TW202103031A - System for using network identification to identify via telecommunication server and method thereof - Google Patents

Abstract

A system for using a network identification to identify via a telecommunication server and a method thereof are provided. By obtaining a network identification of a mobile and user data, using mobile communication network to transmitting the network identification and the user data from the mobile to a service server, transmitting the network identification and the user data from the service server to a telecommunication server, generating a result based on the network identification and the user data by the telecommunication server, and transmitting the result from the telecommunication server to the service server, the system and the method can achieve the effect of using only mobile to complete identify .

Description

System and method for identifying identity through telecommunication server using network identification data

An identity recognition system and method, in particular, refers to a system and method that uses network identification data to identify an identity through a telecommunication server.

In recent years, due to the rapid development of communications and network-related industries, people’s demand for the electronic and mobile services of various services has been increasing. Such demand is also reflected in the financial industry and the government and public departments. For example, securities companies, banks In addition to providing Internet services, insurance companies, investment advisory companies, and government agencies have also begun to provide mobile applications (APP). Users can use mobile devices such as mobile phones or tablets to execute mobile applications. After the network is connected to the corresponding service host (or called the application host), the user can operate the mobile device to perform mobile services such as securities transactions, transfers, insurance, and application documents. In this way, the user can perform the required mobile services without leaving the location.

When users use network services or mobile services, they usually need to identify themselves first. At present, most of the methods of identification through the Internet require the use of hardware vehicles to identify the user’s identity, for example, using a specific USB flash drive or smart card (chip card) to store the user’s credential data for use When performing mobile services, the identification can be performed by connecting a USB flash drive or smart card that stores the certificate data.

However, most methods of using hardware carriers to identify users can only be done on a computer. The main reason is that the hardware carrier needs to be connected to the computer through a USB connection slot, or through an external device such as a card reader. However, most of the current mobile devices do not have a connection slot that can be connected to the hardware carrier, or users need to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot connect to the hardware Vehicles, in this way, cause users to be unable to use mobile devices for identification, so that they cannot use mobile services, causing inconvenience to users.

In summary, it can be seen that in the prior art, there has always been a problem in the prior art that it is difficult for mobile devices to connect to a hardware carrier to identify the user's identity. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem in the prior art that it is difficult for mobile devices to connect to a hardware carrier to identify a user's identity, the present invention discloses a system and method for identifying a user's identity through a telecommunication server using network identification data, in which:

The system for identifying an identity through a telecommunication server using network identification data disclosed in the present invention at least includes: a service server, a mobile device, and a telecommunication server. The mobile device is used to execute an identity recognition component, and the identity recognition component includes: obtaining A data acquisition module for user data and network identification data, and a communication module that connects to the service server through a mobile communication network and transmits network identification data and user data to the service server; a telecommunication server for Receive the network identification data and user data sent by the service server, and use it to generate identification results based on the network identification data and user data, and send the identification results to the service server.

The method for identifying identity through a telecommunication server using network identification data disclosed in the present invention includes at least the steps of: a mobile device connects to a service server through a mobile communication network; the mobile device obtains network identification data and user data; The device sends network identification data and user data to the service server; the service server sends network identification data and user data to the telecommunications server; the telecommunications server generates identification results based on the network identification data and user data, and Send the identification result to the service server.

The system and method disclosed in the present invention are as above. The difference with the prior art is that the present invention transmits network identification data and user data through the mobile communication network after obtaining network identification data and user data through the identity identification component executed by the mobile device. The user data is sent to the service server, and the service server sends the network identification data and the user data to the telecommunication server, so that the telecommunication server generates the identification result based on the network identification data and the user data and sends the identification result to The service server solves the problems of the prior art and can achieve the technical effect of using mobile devices alone to complete identity recognition.

In the following, the features and implementation of the present invention will be described in detail with the drawings and embodiments. The content is sufficient to enable any person familiar with the relevant art to easily and fully understand the technical means used by the present invention to solve the technical problems and implement them accordingly. The achievable effect of the present invention.

