TW201316741A - Authentication system, method and programmed products - Google Patents

Abstract

The invention provides a system and a method for authenticating users' account numbers and the related programmed products. In a setup stage, a user inputs the account number and password to log in onto the service platform, and the service platform then generates a code to be acquired by an electronic device for transmitting device data and the code to the service platform to thus generate a correlation therebetween. In an authentication stage, the user manipulates the electronic device to inform the service platform to open the user account number login function before logging into the service platform for allowing the service platform to be informed and open the login function according to the correlated data opened by the electronic device, thereby providing users with a service platform for inputting account numbers and passwords thereto to complete the login process by authentication and increase security as a result.

Description

Account authentication system, method and program product

The present invention relates to an account authentication system, method and program product, and more particularly to an account authentication system and method for an electronic device and an account authentication program product for an electronic device.

With the increasing use of Internet technology, more and more people use the Internet to search for information, send and receive emails, subscribe to e-newsletters, online shopping, connected games, community chats, etc. Most websites require users to become members. Use the aforementioned features.

The so-called membership means that the user enters the personal basic information and sets the account number and password of the login website before the website is authenticated. After the website is authenticated, the user becomes a member of the website. The user needs to input the previously set when logging in to the website. The account number and password must be logged in to the website. Generally speaking, the authentication strength of the account and password depends on the account selected by the user and the password itself, such as the length of the account or password, the arrangement of the combination of letters and numbers, the repetition rate of the same character, the complexity, etc. Therefore, the more complex and irregular account or password, the harder it is to crack.

However, in recent years, there have been numerous incidents of misappropriation of account numbers. If a hacker implants a Trojan or a side-recording software on a user's computer, or copies a login page of a well-known website, and then uses spam or instant messaging to send a link, the user is tempted. Log in, and then directly defraud the user's account, password, and even name, address, phone and credit card information, and then use this information to obtain improper benefits. As a result, even if the account password is set to be complicated, the account password cannot be effectively prevented from flowing out.

Currently, there are many mechanisms on the market to enhance the security of account passwords, such as using a virtual dynamic keyboard on the login page, or connecting a physical dynamic password lock on a computer, or adding a step to verify the computer that logs into the website. However, the virtual dynamic keyboard cannot avoid the trap of the phishing website, and the dynamic password lock of the entity is not only inconvenient to operate, but also the technology of one-time password used in the password lock is easy to crack, and the computer that verifies the login website is also quite complicated and operates. inconvenient.

In view of the above disadvantages of the prior art, an object of the present invention is to provide an account authentication system, method and program product for increasing security on account and password authentication.

To achieve the foregoing and other objects, the present invention provides an account authentication system, including: an electronic device and a service platform, wherein the electronic device includes an acquisition module for obtaining a code, and a data for outputting the code and the electronic device. a transmission module and a notification opening module for issuing a notification of a login function for opening a user account, wherein the service platform is for the user to input an account number and password to log in to the service platform, the service platform includes Generating a code for the electronic device to obtain a code generating module associated with the user's account, receiving data of the electronic device and the code output by the electronic device, and causing the code The receiving module associated with the data of the electronic device and the notification function for receiving the login function of the account opened by the electronic device to open the associated use of the data according to the data of the electronic device The login function of the user's account, for the user to enter the account and password on the service platform, and then the service The service platform login module after the account open platform certification.

The electronic device further includes a reading module for reading the code obtained from the acquisition module. In addition, the electronic device can be loaded with an account authentication program product, wherein the acquisition module, the reading module, the transmission module, and the notification opening module are included in the account authentication program product.

In addition, in order to achieve the foregoing and other objects, the present invention provides an account authentication method, including the following steps: (1) a user inputs an account and a password on a service platform to log in to the service platform; and (2) causes the service platform to generate a code. And causing the code to be associated with the user's account; (3) causing the electronic device to obtain and read the code, and transmitting the electronic device's data and the code to the service platform, causing the code and the electronic (4) before the user logs in to the service platform, the electronic device is notified to the service platform to enable the login function of the user's account; and (5) the service platform receives the notification of the electronic device And the login function of the account of the user associated with the data is opened according to the information of the electronic device, and the user is input the account and password on the service platform, and then the service platform is authenticated and then login to the service platform.

The code may be a one-dimensional code or a two-dimensional code. In the step (2), the service platform generates the code and displays it on a webpage of the service platform, and in the step (3), the electronic device The code is taken by the web page for interpretation, or the electronic device can also obtain the code by means of a short message or an email.

The login function of the user's account may be closed after a predetermined time has elapsed, or may be closed immediately after the user inputs the account and password to log in to the service platform.

