TW201824051A - Citizen digital certificate authentication method - Google Patents

Abstract

A citizen digital certificate authentication method is provided. The method includes transmitting a citizen digital certificate authentication request to a cloud server, obtaining an authentication link responsive to the request from the sever by a certified module, obtaining an uncertified data of citizen digital certificate responsive to the request according to the link by the certified module, determining whether the uncertified data matches a certified data of citizen digital certificate by the certified module, generating a password input request when the uncertified data matches the certified data, receiving an input password corresponding to the password input request by the cloud server or the certified module, and determining whether the input password matches a predetermined password responsive to the certified data by the cloud server or the certified module.

Description

Natural person certificate authentication method

The present invention relates to a natural person voucher authentication method, and more particularly to a method for allowing a device to be authenticated to authenticate through an authenticated device.

With the rapid development of the Internet, traditional business transactions and service activities can be gradually completed on the Internet, and the scale of the e-commerce market is gradually expanding. Moreover, in recent years, due to the popularity of smart mobile devices, e-commerce has become more Widely used in mobile devices. Therefore, the issue of network security is becoming more and more important. The providers of online transactions and services have also developed a corresponding online authentication system. Users can use the user ID and password to authenticate or use the chip. The card is paired with a card reader for authentication to ensure security when conducting online transactions and using network services.

However, in the foregoing identity authentication method, the method of identity authentication by identity code and password is easy to be stolen due to the deletion of the code and password by the skimming program or the Trojan horse program, and the security is poor; The user needs to prepare the card reader first, and install the driver of the card reader on the computer. After the pre-operation is completed, the wafer card can be inserted into the card reader for identity verification, and when the user goes out, It is necessary to carry a card reader and a chip card with you to carry out identity verification, and various restrictions are quite inconvenient to use.

In view of this, the present invention proposes a natural person voucher authentication method.

In the first embodiment, a method for authenticating a natural person certificate includes: a module to be authenticated sends a natural person credential authentication request to a cloud server, and the module to be authenticated obtains an authentication link from the cloud server, and the authenticated module Obtaining the authentication link from the to-be-certified module, the authentication link corresponding to the natural person voucher authentication request, the authenticated module obtaining the natural person voucher information corresponding to the natural person voucher authentication request according to the authentication link, and the authenticated module determining to be authenticated Whether the natural person voucher information meets the certified natural person voucher information, generates a password input request when the certified natural person voucher information conforms to the authenticated natural person voucher information, the authenticated module or the cloud server receives the password corresponding to one of the password input requests, and has The authentication module or the cloud server determines whether the input password meets the pre-stored password. If the password matches, the verification result is returned to the to-be-authenticated module. The authenticated module includes the authenticated natural person credential information corresponding to the pre-stored password.

In the first embodiment, the step of obtaining, by the authenticated module, the natural person voucher information corresponding to the natural person voucher authentication request according to the authentication link includes: the authenticated module is connected to the cloud server according to the authentication link, and the authentication link is The tag corresponding to the natural person voucher authentication request is included, and the cloud server sends the information to be authenticated natural person voucher corresponding to the natural person voucher authentication request to the authenticated module according to the tag.

In the first embodiment, in the step that the foregoing cloud server sends the natural person credential information corresponding to the natural person credential authentication request to the authenticated module according to the mark, the cloud server generates the time according to one of the authentication links. Whether the time difference of one of the authentication modules connected to the cloud server is less than a preset time determines whether to execute the step of sending the natural person voucher information to be authenticated to the authenticated module.

In the first embodiment, the foregoing natural person credential authentication method further includes: the cloud server generates an authentication link including the mark according to the natural person credential authentication request, and the mark corresponds to the natural person credential authentication request one-to-one.

In the first embodiment, in the step that the authenticated module or the cloud server determines whether the input password meets the pre-stored password, the authenticated module or the cloud server generates the time to one of the input passwords according to one of the password input requests. Whether the time difference of one time is less than a preset time determines whether to perform the step of judging whether the input password conforms to the pre-stored password.

In the first embodiment, in the step that the authenticated module obtains the authentication link from the cloud server, the authentication link is a web link or a two-dimensional barcode.

