TW201729562A - Server, mobile terminal, and internet real name authentication system and method - Google Patents

Abstract

Disclosed are an internet real name authentication server, a mobile terminal, and a smart card-based internet real name authentication system and method. The system comprises: an authentication center, which registers identity information of users and is capable of authenticating an identity of a user; a mobile terminal, which supports a Bluetooth function and is installed with a smart card and client software, the smart card having a hardware ID, supports a Bluetooth function, and is used for storing digital identity information of users to perform digital signing, and the client software is used for providing a human-machine interface, obtaining a digital signature of the smart card, receiving smart card transmission information, and transmitting the information to a server for authenticating; and a server, used for receiving information sent by the client software and sends the received information to the authentication center for identity confirmation and authentication, so as to determine whether to allow the user to use a internet service. The present invention effectively overcomes the technical disadvantages of low security and operating difficulty that exist in the existing internet real name authentication.

Description

Server, mobile terminal, network real name authentication system and method

The invention relates to a network real-name authentication technology, and more particularly to a network real-name authentication server, a mobile terminal, a smart card-based network real-name authentication system and method.

With the rapid spread of the mobile Internet, the mobile Internet has penetrated into our lives and has become an indispensable part of our lives. However, with the rapid spread of the mobile Internet, various crimes using the anonymity of the mobile Internet have emerged, including, for example, spreading various rumors, publishing various illegal speeches, and stealing other people's information.

In order to solve the shortcomings of the above-mentioned mobile Internet, the best solution is to implement mobile Internet real-name authentication. Although China has recently proposed some relevant laws and regulations to regulate the real-name system of the Internet, such as the "Internet Information Services Management Measures" and "Non-operating Internet Information Services Filing Management Measures", but at the implementation level, often still use the traditional check The way the ID number and name are the same. In order to evade the real-name authentication of mobile Internet, criminals can use other people's ID cards and names, and even ID card generators and other technical means.

Therefore, how to solve the above problems, improve the reliability of mobile Internet real-name authentication, and find a safe, easy-to-popular and operational network real-name authentication implementation method is an urgent problem to be solved.

The invention provides a system and a method for authenticating a network based on a smart card, the system comprising a network real name authentication server and an action terminal. The invention can improve the reliability of the network real name authentication.

According to an aspect of the present invention, the present invention provides a smart card-based network real-name authentication system, the system comprising: an authentication center, which registers identity information of the user, and is capable of verifying the identity of the user; The machine supports the Bluetooth function and is installed with the smart card and the client software; the smart card has a hardware ID, supports the Bluetooth function, and is used for storing the user's digital identity information and performing digital signature; the client software is used for Providing a human-machine interaction interface, connecting to the smart card via Bluetooth to obtain a digital signature of the smart card, receiving the digital signature transmitted by the smart card and the hardware ID of the smart card, and the user name, password, digit The signature and smart card hardware ID are transmitted to the server for authentication; and the server is configured to receive the information sent by the client software and send the received information to the authentication center for identity confirmation, and the identity of the user In the case of confirmation, the user name and password entered by the user are authenticated to determine whether the user is allowed to use the network service.

According to an embodiment of the invention, the system further includes an access pre-unit for providing network access service and network access control service for the authentication center and the server.

The invention also provides a network real-name authentication server for providing login and value-added services for users of mobile terminals.

The network real name authentication server receives the funds sent from the mobile terminal The information is sent to the certificate authority for identity verification, and the user name and password entered by the user are authenticated in the case of user identity confirmation to determine whether the user is allowed to use the network service.

The certificate authority registers the identity information of the user and can verify the identity of the user.

According to an embodiment of the present invention, the mobile terminal supports the Bluetooth function, and is installed with: a smart card, which has a hardware ID, supports a Bluetooth function, and is used for storing digital identity information of the user, and performs digital signature; client software The utility model is configured to provide a human-computer interaction interface, can connect to the smart card through Bluetooth, obtain a digital signature of the smart card, receive the digital signature transmitted by the smart card, and the hardware ID of the smart card, and The name, password, digital signature and hardware ID are transmitted to the server.

The invention also provides a mobile terminal device, which supports the Bluetooth function and is equipped with a smart card, which supports the Bluetooth function, stores the digital identity information of the user, and can perform digital signature and has a unique hard a client software for providing a human-machine interaction interface, capable of connecting to the smart card via Bluetooth to obtain a digital signature of the smart card, receiving the digital signature transmitted by the smart card and the hard card of the smart card The body ID, and the user name, password, digital signature and smart card hardware ID are transmitted to the server for authentication to determine whether the user is allowed to use the network service.

