TWI399069B - Two - way authentication system and its method - Google Patents

Description

Telephone two-way authentication system and method thereof

The invention relates to a telephone two-way authentication system and a method thereof, which are mainly applied to a network service server and a voice server, and the voice server sends a confirmation code to a telephone by voice through a voice communication network, and then After hanging up the phone, dial the phone to ask the user to enter the confirmation code. When the confirmation code entered by the user is correct, the network service server allows the terminal operated by the user to log in to the network. Service server.

In recent years, with the improvement of the quality of life, people are paying more and more attention to leisure activities. During the period, they can release the pressure of life through leisure activities and enhance the emotional communication between people. At present, most users (especially young people) Online games will be selected as a leisure activity to experience rich visual and sound effects, as well as the interaction of the online community. With the improvement of display performance and computing speed of personal computers, and the rapid increase of network transmission rate, various online games with excellent sound and light effects have won the hearts of many users, making the market of online games flourish. . According to research by the Taiwan Strategy Association, the online game market in Taiwan is expected to reach NT$ 13.474 billion in 2011. According to Chinese officials, the size of China’s online game market in 2008 was 18.38 billion yuan, estimated by 2013. It can reach 39.76 billion yuan, and its market size is huge.

Because there are so many users participating in online games, and most of them want to acquire more virtual currency and virtual treasures to enhance the ability of the game characters, and thus achieve a sense of accomplishment and recognition of others, therefore, the network Virtual currency and virtual treasures in road games have evolved into real value. Many users will buy virtual currency and virtual treasures with money, or sell virtual currency and virtual treasures in exchange for money. Even a few users will use the Internet. The game is a profession that earns virtual currency and virtual treasures in online games to survive. Therefore, for online game operators, how to provide effective security protection and prevent users' virtual currency and virtual treasures from being stolen by unscrupulous people becomes an important issue.

According to the current online game industry, when users register their game accounts, they will ask users to set a game password of a certain length or longer. In order to improve the security of the password, the game password must be composed of numbers and English. To prevent the thief from deliberately cracking. However, there are stealers who install a keyboard side-recording program in a public computer (such as a computer in a network cafe), record the user's key history, and obtain the user's game account and game password to steal the game account. Virtual currency inside. The so-called keyboard side recording program is that when the button on the keyboard is pressed, the program can record the pressed key code value, and store the recorded result in a predetermined path in the computer, or transmit the recorded result to the Internet through the network. On a specific computer.

In order to prevent the keyboard side program, there is a floating keyboard technology for the online game industry. When the user wants to log in to the online game, a keyboard with a button arranged randomly will be displayed on the screen of the computer for the user to click the mouse. Select the method to enter the game password. However, this method may not be able to protect the user's game password from being stolen. Therefore, online game operators start to use the communication lock technology to enhance the security of the game account and game password by means of telephone authentication. The following is a description of the principle and operation mode of the conventional communication lock technology. Please refer to FIG. 1 , the conventional communication lock technology is mainly applied to a game server 10 and a voice server 11 . The game server 10 and the voice server 11 are connected to each other and can transmit information to each other. The game server 10 has a plurality of customer data stored therein, and each customer data includes a game account, a game password, a login phone number, and other game information (eg, the number of virtual currencies, game role status, etc.), the login The phone number is the phone number that the user provides to the online game provider when registering the online game or the communication lock service. When the user wants to connect to the game server 10 via the Internet 14 via a network terminal 14 (for example, a personal computer) to perform a network game, first, the user must use the phone number as the phone number of the login phone number. Dialing to the voice server 11 through the voice communication network 15, after the voice server 11 is connected to the phone, the voice server 11 will retrieve the phone number of the call (ie, the login phone number), and the The phone number is transmitted to the game server 10. After the game server 10 receives the phone number, the customer information is searched and compared to find the customer data corresponding to the phone number, and an allowable opening time is set for the customer data (eg, 30). Secondly, 嗣, the user must manipulate the terminal 12 (eg, a personal computer) within 30 seconds to transmit the game account and the game password to the game server 10 via the Internet 14, in order to successfully pass the game. The authentication process of the server 10 is logged in to the game server 10 to play the game. Otherwise, if the user does not immediately input the game account and the game password within 30 seconds, after 30 seconds, the user profile of the user enters. The locked state cannot be accessed by the terminal device 12. If the user wants to cancel the locked state, it is only necessary to dial the voice server 11 to the voice server 11, and then log in to the game server 10 with the game account and the game password.

