TW202113717A - Information authentication method and system thereof, authentication module and user terminal - Google Patents

Abstract

The present invention relates to an information authentication method and a system thereof, an authentication module, and a user terminal. The method comprises: generating a Token acquisition request; forwarding the Token acquisition request to an operator system through an authentication system; the operator system generates a corresponding Token according to the Token acquisition request and stores a corresponding relationship between the Token and a mobile phone number; issuing an authentication request on the basis of the entered mobile phone number and adding the stored Token; the operator system verifies whether the relationship between the mobile phone number and the Token in the authentication request is consistent with the stored corresponding relationship, and when the two are consistent, determining that the authentication is successful. According to the invention, there is no need of SMS verification of the mobile phone, and the mobile phone number can be verified by using the token, so that the user's operation process is simplified, and the authentication efficiency can be improved.

Description

Information authentication method and its system, authentication module and its system, operator system, application background system, user terminal, computer readable medium and computer equipment

The present invention relates to communication technology, in particular to an information authentication method and an information authentication system for identifying a user's identity.

At present, for many APP (application) products, in account registration, account login, transfer and other scenarios, it is necessary to enter a mobile phone number. At this time, it is often necessary to verify the entered mobile phone number in the form of a SMS verification code.

For example, patent document 1 (CN104243157A) proposes a user identity authentication method and device. The identity authentication method mainly includes the following steps:

Generate a verification code on the server side;

Display verification codes to users in business application scenarios that require user identity authentication;

Receive the displayed verification code sent by the user through other application servers outside the application scenario;

Compare the verification code from the user with the verification code generated by the server; and

Determine whether to pass the identity authentication according to the comparison result.

In this patent document 1, when the APP logs in, the APP will display the verification code. The user sends the verification code to the server by editing the SMS message, and the server compares whether the verification code displayed by the APP is consistent with the verification code sent by the SMS message, so as to pass the uplink SMS to send verification code information and verify. Therefore, when the user logs in to the APP, the user needs to send the verification code to the server by editing the SMS message, that is, the original SMS verification code method of the downlink SMS message is changed to the SMS verification code method of the uplink SMS message, and the user still needs to perform the verification code Input operation.

In addition, for example, Patent Document 2 (CN104767614A) proposes a user identity authentication method and device. The method includes the following steps:

1. User A accesses the P portal, and the portal P judges that user A is not logged in, and is redirected to the login page of the unified authentication system;

2. The unified authentication system generates a random code according to the login authentication request and returns it to user A;

3. User A’s mobile browser returns to the login page with the "SMS quick login" mark embedded, and user A clicks the "SMS quick login (without password)" link, the mobile browser invokes the SMS sending module and sends it to the designated port ( Such as 10086) Send a short message in a specific format in the uplink;

4. After the SMS portal receives the upstream SMS from user A, it extracts the mobile phone number in the upstream SMS, and the server in the unified authentication system creates the associated information of the mobile phone number and the random code and saves it to the temporary storage server;

5. The user clicks on the "SMS Quick Login" mark to jump to the login waiting page, and sends a request for the quick login of the short message to the unified authentication system. The unified authentication system extracts the random code from the request for the short message login processing address and bases it on the associated information The mobile phone number is inquired by the random code, and the application server returns the mobile phone number to the unified authentication system; automatic login is performed according to the inquired mobile phone number.

However, the method disclosed in Patent Document 2 needs to establish the correspondence between the mobile phone number and the random code through the SMS portal and the application server. This process is completed by extracting the mobile phone number and the random code from the SMS message, which is inefficient and requires The verification code is extracted from the SMS message address through the unified authentication system and sent to the application server to query the mobile phone number. This process is realized through the newsletter platform, and the verification efficiency is low.

In view of the above problems, the present invention aims to provide an information authentication method and an information authentication system that does not require the use of a short message platform and the user does not need to enter a verification code.

The information authentication method of one aspect of the present invention, which is implemented by an application module, an authentication module, an authentication system, and an operator system, includes:

In the Token obtaining request step, the application module generates a Token obtaining request and sends it to the authentication module, wherein the Token obtaining request includes at least the SIM card device number obtained by the application module;

In the Token request forwarding step, the authentication module forwards the Token acquisition request to the operator system through the authentication system;

In the Token generation step, the operator system obtains the corresponding mobile phone number according to the SIM card device number in the Token acquisition request, generates a corresponding Token based on the mobile phone number, and returns the generated Token to the authentication module through the authentication system for storage At the same time, the operator system stores the corresponding relationship between the mobile phone number and the Token;

In the authentication request initiating step, the application module initiates an authentication request for information authentication based on the entered mobile phone number and sends the authentication request to the authentication module, wherein the authentication request includes at least the mobile phone number;

In the authentication request forwarding step, the authentication module adds the Token stored by the authentication module to the authentication request and then sends it to the operator system through the authentication system; and

In the authentication request verification step, the operator system verifies whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the stored corresponding relationship, and when the two are consistent, it determines that the authentication is successful.

The information authentication method of one aspect of the present invention includes the following steps:

The Token acquisition request step is to generate and send a Token acquisition request, where the Token acquisition request includes at least a SIM card device number, where the SIM card device number is used to obtain a corresponding mobile phone number, which is further based on the mobile phone number. It is used to generate the corresponding Token and the mobile phone number has a corresponding relationship with the generated Token;

Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number;

The authentication request initiation step is to initiate an authentication request for information authentication based on the entered mobile phone number and add the stored Token to the authentication request; and

The authentication result receiving step is to receive the authentication result, where the authentication result represents the result of verifying whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the corresponding relationship, and when the two are consistent, Judging that the authentication is successful.

Optionally, the Token obtaining request step includes:

Determine whether there are Token acquisition conditions; and

Obtain the SIM card device number, generate a token acquisition request and send it.

Optionally, the judging whether there is a Token obtaining condition includes:

Determine whether you have a SIM card; and

Determine whether to use the current SIM card data flow volume to network.

Optionally, repeat the Token acquisition request step and the Token storage step until N Tokens are stored, and the N Tokens form a Token queue, where N is a natural number.

Optionally, it is determined whether there is an invalid Token in the Token queue, and if there is an invalid Token, the Token acquisition request generation step and the Token storage step are repeated until N valid Tokens are stored.

Optionally, determine whether there is an invalid Token in the Token queue based on the validity of the Token.

Optionally, in the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number, wherein the SIM card device number is used to obtain the corresponding The mobile phone number is further based on that the mobile phone number is used to generate the corresponding Token and the mobile phone number, the application identifier and the Token have a corresponding relationship,

In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number and application identifier,

In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number and application identifier, and the stored Token is added to the authentication request.

Optionally, in the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number and the authentication module identifier of the authentication module used to initiate the authentication request , Wherein the SIM card device number is used to obtain the corresponding mobile phone number, further based on the mobile phone number being used to generate the corresponding Token, and the mobile phone number, application identification, authentication module identification and the Token have a corresponding relationship,

In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number, application identification and authentication module identification,

In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number, application ID, and authentication module ID, and a stored Token is added to the authentication request.