The invention also provides a smart card-based network real-name authentication method, the smart card has a hardware ID, stores the user's digital identity information, and performs digital signature; the method includes: logging in the mobile terminal, establishing the smart card Bluetooth connection with the client software; the smart card receives the client The user name sent by the end software, digitally signing the user name, and returning the digital signature and the hardware ID to the client software; the client software signs the user name, the password, and the digit And the hardware ID is sent to the server for authentication; the server sends the user name, the digital signature and the hardware ID to the authentication center registered with the user identity information for identity verification; when the identity verification is passed Next, the server authenticates the user to determine whether the user is allowed to use the network service.

According to an embodiment of the present invention, after the authentication center receives the information sent by the server, the authentication center verifies the status of the smart card according to the hardware ID and finds the digital signature public key of the user.

If the smart card is in a normal state, the digital signature of the user is used to decrypt the digital signature information. Otherwise, the prompt information is returned to the server, and the information obtained after decryption is compared with the username. Correct.

If they are the same, the user identity is legal, otherwise the user identity is illegal and the result is returned to the server.

As described above, in the technical solution of the present invention, by using a smart card with a Bluetooth function for real-name authentication, the technical drawbacks of the current low-security and difficult operation of the traditional real-name authentication are effectively solved, and can be applied to mobile banking. Mobile services such as mobile securities and mobile e-commerce, especially the real-name authentication of the mobile Internet.

1 is a flow chart of a method for smart card based network real name authentication in accordance with the present invention.

2 is a smart card-based network real-name authentication system according to the present invention. The block diagram of the system.

3 is a schematic diagram of a system for smart card-based network real-name authentication according to an embodiment of the present invention.

4 is a flow chart of a smart card based network real name authentication method in accordance with an embodiment of the present invention.

In order to solve the technical drawbacks of the traditional mobile Internet real-name authentication, the present invention provides a smart card-based network real-name authentication method with high security, easy to popularize and operate, and the smart card here refers to the wisdom applicable to the mobile terminal. card.

Embodiments of the present invention are described in detail below with reference to the drawings.

1 is a flow chart of a method for smart card based network real name authentication in accordance with the present invention.

As shown in FIG. 1 , the method includes the following: a user registers personal information in a certification center; the authentication center associates a smart card hardware ID with personal information; and the user establishes a Bluetooth between the smart card and the client software by using the mobile terminal. Connection; the smart card performs a digital signature on the user name sent by the client software, and returns the digital signature and the smart card hardware ID to the client software; the client software hardens the user name, password, digital signature and smart card The body ID is sent to the server for authentication; the server sends the user name, the digital signature and the smart card hardware ID to the authentication center for authentication; in the case that the authentication is passed, the server authenticates the user. Determine if users are allowed to use the web service.

2 is a smart card-based network real-name authentication system according to the present invention. The block diagram of the system.

As shown in FIG. 2, the system includes: a certification center for registering personal information for the user and associating the smart card hardware ID with the personal information, and also for using the user name, digital signature, and wisdom sent by the server. The card hardware ID verifies the identity of the user; the smart card is used to store the user's digital ID information, and can be digitally signed and has a unique hardware ID; the client software is used to enable the user to enter a username and password. Connect to the smart card via Bluetooth to obtain the digital signature of the smart card, receive the digital signature and smart card hardware ID transmitted by the smart card and transmit the user name, password, digital signature and smart card hardware ID to the server. And a server for receiving information sent by the client software and transmitting the received information to the authentication center for identity confirmation, and authenticating according to the user name and password input by the user in the case of user identity confirmation.

Embodiments of the present invention are described in detail below with reference to FIGS. 3 and 4.

3 is a schematic diagram of a smart card-based network real-name authentication system according to an embodiment of the present invention.

As shown in FIG. 3, the smart card-based network real-name authentication system includes the following parts.

Smart card, the smart card can be a SIM card or SD card supporting Bluetooth function, wherein the SIM card can adopt various package forms such as 2FF specification, 3FF specification or 4FF specification, and has a telecommunication function; wherein the SD card can adopt Standard SD, Mini SD, Micro SD and other package forms, and have a certain storage space. The smart card is mainly used to store the user's digital ID information, and can be digitally signed and has a unique hard Body ID.

Of course, those skilled in the art should understand that the smart card is not limited to the SIM card or the SD card mentioned above, and any smart card capable of implementing the functions of the present invention is included in the scope of the present invention.

Bluetooth-enabled mobile terminals, including but not limited to mobile phones, PDAs, notebooks, and tablets, are used to provide Bluetooth connectivity.

