " may be used for broadly representing single BSC275 and at least one BS270.Base station also can be called as " cellular station ".Or each subregion of particular B S270 can be called as multiple cellular station.
As shown in Figure 2, broadcast singal is sent to the mobile terminal 100 at operate within systems by broadcsting transmitter (BT) 295.Broadcast reception module 111 as shown in Figure 1 is arranged on mobile terminal 100 and sentences the broadcast singal receiving and sent by BT295.In fig. 2, several global positioning system (GPS) satellite 300 is shown.Satellite 300 helps at least one in the multiple mobile terminal 100 in location.
In fig. 2, depict multiple satellite 300, but understand, the satellite of any number can be utilized to obtain useful locating information.GPS module 115 as shown in Figure 1 is constructed to coordinate to obtain the locating information wanted with satellite 300 usually.Substitute GPS tracking technique or outside GPS tracking technique, can use can other technology of position of tracking mobile terminal.In addition, at least one gps satellite 300 optionally or extraly can process satellite dmb transmission.
As a typical operation of wireless communication system, BS270 receives the reverse link signal from various mobile terminal 100.Mobile terminal 100 participates in call usually, information receiving and transmitting communicates with other type.Each reverse link signal that certain base station 270 receives is processed by particular B S270.The data obtained are forwarded to relevant BSC275.BSC provides call Resourse Distribute and comprises the mobile management function of coordination of the soft switching process between BS270.The data received also are routed to MSC280 by BSC275, and it is provided for the extra route service forming interface with PSTN290.Similarly, PSTN290 and MSC280 forms interface, and MSC and BSC275 forms interface, and BSC275 correspondingly control BS270 so that forward link signals is sent to mobile terminal 100.
Based on above-mentioned mobile terminal hardware configuration and communication system, each embodiment of the inventive method is proposed.
Embodiment one
Fig. 3 is the exemplary block diagram of a kind of verification system of the present embodiment, describes a kind of verification system of the present embodiment below in conjunction with Fig. 3, and as shown in Figure 3, a kind of verification system, comprising:
Application end 10, mobile terminal to be verified 20 and operator 30, wherein,
Described application end 10, for inputting phone number to be verified, and send the checking request comprising described phone number to be verified and application client information to operator 30, described application client information comprises: application end phone number and application end physical address;
Described operator 30, for receiving the checking request that described application end 10 is sent, and feeds back to mobile terminal to be verified 20 corresponding to phone number to be verified by described application client information and identifying code;
Described mobile terminal to be verified 20, for receiving the application client information and identifying code that operator 30 sends, and phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
In the present embodiment, by the information matches to the mobile terminal and mobile terminal to be verified of applying for checking, whether what judge identifying code exists security risk, and automatically provides different indicating risks according to judged result, improve the fail safe of identifying code, provide better Consumer's Experience.
In the present embodiment, namely application end also applies for that the mobile terminal verified is the terminal possessing communication function, is such as mobile phone.
In the present embodiment, when mobile terminal being provided with a certain third party application APP, such as: China Mobile 10086 logs in APP or Alipay etc., when needing to carry out authentication, the phone number needing user to send binding by mobile terminals such as mobile phones to operator is verified, can send an identifying code to binding phone number after being proved to be successful with the form of note.
In the present embodiment, when mobile terminal installs third party application APP first, the phone number of meeting automatic acquisition mobile terminal, physical address, afterwards, when mobile terminal receives the checking message of described third party application APP at every turn, capital is while sending checking request to operator, by the phone number of its correspondence, physical address and phone number to be verified (also i.e. the phone number bound of this third party application account) together send to operator, operator is while thinking that described phone number to be verified sends identifying code, also the phone number that the described application end received is corresponding, the mobile terminal to be verified that physical address and phone number to be verified together send to phone number to be verified corresponding, due to the phone number of acquisition for mobile terminal to be verified self, physical address and described apply for holding compare, if the match is successful, then represent that application end is same mobile terminal with mobile terminal to be verified, the user of described application identifying code is registered user, when applying for that end phone number is different from phone number to be verified, illustrate that the user of application checking is not registered user, cheat time likely, " cheat is just intending to deceive you now then to send the first indicating risk information, identifying code is not informed him ", if when application end phone number is identical with phone number to be verified, but physical address is different, also likely there is risk, then send the second indicating risk information " systems axiol-ogy to Bluetooth address and mobile phone WLANMAC address variation, if you do not change mobile phone, be very likely that cheat is gaining your identifying code by cheating, steal your personal information and property! ", only have when phone number and physical address complete identical time, just do not point out, now user can relieved use identifying code.