Optionally, in the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number, and the authentication module identifier of the authentication module used to initiate the authentication request. And the authentication module KEY, wherein the SIM card device number is used to obtain the corresponding mobile phone number, and is further used to generate the corresponding Token based on the mobile phone number, and the mobile phone number, application identification, authentication module identification, and authentication module The group KEY and Token have a corresponding relationship, wherein the authentication module KEY is generated based on the authentication module identifier,

In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number, application ID, authentication module ID, and authentication module KEY,

In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number, application ID, authentication module ID, and authentication module KEY, and a stored Token is added to the authentication request.

Optionally, in the authentication result receiving step, when it is determined that the two are inconsistent, the information authentication method further includes:

The mobile phone message verification step is to send a message to the mobile phone for verification.

The information authentication method of the present invention includes the following steps:

In the Token generation step, the corresponding mobile phone number is obtained according to the SIM card device number contained in the Token obtaining request, the corresponding Token is generated based on the mobile phone number, and the generated Token is returned to the sender of the Token obtaining request, and the mobile phone is stored at the same time Correspondence between number and Token; and

The authentication request verification step is to receive the authentication request, verify whether the correspondence between the mobile phone number and the Token contained in the authentication request is consistent with the stored correspondence, and when the two are consistent, determine that the authentication is successful.

The information authentication method of the present invention, which is implemented by the application module, the authentication module, the application background system, the authentication system, and the operator system, includes the following steps:

In the Token obtaining request step, the application module generates a Token obtaining request and sends it to the authentication module, wherein the Token obtaining request includes at least the SIM card device number obtained by the application module;

In the Token request forwarding step, the authentication module forwards the Token acquisition request to the operator system through the authentication system;

In the Token generation step, the operator system obtains the corresponding mobile phone number according to the SIM card device number in the Token acquisition request, generates the corresponding Token based on the mobile phone number, and returns the Token to the authentication system and the authentication module through the authentication system and the authentication module. Application module, while the operator system stores the corresponding relationship between the mobile phone number and the Token;

In the Token forwarding step, the application module forwards the received Token to the application background system and stores it by the application background system;

In the authentication request initiating step, the application module initiates an authentication request for information authentication based on the entered mobile phone number and sends the authentication request to the application background system, wherein the authentication request includes at least the mobile phone number;

In the authentication request forwarding step, the application background system adds the stored Token to the authentication request and sends it to the operator system; and

In the authentication request verification step, the operator system verifies whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the stored corresponding relationship, and when the two are consistent, it determines that the authentication is successful.

The information authentication system of one aspect of the present invention includes: a user terminal, an authentication system, and an operator system,

Wherein, the application module is used to obtain a mobile phone number and a SIM card device number and submit them to the authentication module,

In the process of acquiring the Token, the authentication module is used to initiate a Token acquisition request to the authentication system based on the SIM card device number obtained from the application module and to store the Token returned from the authentication system. On the other hand, In the process of performing mobile phone number authentication, it is used to add the stored Token based on the mobile phone number obtained from the application module and initiate an authentication request to the authentication system and receive the authentication result returned from the authentication system ,

The authentication system is configured to forward the Token acquisition request and the authentication request to the operator system, and receive the Token and the authentication result returned by the operator system and forward them to the authentication module,

In the process of obtaining the Token, the operator system generates the Token after obtaining the mobile phone number according to the SIM card device number and returns it to the authentication system. At the same time, the corresponding relationship between the mobile phone number and the Token is stored. In the process, it is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the stored corresponding relationship between the mobile phone number and the Token, and if the two are consistent, the authentication is determined to be successful.

Optionally, the authentication module includes:

The first request unit is used to initiate a token acquisition request to the authentication system based on the SIM card device number obtained from the application module in the process of acquiring the Token;

A storage unit for storing the Token returned from the authentication system; and

The second request unit is used to add the Token stored in the storage unit on the basis of the mobile phone number obtained from the application module in the process of performing mobile phone number authentication, and initiate an authentication request to the authentication system and receive The authentication result returned from the authentication system and the authentication result is returned to the application module,

The operator system has:

The Token generating unit obtains the mobile phone number according to the SIM card device number in the process of obtaining the Token, then produces the Token according to the mobile phone number, and returns the generated Token to the authentication system;

The Token storage unit is used to store the correspondence between the mobile phone number and the Token; and

The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the stored mobile phone number and the corresponding relationship with the Token during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful.

The authentication module of one aspect of the present invention includes:

The first request unit is used to initiate a Token acquisition request based on the SIM card device number in the process of acquiring the Token;

The storage unit is used to store the returned tokens; and

The second request unit is used to add the Token stored in the storage unit on the basis of the obtained mobile phone number and initiate an authentication request and receive the returned authentication result and return the authentication result during the process of mobile phone number authentication.

Optionally, the first request unit determines whether there is a Token acquisition condition in the process of acquiring the Token, and acquires the SIM card device number, and generates and sends a Token acquisition request.

Optionally, the first request unit judges online whether there is a Token acquisition condition during the process of acquiring the Token.

Optionally, the Token acquisition conditions include:

Determine whether you have a SIM card; and

Determine whether to use the current SIM card data flow volume to network.

Optionally, the first request unit repeatedly initiates the token acquisition request until the storage unit stores N tokens, and the N tokens form a token queue, where N is a natural number.

Optionally, the first request unit determines whether there is an invalid Token in the Token queue, and if there is an invalid Token, it repeatedly initiates a Token acquisition request, and the storage unit stores N valid Tokens.

Optionally, when the first request unit initiates the Token acquisition request, the Token acquisition request further includes the application identifier of the application module used to obtain the SIM device number, wherein the SIM card device number is used In order to obtain the corresponding mobile phone number, the mobile phone number is further used to generate the corresponding Token and the mobile phone number, the application identifier and the Token have a corresponding relationship.

The operator system of one aspect of the present invention includes:

The Token generation unit obtains the mobile phone number according to the SIM card device number in the process of obtaining the Token, and then generates the Token according to the mobile phone number;

The Token storage unit is used to store the correspondence between the mobile phone number and the Token; and

The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the received authentication request is consistent with the corresponding relationship between the mobile phone number and the Token stored in the Token storage unit during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful.

The information authentication system of one aspect of the present invention includes: a user terminal, an authentication system, an application background system, and an operator system,

The application module is used to initiate a Token acquisition request and an authentication request and submit them to the authentication module, wherein the Token acquisition request includes at least a SIM card device number, and the authentication request includes at least a mobile phone number,

The authentication module forwards the Token acquisition request to the authentication system in the process of acquiring the Token and is used to return the acquired Token to the application module,

The authentication system is used to forward the Token acquisition request to the operator system and the acquired Token to the authentication module in the process of acquiring the Token. The authentication request of the application background system is present and the authentication result returned by the operator system is received and forwarded to the application background system,

The application background system is used to store the Token sent from the application module in the process of acquiring the Token, and on the other hand, is used to store the mobile phone number obtained from the application module in the process of mobile phone number authentication. On the basis of adding the stored Token and initiating an authentication request to the authentication system and receiving the authentication result returned from the authentication system,

In the process of acquiring the Token, the operator system obtains the SIM card device number to obtain the mobile phone number and then generates the Token, and then returns the generated Token to the SIM card device number authentication system, and stores the corresponding relationship between the mobile phone number and the Token. On the other hand, In the process of performing mobile phone number authentication, it is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the corresponding relationship between the stored mobile phone number and the Token. If the two are consistent, Then it is judged that the authentication is successful.

