TW201419820A - Network security authentication method using proximity to verify identity - Google Patents

Abstract

A network security authentication method using proximity to verify identity is applied to an authentication server and cooperatively operated with a user terminal, a personal portable device and a content provider server. The method is provided to compare the hardware scan data of the user terminal and the personal portable device with a pre-built database to determine whether the data is existed in the pre-built database, wherein both the user terminal and the personal portable device must meet the relationship of similar location operation. If not in line with the relationship of similar location operation, the authentication server determines the inspection as an abnormal operating state, and the inspection result is sent back to the content provider server or the user terminal. The present invention can reduce processing costs, and prevent a remote hacker from using fraudulent identity to carry out attacks or illegal operations. Preferably, the judgment rule of the relationship of similar location operation is such that: the user terminal and the personal portable device have the same GPS positioning location, or the user terminal and the personal portable device share the same network address, or the user terminal and the personal portable device share an identical location on a mobile communication network.

Description

Network security verification method for verifying identity by user location

The present invention relates to a network authentication method, and more particularly to a network security verification method for verifying an identity by a user location.

With the advancement of the times, the popularity of the Internet, the increase in network bandwidth and the ubiquity of wireless technology, the popularity of personal portable devices such as smart phones and tablets, coupled with the rapid development of cloud services, allows everyone to live 24 hours. These modern technologies are inseparable. In addition, the problem of the credit card being stolen by the Internet or the Point of Sale (POS) system and the stolen Internet at the ATM is also the result of insufficient security.

But these modern technologies, wherever they are, have all the negative effects: if there is no secure authentication, all kinds of valuable online services are difficult to provide via the Internet, otherwise it will take a lot of Risks and losses, such as personal privacy, confidential information, bank deposits, or credit cards, can be stolen at any time.

The online verification products for decades have not been suitable for the ever-changing products and services of the Internet. It is not safe enough or the cost is too high, and it is not convenient to use and can not be fully promoted. New thinking, new technologies and products can meet today's and tomorrow's needs.

The general user conducts intra-network transactions, such as: Internet Content Provider (ICP), the existing transaction verification technology for verifying the identity of the user, the missing includes: the authentication hardware of the required distribution entity To the user, but must also consider the identity of the entity The material and management costs of the hardware and the labor costs of the related business; in addition, the identity of the user is confirmed by the code and password information, and the remote Internet hacker's ever-changing attack cannot be solved.

Accordingly, the present invention is directed to a network security verification method for verifying identity by a user location that addresses the aforementioned deficiencies.

The network security verification method of the present invention is applied to a verification server, and cooperates with a user terminal, a person portable device and a content provider server. The method comprises the following steps: (a) the content provider server Requiring the verification server to check the identity of the user; (b) the verification server obtains the hardware scan data of the user terminal and the personal portable device, and locates the user terminal and the personal portable device; (c) the verification server compares the hardware scan data of the user terminal and the personal portable device with a pre-built database, and determines whether there is a pre-built database to determine the user terminal and the individual. Whether the portable device is owned by the user, and the user terminal and the personal portable device need to be associated with the operation of the similar geographical location, and if the association is not in accordance with the operation of the geographical proximity, the abnormal operation state is determined, and The result of the check is passed back to the content provider server or the terminal.

In a first embodiment of the network security verification method of the present invention, the step (b) includes the substep of: notifying the user terminal to perform a first verification procedure by the verification server or by the content provider server, The first verification program is a scan data of the hardware component identification code combination of the hardware components scanned by the plurality of hardware components of the terminal, and the positioning of the terminal Obtaining a positioning data representing a location of the terminal at the time of use, the user terminal transmitting the first scan data and the first location data to the verification server, and the verification server or the content provider server or using Driving the preset software in the personal portable device to perform a second verification process, the second verification program is to scan a plurality of hardware components of the personal portable device to obtain a hardware component identification code having a plurality of hardware components Combining the second scan data and positioning the personal portable device to obtain a second location data representing a location of the personal portable device at the time, the personal portable device transmitting the second scan data and the second Locating the data to the verification server; and the step (c) is: the verification server compares the first scan data and the second scan data of the user terminal and the personal portable device with a pre-built database Determining whether there is a pre-built database to determine whether the user terminal and the personal portable device are owned by the user, and according to the first location The second materials is determined whether location data associated with the operation of similar location, if not, it is determined that an abnormal operating state, and the authentication server will check the results back to the server or the content provider using the terminal.