Client software for providing human-computer interaction interface through mobile terminals, providing users with login services and accessing related value-added services such as mobile banking, mobile securities, mobile e-commerce and social software. In addition, during the user login phase, the client software is also responsible for connecting to the smart card through the Bluetooth function of the mobile phone, thereby obtaining the user digital signature and the smart card hardware ID.

The certificate authority is used to store the user's personal data, the digital signature public key, and the smart card hardware unique ID. The certification center is generally an independent system provided by the authority of the third-party manufacturer. Its function is to identify the user's digital signature information and determine the identity of the user. In addition, the authentication center can also verify the status of the smart card through the hardware unique ID of the smart card, wherein the status of the smart card includes unregistered, normal, lost, and disabled, and only the smart card in the normal state can be used for the digital signature.

Server for providing mobile terminal users with login and related value-added services such as mobile banking, mobile securities, mobile e-commerce and social services. In addition, during the user login phase, the server is responsible for submitting the user's digital signature and smart card hardware ID to the authentication center to confirm the user's true and legal identity.

Access to the front unit for providing network access for the authentication center and server Incoming services and network access control services are network service controllers.

Before using the system, the user first needs to perform real-name authentication on the smart card, that is, register personal information in the authentication center, and bind the smart card and user information.

The user's registration of personal information in the certification center includes registration of personal information such as user name, ID number, gender, place of origin, telephone number and address in the certification center, and generates a digital signature public key and private key corresponding to the user in the certification center.

In addition, binding the smart card and the user information means that the authentication center establishes a relationship between the unique hardware ID of the smart card and the personal information registered by the authentication center.

In use, the user inserts the smart card into the mobile terminal, and then opens the client software login interface through the Internet connection on the mobile terminal, and submits the login information to the server for authentication. In the process of submitting the login information, the client software automatically connects to the smart card through the Bluetooth function of the mobile terminal and obtains the digital signature information. If the authentication is successful and the user identity is confirmed, the network service is allowed; if the authentication fails, the network service is denied.

The submission of the login information refers to submitting the information including the unique ID of the smart card hardware, the user name, the password, and the digital signature of the user. The simpler way is to use the hardware ID of the smart card as the user name, login information. Contains only the hardware ID, password, and user's digital signature of the smart card, or only the hardware ID of the smart card and the user's digital signature without other input. Since the hardware ID of the smart card cannot be input by the user, It is safer to separately verify the smart card's hardware ID and the user's digital signature, or verify the smart card's ID, password, and user's digital signature. In addition, the login information may be plain text or ciphertext that is encrypted.

The authentication center verifies the status of the smart card. The authentication center searches for the corresponding registration data of the smart card according to the hardware ID of the smart card. If the smart card has been registered and the status is displayed as normal, the verification is successful. Otherwise, if the smart card is not registered or is reported to be lost. Or disable the status, then the verification fails.

In addition, if the smart card is lost or damaged, you can apply for a loss or reissue by using the user's valid ID to the certification center.

4 is a flow chart of a smart card based network real name authentication method in accordance with an embodiment of the present invention.

As shown in FIG. 4, the mobile service provider performs a method for user identity confirmation based on the system, and the method includes the following steps.

1) The user registers personal information in the certification center, including personal information such as registered user name, ID card number, gender, birthplace, telephone number and address, and generates a digital seal public key and private key corresponding to the user in the certification center. In addition, the certification center associates the smart card unique hardware ID with the personal information registered by the certification center.

2) The user inserts the smart card into the mobile terminal, then opens the client software on the mobile terminal, enters the client software login interface, enters the username and password, and submits.

3) After the user submits the login information, the client software first queries the action. Whether the Bluetooth function of the terminal is turned on, if not, prompts the user to open the Bluetooth function of the mobile terminal, and if the Bluetooth function is turned on, attempts to establish a Bluetooth connection with the smart card.

4) After the client software establishes a Bluetooth connection with the smart card, the user name obtained in step 2) is sent to the smart card for digital signature, wherein the smart card uses the signature private key to digitize the user name. signature.

5) The smart card returns the digital signature information generated in step 4) and the hardware ID of the smart card to the client software of the mobile terminal through the Bluetooth channel.

6) The client software sends the user name, password, digital signature and smart card hardware ID information to the server for authentication.

7) After the server receives the user login information sent by the mobile terminal client software, first sends the digital signature, user name and smart card hardware ID information to the authentication center.

8) After receiving the information sent by the server, the certification center verifies the status of the smart card according to the smart card hardware ID and finds the user's digital signature public key. If the smart card status is normal, the user's digital signature is used to disclose the gold. The key pair signage information is decrypted, otherwise the prompt information is returned to the server. The information obtained after decryption is compared with the user name. If the information is the same, the user identity is legal, otherwise the user identity is illegal, and the result is returned to the server.