The application background system of one aspect of the present invention includes:

The storage unit is used to store the Token obtained from the outside in the process of obtaining the Token;

The request unit is used to add the Token stored in the storage unit on the basis of the obtained mobile phone number in the process of performing mobile phone number authentication, initiate an authentication request, and receive the returned authentication result.

The operator system of one aspect of the present invention includes:

The Token generation unit generates and sends the Token according to the user's mobile phone number in the process of obtaining the Token;

The Token storage unit stores the correspondence between the mobile phone number and the generated Token; and

The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the received authentication request is consistent with the corresponding relationship between the mobile phone number and the Token stored in the Token storage unit during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful.

A computer-readable medium according to one aspect of the present invention has a computer program stored thereon, wherein:

When the computer program is executed by the processor, the above-mentioned information authentication method is realized.

A computer device in one aspect of the present invention includes a memory, a processor, and a computer program that is stored on the memory and can run on the processor, wherein the processor executes the computer program when the computer program is executed by the above-mentioned information authentication method.

As described above, according to the information authentication method and information authentication system of the present invention, it is necessary to input the short message verification code, and authentication can be performed as long as the user enters his mobile phone number, which can reduce the user's APP operation time and improve the operation speed and effect.

Introduced below are some of the multiple embodiments of the present invention, intended to provide a basic understanding of the present invention. It is not intended to confirm the key or decisive elements of the present invention or limit the scope of protection.

For brevity and illustrative purposes, this document mainly refers to its exemplary embodiments to describe the principles of the present invention.

However, those skilled in the art will readily recognize that the same principles can be equally applied to all types of image processing methods and image processing methods for recognizing bank cards, and these same principles can be implemented therein, as well as any Such changes do not depart from the true spirit and scope of this patent application.

Moreover, in the following description, reference is made to the accompanying drawings, which illustrate specific exemplary embodiments. Electrical, mechanical, logical, and structural changes can be made to these embodiments without departing from the spirit and scope of the present invention. In addition, although the feature of the present invention is disclosed in conjunction with only one of several implementations/embodiments, if it may be desired and/or advantageous for any given or identifiable function, this feature can be combined with other implementations. One or more other features of the embodiment are combined. Therefore, the following description should not be considered in a limiting sense, and the scope of the present invention is defined by the appended claims and their equivalents.

Terms such as "have" and "include" mean that in addition to the units and steps that are directly and clearly stated in the specification and claims, the technical solution of the present invention does not exclude other units that are not directly or clearly stated. And the situation of the steps.

The information authentication method of the present invention aims to realize information authentication by matching the mobile phone number obtained by the mobile phone terminal (hereinafter also referred to as the user terminal) through the SIM card device number with the mobile phone number entered by the user. Therefore, the user only needs to enter the mobile phone number. Information authentication can be realized without the user inputting the SMS verification code. In this way, the so-called non-inductive authentication can be realized (the input of the SMS verification code is not required).

Fig. 1 is a flowchart showing the information authentication method of the first aspect of the present invention.

As shown in FIG. 1, the information authentication method of the first aspect of the present invention is implemented by an application module, an authentication module, an authentication system, and an operator system. The information authentication method of the first aspect of the present invention includes the following steps:

Step S1: Obtaining information, including: the user opens the application module (for example, opens the APP) and initializes the authentication module, and the authentication module obtains the SIM card device number of the mobile phone from the application module;

Step S2: Initiate a request to obtain a Token (i.e., the identification word corresponding to the mobile phone number in the present invention) from the authentication module to the authentication system, where the request includes the user's SIM card device number;

Step S3: The authentication system forwards the Token acquisition request to the operator system;

Step S4: The operator system finds the corresponding mobile phone number according to the SIM card device number, then generates a Token based on the mobile phone number, and returns the generated Token to the authentication system. At the same time, the operator system stores the corresponding relationship between the mobile phone number and the Token;

Step S5: The authentication system returns the received Token to the authentication module and stores it by the authentication module;

Step S6: When mobile phone number authentication is required, an authentication request is initiated from the application module to the authentication module, where the authentication request includes at least the user's mobile phone number, for example, the user inputs the mobile phone number into the application module;

Step S7: The authentication module adds the Token to the received authentication request and forwards it to the authentication system;

Step S8: The authentication system forwards the authentication request to the operator system;

Step S9: The operator system judges whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the corresponding relationship between the mobile phone number and the Token stored in the operator system, and if the two are consistent, the authentication is judged to be successful (No need for SMS verification step), if the two are inconsistent, it is judged that the authentication has failed, in the case of authentication failure, you can also add the SMS verification step or you can also add the SMS verification step, and the operator system will return the authentication result to the authentication system;

Step S10: the authentication system returns the authentication result to the authentication module; and

Step S11: The authentication module returns the authentication result to the application module.

Here, as an application module, for example, it may be a certain APP. As an authentication module, it can be integrated in an application module. For example, when the application module is a certain APP, the authentication module is an SDK (Software Development Kit, software development kit) integrated in it, which is the software used to provide services. Integrated toolkit). Of course, the authentication module may not be provided in the application module, but may be constituted as a separate component.

As an optional way, in step S2, before initiating the Token acquisition request, it is possible to further determine whether the Token acquisition condition is satisfied, for example, the validity of the self-checking device, which includes: network check, SIM card check, etc.

In the process of acquiring tokens (steps S1 to S5), as an optional way, you can repeat steps S2 to S5 to obtain multiple Tokens. In this way, a Token queue is established in the authentication module and several acquired Tokens are stored. And replenish the Token in a loop when the Token expires, and set the end point of the replenishment Token to ensure the stability and security of the authentication process.

In the process of mobile phone number authentication (step S6 to step S9), the case initiated by the terminal (ie, the authentication module) is described here, and as an alternative, the authentication case can also be initiated by the background system of the application module.

Fig. 2 is a block diagram showing the structure of the information authentication system of the first aspect of the present invention.

As shown in FIG. 2, the information authentication system of the first aspect of the present invention includes: a user terminal 10, an authentication system 20, and an operator system 30. Among them, the user terminal 10 includes an application module 11 and an authentication module 12.

The application module 11 is used to obtain information related to the mobile phone number. Specifically, it is used to obtain the SIM card device number in the process of obtaining the Token, and the mobile phone number is obtained in the mobile phone number authentication process. The number is submitted to the authentication module 12.

In the process of acquiring the Token, the authentication module 12 is used to initiate a Token acquisition request to the authentication system 20 based on the SIM card device number obtained from the application module 11 and to store the Token returned from the authentication system 20. On the other hand, the authentication module In the process of performing mobile phone number authentication, the group 12 is used to add the stored Token on the basis of the mobile phone number obtained from the application module 11, initiate an authentication request to the authentication system 20, and receive the authentication result returned from the authentication system 20.

The authentication system 20 is configured to forward the Token acquisition request to the operator system 30, and receive the authentication result returned by the operator system 30 and forward it to the authentication module 12.