In the present embodiment, Fig. 4 is that a kind of third party application APP identifying code obtains interface, phone number to be verified is inputted when user obtains interface at the identifying code of application end, click after obtaining button, the application client information got is added in the message sending checking request to operator, described application client information is several fields, any deterioration of efficiency can't be caused, wherein, application client information can be encrypted generating ciphertext by system, operator can only know that the content oneself taken is the cellphone information of user, but cannot resolve, can operator be effectively avoided to peep userspersonal information like this, after operator gets checking request, a new message will be put together with the packing of the identifying code of described ciphertext and generation into, and be sent to the mobile terminal to be verified corresponding to phone number to be verified of user's input, after mobile terminal to be verified receives new message, described message is sent to system framework, described for receiving the application client information after encryption, and be decrypted, obtain application end phone number and application end physical address, carry out subsequently contrasting to obtain the result and the indicating risk corresponding with the result being provided.
In the present embodiment, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address, described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified, because described Bluetooth address and mobile terminal WLANMAC address are all corresponding ID address unique with mobile terminal, so both can separate use, certainly, in order to higher fail safe, this two also can one to reinstate, also namely when application is held and the phone number of mobile terminal to be verified, when Bluetooth address and mobile terminal WLANMAC three are all mated, just regard as safety, otherwise, first indicating risk information just as shown in Figure 5, accordingly, second indicating risk information just as shown in Figure 6.
Embodiment two
As shown in Figure 7, in the present embodiment, described mobile terminal 20 to be verified comprises: the first judging unit 21 and the second judging unit 22, wherein
Whether described first judging unit 21 is identical with described phone number to be verified for judging described application end phone number; If described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal 20 to be verified;
Described second judging unit 22, for when described application end phone number is identical with described phone number to be verified, judges that whether described application end physical address is identical with described mobile terminal physical address to be verified; If described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal 20 to be verified; If described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
Embodiment three
As shown in Figure 8, in the present embodiment, described application end 10 comprises:
Input unit 11, inputs phone number to be verified for obtaining interface at the APP identifying code of application end 10, triggers " click and obtain " button;
Encryption transmitting element 12, for obtaining application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application end phone number and application end physical address;
Correspondingly, as shown in Figure 9, described operator 30 comprises:
Receiving feedback unit, for receiving the application client information after encryption and identifying code, and the application client information after described encryption and identifying code being fed back to mobile terminal to be verified corresponding to phone number to be verified.
Embodiment four
Figure 10 is the flow chart of a kind of verification method of the present embodiment, describes a kind of verification method of the present embodiment below in conjunction with Figure 10, and as shown in Figure 10, a kind of verification method, comprising:
S10, application end input phone number to be verified, and the checking request comprising described phone number to be verified and application client information is sent to operator, described application client information comprises: application end phone number and application end physical address;
Described application client information and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by S20, operator;
S30, phone number to be verified and mobile terminal physical address to be verified carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
In the present embodiment, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address; Described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified.
Embodiment five
As shown in figure 11, in the present embodiment, described S30 comprises:
S31, judge described application end phone number whether identical with described phone number to be verified;
If S32 described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal to be verified;
If S33 described application end phone number is identical with described phone number to be verified, judge that whether described application end physical address is identical with described mobile terminal physical address to be verified;
If S34 described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal to be verified;
If S35 described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
Embodiment six
As shown in figure 12, in the present embodiment, described step S10 comprises:
S11, obtain interface at the APP identifying code of application end and input phone number to be verified, trigger " click obtain " button;
S12, acquisition application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application is held phone number and applied for end physical address;
Correspondingly, described S20 is specially:
Application client information after encryption and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by S21, described operator.
It should be noted that, in this article, term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability, thus make to comprise the process of a series of key element, method, article or device and not only comprise those key elements, but also comprise other key elements clearly do not listed, or also comprise by the intrinsic key element of this process, method, article or device.When not more restrictions, the key element limited by statement " comprising ... ", and be not precluded within process, method, article or the device comprising this key element and also there is other identical element.