Through the above communication lock technology, the pirate obtains the user's game account and game password by using the keyboard side program or other means. Since the pirate does not hold the user's telephone 13, it is impossible to make a call to the user. The voice server 11 unlocks the customer profile so that the game server 10 cannot be logged in with the user's game account and game password. However, there are special communication devices and software that can forge a caller ID, meaning that the thief can use a special communication device or software to disguise the phone number as the login phone number and dial the voice server 11. In this way, the voice server 11 transmits the spoofed telephone number (same as the login telephone number) to the game server 10, so that the game server 10 unlocks the customer data, and at this time, the pirate can The user's game account and game password are successfully logged into the game server 10, thereby stealing the user's virtual currency and virtual treasures, causing serious losses to the user, which is highly undesirable.

Therefore, how to improve the problems of the conventional communication lock technology, in order to strengthen the security of the game account, to prevent the pirate from logging in to the game server with the user's game account and game password, and to prevent the user's virtual currency and virtual treasures Being stolen is an important subject for the present invention to be explored here.

In view of the many problems mentioned above, after long-term efforts and experiments, the inventors finally developed and designed the telephone two-way authentication system and method thereof, which increases the reliability of the system, further strengthens the security of the account, and avoids the malicious of the stolen. Crack theft.

An object of the present invention is to provide a two-way authentication method for a telephone. When a user manipulates a terminal to transmit a login message to a network service server, the network service server responds with a preliminary confirmation code and a confirmation call. The number is such that the user dials the confirmation telephone number by a telephone and transmits the preliminary confirmation code to a voice server. The voice server retrieves the telephone number of the telephone, and transmits a preliminary confirmation code sent by the telephone to the network service server, and the network service server confirms the preliminary confirmation code sent by the telephone and the The phone number dialed by the telephone is correct. If it is correct, the voice server sends a confirmation code to the phone through voice, hangs up the phone, and then calls back to the user with the phone number of the phone, so that the user can The telephone transmits the confirmation code to the voice server. If the confirmation code returned by the telephone is correct, the network service server allows the terminal to log in. In this way, the user can be authenticated by the real phone, which not only can effectively improve the reliability of the verification, but also can prevent the unscrupulous people from applying for a large number of unreal accounts.

Another object of the present invention is to provide a two-way telephone authentication system, including a network service server and a voice server, wherein the network service server is respectively connected to an internet network and the voice server. And the voice server is connected to a voice communication network, where the network service server has a plurality of customer data, and when the network service server receives the login message from the terminal through the Internet, And comparing the login message with the customer data, and transmitting the login phone number corresponding to the login message to the voice server, and generating a confirmation code corresponding to the login phone number, and confirming the confirmation Transmitting to the voice server; the voice server receives a call message sent by a telephone through the voice communication network, and retrieves a phone number corresponding to the call message, and the phone number and the login phone The number is compared. When the phone number matches the login phone number, the voice server sends the phone to the phone in a voice manner. The confirmation code is such that the user (eg, a network game player) listens to the confirmation code; 嗣, the voice server hangs up the phone, and then dials the phone number to the phone, and after the user connects the phone, The confirmation code can be transmitted to the voice server by the telephone. If the confirmation code is correct, the network service server allows the terminal to log in to enable the terminal to successfully log in to the network service. server. In this way, after the voice server sends the confirmation code, it will dial the number to the user's pre-registered phone number, and ask the user to input the confirmation code, so the stealer (for example, stealing the virtual treasure in the game) The software masquerades the user's phone number, dials the voice server to defraud the confirmation code, but since the pirate does not hold the user's phone, it cannot receive the call from the voice server, naturally it cannot The voice server transmits the confirmation code so that the thief cannot successfully log in to the network service server.

Another object of the present invention is to provide a two-way telephone authentication system, including a network service server and a voice server, wherein the network service server has a plurality of customer data, each of which includes a login telephone number. When the network service server receives the login message sent by the terminal through the Internet, the login phone number corresponding to the login message is transmitted to the voice server, and a confirmation code is generated, and the The confirmation code is transmitted to the terminal and the voice server, so that the user can know the confirmation code through the terminal; the voice server dials the user's telephone according to the login telephone number through the voice communication network. And requesting the user to input the confirmation code; the user transmits the confirmation code to the voice server by using the telephone, and the network service server allows the terminal to log in if the confirmation code transmitted by the user is correct. request. The invention can not only prevent the stealer from stealing the virtual treasure of the user, but because the network service server authenticates with the real telephone number, it can prevent theft or other unscrupulous people from applying for a large number of untrue accounts, effectively eliminating the problem. Illegal behavior within the network.