The operator system 30 generates a Token according to the user’s mobile phone number in the process of acquiring the Token and returns it to the authentication system 20. It also stores the corresponding relationship between the mobile phone number and the Token. On the other hand, it is used to determine from the mobile phone number authentication process. Whether the relationship between the mobile phone number and the Token in the authentication request received by the authentication system 20 is consistent with the corresponding relationship between the stored mobile phone number and the Token, and if the two are consistent, it is determined that the authentication is successful.

Here, although it is shown in FIG. 2 that the application module 11 and the authentication module 12 are two components, the authentication module 12 may also be integrated in the application module 11.

Fig. 3 is a flowchart showing the information authentication method of the second aspect of the present invention.

As shown in FIG. 3, the information authentication method of the second aspect of the present invention is implemented by an application module, an authentication module, an application background system, an authentication system, and an operator system. The information authentication method of the second aspect of the present invention includes the following steps:

Step S11: Obtaining information, including: the user opens the application module (for example, opens the APP) and initializes the authentication module, and the authentication module obtains the SIM card device number from the application module;

Step S12: Initiate a token acquisition request from the authentication module to the authentication system, where the request includes the SIM card device number;

Step S13: The authentication system forwards the Token acquisition request to the operator system;

Step S14: The operator system finds the mobile phone number of the corresponding user according to the SIM card device number and generates a Token, and returns the generated Token to the authentication system. At the same time, the operator system stores the corresponding relationship between the mobile phone number and the Token;

Step S15: The authentication system returns the received Token to the authentication module;

Step S16: After receiving the Token, the authentication module sends the Token to the application module;

Step S17: The application module sends the received Token to the application background system, and the application background system stores it;

Step S18: When mobile phone number authentication is required, an authentication request is initiated from the application module to the application background system, where the authentication request includes at least the user's mobile phone number;

Step S19: After receiving the authentication request, the application background system adds its stored Token and forwards it to the authentication system;

Step S20: the authentication system sends the authentication request to the operator system;

Step S21: The operator system determines whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the corresponding relationship between the mobile phone number and the Token stored in the operator system, and if the two are consistent, the authentication is judged to be successful (No SMS verification step is required), if the two are inconsistent, it is judged that the authentication has failed, and the SMS verification step can be added in the case of authentication failure, and the operator system will return the authentication result to the authentication system;

Step S22: the authentication system returns the authentication result to the application background system; and

Step S23: The application background system returns the authentication result to the application module.

Here, in the process of performing mobile phone number authentication (step S16 to step S23), the authentication request is initiated by the application background system of the application module.

Among them, as an application module, for example, it may be a certain APP. As the authentication module, it can be integrated in the application module. For example, when the application module is an APP, the authentication module is the SDK integrated in it. Of course, the authentication module may not be provided in the application module, but may be constituted as a separate component. The present invention does not limit this.

As an optional way, in step S12, before initiating the Token acquisition request, it is possible to further determine whether the Token acquisition condition is satisfied, for example, the validity of the self-checking device, which includes: network check, SIM card check, etc.

Fig. 4 is a block diagram showing the structure of the information authentication system of the second aspect of the present invention.

As shown in FIG. 4, the information authentication system of the second aspect of the present invention includes: a user terminal 40, an authentication system 50, an application background system 60, and an operator system 70. Among them, the user terminal 40 includes an application module 41 and an authentication module 42.

The application module 41 is used to obtain information related to the mobile phone number. Specifically, it is used to obtain the SIM card device number in the process of obtaining the Token, and the mobile phone number is obtained in the mobile phone number authentication process. The number is submitted to the authentication module 42.

In the process of acquiring the Token, the authentication module 42 is used to initiate a Token acquisition request to the authentication system 50 based on the SIM card device number obtained from the application module 41 and is used to return the acquired Token to the application module 41.

The authentication system 50 is used to forward the Token acquisition request to the operator system 70 and the acquired Token to the authentication module 42 during the process of acquiring the Token. On the other hand, during the process of verifying the mobile phone number, it receives the request from the application backend system 60. The authentication request is in and receives the authentication result returned by the operator system 70 and forwards it to the application backend system 60.

The application background system 60 is used to store the Token sent from the application module 41 in the process of acquiring the Token, and on the other hand, to use the mobile phone number or SIM card device obtained from the application module 41 in the process of mobile phone number authentication. On the basis of the number, the stored Token is added, an authentication request is initiated to the authentication system 60, and the authentication result returned from the authentication system 60 is received.

The operator system 70 generates a Token according to the user’s mobile phone number in the process of acquiring the Token and returns it to the authentication system 50. It also stores the corresponding relationship between the mobile phone number and the Token. On the other hand, it is used to determine from the mobile phone number authentication process. Whether the relationship between the mobile phone number and the Token in the authentication request received by the authentication system 50 is consistent with the corresponding relationship between the stored mobile phone number and the Token, and if the two are consistent, it is determined that the authentication is successful.

Here, although it is shown in FIG. 4 that the application module 41 and the authentication module 42 are two components, the authentication module 42 may also be integrated in the application module 41.

Next, specific implementations of the information authentication method and information authentication system of the present invention will be described.

First, the information authentication method and information authentication system of the first embodiment of the present invention will be explained.

Fig. 5 is a flowchart showing the information authentication method according to the first embodiment of the present invention.

Next, the information authentication method according to the first embodiment of the present invention will be described with reference to FIG. 5.

As shown in FIG. 5, the information authentication method of the first embodiment of the present invention includes the following steps:

1-2: The user opens the application module (for example, opens an APP), the application module then calls the authentication module and sends a token acquisition request to the authentication module. The Token to be retrieved in the Token obtaining request corresponds to the SIM card device number of the current usage data flow in the mobile phone.

3-4. After the authentication module is initialized, it is judged whether the Token acquisition conditions are met. Among them, the application module and the authentication module are set in the user's user terminal (ie a handheld terminal, as an example, a mobile phone), then it is judged whether the user terminal is Meet the Token acquisition conditions, for example:

(1) Judge whether there is a SIM card, if yes, proceed to (2), if not, return a response code such as "11111" and the response code prompts "SIM card not inserted".

(2) Determine whether the handheld terminal is connected to the Internet, if yes, proceed to 4. If not, return a response code such as "11112" and the response code prompts "No data network opened".

5. The authentication module sends a token acquisition request to the authentication system.

6. The authentication system sends a token acquisition request to the operator system.

7. After receiving the Token obtaining request, the operator system queries the corresponding mobile phone number according to the SIM card device number, generates the corresponding Token according to the mobile phone number, and then returns the Token to obtain a response.

8. After receiving the Token, the authentication system returns the Token to the authentication module to obtain a response.

Here, as an optional method, the Token acquisition request in the authentication module will be sent until the Token queue is filled. For example, the Token queue length is 3, and if the token acquisition is normal, 3 consecutively will be acquired Token, of course, may not be three, for example, it may be N, and N is a natural number.

The advantage of obtaining multiple Tokens is that, for example, when multiple information authentication is required in a short period of time (for example, when there are multiple payments that need to be confirmed by the mobile phone number), or in a short period of time, both payment and password modification are required. The Tokens in the queue can be used directly without reacquiring, which can save time and improve efficiency.