In the second embodiment, a natural person voucher authentication method includes: the to-be-authenticated module receives a natural person voucher information to be authenticated; the to-be-authenticated module starts an authenticated module, and the authenticated module includes an authenticated natural person voucher information, The certified natural person voucher information corresponds to a pre-stored password; the authenticated module determines whether the natural person voucher information to be authenticated conforms to the authenticated natural person voucher information; and when the natural person voucher information to be authenticated conforms to the authenticated natural person voucher information, the authenticated module generates a password input. The request; the authenticated module receives an input password; and the authenticated module determines whether the input password conforms to the pre-stored password.

In the second embodiment, the foregoing natural person voucher authentication method further includes: when the natural person voucher information to be authenticated does not meet the authenticated natural person voucher information, the authenticated module generates a natural person voucher remit request or a natural person voucher update request.

In the second embodiment, in the step that the authenticated module determines whether the input password meets the pre-stored password, whether the time difference between the time that the authenticated module generates the time according to one of the password input requests and the one of the received passwords is less than one Set the time to decide whether to perform the step of judging whether the input password conforms to the pre-stored password.

In the second embodiment, in the step of starting the authenticated module by the module to be authenticated, the module to be authenticated starts the authenticated module according to a preset selection.

In the second embodiment, in the step of starting the authenticated module by the module to be authenticated, the module to be authenticated starts the authenticated module according to the label indicating one of the authenticated modules.

Please refer to FIG. 1, which is a schematic diagram of a natural person voucher authentication system 100 of a first embodiment of a natural person voucher authentication method to which the present invention is applied. The natural person voucher authentication system 100 includes two client devices 11, 12 (referred to as a first client device 11 and a second client device 12, respectively for convenience of description), a cloud server 13, and an internetwork 14. The first client device 11 and the second client device 12 can be connected to the cloud server 13 via the Internet 14, respectively. Here, FIG. 1 is an example in which the first client device 11 and the second client device 12 are respectively a notebook computer and a mobile phone. However, the present invention is not limited thereto, and the first client device 11 may also be a personal computer. The electronic device such as a mobile phone or a personal mobile assistant can also be an electronic device such as a personal computer, a notebook computer or a personal mobile assistant.

In the present embodiment, the cloud server 13 is erected by a financial institution and can provide various types of online services. When the user operates the application (APP), webpage or other software of the first client device 11 and connects to the cloud server 13 via the Internet 14 for personal online service, in order to avoid the user The identity is fraudulently used, and the cloud server 13 authenticates the user. At this time, the application, webpage or other software is a standby authentication module (not shown). The natural person voucher authentication method of the embodiment allows the user to authenticate the identity of the first client device 11 with the authenticated second client device 12 without authentication by the card reader and the entity natural person voucher card. In detail, the second client device 12 includes an authenticated module 121, and the authenticated module 121 can be an application or other type of software. The authenticated module 121 includes the action natural person certificate authorized by the certificate issuing unit of the natural person certificate (for example, the Ministry of the Interior). In other words, the second client device 12 is bound with the authenticated natural person voucher information of the user, and the authenticated natural person voucher information can be Is the ID number, name, age, gender or a combination of the above. The user can enable the first client device 11 to perform the online service to be performed by the authenticated module 121 of the second client device 12.