In addition, in order to achieve the foregoing and other objects, the present invention further provides an account authentication program product, which is applicable to an electronic device, so that the electronic device performs the following steps: (1) obtaining a code from a service platform, where In the service platform, the code is associated with the user's account; (2) transmitting the information of the electronic device and the code to the service platform, so that the code and the device data are associated in the service platform; and (3) Before the user logs in to the service platform, the service platform is notified to open the login function of the user's account, so that the service platform receives the notification of the electronic device and opens the user associated with the data according to the data of the electronic device. Login function of the account.

Compared with the previous login of the user's account and password when logging in to the website, the website may combine the dynamic keyboard and other protection measures to strengthen the security of the account and password. However, once the user's account and password are stolen, Any protection measures on the website will not work. Therefore, by using the account authentication system, method and application of the program of the present invention, the security of account and password authentication is increased.

In the following, the technical content of the present invention will be described by a specific embodiment, and those skilled in the art can easily understand other advantages and effects of the present invention by the contents disclosed in the present specification, and can also be implemented by other different embodiments. Or application.

Please refer to FIG. 1A, which generally discloses the architecture of the account authentication system of the present invention. The account authentication system includes an electronic device 2 and a service platform 3. The electronic device 2 can include an acquisition module 21, a transmission module 22, and a notification opening module 23. The service platform 3 can include a code generation module 31, a receiving module 32, and an account opening module 33.

The electronic device 2 can be, for example, an electronic device having a networking function such as a mobile phone, a PDA, a tablet computer, or a notebook computer.

The acquisition module 21 is used to obtain code from the service platform 3. The acquisition module 21 can be a network transceiver module to obtain a code by means of a short message or an e-mail. Alternatively, as shown in FIG. 1B, the acquisition module 21 can also directly pass through the imaging module 25 of the electronic device 2 to directly The code is displayed on the webpage of the service platform 3, wherein the code displayed on the webpage by the service platform 3 can be a one-dimensional code or a two-dimensional code (such as Quick Response code; QR code), and the electronic device 2 includes reading. The module 24 is configured to interpret the code obtained by the acquisition module 21.

The transmission module 22 is configured to output the code and the data of the electronic device 2 to the service platform 3 after the code is obtained. The data of the electronic device 2 may be the number or serial number of the electronic device. In the embodiment where the electronic device 2 is a mobile phone, the data of the electronic device 2 may also include a phone number or a Subscriber Identity Module (SIM) card number.

The notification opening module 23 is configured to issue a notification of the login function of opening the account of the user 1 to the service platform 3 before the user 1 logs into the service platform 3. In detail, before logging in to the service platform 3, the user 1 operates the electronic device 2 to cause the electronic device 2 to notify the service platform 3 to open the login function of the account of the user 1.

In addition, the acquisition module 21, the transmission module 22, the notification opening module 23, the reading module 24, and the imaging module 25 can be included in a program product for loading by the electronic device 2.

The service platform 3 is used for the user 1 to input an account number and password to log in to the service platform 3. As shown in FIG. 1B, the service platform 3 includes a login module 34. The user 1 uses the login module 34 to input an account number and password, and the service platform 3 authenticates the account and password, that is, the service platform 3 It will be confirmed whether the service platform 3 has the account number and whether the password corresponds to the account. When the service platform 3 has the account number and the password corresponds to the account number, it indicates that the authentication is passed, and then the user 1 starts to log in.

The code generation module 31 is configured to generate the code provided to the electronic device 2 such that there is an association between the code and the account number of the user 1. In an embodiment, after the user 1 logs in to the service platform 3 after the account and password are authenticated, the service platform 3 randomly generates a set of codes. At this time, in the service platform 3, the code and the account of the user 1 are The inter-system produces an association.

The receiving module 32 is configured to receive the data of the electronic device 2 output by the electronic device 2 and the code, so as to associate the code with the data of the electronic device 2. In detail, after the service platform 3 generates the code, the electronic device 2 can obtain the code through a short message or an email, or shooting, and then the code together with its own data, such as number, serial number, telephone number or SIM card number, etc. The data is transmitted to the service platform 3, and when the receiving module 32 receives the code and the data of the electronic device 2, the code is associated with the data of the electronic device 2 in the service platform 3. It should be understood that since the code has been associated with the account of the user 1 and the data of the electronic device 2 is also associated, the account number of the user 1, the code, and the data of the electronic device 2 are three. There is an association between them.