Among them, if a token acquisition request is sent a certain number of times (such as 3 times), and a Token acquisition failure prompt is returned, then the Token acquisition request will not be sent; or after a certain period of time (such as 10 seconds) the Token acquisition request is sent, there is still no information feedback. Then return to get failure prompt.

9. The user enters the mobile phone number to initiate an authentication request, and the user needs to perform mobile phone number authentication scenarios, for example, including but not limited to the following:

(1) Account registration, to register a mobile account in the application module (APP), mobile phone number authentication is required;

(2) Account login, use mobile phone account to log in to the application module (APP), and mobile phone number authentication is required;

(3) To bind the card, bind the bank card in the application module (APP), and verify the mobile phone number reserved by the bank;

(4) For transfer, mobile phone number authentication is required;

(5) Other scenarios that require mobile phone number authentication.

10. The application module initiates an authentication request to the authentication module.

11. The authentication module checks whether there is an invalid Token in the Token queue. If there is an invalid Token, remove the queue and resend the Token acquisition request to obtain a new Token until the Tokens in the Token queue are all valid. The checking method is to judge the validity of the token. For example, the validity of the token is 10 minutes. If the token lasts for more than 10 minutes, it means it is invalid. In this way, it can be ensured that when the token is used multiple times in the future (only one token is used at a time), the existing token can be used directly without the need to obtain the token again.

12. The authentication module assembles a message and initiates an authentication request to the authentication system. The content of the message includes, for example, a unique transaction identifier (8-bit access agency code + 13-bit sending time stamp + 8-bit receiving agency code + 12-bit sending institution IP + 4-bit request transaction code + 8-bit random number, such as M000000120190315111213U0000001192168001010900215689674), receiving institution code (refers to the authentication system code, such as U0000001), ivd (used to determine which type of application module (APP)) Initiate an authentication request, such as 1721512431502201903), authentication module identification (7221855241809201903), authentication module KEY (A822BA3DFF4D3FFEA97003FF84359E03), access agency IP (190162240133), transaction code (9002), version number (1.0), access agency code (OK APP organization, M0000001), transaction sub-category (01), transaction timestamp (1542180453000), mobile phone platform identification (1, representing Android or IOS), mobile phone number (13912345678), application module identifier (for example, com.unionpay, Represents "Cloud QuickPass"), Token (12345678901).

Among them, the authentication module identification, authentication module KEY (the authentication module KEY is the result of the encrypted operation of the authentication module identification) and the application module identifier are used to determine which application module initiated the mobile phone number authentication request , To prevent illegal organizations from embezzling mobile phone number authentication services. The judging method is whether the received application module identifier, the authentication module ID, and the authentication module KEY are consistent with the corresponding relationship stored in the authentication system. If they are consistent, the service will continue; if they are inconsistent, the service will be terminated.

13. The authentication system sends the relevant messages in the authentication request to the operator system. The authentication request information sent includes at least the mobile phone number (13912345678) and Token (12345678901).

14. After the operator system receives the mobile phone number (13912345678) and Token (12345678901), it verifies whether the mobile phone number is consistent with the Token, that is, verifies the relationship between the received mobile phone number (13912345678) and Token (12345678901) and the mobile phone stored in advance Whether the corresponding relationship between the number and the Token is consistent, if they are consistent, a consistent authentication result is returned, which means that the authentication is successful.

15-16. After receiving the authentication result, the authentication system returns the authentication result to the authentication module, and the authentication module returns the authentication result to the application module. If the application module receives a consistent verification result, it will pass the verification directly, without the need for SMS verification code verification.

6 is a block diagram showing the structure of the information authentication system according to the first embodiment of the present invention.

As shown in FIG. 6, the information authentication system of the first embodiment includes: a user terminal 100, an authentication system 200, and an operator system 300. Among them, the user terminal 100 includes an application module 110 and an authentication module 120.

The application module 110 is used to obtain the SIM card device number and submit it to the authentication module 120 in the process of obtaining the Token, and is used to obtain the user's mobile phone number and submit it to the authentication module 120 in the process of performing mobile phone number authentication.

The authentication module 120 has:

The first request unit 121 is used to initiate a token acquisition request to the authentication system 200 based on the SIM card device number obtained from the application module 110 in the process of acquiring the Token;

The storage unit 122 is used to store the Token returned from the authentication system 200; and

The second request unit 123 is used to add the Token stored in the storage unit on the basis of the mobile phone number obtained from the application module 110 during the mobile phone number authentication process and initiate an authentication request to the authentication system 200 and receive The authentication result returned from the authentication system 200 and the authentication result is returned to the application module 110.

Here, although the first request unit 121 and the second request unit 123 are described as separate components, they may also be integrated in one unit.

The authentication system 200 is configured to forward the Token acquisition request to the operator system 300, and receive the authentication result returned by the operator system 300 and forward it to the authentication module 120.

The operator system 300 has:

The Token generating unit 310 generates a Token according to the user's mobile phone number in the process of acquiring the Token and returns it to the authentication system 200;

The Token storage unit 320 is used to store the corresponding relationship between the mobile phone number and the Token; and

The Token authentication unit 330 is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system 200 is consistent with the stored mobile phone number and the corresponding relationship with the Token during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful.

Here, although it is shown in FIG. 6 that the application module 110 and the authentication module 120 are two components, the authentication module 120 may also be integrated in the application module 110.

In this embodiment, the first request unit 121 determines whether there is a Token acquisition condition and acquires the SIM card device number during the process of acquiring the Token, generates a Token acquisition request and sends it. Further, the first request unit 121 first determines whether there is a Token acquisition condition in the process of acquiring the Token. Wherein, the Token acquisition conditions include: judging whether there is a SIM card; and judging whether to use the current SIM card's data flow volume to connect to the Internet.

Further, the first request unit 121 repeatedly initiates the Token acquisition request until the storage unit stores N Tokens, and the N Tokens form a Token queue, where N is a natural number.

Moreover, the first request unit 121 determines whether there is an invalid Token in the Token queue, and if there is an invalid Token, it repeatedly initiates a Token acquisition request, and the storage unit stores N valid Tokens.

Optionally, when the first request unit 121 initiates the Token acquisition request, the Token acquisition request further includes the application identifier of the application module 110 for obtaining the SIM device number, wherein the SIM card device number is used In order to obtain the corresponding mobile phone number, the mobile phone number is further used to generate the corresponding Token and has a corresponding relationship with the mobile phone number, the application identifier, and the Token.

Next, the information authentication method and information authentication system of the second embodiment of the present invention will be described.

In the second embodiment, different from the first embodiment, the authentication request is initiated by the application backend system assembly message of the application module (in the first embodiment, the application module assembles the message by calling the authentication module). Initiate an authentication request). The difference between the two is that when the application module (APP) is opened, the application module will send the obtained token to the application backend system. In the phase of entering the mobile phone number, the application module (APP) directly initiates an authentication request to the application background system, and the application background system assembles a message to initiate the authentication request. The other processing logic is the same as the first embodiment.

FIG. 7 is a flowchart showing the information authentication method according to the second embodiment of the present invention.

