TWI539316B - Security verification system and its method - Google Patents

Description

Privacy verification system and method thereof

The present invention relates to a security verification system and a method thereof, which are mainly for enabling a user to retrieve a machine information generated by a verification machine (such as a game machine) by using a mobile electronic device, and in the mobile electronic device. Entering an account number and password, so that the mobile electronic device transmits the account number, password and machine information to a verification server (such as a game server), so that the verification machine passes the authentication of the verification server, thereby avoiding the account number And the password input process is peeped, and the effect of confidentiality verification is achieved.

In recent years, with the improvement of the quality of life, people are paying more and more attention to leisure activities. During the period, they can release the pressure of life through leisure activities and enhance the emotional communication between people. At present, most users (especially young people) You will choose to go to the playground for leisure activities to experience the rich visual and sound effects of the game. With the development of game console technology, in addition to the common stand-alone game consoles in the past, there are still some players who have developed a game console that can connect to the Internet for connecting games, so that users can interact with each other in the game.

Press, at present, some game consoles require the user to set a game password of a certain length or longer when the user registers the game account, and in order to improve the security of the password, the game password must be composed of numbers and English capitalization. To prevent unscrupulous people from stealing easily. However, some unscrupulous people will peek into the process of entering the game account and game password when the user enters the game account and game password, and record the user's game account and game password by self-recording to steal the game account. The virtual currency or virtual treasure causes the user's loss, and even the user loses the enthusiasm to continue the game. On the other hand, with the technical progress of the touch panel and the decline in unit price, many game consoles have adopted the touch screen as the input means of the game machine. However, since the user must be on the touch screen of the game machine. Enter the game account and game password in a touch-and-click manner, which increases the chances of the game account and game password being sneaked and stolen, which is quite unsatisfactory.

In addition, although the industry has developed a mechanism for authenticating the authentication of the game machine, the game machine can use wireless transmission technology such as Radio Frequency Identification (RFID) or other image recognition. Technology, identify the authenticity of the card, and then match the game account and game password entered by the user to perform the verification process. However, if the game machine wants to adopt the card verification mechanism, the operator must design and produce cards for various game machines, which not only greatly increases the development cost and operating cost of the game machine, but also users forget to carry cards. Even the loss of cards and other things, the game industry must deal with cards and other procedures, resulting in increased operating costs, very unsatisfactory. Furthermore, even if a card verification mechanism is added to the game console, the user still has to click on the game account and the game password on the touch screen of the game console. Thus, the unscrupulous person can also obtain the user by peeping. The game account and game password, so the mechanism of using the card for authentication is still quite unsatisfactory in practical use.

Therefore, how to improve the problem of the authentication method of the game console to enhance the security of the game account and the game password, and avoid the use of the game account and the game password directly on the touch screen to prevent the use of the game. The user's game account and game password ensure the user's rights and interests, and improve the efficiency and convenience of verification, which is an important topic for the present invention.

In view of the many problems of the prior art, the inventors have finally worked hard to study and experiment, and finally developed and designed the confidential verification system and method thereof to avoid the user on the verification machine (such as a game machine). Enter the account number and password directly to prevent the input process from being peeked to ensure the privacy and security of the verification process and to avoid harming the user's rights.

An object of the present invention is to provide a security verification system, which includes a verification machine, a mobile electronic device, and a verification server (eg, a game server), wherein the verification machine can generate a machine information. And the mobile device information is corresponding to the verification machine; the mobile electronic device can capture the information of the machine and receive an account and a password input by the user, and the mobile electronic device communicates with the verification server via the Internet. Connecting, and transmitting the account number, the password and the machine information to the verification server; the verification server is connected to the verification machine through the Internet, the verification server is provided with a storage unit, and the storage unit There is stored in the user database, the user database includes a plurality of user data, each of the user data includes a user account and a user password, and the verification server receives the mobile electronic device. After the account number, password and the information of the machine, the account and password are compared with the user account and the user password in the user database. The case where the ID and password are consistent with the user account number and user password, then the authentication server information table according to the machine, so that the machine table corresponding to the verification information to verify the authentication by machines server. According to the technical feature of the present invention, when the user wants to connect to the verification server by using the verification machine, the mobile device only needs to retrieve the information of the machine and input the account number and password to the mobile electronic device. The verification program effectively prevents unscrupulous people from peek into the process of inputting an account and a password by the user, effectively increasing the security of the verification and achieving the effect of confidentiality.

Another object of the present invention is to provide a method for verifying confidentiality, the method being applied to a system, the system comprising a verification machine, a mobile electronic device and a verification server, and the method comprises: the verification machine Generating a machine information; the mobile electronic device captures the machine information, and the mobile electronic device receives the account number and password input by the user, and transmits the account number, password, and the machine information to the network through the Internet. Verifying the server; the verification server compares the account number and the password with the user account and the user password in a user database, and the account and password respectively match the user account and the user password. In the case of the machine, the verification machine corresponding to the machine information passes the verification of the verification server according to the machine information. In this way, the user only needs to input the account number and password on the mobile electronic device, and does not need to input on the verification machine, thereby effectively avoiding the process of inputting the account number and the password being peeped, and greatly increasing the privacy of the account and the password.

Another object of the present invention is that the verification machine displays a two-dimensional barcode on the screen as the information of the machine, and the mobile electronic device captures the information of the machine with the camera lens to obtain the machine. News. Thereby, the user can quickly complete the steps of capturing machine information to save time required for verification.

According to still another object of the present invention, after the verification machine passes the verification by the verification server, the verification server sends a notification message to the mobile electronic device through the Internet, so that the user knows that the verification program has been carry out.

For your convenience, the review committee can make a further understanding and understanding of the purpose, structure and efficacy of the present invention. The embodiments are described in conjunction with the drawings, which are described in detail as follows:

In the long-term research and development and design of the verification machine (game console) and other related fields, the inventor found that when the user inputs the game account and the game password on the verification machine, there may be people who are unsightly in the back of the user. And stealing game accounts and game passwords, resulting in serious damage to users' rights, is not ideal. In addition, although some operators have developed a mechanism for using cards for authentication, users often forget to carry cards or lose cards, and the user still has to enter the game account and game password on the touch screen of the verification machine. There is still the possibility of being peeped and stolen. Although the industry wants to further seek improvement solutions to the above problems, it has not yet obtained a sound solution. In view of this, the inventors have designed and utilized the currently common mobile electronic devices to design a verification system and method with high confidentiality to solve many of the shortcomings of the conventional verification methods.

The present invention is a security verification system and method thereof. Referring to FIG. 1, in the preferred embodiment of the present invention, the security verification system 1 includes a verification machine 10, a mobile electronic device 11, and a verification servo. 12 The verification machine 10 is connected to the Internet 13 via a router or other network device. In particular, in the present case, for the sake of simplicity, the preferred embodiment is described by only one verification machine 10, so that the reviewer understands the technical focus of the case, but in actual implementation, the verification machine 10 It is not limited to one, and it is first and foremost. In addition, in the preferred embodiment, the verification machine 10 is a game machine, but the invention is not limited thereto. The verification machine 10 can also be other machines such as an access control device. The device 11 is a mobile phone, and the mobile phone has a camera lens capable of capturing images for capturing. However, the present invention is not limited thereto, and the mobile electronic device 11 can also be a tablet computer or other electronic products. Variations that can be easily conceived by those skilled in the art are to be included in the scope of the patent application of the present invention. Referring to FIG. 1 and FIG. 2, the figure shown in FIG. 2 is a screen displayed by the touch screen 101 of the verification machine 10, and the verification machine 10 can generate a machine information 100, which is preferred. In the embodiment, the verification machine 10 displays a QR code on the screen as the machine information 100. The so-called QR code is a type of two-dimensional barcode, which was adopted by Denso-Wave in Japan in 1994. Invented by the company, QR is the abbreviation of "Quick Response" in English, which means quick response. QR code can store more information than ordinary barcode, and it is the most popular 2D barcode in Japan. The machine information 100 generated by the verification machine 10 corresponds to the verification machine 10, in other words, different verification machines 10 will each generate different machine information.

Referring to FIG. 3, in the present invention, the user can provide the user with an application specific to the security verification system 1 to enable the user to install the application into the mobile electronic device 11, and when the user turns on After the application, the mobile electronic device 11 can capture the machine information 100 with the camera lens of the mobile electronic device 11 as shown in FIG. 3, so that the application can obtain the machine information 100. In addition, in FIG. 3, the application program further includes an account field 110 and a password field 111. The user needs to input an account number and a password in the account field 110 and the password field 111 respectively, so that the mobile electronic device 11 is enabled. Receive the account and password entered by the user. After the user clicks the confirmation button 112, as shown in FIG. 1, the mobile electronic device 11 is connected to the verification server 12 via the Internet 13, and the account number, password, and the machine information 100 are Transfer to the verification server 12.

Referring to FIG. 1 , the verification server 12 is connected to the verification machine 10 via the Internet 13 . In the preferred embodiment, the verification server 12 is a game server, but The invention is not limited to this, and it is first and foremost. The verification server 12 is provided with a storage unit 120, and the storage unit 120 stores a user database (not shown). The user database includes a plurality of user data, each of the user data includes A user account and a user password. It should be particularly noted that, in FIG. 1 , the storage unit 120 is disposed in the verification server 12 , but the invention is not limited thereto, and the verification server is set according to the concept of the present invention. At 12 o'clock, the storage unit 120 can also be designed as an external device independent of the verification server 12, and after the storage unit 120 is connected to the verification server 12, the same effect as the embodiment can be achieved. The location of the storage unit 120 is not the limitation of the present invention. Any combination and conversion that can be easily conceived by those skilled in the art without departing from the equivalent scope of the present invention.

In the preferred embodiment, as shown in FIG. 1 and FIG. 3, after receiving the account number, password, and the machine information 100 sent by the mobile electronic device 11, the verification server 12 is directed to the account number and The password is compared with the user account and the user password in the user database. When the account and password respectively match the user account and the user password, the verification server 12 is configured according to the password. The machine information 100 causes the verification machine 10 corresponding to the machine information 100 to pass the verification by the verification server 12. In order that the reviewer can better understand the overall process steps of the present invention, the process steps employed by the present invention will be described in terms of a timing diagram in conjunction with a textual description. Referring to Figures 1 and 4, the security verification system 1 performs the verification operation of the present invention according to the following steps: (400) the verification machine 10 generates a machine information 100, and the mobile electronic device 11 captures The machine information 100 is received by the user and the password is received by the user; (401) the mobile electronic device 11 transmits the account number, password and the machine information 100 to the verification server 12 via the Internet 13; 402) The verification server 12 compares the account number and the password with the user account and the user password in the user database, and the account and the password respectively match the user account and the user password. The verification server 12 passes the verification machine 10 corresponding to the machine information 100 through the verification of the verification server 12 according to the machine information 100, and sends a verification message to the verification machine 10; 403) The verification server 12 transmits a notification message to the mobile electronic device 11 via the Internet 13.

In the above step (402), when the verification machine 10 receives the verification message, it means that the verification machine 10 has passed the verification by the verification server 12, and in addition, when the user receives the notification by the mobile electronic device 11, After the message, it can be confirmed that the verification machine 10 has indeed passed the verification of the verification server 12, so that the user can play the game on the verification machine 10. In addition, in the present invention, the verification server 12 can also transfer the account number and password to the verification machine 10 in the foregoing step (402), so that the verification machine 10 automatically logs in to the verification server according to the account number and password. The verification server 12 can also automatically log the verification machine 10 to the verification server 12 according to the account number, password and machine information 100, both of which can achieve the pursuit of the present invention. effect. In summary, according to the technical features of the present invention, when the user wants to connect the verification machine 10 to the verification server 12 in a public place such as a playground, the user only needs to take the action with him or her. The electronic device 11 captures the machine information 100, and inputs an account number and a password to the mobile electronic device 11, so that the verification machine 10 can pass the verification program of the verification server 12 to further play the game with the verification machine 10. Since the user does not need to input the account number and password on the verification machine 10, the user can effectively prevent the unscrupulous person from peeking into the process of inputting the account and the password, thereby preventing the account and the password from being stolen by the unscrupulous person, thereby effectively increasing the security of the verification. And achieve the effect of confidentiality. In addition, the user can input the account number and password in the mobile electronic device 11 in advance, so that the user only needs to retrieve the machine information 100 by using the mobile electronic device 11 , and the privacy verification system 1 of the present invention can Automated verification procedures greatly increase the convenience and speed of verification.

According to the above description, it is only a preferred embodiment of the present invention, but the technical features of the present invention are not limited thereto. In the above preferred embodiment, the verification machine 10 displays a QR code on its screen. As the machine information 100, when the manufacturer designes the verification machine 10, the generation and transmission form of the machine information 100 can also be changed. For example, the verification machine 10 can use wireless transmission methods such as Wifi or Bluetooth. The mobile electronic device 11 transmits the machine information, or generates the machine information in an image or sound manner, and causes the mobile electronic device 11 to capture. Therefore, the form of the machine information 100 is not limited to the limitations of the present invention. In addition, in the present case, the game machine and the game server are taken as an example for description, but the present invention is not limited thereto, and the present invention can also be applied to other fields requiring verification, such as access control, etc. Those skilled in the art, which are susceptible to variations or modifications within the technical scope of the present invention, are intended to be covered by the following claims.

1. . . Privacy verification system

10. . . Verification machine

100. . . Machine information

101. . . Touch screen

11. . . Mobile electronic device

110. . . Account field

111. . . Password field

112. . . Enter

12. . . Authentication server

120. . . Storage unit

13. . . Internet

1 is a block diagram of a system of a preferred embodiment of the present invention;

Figure 2 is a schematic diagram of the touch screen of the verification machine;

3 is a schematic diagram of a mobile electronic device in accordance with a preferred embodiment of the present invention; and

Figure 4 is a timing diagram of a preferred embodiment of the present invention.

1. . . Privacy verification system

10. . . Verification machine

11. . . Mobile electronic device

12. . . Authentication server

120. . . Storage unit

13. . . Internet

Claims (10)

A security verification system includes: a verification machine capable of generating a machine information, and the machine information corresponds to the verification machine; a mobile electronic device capable of capturing the machine information and receiving and using The account and password entered, the mobile electronic device transmits the account number, password and the information of the machine through the Internet; and a verification server communicates with the verification machine and the mobile electronic device through the Internet respectively The authentication server is provided with a storage unit, and the storage unit stores a user database, the user database includes a plurality of user data, each of the user data includes a user account and a The user password, the verification server can receive the account number, the password and the machine information transmitted by the mobile electronic device, and perform the user account and the user password in the user database for the account and password. Comparing, in the case that the account number and password are respectively consistent with the user account and the user password, the verification server can make a pair according to the machine information. The verification machine to verify that the machine table information by authentication server. The security verification system of claim 1, wherein the verification server transmits the account number and password to the verification machine, so that the verification machine automatically logs in to the verification server according to the account and password. The security verification system of claim 2, after the verification machine passes the verification of the verification server, the verification server sends a notification message to the mobile electronic device via the Internet. The security verification system of claim 3, wherein the verification machine displays a two-dimensional barcode as the information of the machine, and the mobile electronic device captures the information of the machine with a camera lens to obtain the machine. Taiwan information. The security verification system of claim 3, wherein the verification machine transmits the machine information to the mobile electronic device in a wireless transmission manner. A security verification method is applied to a system, the system includes a verification machine, a mobile electronic device and a verification server, and the verification server communicates with the verification machine and the mobile electronic device through the Internet respectively. Connected, the method includes: the verification machine generates a machine information; the mobile electronic device captures the machine information, receives the account and password input by the user, and uses the Internet, the account, the password and The machine information is transmitted to the verification server; and the verification server compares the account number and the password with the user account and the user password in a user database, and the account and the password are respectively used. If the account number and the user password match, the verification server passes the verification machine corresponding to the machine information to verify the verification by the verification server according to the machine information. The method of claim 6, wherein the verification server transmits the account number and password to the verification machine, so that the verification machine automatically logs in to the verification server according to the account and password. The privacy verification method according to claim 7, after the verification machine passes the verification by the verification server, the verification server sends a notification message to the mobile electronic device through the Internet. The method of claim 8, wherein the verification machine displays a two-dimensional barcode as the information of the machine, and the mobile electronic device captures the information of the machine with a camera lens to obtain the machine. Taiwan information. The method of claim 8, wherein the verification machine transmits the machine information to the mobile electronic device in a wireless transmission manner.