9) After receiving the result returned by the authentication center, the server verifies the username and password received in step 7). If the username and password are valid and the user identity returned by the authentication center in step 8) is legal, the authentication succeeds. Internet services are allowed when the identity of the user is confirmed. If the authentication fails, the network service is refused.

As described above, the present invention utilizes hardware authentication and encryption to implement network real-name authentication, and its reliability is much better than the traditional real-name authentication, and provides more powerful support for purifying the mobile Internet environment and regulating the behavioral Internet behavior norms.

It should be noted that the various embodiments described above with reference to the drawings are only intended to illustrate the invention and not to limit the scope of the invention, and those skilled in the art should understand that without departing from the spirit and scope of the invention Modifications or equivalents to the invention are intended to be included within the scope of the invention. In addition, unless the context indicates otherwise, words in the singular include plural and vice versa. In addition, all or a portion of any embodiment can be used in combination with all or a portion of any other embodiment, unless otherwise stated.

Claims (7)

A smart card-based network real-name authentication system, comprising: a certification center, which registers user identity information and can verify the identity of the user; the mobile terminal supports Bluetooth function and is equipped with a smart card and a client. End software; the smart card has a hardware ID, supports a Bluetooth function, is used to store the user's digital identity information, and performs a digital signature; the client software is used to provide a human-computer interaction interface, and is connected to the smart card through Bluetooth. Obtaining the digital signature of the smart card, receiving the digital signature transmitted by the smart card and the hardware ID of the smart card, and transmitting the username, password, digital signature, and smart card hardware ID to the server for authentication And a server for receiving information sent by the client software, and sending the received information to the authentication center for identity confirmation, and authenticating according to the user name and password input by the user in the case of user identity confirmation To determine if the user is allowed to use the web service. The smart card-based network real-name authentication system as claimed in claim 1, further comprising an access pre-unit for providing network access services and networks for the authentication center and the server. Road access control service. A network real-name authentication server for use in mobile terminals The user provides login and value-added services, wherein: the network real-name authentication server receives the information sent from the mobile terminal, and sends the information to the certification center for identity confirmation, and according to the user input, the user input is confirmed. The username and password are authenticated to determine whether the user is allowed to use the network service; the certificate authority registers the identity information of the user and can verify the identity of the user. The network real-name authentication server as claimed in claim 3, wherein the mobile terminal supports the Bluetooth function, and is installed with: a smart card, which has a hardware ID, supports a Bluetooth function, and is used for storing the digital identity information of the user. a digital signature; a client software for providing a human-machine interaction interface, capable of connecting to the smart card via Bluetooth to obtain a digital signature of the smart card, receiving the digital signature transmitted by the smart card and the smart card The hardware ID and the username, password, digital signature, and hardware ID are transmitted to the network real-name authentication server. An action terminal, the mobile terminal supports Bluetooth function, and is installed with: a smart card, which supports a Bluetooth function, stores digital identification information of a user, and can perform digital signature and has a unique hardware ID; and a client End software, which is used to provide a human-machine interaction interface, and can connect to the smart card through Bluetooth to obtain the digital card of the smart card Receiving a digital signature transmitted by the smart card and a hardware ID of the smart card, and transmitting the username, password, digital signature, and smart card hardware ID to the server for authentication to determine whether the user is allowed Use a web service. A smart card-based network real-name authentication method, the smart card has a hardware ID, stores digital identity information of the user, and performs digital signature; the smart card-based network real-name authentication method includes the following steps: logging in to the mobile terminal Establishing a Bluetooth connection between the smart card and the client software; the smart card receives the user name sent by the client software, digitally signs the user name, and returns the digital signature and the hardware ID to The client software; the client software sends the username, password, the digital signature, and the hardware ID to the server for authentication; the server signs the user name, the digit signature, and the hardware ID The authentication center is sent to the authentication center registered with the user identity information for authentication; and in the case that the authentication is passed, the server authenticates the user to determine whether the user is allowed to use the network service. The smart card-based network real-name authentication method according to claim 6, wherein after the authentication center receives the information sent by the server, the certification center verifies the status of the smart card according to the hardware ID and finds the user's Digital signature public key; If the smart card is in a normal state, the digital signature of the user is used to decrypt the digital signature information. Otherwise, the prompt information is returned to the server, and the information obtained after decryption is compared with the username. Right; if the same, the user identity is legal, otherwise the user identity is illegal and the result is returned to the server.