Preferably, the determining rule of the associated geographical location operation of the first embodiment is that the user terminal and the personal portable device have the same GPS positioning location, or the user terminal and the personal portable device share the same network. The location of the road, or the location of the terminal and the personal portable device sharing the same mobile communication network.

In a second embodiment of the network security verification method of the present invention, the step (b) includes the substep of: notifying the user terminal to perform a first verification procedure by the verification server or the content provider server, the A verification procedure is for And scanning, by the plurality of hardware components of the terminal, a scan data of the hardware component identification code combination of the hardware components, and positioning the use terminal to obtain a positioning data representing a location of the use terminal at the time, The verification server or the content provider server or the user drives the preset software in the terminal to execute a second verification program, where the second verification program is that the user terminal determines whether the personal portable device is in the vicinity of the user terminal. Position, if yes, the user terminal establishes a connection with the personal portable device, and scans a hardware component of the personal portable device to obtain a second scan data having a hardware component identification code, and the use terminal transmits the The second scan data is sent to the verification server; and the step (c) is that the verification server associates the first scan data, the positioning data and the second scan data of the user terminal and the personal portable device with the pre-built The database is compared to determine whether there is a pre-built database to determine whether the user terminal and the personal portable device are the user Owned, and based on the positioning data to determine whether the association is similar to the operation of the location.

Preferably, the determining rule of the associated geographical location operation of the second embodiment is that the user terminal and the personal portable device are connected to each other via near field communication, or the user terminal and the personal portable device share the same Short-range wireless network. The user terminal is connected to the content provider by a first communication pipe, and the user terminal is connected to the verification server by a second communication pipe different from the first communication pipe.

The third embodiment of the network security verification method of the present invention is applied to a verification server, and cooperates with a use terminal, a person portable device and a content provider server, and the use terminal is an automatic cash machine. Or a sales end Point, the content provider server is a card issuer providing a user-a credit card or a bank card; the method includes the following steps: (a) the content provider server requires the verification server to provide the user's individual The location of the portable device; (b) the authentication server obtains the hard scan data of the personal portable device and locates the personal portable device; (c) the authentication server hardens the personal portable device Comparing the volume scan data with the pre-built database to determine whether there is a pre-built database to determine whether the personal portable device is owned by the user, and if so, handing the location to the content provider And the (d) the content provider server compares the use terminal and the personal portable device with the association of the similar geographical operations, and if the association does not meet the similar geographical operation, the abnormal operation state is determined. And return the inspection result to the user terminal.

Preferably, the determining rule of the associated geographical location operation of the third embodiment is that the user terminal and the personal portable device are connected to each other via near field communication, or the user terminal and the personal portable device share the same Short-range wireless network.

The effect of the network security verification method of the present invention is:

1. Strengthening transaction security: The present invention adopts a dual verification technology, that is, simultaneously verifying two types of physical devices of the user, and cooperating with the verification server to determine whether the use terminal and the personal portable device comply with the association of similar geographical operations to confirm the identity of the user. It can avoid the problem of remote hackers stealing identity data.

2. Cost saving: the user can use the existing mobile device as the personal portable device required for double verification. Therefore, the network content provider does not need to issue the entity's identity verification hardware to the user, which can save the entity. Authentication hardware Material and management costs, as well as labor costs for processing related businesses.

The above and other technical features, features, and advantages of the present invention will be apparent from the following detailed description of the preferred embodiments. Before the present invention is described in detail, it is noted that in the following description, similar elements are denoted by the same reference numerals.