Please refer to FIG. 2 further. FIG. 2 is a flow chart of a first embodiment of a natural person voucher authentication method according to the present invention. When the user is authenticated, the user, with the application, webpage or other software of the first client device 11, will have the user's certificate of the natural person to be authenticated (eg, ID number, personal identification number (Personal Identification). The natural person credential authentication request of Number, name or date of birth is sent to the cloud server 13 via the Internet 14 (step S01). After receiving the natural person credential authentication request from the first client device 11, the cloud server 13 generates an authentication link corresponding to the natural person credential authentication request, and sends the authentication link to the first client device 11 via the Internet 14. The authentication module to be authenticated by the first client device 11 is obtained (step S02). Then, the user operates the second client device 12 to obtain the authentication link from the cloud server 13 from the to-be-authenticated module of the first client device 11 (step S03), and then the authenticated module of the second client device 12 121 obtains the natural person voucher information to be authenticated corresponding to the natural person voucher authentication request according to the authentication link (step S04). The authenticated module 121 then determines whether the natural person voucher information to be authenticated meets the authenticated natural person voucher information (step S05), and when the natural person voucher information to be authenticated conforms to the authenticated natural person voucher information (the authentication result of the authenticated module 121 is "Yes") ), indicating that someone is attempting to obtain identity verification at the first client device 11 in the name of the owner of the action natural person voucher of the second client device 12. At this time, the authenticated module 121 or the cloud server 13 generates a password input request (step S06), and then the first client device 11 or the second client device 12 receives a password input request to further the user. Authentication. If the password input request is generated by the cloud server 13 and the password input request is received by the first client device 11, the user can enter the password into the first client device 11, and the cloud server 13 receives the user's type via the Internet 14. The password is input (step S07), and then it is judged whether or not the input password conforms to the pre-stored password corresponding to the authenticated natural person voucher information (step S08). When the input password meets the pre-stored password (the determination result of the cloud server 13 is YES), the cloud server 13 can transmit the verification result indicating that the authentication is successful to the to-be-authenticated module of the first client device 11 (step S09). In this way, the natural person credential authentication request is completed; when the input password does not match the pre-stored password (the determination result of the cloud server 13 is "NO"), the cloud server 13 can transmit the verification result indicating the authentication failure to the first client device. 11 (step S10). If the password input request is generated by the authenticated module 121, the second client device 12 receives the password input request, and the user can input the password into the second client device 12 when the second client device 12 has After receiving the input password entered by the user (step S07), the authentication module determines whether the input password meets the pre-stored password corresponding to the authenticated natural person credential information (step S08). When the input password meets the pre-stored password, the authenticated module of the second client device 12 sends the verification result indicating that the authentication is successful to the to-be-authenticated module of the first client device 11 (step S09), so that the natural person certificate is completed. The authentication request; when the input password does not match the pre-stored password, the authenticated module of the second client device 12 may transmit the verification result indicating the authentication failure to the first client device 11 (step S10).

In an embodiment, the pre-stored password corresponding to the authenticated natural person credential information may be stored in the cloud server 13 or the second client device 12. When the pre-stored password is stored in the second client device 12 and the password input request is received by the authenticated module of the second client device 12, the authenticated module can directly perform step S08 to determine whether the input password meets the corresponding authentication. Pre-stored password for natural person voucher information. However, when the pre-stored password is stored in the second client device 12 and the password input request is not received by the authenticated module of the second client device 12, the authenticated module 121 can send the pre-stored password to the cloud via the Internet 14. The server 13 causes the cloud server 13 to execute step S08 to determine whether the input password conforms to the pre-stored password. Moreover, when the cloud server 13 receives the password input request from the authenticated module 121, the cloud server 13 can send a signal indicating the password input field to the first client device 11 according to the password input request, so that the first A client device 11 displays a password entry field to facilitate the user entering the password into the first client device 11 in the password entry field.

In an implementation manner, the authentication link generated by the cloud server 13 may be a two-dimensional barcode, such as a Quick Response (QR) code, and the QR code may be displayed on the first client device 11 to be authenticated. The user can scan the QR code through the second client device 12 to enable the authenticated module 121 to obtain the authentication link. Alternatively, the authentication link can be a web link, and the user can directly input the URL link into the second client device 12. The authenticated module 121 obtains the authentication link; or the first client device 11 transmits the authentication link to the second client device 12 by wireless or wired transmission, so that the authenticated module 121 obtains the authentication link.

The authentication link generated by the cloud server 13 includes a token corresponding to the natural person credential authentication request, and thus corresponds to the natural person credential information to be authenticated. After the authenticated module 121 receives the authentication link, in step S04, the authenticated module 121 is connected to the cloud server 13 according to the authentication link. Since the authentication link includes the mark, the cloud server 13 is based on the authenticated module 121. The connection between the connections is obtained, and the cloud server 13 selects the natural person voucher information to be authenticated corresponding to the tag, and sends the natural person voucher information corresponding to the tag to the authenticated module 121. Moreover, since the cloud server 13 itself receives the natural person credential authentication request from different users, in order to separate the natural person credential authentication request generated by different users, each mark corresponds one-to-one to each natural person credential. The authentication request, here, the cloud server 13 can send the natural person voucher information to be authenticated to the authenticated module of different client devices one by one according to the mark.