The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.
Through the above description of the embodiments, those skilled in the art can be well understood to the mode that above-described embodiment method can add required general hardware platform by software and realize, hardware can certainly be passed through, but in a lot of situation, the former is better execution mode.Based on such understanding, technical scheme of the present invention can embody with the form of software product the part that prior art contributes in essence in other words, this computer software product is stored in a storage medium (as ROM/RAM, magnetic disc, CD), comprising some instructions in order to make a station terminal equipment (can be mobile phone, computer, server, air conditioner, or the network equipment etc.) perform method described in each embodiment of the present invention.
These are only the preferred embodiments of the present invention; not thereby the scope of the claims of the present invention is limited; every utilize specification of the present invention and accompanying drawing content to do equivalent structure or equivalent flow process conversion; or be directly or indirectly used in other relevant technical fields, be all in like manner included in scope of patent protection of the present invention.
Claims (10)
1. a verification system, is characterized in that, comprising: application end, mobile terminal to be verified and operator, wherein,
Described application end, for inputting phone number to be verified, and send the checking request comprising described phone number to be verified and application client information to operator, described application client information comprises: application end phone number and application end physical address;
Described operator, holds the checking request of sending for receiving described application, and described application client information and identifying code is fed back to mobile terminal to be verified corresponding to phone number to be verified;
Described mobile terminal to be verified, for receiving the application client information and identifying code that operator sends, and phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
2. a kind of verification system according to claim 1, is characterized in that, described mobile terminal to be verified comprises: the first judging unit and the second judging unit, wherein
Whether described first judging unit is identical with described phone number to be verified for judging described application end phone number; If described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal to be verified;
Described second judging unit, for when described application end phone number is identical with described phone number to be verified, judges that whether described application end physical address is identical with described mobile terminal physical address to be verified; If described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal to be verified; If described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
3. a kind of verification system according to claim 1, is characterized in that, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address; Described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified.
4. a kind of verification system according to claim 1, is characterized in that, described application end comprises:
Input unit, inputs phone number to be verified for obtaining interface at the APP identifying code of application end, triggers " click and obtain " button;
Encryption transmitting element, for obtaining application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application end phone number and application end physical address;
Correspondingly, described operator comprises:
Receiving feedback unit, for receiving the application client information after encryption and identifying code, and the application client information after described encryption and identifying code being fed back to mobile terminal to be verified corresponding to phone number to be verified.
5. a kind of verification system according to claim 4, it is characterized in that, be also provided with system framework in described mobile terminal to be verified, described system framework is for receiving the application client information after encryption, and be decrypted, obtain application end phone number and application end physical address.
6. a verification method, is characterized in that, comprising:
Application end input phone number to be verified, and the checking request comprising described phone number to be verified and application client information is sent to operator, described application client information comprises: application end phone number and application end physical address;
Described application client information and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by operator;
Phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and the indicating risk corresponding with the result is provided.
7. a kind of verification method according to claim 6, it is characterized in that, describedly phone number to be verified and mobile terminal physical address to be verified are carried out contrasting to obtain the result with described application client information and provides the indicating risk corresponding with the result to be specially:
Judge that whether described application end phone number is identical with described phone number to be verified;
If described application end phone number is different from described phone number to be verified, then there is security risk in identifying code, and show the first indicating risk information on described mobile terminal to be verified;
If described application end phone number is identical with described phone number to be verified, judge that whether described application end physical address is identical with described mobile terminal physical address to be verified;
If described application end physical address is different from described mobile terminal physical address to be verified, then there is security risk in identifying code, and show the second indicating risk information on described mobile terminal to be verified;
If described application end physical address is identical with described mobile terminal physical address to be verified, then identifying code safety.
8. a kind of verification method according to claim 6, is characterized in that, described application end physical address is: application end Bluetooth address and/or application end WLANMAC address; Described mobile terminal physical address to be verified is: mobile terminal Bluetooth address to be verified and/or mobile terminal WLANMAC address to be verified.