A further object of the present invention is to provide a two-way telephone authentication system, including a network service server and a voice server, wherein the network service server has a plurality of customer data, each of which includes a login phone. number. When the network service server receives the login message sent by the terminal, the login phone number corresponding to the login message is transmitted to the voice server, and a confirmation code corresponding to the login phone number is generated. The confirmation code is also transmitted to the voice server, and the voice server dials the user's telephone number with the login telephone number, and the confirmation code is voiced and the phone is hung up. Thereafter, the user uses the confirmation code. The telephone dials the voice server and enters the confirmation code. When the phone number matches the login phone number and the confirmation code is also correct, the network service server allows the terminal to log in to the network. Road service server. In this way, since the voice server actively dials the user and informs the confirmation code, only the real user can obtain the confirmation code, thereby effectively improving the security of the account.

For your convenience, the review committee can make a further understanding and understanding of the purpose, structure and efficacy of the present invention. The embodiments are described in conjunction with the drawings, which are described in detail as follows:

The invention relates to a telephone two-way authentication system and a method thereof, which can be applied to a login verification program of an online game, but not limited thereto, and the network service provider can also apply the invention to other networks requiring user authentication. Road service. In the first preferred embodiment of the present invention, as shown in FIG. 2, the two-way authentication system 2 includes a network service server 20 and a voice server 21, wherein the network service server 20 is respectively associated with An Internet 22 is connected to the voice server 21, and the voice server 21 is connected to a voice communication network 23. The two-way authentication system 2 authenticates the user through the following process. 3A, 3B diagram:

(301) The network service server 20 receives the login message (such as an account number and a password) sent by the terminal device 24 through the Internet network 22;

(302) the network service server 20 generates a preliminary confirmation code and a confirmation telephone number, and transmits the preliminary confirmation code and the confirmation telephone number to the terminal device 24, wherein by dialing the confirmation telephone number, Connected to the voice server 21, the network service server 20 may be provided with a complex array confirmation telephone number in advance, and provided to the user in an optional group;

(303) The voice server 21 receives an incoming call message from the telephone 25 via the voice communication network 23, in other words, the user manipulates the phone 25 to dial the voice server 21;

(304) the voice server 21 retrieves a phone number corresponding to the incoming call message, that is, the phone number of the phone 25;

(305) the voice server 21 receives the preliminary confirmation code sent by the telephone 25;

(306) the voice server 21 transmits the preliminary confirmation code sent by the telephone 25 and the telephone number dialed by the telephone 25 to the network service server 20;

(307) The network service server 20 determines whether the preliminary confirmation code sent by the telephone 25 and the telephone number dialed by the telephone 25 match the originator of the network service server 20, if they match, proceed Step (308), otherwise, proceeding to step (307a);

(307a) end the service;

(308) the voice server 21 sends a confirmation code to the phone 25 in a voice manner for the user to listen to;

(309) the voice server 21 hangs up the phone;

(310) the voice server 21 is dialed to the telephone 25 by the telephone number of the telephone 25;

(311) the voice server 21 receives the confirmation code sent by the telephone 25, in other words, the user manipulates the telephone (eg, pressing a button of the telephone) to transmit a confirmation code to the voice server 21;

(312) determining whether the confirmation code sent by the telephone 25 is correct, if yes, proceeding to step (313), otherwise, performing step (312a);

(312a) end the service; and

(313) The network service server 20 allows the login request of the terminal 24.

In the first preferred embodiment described above, it is determined whether the confirmation code transmitted by the telephone set 25 is correct (step (312)) can be performed by the voice server 21 or the network service server 20. In addition, after the comparison result of the above step (307) is matched, before the voice server 21 sends the confirmation code to the telephone 25, the telephone number of the telephone 25 can be broadcast to the telephone 25 by voice. For the user to confirm, in order to prevent the user from using the home phone bill box, the phone number retrieved by the voice server 21 is different from the real phone number of the phone 25, so that the user cannot receive the subsequent voice server. 21 calls. Furthermore, if the number of users is small, only one set of confirmation telephone numbers is needed to achieve the object of the present invention. In other words, it is not necessary to determine whether the telephone number dialed by the telephone 25 is associated with the network service server 20. Whether the providers are in compliance.