Referring to FIG. 1, the network security verification method of the present invention is applied to an authentication server 1 of an Identity Provider (IDP), and cooperates with a user terminal 11 of a user 5, and a user uses the content provider when logging in to the content provider. Personal portable device 12, and a content provider (ICP) server 3, and the authentication server 1, the use terminal 11 and the content provider server 3 are connected to each other by a communication network 500; The content provider 3 is connected by a first communication pipe, and the terminal 11 and the verification server 1 are connected by a second communication pipe different from the first communication pipe, and the first communication channel is communicated with the first communication pipe. The pipeline is separated to improve the security level. Because the general network authentication (including identity authentication and digital signature) only uses the first communication pipeline, the hacker also knows how to attack. The invention is combined with the second communication pipeline, and the hacker is very It is difficult to attack the second communication pipe at the same time.

It should be noted that the “close geographical location” in this embodiment is a “closely” geographical location, and the verification server 1 can make different judgments according to different situations, and thereafter, the meaning is not repeated.

The principle of the method of the present invention is: First, the user 5 views the website information provided by the content provider server 3 by using a browser using the terminal 11, and inputs the data, that is, uses the personal code and password to log in to the content provider. Server 3. In this embodiment, after determining that the personal code and password of the user 5 are correct, the content provider server 3 requests the authentication server 1 to perform identity verification on the user 5 via the second pipe.

Then, the verification server 1 obtains the hardware scan data of the user terminal 11 and the personal portable device 12, and the hardware scan data includes the hardware components of the terminal 11 and the personal portable device 12 (eg, the motherboard, the central processing unit). Or a unique identification code of the transmission interface or the like, and the positioning is performed for the use terminal 11 and the personal portable device 12.

Then, the verification server 1 compares the hardware scan data of the terminal 11 and the personal portable device 12 with a pre-built database (not shown) to determine whether there is a pre-built database to determine the use. Whether the terminal and the personal portable device are owned by the user, and the use terminal 11 and the personal portable device 12 are required to be in association with similar geographical operations, and if the use terminal 11 and the personal portable device 12 do not meet the requirements, The association of the similar geographical operations is judged to be an abnormal operation state, and the inspection result is transmitted back to the content provider server 3 or the use terminal 11.

It should be noted that the definition of the personal portable device 12 as defined in FIG. 1 belongs to any type of active device (Active Device), wherein the active device may be (but not limited to): a notebook computer, a smart phone or a tablet. A computer, generally referred to as a personal portable device 12 that can install a software program and can transmit data to the authentication server 1 by itself. The definition of the personal portable device 12 as defined in FIG. 2 belongs to any passive device or any active device, wherein the passive device can be (but is not limited to): a traditional mobile phone, a bank card, a credit card or a SIM card. , means: one cannot install any The software program cannot transfer the data to the verification server 1 by itself, but can connect and transmit the personal portable device 12 of the data using terminal 11; the definition of the active device is as described above, and the description is not repeated here.

Referring to FIG. 1 and FIG. 3, in the first embodiment of the network security verification method of the present invention, the personal portable device 12 is an active device suitable for use in the present specification, and the steps of the first embodiment are described below.

The terminal 11 is used to generate an input data transmission to the content provider server 3 (step S101); for example, the user 5 views the online banking provided by the banker's content provider server 3 by using a browser using the terminal 11. Website information, and use the personal code and password to log in to the content provider server 3. Then, after determining that the personal code and password of the user 5 are correct, the content provider server 3 notifies the verification server 1 to confirm the identity of the user (step S102), and simultaneously drives the terminal in the same communication terminal through the same communication channel in step S101. The software starts executing a first verification procedure (step S103).

In addition, the verification server also notifies the personal portable device 12 to execute a second verification procedure (step S104).

The first verification program scans the plurality of hardware components using the terminal 11 using the scanning program installed in the terminal 11, and the obtained hardware component identification codes of the hardware components are combined into a first scan data, and the use terminal 11 is used. The positioning is performed to obtain a first positioning data representing the current location of the terminal 11, and the terminal 11 is used to transmit the first scanning data and the first positioning data to the verification server 1 (step S105).

The second verification program may also be the content provider server 3 or the user drives the preset software in the personal portable device 12 to execute, the personal portable device The installed scanner scans the plurality of hardware components of the personal portable device 12, and the obtained hardware component identification codes of the hardware components are combined into a second scan data, and the personal portable device 12 is positioned. A second location data representing the location of the personal portable device 12 is obtained, and the personal portable device 12 transmits the second scan data and the second location data to the verification server 1 (step S106).