Furthermore, in order to improve security, in step S04, the cloud server 13 can record the generation time of the authentication link, and the cloud server 13 determines the generation time of the authentication link to the authenticated mode when the authenticated module 121 is connected thereto. Whether the time difference between the group 121 and the time point of the connection is less than a preset time (hereinafter referred to as a first preset time for convenience of description), and only when the foregoing time difference is less than the first preset time, the cloud server 13 will start The natural person voucher information to be authenticated is sent to the authenticated module 121. When the foregoing time difference is equal to or greater than the first preset time, the cloud server 13 does not send the natural person credential information to be authenticated to the authenticated module 121, but selectively generates a message prompting the user to regenerate the natural person credential authentication. request. In addition, the cloud server 13 may also invalidate the authentication link after receiving the authentication link for a predetermined period of time without receiving the response from the authenticated module 121.

Further, in step S08, if the input password is received by the first client device 11 and the input password is transmitted to the cloud server 13 via the Internet 14, the cloud server 13 can determine the time point of the password input request to the cloud server. Whether the time difference between the time points when the device 13 receives the password is less than a preset time (hereinafter referred to as a second preset time for convenience of description), and the second preset time may be the same or different from the first preset time. When the foregoing time difference is less than the second preset time, the cloud server 13 first determines whether the input password conforms to the pre-stored password. When the foregoing time difference is equal to or greater than the second preset time, the cloud server 13 does not determine whether the input password meets the pre-stored password, and the cloud server 13 may generate a message prompting the user to re-enter the password. In addition, the cloud server 13 may not receive the input password in the identity verification after receiving the password input request for a preset time. Similarly, in step S08, if the input password is received by the second client device 12, the authenticated module of the second client device 12 can determine the time point when the password input request is generated until the second client device 12 receives the input password. Whether the time difference between the time points is less than a second preset time. When the foregoing time difference is less than the second preset time, the authenticated module of the second client device 12 first determines whether the input password meets the pre-stored password. When the foregoing time difference is equal to or greater than the second preset time, the authenticated module of the second client device 12 does not determine whether the input password meets the pre-stored password, and may generate a message prompting the user to re-enter the password. In addition, the authenticated module of the second client device 12 may not receive the input password in the identity verification after receiving the password input request for a preset time.

In an implementation manner, after the step S05 is performed, when the natural person voucher information to be authenticated does not meet the authenticated natural person voucher information (the judgment result of the authenticated module 121 is “No”), the user’s action natural person voucher may be It has been invalidated, or the user has not imported the natural person certificate into the authenticated module 121. At this time, the authenticated module 121 does not generate a password input request. Therefore, when the natural person voucher information to be authenticated does not meet the authenticated natural person voucher information, the authenticated module 121 may generate a natural person voucher import request or a natural person voucher update request (step S11) to prompt the user to import the natural person voucher information. The authenticated module 121 either updates the action natural person credentials in the authenticated module 121.

In an implementation, the cloud server 13 may store the time point at which the first client device 11 sends the natural person credential authentication request in a log, and the cloud server 13 may authenticate the identity as a success or failure. The authentication result is stored in the log file, so that the administrator of the cloud server 13 manages information related to the online service.

Please refer to FIG. 3, which is a schematic diagram of another natural person voucher authentication system 200 applying the first embodiment of the natural person voucher authentication method of the present invention. The natural person voucher authentication system 200 differs from the natural person voucher authentication system 100 in that the natural person voucher authentication system 200 includes only a single client device (third client device 15). The third client device 15 is connected to the cloud server 13 via the Internet 14, and the third client device 15 includes the authenticated module 151 and the module to be authenticated 152.