Through the above-mentioned first preferred embodiment, since the voice server 21 actively dials the user, only the real user can receive the call from the voice server 21, and the network features the above technical features. Service providers do not need to hold the user's personal data in advance, and can achieve high security and high reliability user authentication. Therefore, by using the technical features of the present invention to verify the real phone number, the user and the network can be avoided. Road service providers have unnecessary disputes over account password management, which greatly improves the management efficiency of network service providers. And because the invention uses the telephone for verification, since the credibility of the telephone is higher than the network and realized, when the cyber crime occurs, it is more conducive to police search and effectively improve the detection rate of cybercrime.

In the second preferred embodiment of the present invention, as shown in FIG. 2, the two-way authentication system 2 includes a network service server 20 and a voice server 21, wherein the telephone two-way authentication system 2 includes a database 201, the database 201 is disposed in the network service server 20, the database 201 has a plurality of customer data stored therein, each of the customer data includes a game account, a game password, and a login phone number. And other game information (such as: game character status, game character coordinates, etc.). However, not limited thereto, the database 201 can also be disposed outside the network service server 20, and only the network service server 20 can be connected to the database 201. The terminal device 24 shown in FIG. 2 is a personal computer. The terminal device 24 is provided with a game terminal program provided by an online game provider, so that the user can manipulate the terminal program 24 to enable the terminal device 24 to pass through. The internet 22 is connected to the network service server 20.

In the second preferred embodiment of the present invention, the two-way authentication system 2 authenticates the user through the following processes, as shown in Figures 4A and 4B:

(401) the network service server 20 receives the login message sent by the terminal device 24 through the Internet 22, wherein the login message includes a game account and a game password;

(402) the network service server 20 compares the game account and the game password in the login message with the customer data to retrieve the login phone number corresponding to the login message;

(403) the network service server 20 transmits the above login phone number to the voice server 21;

(404) the network service server 20 generates a confirmation code corresponding to the login phone number, and transmits the confirmation code to the voice server 21;

(405) the voice server 21 receives an incoming call message sent by a telephone 25 through the voice communication network 23;

(406) the voice server 21 retrieves the phone number corresponding to the incoming call message, if successful, then proceeds to step (407), otherwise, proceeds to step (406a);

(406a) the voice server 21 transmits a notification message to the phone 25 to notify the user to turn on the caller ID function;

(407) the voice server 21 compares the phone number with the login phone number, and if the phone number matches the login phone number, proceeding to the step

(408), otherwise, proceeding to step (407a);

(407a) Ending the service, which means ending the authentication process with the user;

(408) the voice server 21 sends the confirmation code to the phone 25 in a voice manner, so that the user can listen to the confirmation code;

(409) the voice server 21 hangs up the phone;

(410) the voice server 21 dials the phone number 25 with the login phone number, and waits for the phone machine 25 to return the confirmation code;

(411) the voice server 21 receives the confirmation code sent by the telephone 25, and transmits the telephone number and the confirmation code transmitted by the telephone 25 to the network service server 20;

(412) the network service server 20 performs a comparison operation with the confirmation code on the phone number sent to the voice server 21, the phone number matches the login phone number, and the confirmation code is also correct. In case, step (413) is performed, otherwise, step (412a) is performed;

(412a) end the service; and

(413) The network service server 20 allows the terminal 24 to log in to enable the terminal 24 to successfully log in to the network service server 20.

In the above second preferred embodiment, when the user wants to log in to the network service server 20, the terminal device 24 is first manipulated to transmit a login message to the network service server 20, that is, the game account number and the The game password, 嗣, the user must use the phone 25 to dial into the voice server 21, and the phone number of the phone 25 must be the same as the login phone number. Thereafter, the user can listen to the confirmation code broadcast by the voice server 21 through the telephone 25. After the voice server 21 hangs up the phone and redials, the user can answer the call and input the confirmation code through the button of the phone 25, so that the network service server 20 confirms that the confirmation code is correct. The user is allowed to log in with the terminal 24, so that the user can perform the game service provided by the network service server 20 through the terminal 24. In the above step, after the voice server 21 sends the confirmation code, it re-diascribes the phone number that the user has previously logged in, and asks the user to input the confirmation code, even if the pirate has obtained the game account of the user. And the game password, and the special communication device or software camouflages the user's phone number, dials the voice server 21 to defraud the confirmation code, but since the pirate does not hold the user's phone 25, therefore, When the voice server 21 dials the login telephone number, the thief cannot receive the call, so the confirmation code cannot be transmitted to the voice server 21, and the login to the network service server 20 cannot be successfully performed. Significantly improve the security of your game account.