After the mobile device is connected to the service server through the mobile communication network, the present invention can connect the service server to the telecommunications server to identify the user of the mobile device, and the telecommunications server sends the identity recognition result back to the service server Device. Among them, mobile communication networks such as 4G, 5G networks, etc., but the present invention is not limited to this.

Hereinafter, the system structure diagrams of the system of identifying the identity through the telecommunication server through the network identification data mentioned in the "Figure 1A" and "Figure 1B" of the present invention are used to illustrate the operation of the system of the present invention. As shown in "FIG. 1A", the system of the present invention includes an application host 111, an identity recognition host 112, an identity verification server 113, a mobile device 120, and a telecommunication server 130. Among them, the application host 111, the identity recognition host 112, the identity verification server 113, the mobile device 120, and the telecommunications server 130 are all computing devices.

The computing device mentioned in the present invention includes, but is not limited to, one or more processors, one or more memory modules, and components such as buses connecting different components (including memory modules and processors). Through the contained multiple components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and the above-mentioned components are arranged in the housing.

The bus of the computing device mentioned in the present invention may include one or more types, for example, including data bus, address bus, control bus, extended function bus ( expansion bus), and/or local bus (local bus). The bus of computing equipment includes, but is not limited to, parallel industry standard architecture (ISA) bus, peripheral component interconnect (PCI) bus, Video Electronics Standards Association (VESA) local bus, and serial universal serial bus (USB), PCI-E bus, etc.

The processor of the computing device provided by the present invention is coupled to the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected via a dedicated electrical connection. And/or coupled to the processor via the bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to run the operating system or execute various programs, modules, and/or element.

The processor of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral input/output (I/O) controllers, that is to say, the memory controller and peripheral input/output controllers can be included in In an integrated circuit, it can also be realized by using two or more integrated circuits. Chipsets usually provide I/O and memory management functions, as well as multiple general-purpose and/or special-purpose registers, timers, etc., among which the aforementioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives (flash memory), memory cards, and solid state disks (Solid State Disk, SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O bus through the peripheral I/O controller. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include a mobile communication network that supports Wi-Fi, Zigbee and other wireless local area networks, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G, etc. The wired communication interface can be an Ethernet device, Asynchronous Transfer Mode (ATM) device, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device having the above-described components.

The mobile device 120 can be connected to the application host 111 via a wired or wireless network. The mobile device 120 can receive data or signals sent by the application host 111 and can send the data or signals to the application host 111.

The mobile device 120 is responsible for using the application service provided by the application host 111, and is responsible for completing the identity recognition through the telecommunication server 130 when the application service requires identity recognition. Among them, the application service mentioned in the present invention is usually a service that needs to confirm the user identity of the mobile device 120, such as online ordering, online banking, online insurance, tax filing, etc., but the present invention is not limited to this. .

The mobile device 120 may further include a data acquisition module 220, a communication module 280, and an additional detection module 230, a data input module 240, a verification module 250, and a network judgment as shown in "Figure 2". Module 260. In some embodiments, the mobile device 120 can execute the identity recognition component 200 to generate the modules mentioned in the present invention. Wherein, the identity recognition component 200 can be an independently operated application program and can be called by a web browser program; the identity recognition component 200 can also be a module or component included in a web browser program.

The data acquisition module 220 is responsible for acquiring network identification data. Generally speaking, the network identification data is the network address currently used by the mobile device 120, and the data acquisition module 220 can detect the network address currently used by the mobile communication interface of the mobile device 120 to obtain the network identification data. . However, the network identification data mentioned in the present invention is not limited to the above. Any data that can enable the telecommunication server 130 to distinguish the mobile device 120 can be used as the network identification data mentioned in the present invention.

The data acquisition module 220 is also responsible for acquiring user data. The user data acquired by the data acquisition module 220 includes the door number information corresponding to the user identification module installed in the mobile device 120 and the user's identification data. In some embodiments, the user data may also include The birthday of the user, but the user data mentioned in the present invention is not limited to the above. For example, the user data can also include gender, address, and so on. Among them, the identification data mentioned in the present invention is usually a unique value, that is, different users have different data, including but not limited to the user's ID number, passport number, etc.; the door number information includes the door number and the possession door. Information such as the name of the telecommunication organization/unit of the number

Generally speaking, the data acquisition module 220 can read the user data entered by the user from the memory unit of the mobile device 120. However, for some items in the user data, such as door numbers, the data acquisition module 220 can detect Obtained by the test module 230.