In this embodiment, the to-be-authenticated module 152 can be a webpage, an application, or other software. The user can perform an online service that requires identity verification by the module to be authenticated 152. When the user performs the identity verification, the user passes the natural person voucher authentication request with the user's natural person voucher information (eg, ID number) to be authenticated by the third client device 15 to be authenticated module 152 via the Internet. The way 14 is sent to the cloud server 13 to perform step S01. After receiving the natural person credential authentication request from the third client device 15, the cloud server 13 generates an authentication link corresponding to the natural person credential authentication request, and transmits the authentication link to the third client device 15 via the Internet 14. The module 152 to be authenticated (step S02). The authentication link can be a URL link. At this time, the user can operate the authenticated module 151 and obtain the authentication link from the cloud server 13 from the standby authentication module 152 (step S03), and obtain the natural person credential information to be authenticated from the cloud server 13 according to the authentication link (step S04). The authenticated module 151 then determines whether the natural person voucher information to be authenticated meets the authenticated natural person voucher information (step S05), and when the natural person voucher information to be authenticated conforms to the authenticated natural person voucher information (the authentication result of the authenticated module 151 is "Yes") At the time, the to-be-authenticated module 152 displays a password input request for further authentication of the user. When the user types the password into the third client device 15 according to the password input request, the cloud server 13 performs steps S07 to S08. After the cloud server 13 performs step S08, the cloud server 13 can send the verification result to the third client device 15 to cause the to-be-authenticated module 152 to display the verification result of the authentication success or the authentication failure (steps S09, S10). Further, in an embodiment, the password input request may be displayed by the authenticated module 151, and steps S07 to S10 are executed by the authenticated module 151.

In this embodiment, the authentication link generated by the cloud server 13 may also include a tag, and may determine whether to suspend the identity verification according to whether the user completes a specific step within a preset time. Further, the cloud server 13 may also generate a natural person voucher import request or a natural person voucher update request (step S11).

4 and FIG. 5, which are respectively a flowchart of a second embodiment of a natural person voucher authentication method according to the present invention and a schematic diagram of a natural person voucher authentication system 300 of a second embodiment of the natural person voucher authentication method to which the present invention is applied. Compared with the first embodiment, the natural person credential authentication system 300 of the present embodiment includes the fourth client device 16 but does not include the cloud server 13, and the fourth client device 16 can be a smart phone or a tablet computer. It includes a certified module 161 (for example, an application issued by Bank A) and a module 162 to be authenticated (for example, an application issued by Bank B). The authenticated module 161 has obtained an authorized action natural person certificate from the voucher issuing unit (for example, the Ministry of the Interior), thus including the action natural person voucher, and the action natural person voucher contains the authenticated natural person voucher information.

In the second embodiment, when the user performs an online service that needs to be authenticated by the module to be authenticated 162, the to-be-authenticated module 162 receives the information of the natural person to be authenticated input from the user, such as an ID number ( Step S12), Personal Identification Number, name or date of birth, etc., but are not limited thereto. Since the module to be authenticated 162 has not obtained the authorized action person certificate from the certificate issuing unit, the module to be authenticated 162 calls the authenticated module 161 through the preset activation link in the module, thereby starting the authenticated module. The group 161 (step S13), in other implementations, the activation link may be generated by the user specifying the authenticated module 161 via the module to be authenticated 162, or may be searched by the module to be authenticated 162 to find the authenticated module. Group 161 is produced, but is not limited thereto. At this time, the authenticated module 161 determines whether the natural person voucher information to be authenticated received by the module to be authenticated 162 meets the authenticated natural person voucher information (step S14). When the natural person voucher information to be authenticated conforms to the authenticated natural person voucher information (the judgment result of the authenticated module 161 is "Yes"), it indicates that someone is trying to be authenticated in the name of the owner of the action natural person voucher of the authenticated module 161. Module 162 obtains authentication. At this time, the authenticated module 161 generates a password input request (step S15), and the user can input the password into the authenticated module 161 according to the password input request. After receiving the input password (step S16), the authenticated module 161 then determines whether the input password conforms to the pre-stored password corresponding to the authenticated natural person credential information in the fourth client device 16 (step S17).