In the second preferred embodiment, after the network service server 20 receives the login message, the network service server 20 still generates a verification string, and the verification string is composed of numbers. The network service server 20 transmits the verification string to the terminal device 24, so that the user can know the verification string, and the network service server 20 also transmits the verification string to the Voice server 21. The voice server 21 is further provided with a timing program 211. After the voice server 21 receives the login telephone number, the timer program 211 is activated, and the user must be within a first predetermined period (eg, 1 minute). The telephone 25 is dialed to the voice server 21, and after the voice server 21 compares the phone number (ie, the above step (407)), the user must first input the verification string, the voice server 21 After confirming that the authentication string input by the user is correct, the step (408) is performed: the confirmation code is sent to the telephone 25 by voice. On the other hand, if the user does not dial into the voice server 21 within the first predetermined period, the telephone two-way authentication system 2 ends the service (ends the authentication procedure with the user). Moreover, after the voice server 21 hangs up the phone at step (409) and dials to the phone 25 at step (410), the timer 211 starts counting and the user must be in a second predetermined period (eg: Within 2 minutes), the confirmation code is transmitted to the voice server 21 by the telephone 25, otherwise the telephone two-way authentication system 2 ends the service. By setting the timing program 211 and the first and second predetermined periods, the partial load of the voice server 21 can be reduced to reduce the possibility that the voice server 21 is too large due to excessive telephone traffic.

Moreover, in the second preferred embodiment described above, the online game provider further reduces the load on the voice server 21 and prevents a malicious person from dialing a large number of calls to the voice server 21 in a short time, in the voice server. There is further provided a counter 212 for recording the number of times the same telephone number is dialed to the voice server 21 during a limited period (e.g., 24 hours). When the same telephone number is within the limit period, the voice server 21 is provided. When the number of dialing times exceeds a limit number of times (for example, 12 times), the voice server 21 refuses to answer the incoming call of the same telephone number, so that not only the voice server 21 can be prevented from being overloaded, but also the situation occurs, and Can prevent the thief from trying to crack the confirmation code. It should be noted that the timing program 211 and the counter 212 are not necessarily required to be disposed in the voice server 21, and the timer program 211 and the counter 212 may be independent of the voice server 21.

In the third preferred embodiment of the present invention, the hardware architecture of the two-way authentication system 2 is the same as that of the second preferred embodiment (ie, FIG. 2), and the authentication process is the same as the above. The second preferred embodiment is slightly different. The two-way authentication system 2 authenticates the user through the following process, as shown in Figure 5:

(501) the network service server 20 receives the login message sent by the terminal device 24 through the Internet 22;

(502) the network service server 20 compares the login message with the customer data to retrieve a login phone number corresponding to the login message;

(503) the network service server 20 transmits the login phone number to the voice server 21;

(504) the network service server 20 generates a confirmation code, and transmits the confirmation code to the terminal device 24, so that the user knows the confirmation code;

(505) the voice server 21 through the voice communication network 23, according to the login phone number, dialed to the user's telephone 25;

(506) the voice server 21 receives the confirmation code sent by the telephone 25, that is, after the user connects the phone, the phone 25 is manipulated to input a confirmation code;

(507) the voice server 21 transmits the confirmation code sent from the telephone 25 to the network service server 20;

(508) the network service server 20 is more correct than the confirmation code sent to the voice server 21, if it is correct, proceed to step (509), otherwise, proceed to step (508a);

(508a) ending the service, which means ending the certification process with the user; and

(509) The network service server 20 allows the login request of the terminal 24.