The detection module 230 can detect a Subscriber Identity Module (SIM) installed in the mobile device 120, and can also obtain data stored in the subscriber identity module, such as a door number. The user identification module detected by the detection module 230 includes a card-type user identification module (in the present invention will be referred to as "SIM card") and an embedded-type user identification module (Embedded-SIM, in this invention). In the invention, it will be denoted as "eSIM").

In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, for example, the mobile device 120 has two SIM cards installed, or one SIM card is installed and one is installed. eSIM, when the data acquisition module 220 acquires user data, the data acquisition module 220 can first prompt the user to confirm that the door number information in the user data is the same as the user identification model used by the currently set mobile device 120 to connect to the mobile communication network. Corresponding to the group, and obtain the user data after the user confirms, otherwise wait for the user to modify the door number information in the user data. For example, when a SIM card is installed on the mobile device 120 and contains an eSIM, when the mobile device 120 uses the SIM card to connect to the mobile communication network, the data acquisition module 220 can prompt the user to confirm the user through the peripheral output device of the mobile device 120 Whether the door number information in the data is consistent with the door number corresponding to the SIM card.

The data input module 240 can provide the user to input user data through peripheral input devices of the mobile device 120. In more detail, the data input module 240 can provide a user interface for inputting user data, and can store the user data input by the user in the memory unit of the mobile device 120.

In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, when the data input module 240 provides the user to input user data, The user can be prompted to enter the door number information corresponding to the user identification module used by the currently configured mobile device 120 to connect to the mobile communication network in the user data. For example, when a SIM card is installed on the mobile device 120 and includes an eSIM, when the mobile device 120 uses the SIM card to connect to the mobile communication network, the data input module 240 can prompt the user to inform the user through the peripheral output device of the mobile device 120 Enter the door number information corresponding to the SIM card in the data.

The verification module 250 can verify the user's identity through the device unlocking data. Among them, the device unlocking data mentioned in the present invention can be biometric data such as fingerprints, voiceprints, and faces, and can also be passwords or gestures set by the user, but the present invention is not limited to the above.

In more detail, the verification module 250 can select the method of verifying the user's identity through the device unlocking data according to the type and version of the operating system running on the mobile device 120. For example, the verification module 250 can choose to require the user to use the mobile device to verify the identity of the user. The input unit of 120 inputs the device unlocking data, and calls the operating system running on the mobile device 120 to confirm whether the entered device unlocking data is correct to verify the identity of the user; you can also choose to call the operating system running on the mobile device 120 provided by the operating system The screen unlocking application interface of the to provide the user to input the device unlocking data, and through the screen unlocking application interface to determine whether the entered device unlocking data is correct to verify the user's identity; or you can choose to close the screen and wait for the user to turn on the screen and enter the device The unlocking data completes the screen unlocking to confirm the user's identity, etc., but the method of the verification module 250 to verify the user's identity is not limited to the above.

The network judging module 260 can judge whether the mobile device 120 currently chooses to use the mobile communication network, and can judge whether the mobile device 120 currently chooses to use the mobile communication network, for example, when the mobile device 120 is currently using a wireless local area network such as WiFi, through the mobile device The peripheral output device of 120 prompts the user to change the mobile device 120 to use the mobile communication network.

In some embodiments, the network determining module 260 may also notify the user that the mobile device 120 will be changed to use the mobile communication network through the peripheral output device of the mobile device 120 when it determines that the mobile device 120 is not currently using the mobile communication network. , And switch the mobile device 120 to use the mobile communication network.

The communication module 280 is responsible for driving the user identification module installed on the mobile device 120 to connect to the application host 111 through the mobile communication network. Generally speaking, the communication module 280 can drive the user identification module and obtain the right to use the mobile communication network through the user identification module.