9. a kind of verification method according to claim 6, is characterized in that, described application end input phone number to be verified, and is specially to the checking request that operator's transmission comprises described phone number to be verified and application client information:
Obtain interface at the APP identifying code of application end and input phone number to be verified, trigger " click and obtain " button;
Obtain application client information, encrypted by described application client information and be together sent to operator with described phone number to be verified, wherein, described application client information comprises: application end phone number and application end physical address;
Correspondingly, the mobile terminal to be verified that described application client information and identifying code are fed back to phone number to be verified corresponding by described operator is specially:
Application client information after encryption and identifying code are fed back to mobile terminal to be verified corresponding to phone number to be verified by described operator.
10. a kind of verification method according to claim 9, it is characterized in that, be provided with system framework in described mobile terminal to be verified, described system framework is for receiving the application client information after encryption, and be decrypted, obtain application end phone number and application end physical address.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510543545.1A CN105208011B (en) | 2015-08-31 | 2015-08-31 | A kind of verifying system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510543545.1A CN105208011B (en) | 2015-08-31 | 2015-08-31 | A kind of verifying system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105208011A true CN105208011A (en) | 2015-12-30 |
| CN105208011B CN105208011B (en) | 2019-07-30 |
Family
ID=54955445
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510543545.1A Active CN105208011B (en) | 2015-08-31 | 2015-08-31 | A kind of verifying system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105208011B (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105550533A (en) * | 2016-02-24 | 2016-05-04 | 成都信汇聚源科技有限公司 | Electrocardiograph information acquisition and management method |
| CN106507343A (en) * | 2016-09-07 | 2017-03-15 | 努比亚技术有限公司 | A kind of information processing method, mobile terminal and server |
| CN106790264A (en) * | 2017-02-07 | 2017-05-31 | 努比亚技术有限公司 | Authentication system and method, the server for authentication and checking equipment |
| CN107707355A (en) * | 2016-08-08 | 2018-02-16 | 中国电信股份有限公司 | Terminal authentication method and system |
| CN108668241A (en) * | 2018-04-16 | 2018-10-16 | Oppo广东移动通信有限公司 | Information prompting method, device, storage medium and electronic equipment |
| CN109639719A (en) * | 2019-01-07 | 2019-04-16 | 武汉稀云科技有限公司 | A kind of auth method and device based on temporary identifier |
| CN110149625A (en) * | 2019-06-14 | 2019-08-20 | 北京么登科技有限公司 | Phone number verification method and system |
| CN111741469A (en) * | 2020-06-11 | 2020-10-02 | 上海闻泰电子科技有限公司 | Information security verification method, device, equipment and storage medium |
| CN112581225A (en) * | 2020-12-14 | 2021-03-30 | 常青藤科技河北有限公司 | One-key type call answering method |
| CN113821774A (en) * | 2021-09-07 | 2021-12-21 | 安徽继远软件有限公司 | Terminal security risk module matching and verifying system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101753305A (en) * | 2008-12-22 | 2010-06-23 | 康佳集团股份有限公司 | Network security certification method, device and system |
| CN102685090A (en) * | 2011-11-16 | 2012-09-19 | 北京十分科技有限公司 | System login method |
| CN103607400A (en) * | 2013-11-26 | 2014-02-26 | 深圳市掌众信息技术有限公司 | Improved mobile phone identity verification method and system |
| CN103763101A (en) * | 2013-10-18 | 2014-04-30 | 北京奇虎科技有限公司 | Method, apparatus, and system for user login verification |
| CN104580117A (en) * | 2013-10-28 | 2015-04-29 | 深圳市腾讯计算机系统有限公司 | Authentication method, device and system |
-
2015
- 2015-08-31 CN CN201510543545.1A patent/CN105208011B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101753305A (en) * | 2008-12-22 | 2010-06-23 | 康佳集团股份有限公司 | Network security certification method, device and system |
| CN102685090A (en) * | 2011-11-16 | 2012-09-19 | 北京十分科技有限公司 | System login method |