In the third preferred embodiment, the user knows the confirmation code through the terminal device 24, and then receives the confirmation code from the telephone device 25 after receiving the call from the voice server 21 to pass the system. Certification. Even if the pirate obtains the user's game account and game password by other means, and further obtains the confirmation code, since the pirate does not hold the phone 25, the phone cannot be received by the voice server 21, and Unable to pass the subsequent certification steps. In this way, the pirate can be prevented from using the user's game account and game password to log in to the network service server 20, thereby effectively preventing the user's virtual currency or virtual treasure from being stolen.

In addition, in the above-mentioned third preferred embodiment, the timing program 211 is still provided in the voice server 21, and after the voice server 21 dials the telephone 25, the timing program 211 is activated, when the voice servo is activated. If the telephone 21 does not receive the confirmation code by returning the confirmation code within a predetermined period of time, the device 21 ends the service to effectively reduce the load of the voice server 21.

In the fourth preferred embodiment of the present invention, as shown in FIG. 2, the hardware architecture of the two-way authentication system 2 is the same as that described in the first preferred embodiment above. System 2 authenticates the user through the following procedures, as shown in Figures 6A and 6B:

(601) the network service server 20 receives the login message sent by the terminal device 24 through the Internet network 22;

(602) the network service server 20 compares the login message with the customer data to retrieve a login phone number corresponding to the login message;

(603) the network service server 20 transmits the login phone number to the voice server 21;

(604) the network service server 20 generates a confirmation code corresponding to the login phone number, and transmits the confirmation code to the voice server 21;

(605) the voice server 21 through the voice communication network 23, according to the login phone number, dialed to the user's telephone 25;

(606) the voice server 21 sends the confirmation code to the phone 25 in a voice manner, so that the user can listen to the confirmation code;

(607) the voice server 21 hangs up the phone, that is, interrupts the call with the phone 25;

(608) the voice server 21 receives the incoming call message sent by the phone 25 through the voice communication network 23, that is, the user dials the voice server 21 with the phone 25;

(609) the voice server 21 retrieves a phone number corresponding to the incoming call message;

(610) the voice server 21 receives the confirmation code sent by the telephone 25;

(611) the voice server 21 transmits the confirmation code sent by the telephone 25 and the telephone number to the network service server 20;

(612) the network service server 20 performs a comparison operation with the confirmation code on the phone number sent to the voice server 21, the phone number matches the login phone number, and the confirmation code is also correct. In case, step (613) is performed, otherwise, step (612a) is performed;

(612a) end the service; and

(613) The network service server 20 allows the terminal 24 to log in to enable the terminal 24 to successfully log in to the network service server 20.

It should be particularly noted that the network service server 20 can be designed to perform the above steps (603) and (604) simultaneously, and the game manufacturer can also change the above process to enable the voice server 21 to confirm the phone number and the The confirmation code sent by the telephone is correct, and if the confirmation is correct, the voice server 21 notifies the network service server 20 to enable the network service server 20 to allow the terminal 24 to log in. In the fourth preferred embodiment, after the user transmits the login message to the network service server 20, the user can receive an incoming call from the voice server 21, and can listen to the voice servo through the phone 25. The confirmation code broadcasted by the device 21, after the user hangs up the call by the voice server 21, dials the voice server 21 with the phone 25, and inputs the confirmation code, so that the terminal can pass the verification. The machine 24 successfully logs in to the network service server 20 to perform the game service provided by the network service server 20. With the technical means of the fourth preferred embodiment, only the real user can listen to the confirmation code by the telephone 25, so that the pirate can effectively prevent the pirate from logging in to the network service server by using the user's game account and game password. Moreover, since the system uses the real telephone number for authentication, all users who want to perform the game service must provide the real service number to the network service server 20, thus effectively preventing Some unscrupulous people apply for a large number of unreal accounts, and it is beneficial for the police to check illegal behaviors in online games and greatly improve the security and quality of online games.

The above description is only a few preferred embodiments of the present invention, but the technical features of the present invention are not limited thereto, and any one skilled in the art can easily think of it in the technical field of the present invention. Variations or modifications are intended to be included in the scope of the claims of the invention below.

2. . . Telephone two-way authentication system

20. . . Network service server

201. . . database

twenty one. . . Voice server

211. . . Timing program

212. . . counter

twenty two. . . Internet

twenty three. . . Voice communication network

twenty four. . . Terminal

25. . . Telephone

Figure 1 is an architectural diagram of the conventional communication lock technology;

Figure 2 is a system architecture diagram of the present invention;

3A-3B are flowcharts of a first preferred embodiment of the present invention;

4A-4B are flowcharts of a second preferred embodiment of the present invention;

Figure 5 is a flow chart of a third preferred embodiment of the present invention; and

6A to 6B are flowcharts showing a fourth preferred embodiment of the present invention.