The communication module 280 is also responsible for connecting with the application host 111 through the mobile communication network, and is responsible for transmitting the network identification data and user data obtained by the data acquisition module 220 to the application host 111. In some embodiments, the communication module The group 280 may also receive the identity recognition result transmitted by the application host 111.

The application host 111 can be connected to the identification host 112 via a wired or wireless network, and can also provide the mobile device 120 to be connected via a mobile communication network. The application host 111 can receive data or signals transmitted by the connected mobile device 120 and/or the identification host 112, and can transmit the data or signals to the connected mobile device 120 and/or the identification host 112.

The application host 111 is responsible for providing application services to the mobile device 120, and can request the mobile device 120 to perform identity recognition when the mobile device requests a specific operation, for example, when the mobile device 120 requests registration.

The application host 111 is also responsible for receiving the network identification data and user data sent by the mobile device 120, and sends the received network identification data and user data to the identification host 112.

The application host 111 is also responsible for receiving the identity recognition result sent by the identity recognition host 112, and selects whether to perform the operation requested by the mobile device 120 according to the received identity recognition result. In other words, the application host 111 can indicate in the identity recognition result When the identity recognition is successful, the operation requested by the mobile device 120 is performed, and when the identity recognition result indicates that the identity recognition has failed, the operation requested by the mobile device 120 may be refused to be performed.

The identification host 112 can be connected to the application host 111 and the authentication server 113 through a wired or wireless network, and can also receive data or signals sent by the application host 111 and/or the authentication server 113, and can send data or The signal is sent to the application host 111 and/or the authentication server 113.

The identification host 112 is responsible for receiving the network identification data and user data sent by the application host 111, and sends the received network identification data and user data to the authentication server 113. The identity recognition host 112 is also responsible for receiving the identity recognition result sent by the identity verification server 113, and transmits the received identity recognition result to the application host 111.

The identity verification server 113 can be respectively connected to the identity recognition host 112 and the telecommunication server 130 through a wired or wireless network, and can also receive data or signals sent by the identity recognition host 112 and/or the telecommunication server 130, and can transmit data Or a signal to the identification host 112 and/or the telecommunication server 130.

The identity verification server 113 is responsible for receiving the network identification data and user data sent by the identity recognition host 112, and transmits the received network identification data and user data to the telecommunication server 130. The identity verification server 113 is also responsible for receiving the identity recognition result sent by the telecommunication server 130 and sending the received identity recognition result to the identity recognition host 112.

In some embodiments, the application host 111, the identity recognition host 112, and the identity verification server 113 may be included in the service server 110, as shown in "Figure 1B". The service server 110 may include physical computing devices such as the application host 111, the identification host 112, and the authentication server 113, such as a blade server, etc.; the service server 110 may also be an integrated application host 111 to the mobile device 120 All functions and all functions of the identity verification server 113 to the telecommunications server 130. In other words, the service server 110 can be connected to the telecommunication server 130 through a wired or wireless network, and can also provide the mobile device 120 to be connected through a wired or wireless network. The service server 110 can receive data or signals sent by the connected mobile device 120 and/or the telecommunication server 130, and can send the data or signals to the connected mobile device 120 and/or the telecommunication server 130. In this way, the service server 110 can provide application services of the mobile device 120, and can send the network identification data and user data transmitted by the mobile device 120 to the telecommunication server 130.

In addition, in some embodiments, the application host 111 and the identification host 112 may also be integrated, so that the mobile device 120 sends the network identification data and user data to the telecommunication server through the integrated computing device and the authentication server. The mobile device 130 may choose to integrate the identity recognition host 112 and the identity verification server 113, so that the mobile device 120 transmits network identification data and user data to the telecommunications server 130 through the application host 111 and the integrated computing device. The present invention Not much to repeat.

The telecommunication server 130 can be connected to the identity verification server 113 through a wired or wireless network, can also receive data or signals sent by the identity verification server 113, and can send data or signals to the identity verification server 113.

The telecommunication server 130 is also responsible for receiving the network identification data and user data sent by the identity verification server 113, and is responsible for generating the identification result based on the received network identification data and user data, and sending the identification result to The service server 110 or the authentication server 113.