| CN103763101A (en) * | 2013-10-18 | 2014-04-30 | 北京奇虎科技有限公司 | Method, apparatus, and system for user login verification |
| CN104580117A (en) * | 2013-10-28 | 2015-04-29 | 深圳市腾讯计算机系统有限公司 | Authentication method, device and system |
| CN103607400A (en) * | 2013-11-26 | 2014-02-26 | 深圳市掌众信息技术有限公司 | Improved mobile phone identity verification method and system |
Cited By (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105550533A (en) * | 2016-02-24 | 2016-05-04 | 成都信汇聚源科技有限公司 | Electrocardiograph information acquisition and management method |
| CN107707355B (en) * | 2016-08-08 | 2021-02-05 | 中国电信股份有限公司 | Terminal authentication method and system |
| CN107707355A (en) * | 2016-08-08 | 2018-02-16 | 中国电信股份有限公司 | Terminal authentication method and system |
| CN106507343A (en) * | 2016-09-07 | 2017-03-15 | 努比亚技术有限公司 | A kind of information processing method, mobile terminal and server |
| CN106790264A (en) * | 2017-02-07 | 2017-05-31 | 努比亚技术有限公司 | Authentication system and method, the server for authentication and checking equipment |
| CN108668241A (en) * | 2018-04-16 | 2018-10-16 | Oppo广东移动通信有限公司 | Information prompting method, device, storage medium and electronic equipment |
| CN108668241B (en) * | 2018-04-16 | 2021-04-13 | Oppo广东移动通信有限公司 | Information reminding method and device, storage medium and electronic equipment |
| CN109639719A (en) * | 2019-01-07 | 2019-04-16 | 武汉稀云科技有限公司 | A kind of auth method and device based on temporary identifier |
| CN109639719B (en) * | 2019-01-07 | 2020-01-24 | 武汉稀云科技有限公司 | Identity verification method and device based on temporary identifier |
| CN110149625A (en) * | 2019-06-14 | 2019-08-20 | 北京么登科技有限公司 | Phone number verification method and system |
| CN111741469A (en) * | 2020-06-11 | 2020-10-02 | 上海闻泰电子科技有限公司 | Information security verification method, device, equipment and storage medium |
| CN111741469B (en) * | 2020-06-11 | 2023-12-19 | 上海闻泰电子科技有限公司 | Information security verification method, device, equipment and storage medium |
| CN112581225A (en) * | 2020-12-14 | 2021-03-30 | 常青藤科技河北有限公司 | One-key type call answering method |
| CN112581225B (en) * | 2020-12-14 | 2022-05-10 | 常青藤科技河北有限公司 | One-key type call answering method |
| CN113821774A (en) * | 2021-09-07 | 2021-12-21 | 安徽继远软件有限公司 | Terminal security risk module matching and verifying system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105208011B (en) | 2019-07-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105208011A (en) | Verification system and method | |
| CN105117123A (en) | Device and method for displaying hidden object | |
| CN105101052A (en) | Method, system and mobile terminal for transferring SIM card | |
| CN104918208A (en) | Mobile terminal pairing method and mobile terminal | |
| CN104735255A (en) | Split screen display method and system | |
| CN104793849A (en) | Application icon display method and device | |
| CN104992101A (en) | Mobile terminal desktop icon display method and device | |
| CN105095790A (en) | Hidden object view method and device | |
| CN104915119A (en) | Regulation method and device of terminal desktop icon | |
| CN104636030A (en) | Method and device for starting application programs and mobile terminal | |
| CN104850799A (en) | Mobile terminal and method of hiding data in mobile terminal | |
| CN105094532A (en) | Method and device for data access | |
| CN104837113A (en) | Privacy information display method and terminal | |
| CN104820555A (en) | Transverse and vertical screen modes switching method and device, and terminal | |
| CN104951236A (en) | Wallpaper configuration method for terminal device, and terminal device | |
| CN104932697A (en) | Gesture unlocking method and device | |
| CN104834863A (en) | Wi-Fi password storage method and apparatus | |
| CN105096107A (en) | Safe transfer method and system through fingerprint recognition | |
| CN105357367A (en) | Keystroke identification device and method based on pressure sensor | |
| CN105138880A (en) | Processing apparatus and method for terminal operation data | |
| CN105138871A (en) | Unlocking method and apparatus for mobile terminal and mobile terminal | |
| CN105101187A (en) | Method and system for processing encrypted information | |
| CN104820797A (en) | Method and device for managing application account | |
| CN105050076A (en) | Virtual card user interface management method and system | |
| CN105389007A (en) | Application processing apparatus and method, and mobile terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |