TWI468006B - No record of phone number verification system and method - Google Patents

Description

Verification system and method without recording telephone number

The present invention relates to an authentication system that does not require the recording of a telephone number, and more particularly to an authentication system that does not require a telephone number to be recorded.

The appeal of online games is that players can upgrade their treasures and currencies into real money by continuing to "danger, practice" and even exchange the treasures and currencies of the virtual world. However, due to the "practice" of the Internet, it is necessary to A long time can see the results, many players hope to improve the level in a short period of time, often a few people use the account and password together, the use of multiple people in turn, making the account password easy to flow out, was used.

However, the "property" obtained in the virtual world is often protected by a simple account and password. This makes it possible to successfully invade and get something for nothing, as long as you master the account and password of others, so it is the most painful thing in the mind of the player.

With the refurbishment of unscrupulous players, the method of stealing player account passwords has become more and more technological, and even developed a "trojan" program for specific online games to be used to record the account and password entered by the player.

These programs are usually hidden in the system. As long as the online game is started, the program will be executed automatically, and the recorded data will be transmitted to the designated mailbox. Since it is not easy to detect, the player's account and password have been recorded and not known. By the time of discovery, the results of the "practice" for a long time often disappeared.

In order to solve this problem, manufacturers have proposed "phone lock double anti-theft protection" to try to solve the problem of account/password being stolen. To put it simply, in the "phone lock double anti-theft protection", when the class is going to work on weekdays, the player's game account will be locked by the system, as long as there is no binding mobile phone or home phone number to open, even if there is Game accounts and passwords cannot be logged in to avoid theft of game treasures.

When the player uses the mobile phone or the home phone with the caller ID function, after dialing the open line, the system will automatically hang up the phone after the completion of the opening, and unlock the locked account, but the player must log in to the game account within three minutes. Otherwise, the system automatically locks the account after three minutes.

However, in order to verify the legality of requesting unlocking, the current telephone lock protection system must first manually enter its own phone number on the webpage, so that the phone number can be pre-established in the database, so that the call will be received when the system receives the call. The phone number in the account is compared to the phone number in the database. However, in this case, it is possible for the player to be recorded by the Trojan horse when the phone number entered on the webpage is recorded. Even if the data in the database is stolen, this will cause user confusion, for example, it will often be received. Go to a scam phone or an ad call.

The main object of the present invention is to provide an authentication system of the present invention which does not need to record a telephone number, and mainly converts a telephone number into a unique verification code to replace the telephone number as a basis for verification, and to avoid user data (especially The leakage of the telephone number has caused confusion and deterioration to the user.

Based on the above objective, the verification system of the present invention does not need to record a telephone number, and mainly includes a plurality of system modules (such as a game platform), a setting transfer module, and a plurality of verification transfer modules (corresponding to different system modules respectively). . In order not to record the phone number in the system module, the setting transfer module in the system of the present invention converts the user's phone number into a unique verification code by using the conversion rule, and then stores it in the specified system module. in. When the user needs identity verification, the phone number is converted into the same verification code by the specific conversion transfer module through the specific conversion transfer module, and is provided to the system module for verification.

The advantages and spirit of the present invention will be further understood from the following detailed description of the invention.

Please refer to FIG. 1. FIG. 1 is a schematic diagram of a verification system for not recording a telephone number according to the present invention. As shown in FIG. 1, the verification system 1 for recording a telephone number of the present invention mainly includes a plurality of system modules 3a to 3c (for example, a game platform), a setting transfer module 10, and a plurality of verification transfer modules 12a to 12c ( Corresponding to different system modules 3a~3c). Among them, each system module 3a~3c is provided with a user database 34. The user database 34 stores a plurality of user data, and each user data includes a user name, a password, a temporary authentication code, and a unique verification code. The verification code is related to the phone number and the verification pipeline code.

Briefly, in order to be able to record phone numbers in the system modules 3a-3c, the setting transfer module 10 in the system of the present invention converts the user's phone number (0932123456) using a specific conversion rule (for example, MD5 compression mode). It is a unique verification code (xyz) and then stored in the specified system module 3a. When the user needs the identity verification, the specific verification transfer module 12a converts the phone number (0932123456) into the same verification code (xyz) through the same conversion rule, and provides the verification to the system module 3a. Instead of using a phone number for authentication.

As shown in FIG. 1, after the user obtains the temporary authentication code (00001), the user can establish a connection with the set transfer module 10 through his telephone (phone number (0932123456)), and then set the transfer module 10 to receive. To the first telecommunications message from the telephone system. Among them, the first telecommunication message can be an SMS message message or an IVR voice message.

In order to enable a single phone number (0932123456) to be applied to different game systems at the same time, the output verification code (xyz) is based on the verification pipe code (555) corresponding to the different game system in addition to the phone number (0932123456). .

For the above reasons, the first telecommunication message includes at least a phone number (0932123456), a verification pipe code (555: relative to the game platform system module 3a designated by the user), and a temporary authentication code (00001). The temporary authentication code (00001) is related to the username (user1). In order to generate a unique verification code (xyz), after the transfer module 10 receives the first telecommunication message, it will start to use the encoding rule to convert the phone number (0932123456) and the verification pipe code (555) in the first telecommunication message into Verification code (xyz), and then forward the verification code to the system module 3a of the relative system code (555) in the format of the temporary authentication code (00001) corresponding verification code (xyz), so that the system module 3a knows that it has received The verification code (xyz) corresponds to which user (the association with the user name (user1) by the temporary authentication code (00001)), as shown in Fig. 1. At this time, the system module 3a has an authentication information with an alternative nature, that is, a verification code (xyz) for replacing the telephone number can be used as a basis for authentication, and a verification code (xyz) is a coding result related to the telephone number. Therefore, as long as the same telephone number is used again, it can be converted into the same verification code (xyz), thereby realizing the alternative telephone number authentication basis.

When the user needs to perform the identity verification process, the user still dials the phone number specified by the game platform system module 3a (ie, the representative phone number of the verification transfer module 12a of the verification pipe code (555)), but is forwarded to the user. Before the system module 3a performs verification, the telephone number (0932123456) needs to be converted into a relative verification code (xyz). Since the specified telephone number dialed by the user is in fact relative to the verification transfer module 12a having the verification pipeline code (555), the verification pipeline code (555) is already known as the encoding basis, plus the verification transfer mode. The group 12a receives the second telecommunication message from the telephone system based on the verification pipe code that is included, and the second telecommunication message includes at least the phone number (0932123456), so that the verification transfer module 12a can utilize the set transfer module 10 The encoding rule converts the telephone number in the second telecommunication message and the verification pipe code (555) possessed by the verification transfer module 12a into a verification code (xyz).

After completing the generation of the verification code (xyz), the verification transfer module 12a transfers the verification code (xyz) to the system module 3a of the relative system code. If the verification code (xyz) exists in one of the plurality of user data, the system module 3a determines that the second telecommunication message transferred by the verification transfer module 12a is legal to allow further operations (for example, opening the specific permission of the user) ).

Please refer to FIG. 2, which is another schematic diagram of the verification system for recording a telephone number in the present invention. As shown in FIG. 2, the verification system 1 for recording a telephone number of the present invention mainly includes a plurality of system modules 3a to 3c (for example, a game platform), a setting transfer module 10, and a plurality of verification transfer modules 12a to 12c ( Corresponding to different system modules 3a~3c). Among them, each of the system modules 3a-3c further includes a user database 34, a temporary authentication code generating unit 31, an associating unit 32, and a verifying unit 33.

After the user generates the verification code (xyz) through the setting transfer module 10, in order to let the system modules 3a~3c know the correspondence between the verification code (xyz) and the user account, the verification code (xyz) is used as the authentication. in accordance with. To this end, the user needs to input a valid user account and password through the web interface of the system modules 3a~3c, so that the temporary authentication code generating unit 31 in the system modules 3a-3c generates relevant users for the legitimate users. The temporary authentication code for the name (00001). Then, after the user establishes a connection with the setting transfer module 10 through the telephone (phone number (0932123456)), the setting transfer module 10 uses the encoding rule to use the first telecommunication message from the user (ie, the phone number, the verification pipe code). ) converted to a verification code (xyz).

Then, the associating unit 32 uses the association between the user account (user1) established by the temporary authentication code generating unit 31 and the temporary authentication code (00001), and sets the temporary authentication code (00001) established by the transfer module 10 with The relationship between the verification code (xyz) and the connection between the user account (user1) and the verification code (xyz) is established as a basis for verification.

When the user needs to perform the identity verification process, the user sends a second telecommunication message (including at least the phone number (0932123456)) to the verification transfer module 12a, so that the verification transfer module 12a can utilize the code used by the set transfer module 10. The rule converts the telephone number in the second telecommunication message and the verification pipe code (555) possessed by the verification transfer module 12a into a verification code (xyz). When the verification unit 33 in the system module 3a receives the verification code (xyz), the authentication code (xyz) can be used in the user data based on the association between the user account and the verification code established by the association unit 32. The library 34 queries to verify the verification code passed from the verification transfer module 12a. In other words, if the verification code (xyz) exists in one of the plurality of user data, the verification unit 33 determines that the second telecommunication message transferred by the verification transfer module 12a is legal to allow further operations (eg, opening the user's specificity). Permission).

The features and spirit of the present invention will be more apparent from the detailed description of the preferred embodiments. On the contrary, the intention is to cover various modifications and equivalents within the scope of the invention as claimed.

1 The invention does not need to record the telephone number verification system

3a~3c. . . System module

31. . . Temporary authentication code generation unit

32. . . Associated unit

33. . . Verification unit

34. . . User database

10. . . Set transfer module

12a~12c. . . Verify transfer module

Figure 1 is a schematic diagram of a verification system that does not require the recording of a telephone number in the present invention.

Figure 2 is another schematic diagram of the verification system of the present invention that does not require the recording of a telephone number.

1. . . The invention does not need to record the telephone number verification system

3a~3c. . . System module

34. . . User database

10. . . Set transfer module

12a~12c. . . Verify transfer module

Claims (13)

A verification system that does not need to record a telephone number, comprising: a system module having a system code, comprising: a user database for storing a plurality of user data, each user data comprising a use Name, a password, a temporary authentication code, a unique verification code, the verification code is associated with a phone number and a verification pipeline code; a set forwarding module is configured to receive a first from the telephone system a telecommunication message, the first telecommunication message includes at least the phone number, the verification pipe code, the temporary authentication code, and used to convert the phone number and the verification pipe code in the first telecommunication message into the a verification code, the verification code is forwarded to the system module corresponding to the system code in a format corresponding to the verification code, the temporary authentication code is related to the user name; and a verification transfer module is used Receiving a second telecommunications message from the telephone system based on the verification pipeline code that is included, the second telecommunications message including at least the And the code number used by the setting transfer module to convert the phone number in the second telecommunication message and the verification pipe code of the verification transfer module into the verification code to transfer the The verification code is to the system module relative to the system code. For example, in the verification system of claim 1, the first telecommunication message and the second telecommunication message may be short message or voice message. The verification system of claim 1, wherein the system module further comprises: a temporary authentication code generating unit, configured to generate the relevant user name for the legitimate user. The temporary authentication code; wherein the setting forwarding module uses the encoding rule to convert the phone number and the verification pipeline code in the first telecommunication message into the verification code only when the temporary temporary authentication code is received. The authentication system of claim 3, wherein the system module further comprises: an association unit, configured to utilize the user account established by the temporary authentication code generating unit and the The relationship between the temporary authentication code and the relationship between the temporary authentication code established by the setting forwarding module and the verification code establishes a relationship between the user account and the verification code. The verification system of claim 4, wherein the system module further comprises: a verification unit, configured to use the user account and the verification code established by the association unit Between the verification, the verification code transmitted from the verification transfer module is verified; wherein, if the verification code exists in one of the plurality of user data, determining the second telecommunication received by the verification transfer module The message is legal to allow further action. For example, in the verification system of claim 1, the system module can be a plurality of independent modules. For example, in the verification system of claim 1, the record transfer module can be a plurality of independent modules. For example, in the verification system of claim 1, the verification transfer module can be a plurality of independent modules. A verification method for not recording a phone number includes: storing a plurality of user data, each user data including a user name, a password, a temporary authentication code, and a unique verification code, the verification code Corresponding to a telephone number and a verification pipeline code; receiving a first telecommunications message from the telephone system, the first telecommunications message including at least the telephone number, the verification pipeline code, the temporary authentication code; using an encoding rule Transmitting, in the first telecommunication message, the phone number, the verification pipe code into the verification code, and forwarding the verification code in a format corresponding to the verification code, the temporary authentication code is related to the user name; The verification pipeline code receives a second telecommunications message from the telephone system, the second telecommunications message includes at least the telephone number; and the second telecommunications message is used by the encoding rule used when converting the first telecommunications message The phone number, the verification pipeline code that receives the second telecommunication message is converted into the verification code, and The verification code. The method for verifying that the telephone number is not recorded, as described in claim 9, wherein the first telecommunication message and the second telecommunication message may be short messages or voice messages. The method for verifying that the telephone number is not required, as described in claim 9, wherein the method further comprises: generating the temporary authentication code related to the user name for the legitimate user; wherein only the legal identification is received When the temporary authentication code is used, the code number is used to convert the phone number and the verification pipeline code in the first telecommunication message into the verification code. The method for verifying that the telephone number is not required, as described in claim 11, wherein the method further comprises: utilizing the established association between the user account and the temporary authentication code, and utilizing the established The relationship between the temporary authentication code and the verification code establishes the relationship between the user account and the verification code. The method for verifying that the telephone number is not required to be recorded in claim 12, wherein the method further comprises: verifying, by the established connection between the user account and the verification code, the second telecommunications The verification code converted by the message; if the verification code exists in one of the plurality of user data, it is determined that the second telecommunication message received by the verification transfer module is legal to allow further operations.