The telecommunications server 130 can be based on whether the received network identification data is sent by the telecommunications server 130, whether the door number in the user data belongs to the telecommunications unit/organization to which the telecommunications server 130 belongs, and the door number in the user data. Whether the data corresponds to the network identification data and whether the door number in the user data corresponds to the identification data in the user data is judged, and the corresponding identification result can be generated after the judgment. For example, when the telecommunications unit or telecommunications organization is a telecommunications company and the network identification data is a network address, the telecommunications server 130 can determine whether the received network identification data is covered by a data record pre-established by the telecommunications company (such as The network identification data recorded in the data record or the network segment recorded in the data record contains network identification data, etc.), to determine whether the network identification data is owned by the telecommunication unit or telecommunication organization to which the telecommunication server 130 belongs, that is, to determine the network Whether the path identification data is sent by the telecommunications server 130, but the way the telecommunications server 130 determines whether the network identification data is sent by the telecommunications server 130 is not limited to the above; similarly, the telecommunications server 130 can determine the received Whether the door number reached is covered by the data record created in advance by the telecommunications company (for example, the door number recorded in the data record or the door number falls within the door number range recorded in the data record, etc.), to determine whether the door number is a telecommunications server 130 belongs to the telecommunications unit or telecommunications organization, but the way the telecommunications server 130 determines whether the door number belongs to the telecommunications organization/organization to which the telecommunications server 130 belongs is not limited to the above; in addition, the telecommunications server 130 can also search for whether Store the data containing the house number and network identification data in the received house number data. If yes, it means that the house number data corresponds to the network identification data. If not, it means that the house number data does not correspond to the network identification data. Wherein, when the telecommunication server 130 judges no in any of the above items, it can generate an identity recognition result indicating that the identification fails; and when the telecommunication server 130 judges yes in all the above items, it can generate an identity recognition result indicating that the recognition is successful. result. That is, when the identity recognition result indicates that the identity recognition is successful, it means that the telecommunications server 130 determines that the user of the mobile device 120 matches the data recorded by the telecommunications server 130, and the identity of the user of the mobile device 120 can be confirmed; When the identity recognition result indicates that the identity recognition has failed, it means that the telecommunication server 130 cannot confirm the identity of the user of the mobile device.

Next, an embodiment is used to explain the operating system and method of the present invention, and please refer to "Figure 3A" for the flow chart of the method of identifying identity through a telecommunication server by using network identification data in the present invention. In this embodiment, it is assumed that the mobile device 120 is a mobile phone, and the service server 110 is composed of computing devices such as an application host 111, an identity recognition host 112, and an identity verification server 113, but the present invention is not limited to this.

When the user operates the mobile device 120 to open the web browser containing the identification component 200, the user can operate the mobile device 120 to use the web browser to connect to the service server 110 via the mobile communication network (step 301), and to the service server The device 110 requests to download a web page.

After the web browser executed in the mobile device 120 displays the downloaded web page, the user can operate the mobile device 120 to click on the web page displayed by the web browser to execute various functions in the web page displayed by the web browser. In this embodiment, it is assumed that the service server 110 is set up by a government agency, and the web page displayed by the web browser includes the function of user registration or the function that requires the user to register first.

After the user chooses to perform the user registration function, the web browser can display the authorization terms containing personal data and ask the user whether to agree to the web page. The user clicks on the web page displayed on the web browser by operating the mobile device 120 After agreeing to the option of the license terms, the web browser can display a web page containing the entered user information. In this embodiment, it is assumed that the user data includes the house number used by the user on the mobile device 120, the name of the telecommunications organization/unit that owns the house number, the user’s ID number, the user’s birthday, and other registrations. Personal data required at the time, for example, the user’s gender, email address, household registration address, mailing address, etc.

After the user completes the input of the user information, the web browser can call the identity recognition component 200 so that the identity recognition component 200 starts to execute. After the identification component 200 is executed, the data acquisition module 220 of the identification component 200 can acquire network identification data and user data (step 330). In this embodiment, assuming that the network identification data is a network address, the data obtaining module 220 can detect the network address used by the mobile device 120, and can obtain the web page displayed by the user in the web browser User data entered.

After the data acquisition module 220 of the identification component 200 acquires the network identification data and user data (step 330), the communication module 280 of the identification component 200 can transmit the data acquired by the data acquisition module 220 through the mobile communication network. Route identification data and user data to the service server 110 (step 360). In this embodiment, the communication module 280 transmits the network identification data and user data to the application host 111.

In addition, in this embodiment, if the identity recognition component 200 includes the verification module 250, the communication module 280 of the identity recognition component 200 transmits the network identification data and user data to the service server 110 through the mobile communication network (step 360), the verification module 250 can first call the application programming interface (API) provided by the operating system of the mobile device 120, so that the operating system of the mobile device 120 requires the user of the mobile device 120 to input device unlock data and verify the user input The device unlocks the data (step 340) to verify the user's identity. If the verification module 250 determines that the device unlocking data has not passed the verification of the operating system of the mobile device 120, the communication module 280 may not transmit the network identification data and user data, and the verification module 250 can call the operating system of the mobile device 120 again The communication module 280 sends the network identification data and user data to the service server 110 only after the verification module 250 determines that the device unlocking data has passed the verification of the operating system of the mobile device 120 (step 360 ). It should be noted that the data acquisition module 220 of the identification component 200 and the verification module 250 do not have an execution sequence relationship, but generally speaking, the verification module 250 can usually obtain network identification data from the data acquisition module 220 And after the user data (step 330), the application program interface provided by the operating system of the mobile device 120 is called, so that the operating system of the mobile device 120 determines whether the device unlocking data input by the user is verified (step 340).

After the service server 110 receives the network identification data and user data sent by the mobile device 120, it can send the received network identification data and user data to the telecommunication server 130 (step 370). In this embodiment, the application host 111 sends the network identification data and user data to the identification host 112, and the identification host 112 transmits the network identification data sent by the application host 111 through the authentication server 113 And the user data is forwarded to the telecommunication server 130.

After the telecommunications server 130 receives the network identification data and user data sent by the mobile device 120, the telecommunications server 130 can generate an identity recognition result based on the received network identification data and user data. In this embodiment, it is assumed that the telecommunications server 130 can first determine whether the received network identification data is owned by the telecommunications unit/organization to which the telecommunications server 130 belongs, and if not, the telecommunications server 130 can generate an identification failure If yes, the telecommunications server 130 can then determine whether the door number in the received user data is included in the pre-established data record, if not, the telecommunications server 130 can generate an identity indicating that the identification has failed Identification result; if yes, the telecommunication server 130 can continue to determine whether the door number in the user data corresponds to the network identification data, if not, the telecommunication server 130 can generate an identity identification result indicating that the identification fails; if so, the telecommunication server 130 determines whether the door number corresponds to the identification data in the user data. If not, the telecommunication server 130 may generate an identification result indicating that the identification fails; if so, the telecommunication server 130 may generate an identification result indicating that the identification is successful .

After the telecommunication server 130 generates an identity recognition result based on the received network identification data and user data, it may send the generated identity recognition result to the service server 110 (step 380). In this embodiment, the telecommunication server 130 may send the identity recognition result to the identity verification server 113, and the identity recognition host 112 forwards the identity recognition result received by the identity verification server 113 to the application host 111, so that the application The host 111 can choose whether to complete the registration operation requested by the mobile device 120 according to the identity recognition result. When the identification result indicates that the identification has failed, the application host 111 can determine that the door number in the user data is not used by the user corresponding to the ID number in the user data, so it can be determined that the user's data is incorrect and rejected The registration operation of the mobile device 120; and when the identification result indicates that the identification is successful, the application host 111 can determine that the door number in the user data is indeed used by the user corresponding to the ID number in the user data. Therefore, it can It is determined that the user identity is true. In this way, the application host 111 can complete the registration operation of the mobile device 120, that is, write the received user data into the member database. In this way, through the present invention, the service server 110 can obtain the identity recognition result of the mobile device 120 through the telecommunication server 130, thereby confirming the identity of the registered user through the correctness of the user data.