As shown in FIG. 7, the information authentication method of the second embodiment of the present invention includes the following steps:

1-2: The user opens the application module (for example, opens an APP), the application module then calls the authentication module and sends a token acquisition request to the authentication module. The Token to be retrieved in the Token obtaining request corresponds to the SIM card device number of the current usage data flow in the mobile phone.

3-4. After the authentication module is initialized, it is judged whether the Token acquisition conditions are met. Among them, the application module and the authentication module are set in the user's user terminal (ie a handheld terminal, as an example, a mobile phone), then it is judged whether the user terminal is Meet the Token acquisition conditions, for example:

(1) Judge whether there is a SIM card, if yes, proceed to (2), if not, return a response code such as "11111" and the response code prompts "SIM card not inserted".

(2) Determine whether the handheld terminal is connected to the Internet, if yes, proceed to 4. If not, return a response code such as "11112" and the response code prompts "No data network opened".

5. The authentication module sends a token acquisition request to the authentication system.

6. The authentication system sends a token acquisition request to the operator system.

7. After receiving the Token obtaining request, the operator system queries the corresponding mobile phone number according to the SIM card device number, generates the corresponding Token according to the mobile phone number, and then returns the Token to obtain a response (that is, the Token is included).

8. After receiving the Token, the authentication system returns the Token to the authentication module to obtain a response.

9. The authentication module returns the Token acquisition response to the application module.

10. The application module sends the Token in the Token acquisition response to the application background system.

Here, as an optional method, the token acquisition request in the authentication module will be sent until the token queue of the application background system is filled. Among them, if a token acquisition request is sent a certain number of times (for example, 3 times), and a Token acquisition failure prompt is returned, then the Token acquisition request will not be sent; or after a certain period of time (such as 10 seconds) the Token acquisition request is sent, there is still no information feedback. Then return to get failure prompt.

11. When mobile phone number verification is required, the user enters the mobile phone number and the application module verifies the request.

12. The application module sends an authentication request to the application background system.

13. The application background system checks whether there is an invalid Token in the Token queue. If there is an invalid Token, the queue is removed, and the Token acquisition request is sent again to obtain a new Token until the Tokens in the Token queue are all valid. The checking method is to judge the validity of the token. For example, the validity of the token is 10 minutes. If the token lasts for more than 10 minutes, it means it is invalid. In this way, it can be ensured that when the token is used multiple times in the future (only one token is used at a time), the existing token can be used directly without the need to obtain the token again.

14. The application background system assembles the message and initiates an authentication request to the authentication system.

15. The authentication system sends the relevant messages in the authentication request to the operator system, and the authentication request information sent includes at least the mobile phone number and Token. After the operator system receives the mobile phone number and the Token, it verifies whether the mobile phone number is consistent with the Token, that is, verifies whether the relationship between the received mobile phone number and the Token is consistent with the corresponding relationship between the pre-stored mobile phone number and the Token. If they are consistent, return A consistent authentication result means that the authentication is successful.

16. The operator system returns the authentication result to the authentication system.

17. The authentication system returns the authentication result to the backend system;

18. The application background system returns the authentication result to the application module.

FIG. 8 is a block diagram showing the structure of the information authentication system according to the second embodiment of the present invention.

As shown in FIG. 8, the information authentication system of the second aspect of the present invention includes: a user terminal 400, an authentication system 500, an application backend system 600, and an operator system 700. Among them, the user terminal 400 includes an application module 410 and an authentication module 420.

The application module 410 is used to obtain the SIM card device number and submit it to the authentication module 420 in the process of obtaining the Token, and used to obtain the user's mobile phone number and submit it to the authentication module 420 in the process of performing mobile phone number authentication.

In the process of acquiring the Token, the authentication module 420 is used to initiate a Token acquisition request to the authentication system 500 based on the mobile phone number or the SIM card device number obtained from the application module 410 and to return the acquired Token to the application module 410.

The authentication system 500 is used to forward the Token obtaining request to the operator system 700 and the obtained Token to the authentication module 420 during the process of obtaining the Token. On the other hand, during the process of verifying the mobile phone number, it receives the request from the application backend system 600. The authentication request is in and receives the authentication result returned by the operator system 700 and forwards it to the application backend system 600.

The application background system 600 has:

The storage unit 620 is used to store the Token sent from the application module 410 during the process of acquiring the Token;

The request unit 610 is used to add the stored Token based on the mobile phone number or the SIM card device number obtained from the application module 410 during the process of mobile phone number authentication, and initiate an authentication request to the authentication system 600 and receive the authentication system from the authentication system. 600 returned authentication result.

The operator system 700 has:

The Token generating unit 710 generates a Token according to the user's mobile phone number in the process of obtaining the Token and returns it to the authentication system 500;

The Token storage unit 720 stores the correspondence between the mobile phone number and the Token; and

The Token authentication unit 730 is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system 500 and the corresponding relationship between the mobile phone number and the Token stored in the Token storage unit 720 during the mobile phone number authentication process Consistent, if the two are consistent, it is judged that the authentication is successful.

Here, although it is shown in FIG. 8 that the application module 410 and the authentication module 420 are two components, the authentication module 420 may also be integrated in the application module 410.

In this embodiment, the authentication module 420 determines whether there is a Token acquisition condition and obtains the SIM card device number during the process of acquiring the Token, generates a Token acquisition request and sends it. Further, the authentication module 420 first determines whether there is a Token obtaining condition in the process of obtaining the Token. Wherein, the Token acquisition conditions include: judging whether there is a SIM card; and judging whether to use the current SIM card's data flow volume to connect to the Internet.

Further, the authentication module 420 repeatedly initiates the Token acquisition request until the storage unit stores N Tokens, and the N Tokens form a Token queue, where N is a natural number.

In this embodiment, the acquired Token is stored in the application backend system 600. Therefore, when the application backend system 600 initiates an authentication request to the authentication system 500, the application backend system 600 determines whether there is an invalid Token in the Token queue. If there is an invalid Token, the Token acquisition request is repeatedly initiated, and the storage unit 620 stores N valid Tokens.

As another conversion method, when the authentication module 420 initiates a Token acquisition request, the Token acquisition request may further include the application identifier of the application module used to obtain the SIM device number, the authentication module identifier, and the authentication module KEY ( For the key obtained by the encryption operation of the authentication module identification), when the token is obtained, the application identification, the authentication module identification, and the correspondence between the authentication module KEY and the Token are stored in the application backend system 600. The difference between the Token and the mobile phone number is The corresponding relationship is stored in the operator system 700. Therefore, in the case of authentication, the application backend system 600 can verify the correspondence between the application ID, the authentication module ID, and the authentication module KEY and Token, and the operator system 700 verifies the correspondence between the mobile phone number and the token.

As described above, according to the information authentication method and information authentication system of the present invention, it is necessary to input the short message verification code, and authentication can be performed as long as the user enters his mobile phone number, which can reduce the user's APP operation time and improve the operation speed and effect. Specifically, compared to Patent Document 1, the present invention does not require the user to perform any verification code input operation, saves the user's APP operation time, and improves the operation efficiency. Moreover, compared to Patent Document 2, the present invention tokenizes the mobile phone number without using a short message platform, and directly verifies the mobile phone number through the Token, which can improve the authentication efficiency of the mobile phone number.