Claims (17)

A two-way telephone authentication system includes: a network service server connected to an internetwork, and the network service server receives a login message from a terminal through the internet, the terminal Transmitting a preliminary confirmation code; and a voice server is respectively connected to the network service server and a voice communication network, and the voice server receives a call message sent by a telephone through the voice communication network, and Extracting a phone number corresponding to the incoming call message, and receiving a preliminary confirmation code sent by the phone, in a state in which the preliminary confirmation code sent by the phone matches the preliminary confirmation code sent by the network service server, The voice server sends a confirmation code to the telephone, hangs up the phone, and dials the phone to receive a confirmation code sent by the phone, and the confirmation code sent from the phone and the confirmation sent by the voice server In the case where the code matches, the network service server allows the terminal to log in. A two-way telephone authentication system includes: a network service server connected to an internetwork, the network service server having a plurality of customer data, each of the customer data including a login telephone number, the network When the service server receives the login message from the terminal through the Internet, it sends a login phone number corresponding to the login message, and the network service server generates a confirmation code corresponding to the login phone number. And sending the confirmation code corresponding to the login phone number; and a voice server is respectively connected to the network service server and a voice communication network, and the voice server receives the network service server. The login phone number and the confirmation code corresponding to the login phone number, and the voice server receives a call message sent by a phone through the voice communication network, and retrieves a phone number corresponding to the call message. When the phone number matches the login phone number, the voice server sends the corresponding phone to the phone Confirm the code of the number and hang up the call, then dial the number to the phone to receive a confirmation code from the phone, the confirmation code sent from the phone and the confirmation corresponding to the login phone number. In the case where the code matches, the network service server allows the terminal to log in. The telephone two-way authentication system according to claim 2, further comprising a timing program, after the voice server receives the login telephone number, the timing program is started, when the voice server is within a first predetermined period, If the incoming call message from the telephone is not received, the service is terminated. The telephone two-way authentication system of claim 3, the timekeeping program is started after the voice server dials the telephone, and the voice server does not receive the callback after the second predetermined period of time. In the case of the confirmation code, the service is terminated. The telephone two-way authentication system according to claim 4, further comprising a counter, wherein the voice server determines that the same phone number has dialed the voice server for more than a limit number of times within a limited period of time, the voice The server refused to answer the call with the same phone number. A two-way telephone authentication system includes: a network service server connected to an internetwork, the network service server having a plurality of customer data, each of the customer data including a login telephone number, the network When the service server receives the login message from the terminal through the Internet, it sends a login phone number corresponding to the login message, and the network service server generates a confirmation code corresponding to the login phone number. And transmitting the confirmation code corresponding to the login phone number to the terminal; and a voice server is respectively connected to the network service server and a voice communication network, and the voice server receives the network The login phone number sent by the service server and the confirmation code corresponding to the login phone number, the voice server dials through the voice communication network according to the login phone number, and receives the call back from the phone. a confirmation code, in the case that the confirmation code returned by the telephone matches the confirmation code corresponding to the login telephone number, the network Allowing the service server login request of the terminal. The telephone two-way authentication system according to claim 6 further includes a timing program, wherein the timing program is started after the voice server dials the telephone, and the voice server does not receive the predetermined time period. In the case of the confirmation code returned by the telephone, the service is terminated. A two-way telephone authentication system includes: a network service server connected to an internetwork, the network service server having a plurality of customer data, each of the customer data including a login telephone number, the network When the service server receives the login message from the terminal through the Internet, it sends a login phone number corresponding to the login message, and generates a confirmation code corresponding to the login phone number, and sends the corresponding message to the corresponding a confirmation code of the login phone number; and a voice server connected to the network service server and a voice communication network, the voice server receiving the login phone number sent by the network service server and Corresponding to the confirmation code of the login telephone number, the voice server dials the telephone number to a telephone, transmits the confirmation code corresponding to the login telephone number to the telephone, hangs up the telephone, and then connects the telephone Incoming call, and receiving a confirmation code returned by the telephone, the confirmation code returned at the telephone corresponds to the login telephone number Confirmation pertinence case, the web service server which allows the login request of the terminal. The telephone two-way authentication system according to