In the above-mentioned embodiment, if the identity recognition component 200 further includes the network determination module 260, as shown in the process of "Figure 3B", the data acquisition module 220 of the identity recognition component 200 can obtain network identification data and gates. Before the number data (step 330), the network determination module 260 can first determine whether the mobile device 120 uses the mobile communication network (step 321). If the network determination module 260 determines that the mobile device 120 is currently using the mobile communication network, the data is obtained The module 220 can obtain network identification data and door number data (step 330); and if the network determination module 260 determines that the mobile device 120 is not currently using a mobile communication network, for example, if it determines that a wireless local area network such as WiFi is currently used, the network The path determination module 260 can directly turn off the wireless local area network function of the mobile device 120, thereby setting the mobile device 120 to use the mobile communication network, so that the data acquisition module 220 can obtain the network identification data of the mobile communication network; The module 260 may also prompt the user to set the mobile device 120 to use the mobile communication network when determining that the mobile device 120 is not currently using the mobile communication network (step 325). The data acquisition module 220 may determine in the network determination module 260 The mobile device 120 is configured to use the mobile communication network to obtain network identification data and door number data (step 330).

In addition, in the above-mentioned embodiment, if the identification component 200 further includes the data input module 240, the web browser containing the identification component 200 can call the identification after the service that needs to be logged in on the web page is selected or executed by the user. The component 200 does not display the web page for entering user information. After the identification component 200 is executed, the data input module 240 can provide a user interface for the user to input user data. In this way, the data acquisition module 220 of the identification component 200 can also acquire the user data entered by the user. At the same time, the identification component 200 can also detect the network identification data used by the mobile device 120 (step 330). Wherein, before the data acquisition module 220 acquires the user data, the mobile device 120 can first detect the mobile device 120 installed on the mobile device 120 by the detection module 230 of the identification component 200 as shown in the process shown in "Figure 3C". User identification module (step 311). When the data acquisition module 220 acquires user data, the data acquisition module 220 can determine whether the detection module 230 has detected two or more user identification modules (step 313). If not, the data acquisition module 220 can directly acquire network identification data and user data (step 330); and if the data acquisition module 220 detects multiple user identification modules, the data acquisition module 220 can prompt the user to enter the door number data corresponding to the user identification module of the mobile communication network currently used by the mobile device 120 in the user data (step 315), and obtain the user data after the user confirms, and Detect and obtain network identification data (step 330).

To sum up, it can be seen that the difference between the present invention and the prior art is that after the identification component executed by the mobile device obtains the network identification data and user data, it transmits the network identification data and user data to the mobile communication network. Service server, and the service server sends network identification data and user data to the telecommunication server, so that the telecommunication server generates an identification result based on the network identification data and user data and sends the identification result to the service server Technical means, by means of this technical means, the problem that the mobile device in the prior art is difficult to connect to the hardware carrier to identify the user's identity can be solved, and the technical effect of using the mobile device alone to complete the identity identification can be achieved.

Furthermore, the method of identifying identity through a telecommunication server using network identification data of the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner in a computer system or with different components Distributed in several interconnected computer systems.

Although the embodiments of the present invention are disclosed as above, the content described is not intended to directly limit the scope of patent protection of the present invention. Any person with ordinary knowledge in the technical field to which the present invention belongs, without departing from the spirit and scope of the present invention, makes slight modifications to the form and details of the implementation of the present invention, all belong to the patent protection of the present invention. range. The scope of patent protection of the present invention shall still be determined by the scope of the attached patent application.

110: service server 111: Application host 112: identification host 113: authentication server 120: mobile device 130: Telecom Server 200: identification component 220: Data Acquisition Module 230: Detection Module 240: data input module 250: Verification Module 260: Network Judgment Module 280: Communication module Step 301: The mobile device connects to the service server through the mobile communication network Step 311: The mobile device detects the user identification module Step 313: The mobile device determines whether multiple network identification data is detected Step 315: The mobile device prompts to enter the door number corresponding to the network identification data corresponding to the mobile communication network Step 321: The mobile device determines whether to use a mobile communication network Step 325: The mobile device prompts to switch to the mobile communication network Step 330: The mobile device obtains network identification data and user data Step 340: The mobile device determines whether the device unlock data is verified Step 360: The mobile device sends network identification data and user data to the service server Step 370: The service server sends network identification data and user data to the telecommunications server Step 380: The telecommunication server generates an identification result based on the network identification data and user data, and sends the identification result to the service server