The above-mentioned personal portable device 12 can be sent to the authentication server 1 via the second pipe by the authentication server 1, the content provider server 3 or by the user.

The verification server 1 or the content provider server 3 is driven: for example, the smart phone drives the preset software scan in the personal portable device 12 by the Push function and sends the data to the verification server 1 via the second pipe.

The user drives the scan: for example, the built-in software is like an app program, and the user can actively drive the preset app scan in the verification server 1 while logging in and send the data to the verification server 1 via the second pipe.

The second communication pipe between the use terminal 11 and the verification server 1 (step S105) is different from the first communication pipe between the use terminal and the content provider server 3 (steps S101, S103), so that Further prevent hacking attacks.

The second communication pipe between the personal portable device 12 and the authentication server 1 (step S106) is different from the first communication pipe between the personal portable device 12 and the authentication server 1 (step S104), such that Can further prevent hacking attacks.

After the verification server 1 receives the data of the foregoing steps S105 and S106, Step S107 is performed. The step S107 includes: comparing the first scan data of the use terminal 11 and the second scan data of the personal portable device 12 with a pre-built database to determine whether there is a pre-built database to determine whether there is a pre-built database. Whether the terminal 11 and the personal portable device 12 are owned by the user, and whether the first location data of the terminal 11 and the second location data of the personal portable device 12 are used to determine whether the association of the geographical proximity operations is consistent.

The verification server 1 determines that the abnormal operation state is determined if the determination is not met, and determines that the normal operation state is determined if the determination is met, and returns the inspection result to the content provider server 3 (step S108). In this embodiment, The result of the check is a normal operation state, and the identity of the user 5 is verified. Therefore, the content provider server 3 and the use terminal 11 can establish an encrypted connection required for the transaction program (step S109), and then the content provider servo The device 3 can perform subsequent operations required by the terminal 11. In other embodiments, the verification server 1 can directly return the inspection result to the user terminal 11, which is also within the scope of the method of the present invention.

In the first embodiment, the verification function of the geographical location is verified by the software installed by the verification server 1, and the judgment rule of the association of the similar geographical operations is: the same GPS is used according to the use terminal 11 and the personal portable device 12. Positioning position, mainly by receiving GPS satellite signals for positioning; or sharing the same network address (IP address), using the HTML5 specification of the Wi-Fi node's network address location technology; or using the terminal 11 and the individual The portable device 12 shares the location on the same mobile communication network. The positioning algorithm of the mobile communication network is to estimate the position of the mobile user by using the signal strength of the wireless base station and the position of the wireless base station to be weighted. The positioning results of various similar geographical locations, that is, the use terminal 11 and the personal portable device 12 are both owned by the user and located in the same geographical location, and thus can be used as an electronic signature, online payment, etc. Required documents.

In addition, the software installed in the personal portable device 12 can be set to automatically connect to the verification server 1 and upload the scan data and location at intervals after the power is turned on. When the terminal 11 is used to log in to the content provider server 3, the verification server 1 can determine whether the location is reasonably allowed to allow login based on the location of the last time the personal portable device 12 is reported.

Referring to FIG. 2 and FIG. 4, in the second embodiment of the network security verification method of the present invention, the personal portable device 12 is a passive device or an active device as defined above, and the steps of the second embodiment are described below.

The terminal 11 is used to generate an input data transmission to the content provider server 3 (step S301); for example, the user 5 views the online banking provided by the banker's content provider server 3 by using a browser using the terminal 11. Website information, use the personal code and password to log in to the content provider server 3. Then, after determining that the personal code and password of the user 5 are correct, the content provider server 3 notifies the verification server 1 to confirm the identity of the user (step S302), and simultaneously drives the pre-installed terminal in the same terminal via the same communication channel in step S301. The software starts executing a first verification procedure (step S303).

The first verification program scans the plurality of hardware components using the terminal 11 using the scanning program installed in the terminal 11, and the obtained hardware component identification codes of the hardware components are combined into a first scan data.