The present invention also provides a computer-readable medium on which a computer program is stored, wherein the computer program is executed by a processor to implement the above-mentioned information authentication method.

The present invention also provides a computer device, including a memory, a processor, and a computer program stored on the memory and running on the processor, wherein the processor implements the above-mentioned information authentication method when the computer program is executed.

The above examples mainly illustrate the information authentication system and information authentication method of the present invention. Although only some of the specific embodiments of the present invention have been described, those of ordinary skill in the art should understand that the present invention can be implemented in many other forms without departing from its spirit and scope. Therefore, the presented examples and implementations are regarded as illustrative rather than restrictive. Without departing from the spirit and scope of the present invention as defined by the appended claims, the present invention may cover various modifications and replace.

10: User terminal 11: Application module 12: Authentication module 20: authentication system 30: Operator system 40: User terminal 41: Application Module 42: authentication module 50: authentication system 60: Application background system 70: Operator System 100: User terminal 110: Application Module 120: authentication module 121: The first request unit 122: storage unit 123: The second request unit 200: authentication system 300: Operator System 310: Token generation unit 320: Token storage unit 330: Token authentication unit 400: User terminal 410: Application Module 420: authentication module 500: authentication system 600: Application background system 610: request unit 620: storage unit 700: Operator System 710: Token generation unit 720: Token storage unit 730: Token authentication unit

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, in which: Figure 1 is a flowchart showing the information authentication method of the first aspect of the present invention; 2 is a block diagram showing the structure of the information authentication system of the first aspect of the present invention; Figure 3 is a flowchart showing the information authentication method of the second aspect of the present invention; 4 is a block diagram showing the structure of the information authentication system of the second aspect of the present invention; 5 is a flowchart showing the information authentication method of the first embodiment of the present invention; 6 is a block diagram showing the structure of the information authentication system according to the first embodiment of the present invention; FIG. 7 is a flowchart showing the information authentication method according to the second embodiment of the present invention; and FIG. 8 is a block diagram showing the structure of the information authentication system according to the second embodiment of the present invention.

Claims (29)