Figure 1A is a diagram of the system architecture of the invention using network identification data to identify identity through a telecommunication server. Figure 1B is a diagram of another system architecture that uses network identification data to identify an identity through a telecommunication server according to the present invention. Figure 2 is a schematic diagram of the components of the mobile device according to the present invention. Figure 3A is a flow chart of the method for identifying identity through a telecommunication server using network identification data according to the present invention. Figure 3B is a flow chart of the method for prompting to switch networks in the present invention. Fig. 3C is a flow chart of the method of prompt input for using the mobile communication network door number according to the present invention.

Step 301: The mobile device connects to the service server through the mobile communication network

Step 330: The mobile device obtains network identification data and user data

Step 340: The mobile device determines whether the device unlock data is verified

Step 360: The mobile device sends network identification data and user data to the service server

Step 370: The service server sends network identification data and user data to the telecommunications server

Step 380: The telecommunication server generates an identification result based on the network identification data and user data, and sends the identification result to the service server

Claims (10)

A method for identifying an identity through a telecommunication server using network identification data, the method at least including the following steps: A mobile device is connected to a service server through a mobile communication network; The mobile device obtains a network identification data and a user data; The mobile device sends the network identification data and the user data to the service server; The service server sends the network identification data and the user data to a telecommunication server; and The telecommunication server generates an identity recognition result based on the network identification data and the user data, and transmits the identity recognition result to the service server. As described in the first item of the scope of patent application, the method of identifying identity through a telecommunication server using network identification data, wherein the method is before the step of transmitting the network identification data and the user data to the service server by the mobile device , It also includes the step of prompting to switch to the mobile communication network when the mobile device determines that the mobile device is not currently using the mobile communication network. As described in the first item of the scope of patent application, the method of identifying identity through a telecommunication server using network identification data, wherein the method is before the step of transmitting the network identification data and the user data to the service server by the mobile device , It further includes the steps of inputting a device unlocking data and verifying the device unlocking data provided by the mobile device. As described in the first item of the scope of patent application, the method of identifying the identity through the telecommunication server by using network identification data, wherein the method includes the steps of obtaining the network identification data and the user data from the mobile device. Detect the installed user identification module (SIM), and when two or more user identification modules are detected, prompt to enter the user identification in the user data that is currently used to use the mobile communication network Steps of the door number corresponding to the module. As described in item 1 of the scope of patent application, the method of identifying identity through a telecommunication server using network identification data, wherein the step of obtaining the user data by the mobile device is that the mobile device reads the user data entered by the user . A system that uses network identification data to identify an identity through a telecommunication server. The system at least includes: A service server; A mobile device for executing an identification element, the identification element including: A data acquisition module for acquiring a user data and a network identification data; and A communication module for connecting with the service server through a mobile communication network, and transmitting the network identification data and the user data to the service server; and A telecommunication server for receiving the network identification data and the user data sent by the service server, and for generating an identification result based on the network identification data and the user data, and transmitting the identity Recognize the result to the service server. As described in item 6 of the scope of patent application, the system that uses network identification data to identify an identity through a telecommunication server, wherein the identity identification component further includes a network determination module to determine whether the mobile device is currently using a mobile communication network . As described in item 6 of the scope of patent application, the system that uses network identification data to identify an identity through a telecommunication server, wherein the identification component further includes a verification module for inputting a device unlocking data and verifying the device unlocking data . As described in item 6 of the scope of patent application, the system that uses network identification data to identify identity through a telecommunication server, wherein the mobile device further includes a detection module to detect the user identification module installed on the mobile device , The data acquisition module is further used to prompt the user to enter the user data and the user currently used to use the mobile communication network when the detection module detects two or more user identification modules Identify the corresponding door number of the module. As described in item 6 of the scope of patent application, the system uses network identification data to identify an identity through a telecommunication server, wherein the data acquisition module reads the user data entered by the user to obtain the user data.

Images