In addition, the terminal 11 is used and the content provider server 3 is received. After that, a second verification procedure is executed for the personal portable device 12 (step S304). The second verification program is to determine whether the personal portable device 12 is in the vicinity of the use terminal 11 by using the terminal 11, and if so, using the terminal 11 and the individual The portable device 12 establishes a connection, and scans the hardware component of the personal portable device 12 to obtain a second scan data having a hardware component identification code (step S305), and then uses the terminal 11 to transmit the first scan data and The second scan data is supplied to the verification server 1 (step S306).

The second communication pipe between the use terminal 11 and the verification server 1 (step S306) is different from the first communication pipe between the use terminal and the content provider server 3 (steps S301, S303), so that Further prevent hacking attacks.

The verification server 1 compares the first scan data of the terminal 11 and the second scan data of the personal portable device 12 with a pre-built database, and determines whether there is a pre-built database to determine the use terminal 11 and Whether the personal portable device 12 is owned by the user, and whether the coincidence of the geographical proximity operation is determined according to the first positioning data of the use terminal 11 and the second positioning data of the personal portable device 12 (step S307).

If the verification server 1 determines that the content is not met, it determines that the abnormal operation state is determined. If the determination is met, it determines that the operation state is normal, and returns the inspection result to the content provider server 3 (step S308). In this embodiment, The result of the check is a normal operation state, and the identity of the user 5 is authenticated. Therefore, the content provider server 3 and the use terminal 11 can establish an encrypted connection required for the transaction program (step S309), and then the content provider servo The device 3 can perform subsequent operations required by the terminal 11. In other embodiments, The verification server 1 can also directly return the inspection result to the user terminal 11, which is also within the scope of the method of the invention.

The difference between the second embodiment and the first embodiment is that the second embodiment is to perform the correlation verification of the geographical location by using the software installed by the terminal 11, and the judgment rule of the association of the similar geographical operations is: using the terminal 11 And the personal portable device 12 is connected to each other and shares the same short-range wireless network via near-field communication, wherein the short-range wireless network can be connected to each other via the near-field communication (NFC) using the terminal 11 and the personal portable device 12. Or sharing the same short-range wireless network (eg, Bluetooth communication, Wi-Fi communication), that is, the representative terminal 11 and the personal portable device 12 are both located in the same geographical location, and thus can be regarded as an electronic signature. , the credentials required for transactions such as online payment.

Referring to FIG. 5, in a third embodiment of the network security verification method of the present invention, the application is mainly applied to a user terminal 11 for operation, a content provider server 3, and a login to the content provider server. In the embodiment 3, the user terminal 12 is an automatic cash dispenser or a sales terminal, and the personal portable device 12 is a passive device or an active device as defined above. The content provider server 3 is a card issuer who provides a user-a credit card or a bank card. The steps of the third embodiment are described below.

The use terminal 11 generates an input data containing the geographical location of the use terminal 11 and transmits it to the content provider server 3 (step S401); for example, the user's credit card or bank card withdraws or pays at the ATM or the sales endpoint, and uses the individual. The password is logged into the content provider server 3. Then, the content provider server 3 notifies the user that the personal credit card or bank card and password are correct. The verification server 1 requests it to supply the geographical location of the user's personal device (step S402).

After receiving the request of the content provider server 3, the verification server 1 performs a verification process on the personal portable device 12, and drives the scanning program preset in the personal portable device 12 to scan the hardware components to obtain a verification program. A scan data having a hardware component identification code, and positioning the personal portable device 12 to obtain a bit data representing the location of the personal portable device 12 at the time (step S403), and the personal portable device 12 transmits the scan The data and the location data are sent to the verification server 1 (step S404). The verification server 1 compares the scan data of the personal portable device 12 with the pre-built database, and determines whether there is a pre-built database to determine whether the personal portable device 12 is owned by the user (step S405). . If the result is correct, the verification server 1 will transmit the geographical location of the personal portable device 12 to the content provider server 3 (step S406). The content provider server 3 determines whether or not the association of the geographical proximity operations is consistent according to the location data of the terminal 11 and the location data of the personal portable device 12 (step S407).