An information authentication method, which is implemented by an application module, an authentication module, an authentication system, and an operator system, and includes: In the Token obtaining request step, the application module generates a Token obtaining request and sends it to the authentication module, wherein the Token obtaining request includes at least the SIM card device number obtained by the application module; In the Token request forwarding step, the authentication module forwards the Token acquisition request to the operator system through the authentication system; In the Token generation step, the operator system obtains the corresponding mobile phone number according to the SIM card device number in the Token acquisition request, generates a corresponding Token based on the mobile phone number, and returns the generated Token to the authentication module through the authentication system for storage At the same time, the operator system stores the corresponding relationship between the mobile phone number and the Token; In the authentication request initiating step, the application module initiates an authentication request for information authentication based on the entered mobile phone number and sends the authentication request to the authentication module, wherein the authentication request includes at least the mobile phone number; In the authentication request forwarding step, the authentication module adds the Token stored by the authentication module to the authentication request and then sends it to the operator system through the authentication system; and In the authentication request verification step, the operator system verifies whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the stored corresponding relationship, and when the two are consistent, it determines that the authentication is successful. An information authentication method, which includes the following steps: The Token acquisition request step is to generate and send a Token acquisition request, where the Token acquisition request includes at least a SIM card device number, where the SIM card device number is used to obtain a corresponding mobile phone number, which is further based on the mobile phone number. It is used to generate the corresponding Token and the mobile phone number has a corresponding relationship with the generated Token; Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number; The authentication request initiation step is to initiate an authentication request for information authentication based on the entered mobile phone number and add the stored Token to the authentication request; and The authentication result receiving step is to receive the authentication result, where the authentication result represents the result of verifying whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the corresponding relationship, and when the two are consistent, Judging that the authentication is successful. The information authentication method according to claim 2, wherein: The Token obtaining request step includes: Determine whether there are Token acquisition conditions; and Obtain the SIM card device number, generate a token acquisition request and send it. The information authentication method according to claim 2, wherein: The judging whether there is a Token obtaining condition includes: Determine whether you have a SIM card; and Determine whether to use the current SIM card data flow volume to network. The information authentication method according to claim 4, wherein: The Token acquisition request step and the Token storage step are repeated until N Tokens are stored, and the N Tokens form a Token queue, where N is a natural number. The information authentication method according to claim 5, wherein: It is determined whether there is an invalid Token in the Token queue, and if there is an invalid Token, the Token acquisition request generation step and the Token storage step are repeated until N valid Tokens are stored. The information authentication method according to claim 6, wherein: Determine whether there is an invalid Token in the Token queue based on the Token aging. The information authentication method according to claim 2, wherein: In the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number, wherein the SIM card device number is used to obtain the corresponding mobile phone number, and further Based on the mobile phone number being used to generate the corresponding Token and the mobile phone number, application identifier and the Token have a corresponding relationship, In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number and application identifier, In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number and application identifier, and the stored Token is added to the authentication request. The information authentication method according to claim 2, wherein: In the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number and the authentication module identifier of the authentication module used to initiate the authentication request. The SIM card device number is used to obtain the corresponding mobile phone number, and further based on the mobile phone number being used to generate the corresponding Token, and the mobile phone number, application ID, authentication module ID and the Token have a corresponding relationship, In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number, application identification and authentication module identification, In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number, application ID, and authentication module ID, and a stored Token is added to the authentication request. The information authentication method according to claim 2, wherein: In the Token obtaining request step, the Token obtaining request further includes the application identifier of the application module used to obtain the SIM card device number, the authentication module identifier of the authentication module used to initiate the authentication request, and the authentication module KEY, where the SIM card device number is used to obtain the corresponding mobile phone number, and is further used to generate the corresponding Token based on the mobile phone number, and the mobile phone number, application identification, authentication module identification, and authentication module KEY and Token Have a corresponding relationship, wherein the authentication module KEY is generated based on the authentication module identifier, In the Token storing step, receiving and storing the corresponding Token generated based on the mobile phone number, application ID, authentication module ID, and authentication module KEY, In the authentication request initiating step, an authentication request for information authentication is initiated based on the input mobile phone number, application ID, authentication module ID, and authentication module KEY, and a stored Token is added to the authentication request. The information authentication method according to claim 2, wherein: In the authentication result receiving step, when it is judged that the two are inconsistent, the information authentication method further includes: The mobile phone message verification step is to send a message to the mobile phone for verification. An information authentication method, which includes the following steps: In the Token generation step, the corresponding mobile phone number is obtained according to the SIM card device number contained in the Token obtaining request, the corresponding Token is generated based on the mobile phone number, and the generated Token is returned to the sender of the Token obtaining request, and the mobile phone is stored at the same time Correspondence between number and Token; and The authentication request verification step is to receive the authentication request, verify whether the correspondence between the mobile phone number and the Token contained in the authentication request is consistent with the stored correspondence, and when the two are consistent, determine that the authentication is successful. An information authentication method, which is implemented by an application module, an authentication module, an application background system, an authentication system, and an operator system, and includes the following steps: In the Token obtaining request step, the application module generates a Token obtaining request and sends it to the authentication module, wherein the Token obtaining request includes at least the SIM card device number obtained by the application module; In the Token request forwarding step, the authentication module forwards the Token acquisition request to the operator system through the authentication system; In the Token generation step, the operator system obtains the corresponding mobile phone number according to the SIM card device number in the Token acquisition request, generates the corresponding Token based on the mobile phone number, and returns the Token to the authentication system and the authentication module through the authentication system and the authentication module. Application module, while the operator system stores the corresponding relationship between the mobile phone number and the Token; In the Token forwarding step, the application module forwards the received Token to the application background system and stores it by the application background system; In the authentication request initiating step, the application module initiates an authentication request for information authentication based on the entered mobile phone number and sends the authentication request to the application background system, wherein the authentication request includes at least the mobile phone number; In the authentication request forwarding step, the application background system adds the stored Token to the authentication request and sends it to the operator system; and In the authentication request verification step, the operator system verifies whether the relationship between the mobile phone number and the Token contained in the authentication request is consistent with the stored corresponding relationship, and when the two are consistent, it determines that the authentication is successful. An information authentication system, including: user terminal, authentication system and operator system, Wherein, the application module is used to obtain a mobile phone number and a SIM card device number and submit them to the authentication module, In the process of acquiring the Token, the authentication module is used to initiate a Token acquisition request to the authentication system based on the SIM card device number obtained from the application module and to store the Token returned from the authentication system. On the other hand, In the process of performing mobile phone number authentication, it is used to add the stored Token based on the mobile phone number obtained from the application module and initiate an authentication request to the authentication system and receive the authentication result returned from the authentication system , The authentication system is configured to forward the Token acquisition request and the authentication request to the operator system, and receive the Token and the authentication result returned by the operator system and forward them to the authentication module, In the process of obtaining the Token, the operator system generates the Token after obtaining the mobile phone number according to the SIM card device number and returns it to the authentication system. At the same time, the corresponding relationship between the mobile phone number and the Token is stored. In the process, it is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the stored corresponding relationship between the mobile phone number and the Token, and if the two are consistent, the authentication is determined to be successful. The information authentication system according to claim 14, wherein: The authentication module has: The first request unit is used to initiate a token acquisition request to the authentication system based on the SIM card device number obtained from the application module in the process of acquiring the Token; A storage unit for storing the Token returned from the authentication system; and The second request unit is used to add the Token stored in the storage unit on the basis of the mobile phone number obtained from the application module in the process of performing mobile phone number authentication, and initiate an authentication request to the authentication system and receive The authentication result returned from the authentication system and the authentication result is returned to the application module, The operator system has: The Token generating unit obtains the mobile phone number according to the SIM card device number in the process of obtaining the Token, then produces the Token according to the mobile phone number, and returns the generated Token to the authentication system; The Token storage unit is used to store the correspondence between the mobile phone number and the Token; and The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the stored mobile phone number and the corresponding relationship with the Token during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful. An authentication module, which has: The first request unit is used to initiate a Token acquisition request based on the SIM card device number in the process of acquiring the Token; The storage unit is used to store the returned tokens; and The second request unit is used to add the Token stored in the storage unit on the basis of the obtained mobile phone number and initiate an authentication request and receive the returned authentication result and return the authentication result during the process of mobile phone number authentication. The information authentication module according to claim 16, wherein: In the process of acquiring the Token, the first request unit judges whether there is a Token acquisition condition, acquires the SIM card device number, and generates and sends a Token acquisition request. The information authentication module according to claim 16, wherein: In the process of acquiring the Token, the first request unit judges online whether there is a Token acquisition condition. The information authentication module according to claim 18, wherein: The Token acquisition conditions include: Determine whether you have a SIM card; and Determine whether to use the current SIM card data flow volume to network. The information authentication module according to claim 16, wherein: The first request unit repeatedly initiates the token acquisition request until the storage unit stores N tokens, and the N tokens form a token queue, where N is a natural number. The information authentication module according to claim 20, wherein: The first request unit judges whether there is an invalid Token in the Token queue, and if there is an invalid Token, it repeatedly initiates a Token acquisition request, and the storage unit stores N valid Tokens. The information authentication module according to claim 16, wherein: When the first request unit initiates the Token acquisition request, the Token acquisition request further includes the application identifier of the application module used to obtain the SIM device number, wherein the SIM card device number is used to obtain the corresponding The mobile phone number is further used to generate the corresponding Token based on the mobile phone number, and the mobile phone number, the application identifier and the Token have a corresponding relationship. An operator system, including: The Token generation unit obtains the mobile phone number according to the SIM card device number in the process of obtaining the Token, and then generates the Token according to the mobile phone number; The Token storage unit is used to store the correspondence between the mobile phone number and the Token; and The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the received authentication request is consistent with the corresponding relationship between the mobile phone number and the Token stored in the Token storage unit during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful. An information authentication system, including: user terminal, authentication system, application background system and operator system, The application module is used to initiate a Token acquisition request and an authentication request and submit them to the authentication module, wherein the Token acquisition request includes at least a SIM card device number, and the authentication request includes at least a mobile phone number, The authentication module forwards the Token acquisition request to the authentication system in the process of acquiring the Token and is used to return the acquired Token to the application module, The authentication system is used to forward the Token acquisition request to the operator system and the acquired Token to the authentication module in the process of acquiring the Token. The authentication request of the application background system is present and the authentication result returned by the operator system is received and forwarded to the application background system, The application background system is used to store the Token sent from the application module in the process of acquiring the Token, and on the other hand, is used to store the mobile phone number obtained from the application module in the process of mobile phone number authentication. On the basis of adding the stored Token and initiating an authentication request to the authentication system and receiving the authentication result returned from the authentication system, In the process of acquiring the Token, the operator system obtains the SIM card device number to obtain the mobile phone number and then generates the Token, and then returns the generated Token to the SIM card device number authentication system, and stores the corresponding relationship between the mobile phone number and the Token. On the other hand, In the process of performing mobile phone number authentication, it is used to determine whether the relationship between the mobile phone number and the Token in the authentication request received from the authentication system is consistent with the corresponding relationship between the stored mobile phone number and the Token. If the two are consistent, Then it is judged that the authentication is successful. An application background system, which has: The storage unit is used to store the Token obtained from the outside in the process of obtaining the Token; The request unit is used to add the Token stored in the storage unit on the basis of the obtained mobile phone number in the process of performing mobile phone number authentication, initiate an authentication request, and receive the returned authentication result. An operator system, including: The Token generation unit generates and sends the Token according to the user's mobile phone number in the process of obtaining the Token; The Token storage unit stores the correspondence between the mobile phone number and the generated Token; and The Token authentication unit is used to determine whether the relationship between the mobile phone number and the Token in the received authentication request is consistent with the corresponding relationship between the mobile phone number and the Token stored in the Token storage unit during the process of mobile phone number authentication. If they are consistent, it is judged that the authentication is successful. A user terminal, which is provided with the authentication module according to any one of request items 16 to 22. A computer-readable medium on which a computer program is stored, in which, When the computer program is executed by the processor, the information authentication method as described in any one of claims 1 to 13 is realized. A computer device includes a memory, a processor, and a computer program stored on the memory and running on the processor, wherein the processor executes the computer program to achieve any one of claims 1 to 13 The described information authentication method.

Images