The account opening module 33 is configured to receive a notification of the login function of the user 1 to open the account of the user 1 issued by the electronic device 2, and to enable the login function of the account 1 of the user 1 associated with the data according to the data of the electronic device 2, wherein The login function of the account of the user 1 can be closed after a predetermined time has elapsed, or can be closed immediately after the user 1 logs in to the service platform 3 by using the account. Then, after the account opening module 33 opens the login function of the account of the user 1, the user 1 can input the account and password on the service platform 3, and then log in to the service platform 3 after being authenticated by the service platform 3.

Therefore, it can be seen from the description of the first and the first embodiments that the prior art only authenticates the account and the password entered by the user when the user logs in to the service platform, and in the embodiment disclosed by the present invention, In addition to the authentication account and password, the login function of the account is controlled based on the data of the user's electronic device, thereby increasing the security of the account and password.

Furthermore, the account authentication method proposed by the present invention can be divided into two phases in detail, including a setting phase and an authentication phase, which are respectively described in FIG. 2A and FIG. 2B.

In FIG. 2A, in step S301, the user enters an account number and password on the service platform to log in to the service platform. In current web applications, users must first become a member of the service platform that provides services for e-mail, online shopping, community chat, etc., that is, first register personal information (including account number and Password) Become a member to log in with the account and password set when logging in to the service platform next time. In other words, the user has to log in to the service platform before setting the association between the electronic device and the account. Then it proceeds to step S302.

In step S302, the service platform is caused to generate code. At this point, the account of the user within the service platform is associated with the generated code. Then it proceeds to step S303.

In step S303, the electronic device is caused to acquire and read the code. The service platform can transmit the code to the electronic device by way of a short message or an email. In one embodiment, the service platform displays the code, such as a one-dimensional code or a two-dimensional code (such as QR code) on its web page, and the electronic device can capture the code for interpretation. Then it proceeds to step S304.

In step S304, the electronic device is caused to transmit the data of the electronic device and the code to the service platform. At this time, the information of the electronic device, the code, and the account of the user are associated.

At this point, the setting of the electronic device is completed. After the setting is completed, the user can use the electronic device to enhance the security of the account and password when logging in to the service platform again.

In FIG. 2B, in step S305, the electronic device is notified to the service platform to enable the login function of the user's account. If the user does not operate the electronic device to notify the service platform to open the login function of the user's account, the user cannot log in. In addition, the opening of the account is time-sensitive, for example, it is closed after a predetermined time is opened or immediately after the user logs in to the service platform, thereby preventing the third party from logging in to the service after logging in to the service platform. In the case of the platform, that is, the third party who avoids stealing the account is impersonated to log in to the service platform. Then it proceeds to step S306.

In step S306, the service platform receives the notification of the electronic device, and opens a login function of the user's account associated with the data according to the data of the electronic device. Since the data of the electronic device, the code, and the account number of the user are previously associated in the setting phase, in the authentication phase, the account of the user associated with the data may be opened according to the data of the electronic device. Login function. Then it proceeds to step S307.

In step S307, the user inputs the account number and password on the service platform, and logs in to the service platform after passing the authentication of the service platform. When the account entered by the user is not associated with the device of the electronic device, the authentication fails.

In addition, in the specific implementation, the applicant (inventor) develops an authentication program product for loading the electronic device, so that the electronic device executes: obtaining the code from the service platform, transmitting the data of the electronic device, and the code to the service platform. And notifying the service platform to open the login function of the user's account.

In summary, the account authentication system, method, and program product proposed by the present invention use an electronic device as a tool for increasing account authentication security, and prior to the service platform, the user's account number, code, and electronic device data are used. Relevance, and then notify the service platform to open the login function of the user's account before logging in to the service platform. This is because the service platform can know the data of the electronic device when receiving the notification of the electronic device, and can then use the data to open the login function of the user's account, so that the user can log in to the service platform. Therefore, even if the third party knows the user's account, the user cannot log in to the service platform because there is no information about the user's electronic device. Even if the third party knows the data of the user's electronic device, because the user does not have the electronic device and cannot operate the electronic device to perform the step of notifying the service platform to open the login function of the user's account, Unable to login to the service platform.

Therefore, through the application of the present invention, the problem of the development and maintenance cost of the virtual dynamic keyboard of the service platform, the inconvenience of the user caused by the physical dynamic password lock, and the like can be avoided in the prior art, and the user inputs the login page of the service platform. For the account number and password, you do not need to verify the complicated operation of the computer that is logged in to the service platform or enter the one-time password. You only need to use the electronic device notification service platform to open the login function of the user's account before logging in to the service platform. Since the electronic device is often held by an individual, it is difficult for the hacker to easily obtain it, which can effectively improve the authentication security of the account and the password.