If the content provider server 3 determines that the content is not met, it determines that it is in an abnormal operation state, and if it is determined to be in compliance, it determines that it is in a normal operation state, and returns the inspection result to the user terminal 11 (step S408). In this embodiment, the inspection is performed. The result is a normal operating state, and the identity of the user is verified, so the content provider server 3 can perform subsequent operations required by the terminal 11.

In addition, the content provider server 3 represents that the user terminal 11 and the personal portable device 12 are both owned by the user and located in the same geographical location by the positioning result of the similar geographical location, thereby serving as the user's electronic signature Or the credentials required for a payment transaction. Moreover, the software installed in the personal portable device 12 can be set to automatically connect to the verification server 1 and upload the scan data and location at intervals, and when the user terminal 10 logs in to the content provider server 3 The verification server 1 can determine whether the location is reasonable and allows the login to be based on the location of the last time the personal portable device 12 is reported.

The various geographical location acquisition methods mentioned in the first embodiment are of course applicable to the third embodiment; the various near-field position discrimination modes in the same second embodiment are also applicable to the first embodiment, and are not repeatedly described herein. .

In summary, the effectiveness of the network security verification method of the present invention is:

1. Strengthening transaction security: The present invention adopts a dual verification technology, that is, simultaneously verifying two types of physical devices of the user, and the verification server 1 determines whether the use terminal 11 and the personal portable device 12 are owned by the user and whether The identification of the user in accordance with the proximity of geographical operations can avoid the problem of remote hackers stealing identity data.

2. Cost saving: User 5 can use his own mobile phone or tablet as the personal portable device 12 required for double authentication, so the network content provider does not need to issue the identity of the entity. Verifying the hardware to the user 5 saves the material and management costs of the entity's authentication hardware and the labor costs of processing the related business.

The above is only the preferred embodiment of the present invention, and the scope of the invention is not limited thereto, that is, the simple equivalent changes and modifications made by the scope of the invention and the description of the invention are All remain within the scope of the invention patent.

1‧‧‧Verification server

11‧‧‧Use terminal

12‧‧‧Personal portable devices

3‧‧‧Content Provider Server

5‧‧‧Users

500‧‧‧Communication network

S101~S109‧‧‧Steps

S301~S309‧‧‧Steps

S401~S409‧‧‧Steps

1 is a system block diagram showing a first preferred embodiment of the verification server and related device of the present invention; FIG. 2 is a system block diagram showing a second preferred embodiment of the verification server and related device of the present invention; 3 is a flow chart illustrating a first embodiment of the network security verification method of the present invention; FIG. 4 is a flow chart illustrating a second embodiment of the network security verification method of the present invention; and FIG. A third embodiment of the network security verification method of the present invention will be described.

1‧‧‧Verification server

11‧‧‧Use terminal

12‧‧‧Personal portable devices

3‧‧‧Content provider servo Device

5‧‧‧Users

500‧‧‧Communication network

Claims (10)