When the input password meets the pre-stored password, that is, the determination result of the authenticated module 161 is YES, the authenticated module 161 can transmit the verification result indicating that the authentication is successful to the to-be-authenticated module 162 (step S18). When the input password does not match the pre-stored password, the verification result of the authenticated module 161 is "NO", and the authenticated module 161 can send the verification result indicating the authentication failure to the to-be-authenticated module 162 (step S20). The authenticated module 161 may be caused to generate a password input request again (step S15) or directly suspend the authentication. Furthermore, after the execution of step S14, when the determination result of the authenticated module 161 is "NO", the authenticated module 161 may generate a natural person voucher remittance request or a natural person voucher update request (step S19).

In an implementation manner, in order to improve the security, in step S17, the authenticated module 161 may first determine the time between the generation of the password input request and the receiving time of the input password before determining whether the input password meets the pre-stored password. Whether the time difference is less than a preset time, and only when the foregoing time difference is less than the preset time, the authenticated module 161 first determines whether the input password conforms to the pre-stored password. When the foregoing time difference is greater than or equal to the preset time, the authenticated module 161 may not determine whether the input password meets the pre-stored password, and generate a message prompting the user that the password has not been entered.

In an implementation manner, the natural person credential authentication system may include a plurality of modules to be authenticated, and the user must perform authentication by using a natural person credential, which is to be authenticated by the user. The group can start the pre-selected authenticated module 161 according to a preset selection, and then the authenticated module 161 can receive the password input by the user and determine whether the input password meets the pre-stored password. In step S18 and step S20, the authenticated module 161 can send the verification result of the password authentication to success or failure to the to-be-authenticated module that issues the natural person credential authentication request.

In an embodiment, in step S13, the to-be-authenticated module 162 can learn the existence of the authenticated module 161 according to a tag and activate the authenticated module 161. The tag can be stored in the fourth client device 16, and can record information indicating the type of the software of the authenticated module 161 and whether it has been authenticated, and the authentication module 161 is recognized by the module to be authenticated. After the authentication module 162 is activated according to the label, the authenticated module 161 can know, according to the connection with the module to be authenticated 162, the module to be authenticated that issues the information of the natural person to be authenticated. Then, in step S18, the verification result of the authentication success or failure is sent to the to-be-authenticated module 162.

In summary, according to an embodiment of the natural person voucher authentication method of the present invention, the user itself only needs to have a client device that includes the action natural person certificate authorized by the voucher issuing unit (Ministry of the Interior), so that the user does not include Other client devices from the action natural person credentials authorized by the voucher issuing authority can also perform the required online services through identity verification. According to another embodiment of the natural person certificate authentication method of the present invention, the user's mobile electronic device only needs to include an authenticated module of the action natural person certificate that has been authorized to the voucher issuing unit, so that the user can be installed in the same mobile electronic device. Other modules to be authenticated in the device but not yet authorized by the voucher issuing unit can also perform the required online services through identity verification. That is to say, the user is no longer limited by the restriction that the physical person's voucher chip card must be inserted into the card reader. In any place with network connection, the authenticated module can be used for authentication to use government agencies and finance. The online services developed by the service industry have improved the convenience of use.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Any person having ordinary knowledge in the technical field can make some changes and refinements without departing from the spirit and scope of the present case. This is subject to the definition of the scope of the patent application.

100‧‧‧ Natural Person Voucher Certification System

11‧‧‧First client device

12‧‧‧Second client device

121‧‧‧Certified modules

13‧‧‧Cloud Server

14‧‧‧Internet

200‧‧‧ natural person certificate authentication system

15‧‧‧ Third client device

151‧‧‧Certified modules

152‧‧‧Pending modules

300‧‧‧Natural Personnel Certification System

16‧‧‧Fourth client device

161‧‧‧Certified modules

162‧‧‧Pending modules

S01-S20‧‧‧Steps

[Fig. 1] A schematic diagram of a natural person voucher authentication system of a first embodiment of a natural person voucher authentication method to which the present invention is applied. Fig. 2 is a flow chart showing a first embodiment of a natural person voucher authentication method according to the present invention. [Fig. 3] A schematic diagram of another natural person voucher authentication system which is a first embodiment of the natural person voucher authentication method to which the present invention is applied. Fig. 4 is a flow chart showing a second embodiment of the natural person voucher authentication method according to the present invention. [Fig. 5] A schematic diagram of a natural person voucher authentication system of a second embodiment of the natural person voucher authentication method to which the present invention is applied.