claim 8, further comprising a timing program, wherein the timing program is started after the voice server transmits the confirmation code corresponding to the login telephone number to the telephone and hangs up the telephone. The voice server terminates the service if the confirmation code returned by the telephone is not received within a predetermined period of time. A two-way authentication method for a mobile phone is applied to a network service server and a voice server, the method comprising: receiving, by the network service server, a login message sent by a terminal through the Internet; the network service The server transmits a preliminary confirmation code to the terminal; the voice server receives a call message sent by a telephone through a voice communication network; the voice server retrieves a phone number corresponding to the incoming call message; the voice servo Receiving a preliminary confirmation code sent by the telephone; the voice server sends a confirmation code to the telephone in a state that the preliminary confirmation code sent by the telephone matches the preliminary confirmation code sent by the network service server; The voice server hangs up the phone; the voice server dials to the phone; the voice server receives a confirmation code sent from the phone; and the confirmation code sent from the phone and the confirmation code sent by the voice server In the case of compliance, the network service server allows the terminal to log in. A two-way authentication method for a telephone is applied to a network service server and a voice server. The network service server has a plurality of customer data, each of which includes a login phone number, and the method includes: The network service server receives a login message sent by a terminal through the Internet; the network service server retrieves a login phone number corresponding to the login message, and generates a confirmation code corresponding to the login phone number The network service server transmits the login phone number and the confirmation code corresponding to the login phone number to the voice server; the voice server receives a call message sent by a phone through a voice communication network; The voice server retrieves a phone number corresponding to the incoming call message; if the phone number matches the registered phone number, the voice server sends the confirmation code corresponding to the login phone number to the phone; The voice server hangs up the phone; the voice server dials the phone number to the phone; the voice servo Receiving one of the telephone return confirmation code; and transmission of the telephone in the case of the return confirmation corresponding to the identification code of the telephone number registered consistent, allowing the web service server of the login request terminal. The method of claim 2, wherein the voice server receives the login phone number, and after receiving the login phone number, the voice server does not receive the phone number received during the first predetermined period. In the case of a caller message, the service is terminated. The method for requesting the two-way authentication of the phone as claimed in claim 12, further comprising the following steps: after the voice server dials the phone, the voice server does not receive the confirmation code returned by the voice server within a second predetermined period of time. In the case, the service is terminated. A two-way authentication method for a telephone is applied to a network service server and a voice server. The network service server has a plurality of customer data, each of which includes a login phone number, and the method includes: The network service server receives a login message sent by a terminal through the Internet; the network service server retrieves a login phone number corresponding to the login message, and generates a confirmation code corresponding to the login phone number The network service server transmits the login phone number and the confirmation code corresponding to the login phone number to the voice server, and transmits a confirmation code corresponding to the login phone number to the terminal; the voice The server dials to the telephone according to the login telephone number through the voice communication network; the voice server receives a confirmation code sent from the telephone; and the confirmation code sent from the telephone corresponds to the login telephone number If the confirmation code matches, the network service server allows the terminal to log in. The method for requesting the two-way authentication of the phone according to claim 14 further includes the following steps: after the voice server dials to the phone, if the voice server does not receive the confirmation code returned by the phone within a predetermined period of time , that is, the end of the service. A two-way authentication method for a telephone is applied to a network service server and a voice server. The network service server has a plurality of customer data, each of which includes a login phone number, and the method includes: The network service server receives a login message sent by a terminal through the Internet; the network service server retrieves a login phone number corresponding to the login message, and generates a confirmation code corresponding to the login phone number The network service server transmits the login phone number and a confirmation code corresponding to the login phone number to the voice server; the voice server dials to a phone through the voice communication network according to the login phone number; The voice server sends the confirmation code corresponding to the login phone number to the phone; the voice server hangs up the phone; the voice server receives a confirmation code returned by the phone; and the confirmation code returned at the phone The network service server allows the terminal if the confirmation code corresponding to the login phone number matches Login request. The method for requesting the two-way telephone authentication according to claim 16, further comprising the step of: after the voice server transmits the confirmation code corresponding to the login telephone number to the telephone and hangs up the telephone, the voice servo is within a predetermined period of time. If the device does not receive the confirmation code returned by the telephone, the service is terminated.