A network security verification method is applied to a verification server, coupled with a use terminal, a person portable device and a content provider server, the method comprising the following steps: (a) the content provider server requires the The verification server checks the identity of the user; (b) the verification server obtains the hardware scan data of the user terminal and the personal portable device, and locates the user terminal and the personal portable device; and (c The verification server compares the hardware scan data of the user terminal and the personal portable device with a pre-built database to determine whether there is a pre-built database to determine the user terminal and the personal portability Whether the device is owned by the user, and the user terminal and the personal portable device need to meet the association of similar geographical operations, and if the association does not meet the operation of the similar geographical location, the abnormal operation state is determined, and the inspection result is obtained. Returned to the content provider server or the user terminal. The network security verification method according to claim 1, wherein the step (b) includes the substep of: the content provider server notifying the user terminal to execute a first verification program, the first verification program Is a scan data of a hardware component identification code combination of the hardware components obtained by scanning the plurality of hardware components of the terminal, and positioning the terminal to obtain a positioning data representing a location of the terminal at the time of use. The user terminal transmits the first scan data and the first location data to the verification server, and The verification server or the content provider server or the user drives the preset software in the personal portable device to execute a second verification program, the second verification program is to scan the plurality of hardware components of the personal portable device Obtaining a second scan data of a combination of hardware component identification codes having a plurality of hardware components, and positioning the personal portable device to obtain a second location data representing a location of the personal portable device at the time, the person may Carrying the device and transmitting the second scan data and the second location data to the verification server; and step (c) is the first scan data of the user terminal and the personal portable device and the first Comparing the scanned data with the pre-built database to determine whether there is a pre-built database to determine whether the user terminal and the personal portable device are owned by the user, and according to the first positioning data and the The second positioning data determines whether there is an association of similar geographical operations, and if it does not, it determines that the abnormal operating state, and the verification server will check the knot Back to the content provider or the use of terminal servers. According to the network security verification method described in claim 2, wherein the determining rule of the associated geographical location operation is that the user terminal and the personal portable device have the same GPS positioning position, or the using terminal And the personal portable device shares the same network address, or the user terminal and the personal portable device share the location on the same mobile communication network. The network security verification method according to claim 1, wherein the step (b) includes the substep of: the content provider server notifying the user terminal to perform a first verification a first verification program is a scan data of a hardware component identification code combination of the hardware components scanned by the plurality of hardware components of the terminal, and positioning of the use terminal to obtain a representation of the use The location information of the location of the terminal at the time, and the use terminal perform a second verification procedure, the second verification procedure is that the user terminal determines whether the personal portable device is in the vicinity of the use terminal, and if so, the use terminal and the The personal portable device establishes a connection, and scans a hardware component of the personal portable device to obtain a second scan data having a hardware component identification code, and the use terminal transmits the second scan data to the verification server And the step (c) is: the verification server compares the first scan data, the positioning data, and the second scan data of the user terminal and the personal portable device with a pre-built database to determine whether There is a pre-built database to determine whether the user terminal and the personal portable device are owned by the user, and judge according to the positioning data In line with similar geographic location associated with the operation. According to the network security verification method of claim 4, wherein the determining rule of the associated geographical location operation is that the user terminal and the personal portable device are connected to each other via near field communication, or the use is The terminal and the personal portable device share the same short-range wireless network. The network security verification method according to any one of claims 1 to 5, wherein the user terminal is connected to the content provider by a first communication channel, and the user terminal is A second communication pipe different from the first communication pipe is connected to the verification server. According to the network security verification method according to any one of claims 1 to 5, the software installed in the personal portable device can be set to automatically connect to the verification server at intervals after the power is turned on. And uploading the scan data and the location. When the user terminal logs in to the content provider server, the verification server can determine whether the location is reasonable and the login is not allowed when the personal portable device is last reported. in accordance with. A network security verification method is applied to a verification server, and cooperates with a user terminal, a person portable device and a content provider server, and the user terminal is an automatic cash dispenser or a sales terminal, the content The provider server is a card issuer that provides a user-a credit card or a bank card; the method includes the following steps: (a) the content provider server requires the verification server to provide the user's personal portable device Geographic location; (b) the verification server obtains hardware scan data of the personal portable device and locates the use terminal and the personal portable device; (c) the verification server hardens the personal portable device Comparing the volume scan data with the pre-built database to determine whether there is a pre-built database to determine whether the personal portable device is owned by the user, and if so, handing the location to the content provider a server; and (d) the content provider server compares the use terminal and the personal portable device with an association of similar geographical operations, if the geographical proximity is not met Associated with the set operation, it is determined that an abnormal operating state, and the inspection results are passed back to the terminal used. According to the network security verification method described in claim 8 of the patent application scope, The determining rule of the associated geographical location operation is: the user terminal and the personal portable device are connected to each other via near field communication, or the user terminal and the personal portable device share the same short-range wireless network; The content provider server indicates that the user terminal and the personal portable device are both owned by the user and located in the same geographical location by the positioning result of the geographical location, and then regarded as the electronic signature of the user. Or the credentials required for a payment transaction. According to the network security verification method described in claim 8, wherein the software installed in the personal portable device can be set to automatically connect to the verification server and scan data at intervals after power on. And the location uploading, when the user terminal logs in to the content provider server, the verification server can determine whether the location is reasonable to allow the login to be based on the location of the last time the personal portable device is reported.