Claims (11)

A method for authenticating a natural person voucher includes: the module to be authenticated sends a natural person credential authentication request to a cloud server; the module to be authenticated obtains an authentication link from the cloud server; an authenticated module is from the to-be-authenticated module The group obtains the authentication link, and the authentication link corresponds to the natural person voucher authentication request; the authenticated module obtains one of the natural person voucher information corresponding to the natural person voucher authentication request according to the authentication link, and the authenticated module includes one The certified natural person voucher information corresponds to a pre-stored password; the authenticated module determines whether the natural person voucher information to be authenticated meets the authenticated natural person voucher information; and when the natural person voucher information to be authenticated meets the authenticated natural person When the voucher information is generated, a password input request is generated; the cloud server or the authenticated module receives a password corresponding to one of the password input requests; and when the input password is received by the cloud server, the cloud server determines Whether the input password matches the pre-stored password, such as The operator to return a verification result to be the authentication module; when receiving the password is authenticated by the module, the module determines whether the authenticated password meets the password stored. The method for authenticating a natural person voucher according to claim 1, wherein the step of obtaining, by the authenticated module, the voucher information of the natural person to be authenticated corresponding to the natural person voucher authentication request according to the authentication link comprises: the authenticated module according to the authentication link Connecting to the cloud server, the authentication link includes one of the tokens corresponding to the natural person credential authentication request; and the cloud server sends the credential natural person credential information corresponding to the natural person credential authentication request to the Authentication module. The method for authenticating a natural person voucher according to claim 2, wherein the cloud server sends the information of the natural person to be authenticated corresponding to the natural person voucher authentication request to the authenticated module according to the flag, the cloud server Determining whether to perform the sending of the natural person voucher information to be authenticated to the authenticated module according to whether the time difference between one of the authentication links and the time that the authenticated module is connected to the cloud server is less than a preset time step. The method for authenticating a natural person certificate according to claim 2, further comprising: the cloud server generating the authentication link including the tag according to the natural person voucher authentication request, and the tag corresponds to the natural person voucher authentication request one-to-one. The method of claim 1, wherein the cloud server or the authenticated module generates a time according to one of the password input requests to the input password. Whether the time difference of one of the receiving times is less than a preset time determines whether to perform the step of determining whether the input password conforms to the pre-stored password. The method of authenticating a natural person certificate according to any one of claims 1 to 5, wherein the authenticated module obtains the authentication link from the cloud server, the authentication link is a web link or a two-dimensional barcode . A natural person voucher authentication method includes: a to-be-certified module receives a natural person voucher information to be authenticated; the to-be-certified module activates an authenticated module, and the authenticated module includes an authenticated natural person voucher information, the authenticated natural person The credential information corresponds to a pre-stored password; the authenticated module determines whether the credential natural person voucher information meets the authenticated natural person voucher information; and when the natural person voucher information to be authenticated meets the authenticated natural person voucher information, the authenticated module Generating a password input request; the authenticated module receives an input password; and the authenticated module determines whether the input password meets the pre-stored password, and if yes, returns the verification result to the to-be-authenticated module. The natural person voucher authentication method according to claim 1 or 7, further comprising: when the natural person voucher information to be authenticated does not meet the authenticated natural person voucher information, the authenticated module generates a natural person voucher remit request or a natural person voucher Update request. The natural person certificate authentication method according to claim 7, wherein the authenticated module determines whether the input password meets the pre-stored password, and the authenticated module generates a time according to the password input request to the input password. Whether a time difference of one of the receiving times is less than a preset time determines whether to perform a step of determining whether the input password conforms to the pre-stored password. The natural person certificate authentication method according to claim 7, wherein in the step of the module to be authenticated to activate the authenticated module, the module to be authenticated starts the authenticated module according to a preset selection. The method for authenticating a natural person certificate according to claim 7, wherein in the step of the module to be authenticated to activate the authenticated module, the module to be authenticated starts the authenticated module according to a label indicating one of the authenticated modules. group.