The above embodiments are merely illustrative of the principles and effects of the invention and are not intended to limit the invention. Modifications and variations of the above-described embodiments can be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of protection of the present invention should be as set forth in the scope of the claims described below.

1. . . user

2. . . Electronic device

twenty one. . . Get module

twenty two. . . Transmission module

twenty three. . . Notification opening module

twenty four. . . Read module

25. . . Shooting module

3. . . Service Platform

31. . . Code generation module

32. . . Receiving module

33. . . Account opening module

34. . . Login module

S301~S307. . . step

1A is a block diagram showing the basic architecture of an embodiment of an account authentication system of the present invention;

1B is a block diagram showing the basic architecture of another embodiment of the account authentication system of the present invention;

2A is a flow chart showing a setting phase of the account authentication method of the present invention;

2B is a flow chart of the authentication phase of the account authentication method of the present invention.

1. . . user

2. . . Electronic device

twenty one. . . Get module

twenty two. . . Transmission module

twenty three. . . Notification opening module

3. . . Service Platform

31. . . Code generation module

32. . . Receiving module

33. . . Account opening module

Claims (15)

An account authentication system includes: an electronic device comprising: an acquisition module for obtaining a code; a transmission module for outputting the code and the data of the electronic device; and a notification opening module for issuing the user to open a notification of the login function of the account; and a service platform for the user to enter the account and password to log in to the service platform, the service platform comprising: a code generation module for generating the code for the electronic device, 俾Having the code associated with the user's account; the receiving module is configured to receive the data of the electronic device and the code output by the electronic device, and associate the code with the data of the electronic device And an account opening module for receiving a notification of the login function of the user's account opened by the electronic device, and opening the login function of the account of the user associated with the data according to the information of the electronic device, The user enters the account number and password on the service platform, and then logs in to the service platform after passing the certification of the service platform. The account authentication system of claim 1, wherein the electronic device comprises a reading module for reading the code obtained from the obtaining module. The account authentication system of claim 2, wherein the electronic device has a shooting module, and the code is a one-dimensional code or a two-dimensional code, and the code generating module generates the code and displays the code On the webpage of the service platform, the capture module captures the code from the webpage and then uses the acquisition module for interpretation by the reader module. The account authentication system of claim 2, wherein the electronic device carries an account authentication program product, and wherein the obtaining module, the reading module, the transmitting module, and the notification opening module comprise In the account certification program product. The account authentication system of claim 1, wherein the acquiring module of the electronic device obtains the code by means of a short message or an email. The account authentication system of claim 1, wherein the service platform further includes a login module for the user to input the account and password, and the service platform authenticates the account and password. After the certification is passed, the user is logged into the service platform. The account authentication system of claim 1, wherein the login function of the user's account is closed after a predetermined time is started. The account authentication system of claim 1, wherein the user's account login function is closed immediately after the user inputs the account and password to log in to the service platform. The account authentication system of claim 1, wherein the data of the electronic device includes a number, a serial number, a telephone number or a user identification module card number of the electronic device. An account authentication method includes the following steps: (1) a user inputs an account and a password on the service platform to log in to the service platform; and (2) causes the service platform to generate a code to associate the code with the user's account; (3) causing the electronic device to obtain and read the code, and then transmitting the data of the electronic device and the code to the service platform to associate the code with the data of the electronic device; (4) logging in to the user Before the service platform, the electronic device is notified to the service platform to enable the login function of the user's account; and (5) the service platform receives the notification of the electronic device and opens the user associated with the data according to the data of the electronic device The login function of the account is for the user to enter the account and password on the service platform, and then log in to the service platform after passing the certification of the service platform. The account authentication method according to claim 10, wherein in the step (2), the code is a one-dimensional code or a two-dimensional code, and the service platform generates the code and displays the webpage on the service platform. In step (3), the electronic device captures the code from the web page for interpretation. The method for authenticating an account number according to claim 10, wherein in the step (3), the electronic device obtains the code by means of a short message or an email. The method for authenticating an account according to claim 10, wherein in step (5), the login function of the user's account is closed after a predetermined time is started. The method for authenticating an account as described in claim 10, wherein in step (5), the login function of the user's account is closed immediately after the user inputs the account and password to log in to the service platform. An account authentication program product is embodied in an electronic device, so that the electronic device performs the following steps: obtaining a code from a service platform, wherein the code is associated with a user account in the service platform; and transmitting the electronic device And the code to the service platform, the code and the electronic device are associated with the service platform; and the user is notified to open the user's account before the user logs in to the service platform The login function enables the service platform to receive the notification of the electronic device and open the login function of the account of the user associated with the data according to the data of the electronic device.