TWI610195B - Identifying system, identifying method and a computer-readable media - Google Patents

Abstract

The authentication system has a network service provider, a user terminal and an authentication module. The client can communicate with the Internet and the telecommunications network and the network service provider through the Internet. At the time of authentication, the authentication module of the client is activated to connect to the network service provider via the Internet. The network service provider transmits the authentication code to the client through the Internet. The user end returns the authentication code and the telecommunication number to the network service provider through the telecommunication network. The network service provider obtains the user terminal telecommunication number and the identification number of the user end according to the authentication code comparison result, and opens the user end. In response, the user terminal logs in to the network service provider terminal according to the identification number via the authentication module.

Description

Authentication system, authentication method and computer readable media

The present invention is an authentication system and method, and in particular, a system and method for authenticating an identity using a short message.

With the popularity of the Internet and Internet information devices, the types of services that can be provided through the Internet are becoming more and more diverse. Users can download authentication modules through the Internet through smart phones and directly online. Auction or purchase or transfer or stock trading on online banking.

However, it is convenient and efficient to carry out the above services through the Internet, but it is easy to expose the user's personal information to the risk of being illegally intercepted and stolen. Traditionally, in order to avoid the aforementioned damage, the network service provider requires a registration procedure to confirm the identity of the user when the user uses the provided service. It is usually the user's input of personal data, and it is most common for the network service provider to reply to the authentication result by mail or SMS.

However, the above method does not prevent a user from deliberately repeating registrations using different login names, thus often causing network service providers. Repeatedly replying the certification results by email or SMS to the same user, resulting in increased operating costs.

One aspect of the present invention provides an authentication system including a network service provider, a user, and an authentication module. The user end can communicate with the network service provider through an internet and a telecommunication network respectively. When the authentication is performed, the network service provider transmits an authentication code to the user terminal through the Internet, and the authentication module triggers the user terminal to send a short message communication mechanism, and the authentication is returned through the telecommunication network. The code and the user terminal telecommunication number are sent to the network service provider end, and the network service provider obtains the user terminal telecommunication number and the identification number of the user end according to the authentication code comparison result, and opens The user terminal logs in to the network service provider terminal according to the identification by the authentication module.

In one embodiment, the client is a smart phone, tablet, personal digital assistant or other handheld electronic device for Internet access and communication.

In one embodiment, the network service provider is an online game provider of online games, an online shopping service provider, an online banking service provider, or other network that requires authentication. service provider.

In an embodiment, the network service provider further includes a database for storing the authentication code, the identification number, and the telecommunication number.

In an embodiment, the network service provider further includes an authentication server for transmitting an authentication code through the telecommunication network to the network service provider, and the user terminal transmits the communication mechanism through the message. The authentication code returned via the telecommunication network to obtain the user terminal telecommunication number and the identification number of the user end.

In one embodiment, the identification number is the machine number of the user end.

In an embodiment, the authentication code is a random number.

In an embodiment, the authentication module is an application.

In an embodiment, the network service provider further associates the identification number with the user terminal telecommunication number.

Another aspect of the present invention is to provide an authentication method for providing a network service provider to authenticate a user end, wherein the user end can respectively access an internet and a telecommunications The network communicates with the network service provider. The method first starts an authentication module of the user end to connect to the network service provider terminal via the internet. Second, the network service provider transmits an authentication code to the client through the Internet. Then, the authentication module triggers the user terminal to transmit a short message communication mechanism, and returns the authentication code and the user terminal telecommunication number to the network service provider terminal through the telecommunication network. Then, the network service provider obtains the user terminal telecommunication number and the identification number of the user end according to the authentication code comparison result, and opens the user end. In response, the user terminal logs in to the network service provider terminal according to the identification number via the authentication module.

Yet another technical aspect of the present invention is to provide a computer readable recording medium for storing a computer program for performing an authentication method. The system provides a network service provider for authenticating a user end, wherein the user terminal can communicate with the network service provider through an internet and a telecommunication network respectively. The method first starts an authentication module of the user end to connect to the network service provider terminal via the internet. Second, the network service provider transmits an authentication code to the client through the Internet. Then, the authentication module triggers the user terminal to transmit a short message communication mechanism, and returns the authentication code and the user terminal telecommunication number to the network service provider terminal through the telecommunication network. Then, the network service provider obtains the user terminal telecommunication number and the identification number of the user end according to the authentication code comparison result, and opens the user end. In response, the user terminal logs in to the network service provider terminal according to the identification number via the authentication module.

In summary, the technical solution of the present invention has obvious advantages and beneficial effects compared with the prior art. With the above technical solution, the sender sends a verification message to the network service provider, and the cost is borne by the user, so that a user can deliberately repeat the registration. Furthermore, the present invention automatically fills in the identification number by the authentication module each time the user logs in, and the user does not need to manually fill in, so it is quite convenient.

The above description will be described in detail in the following embodiments, and further explanation of the technical solutions of the present invention will be provided.

100‧‧‧Certification System

110‧‧‧User end

111‧‧‧ memory device

112‧‧‧Certificate Module

120‧‧‧Internet Service Provider

121‧‧‧Authentication server

122‧‧‧Database

130‧‧‧Telecom network

140‧‧‧Internet

200‧‧‧ Certification method

201-205‧‧‧Steps

The above and other objects, features, advantages and embodiments of the present invention will become more <RTIgt; Sketch map.

2 is a flow chart showing an authentication method according to an embodiment of the present invention.

In order to make the description of the present invention more complete and complete, reference is made to the accompanying drawings and the accompanying drawings. However, the embodiments provided are not intended to limit the scope of the invention, and the description of the operation of the structure is not intended to limit the order of its execution, and any device that is recombined by the components produces equal devices. The scope covered by the invention.

The drawings are for illustrative purposes only and are not drawn to the original dimensions. On the other hand, well-known elements and steps are not described in the embodiments to avoid unnecessarily limiting the invention.

The short message authentication method of the present invention triggers a short message communication mechanism when the user registers through the authentication module on a communication device, and transmits the communication number and an identification number of the communication device used by the user to the network service through the short message. Provider side. At the same time, the identification number is transmitted through the Internet for verification, and after the verification, a login code is generated. When the user selects the authentication module, the login code is automatically filled in the authentication module, and the user can Use the services provided by the network service provider. Since the authentication method of the present invention transmits the verification data to the network service provider by the sender side, the cost is borne by the user, so that a user can deliberately repeat the registration. Furthermore, in the present invention, the login code is automatically filled in by the authentication module each time the user logs in, and the user does not need to manually fill in, so it is quite convenient.

1 is a schematic diagram of an authentication system in accordance with a preferred embodiment of the present invention. The authentication system 100 includes at least a user terminal 110 and a network service provider terminal 120. The network service provider 120 can be an online game provider of online games, an online service provider of online shopping, or an online service provider of an online bank. However, the present invention is not limited to the above network. Road service providers, other network service providers like identity login/authentication, such as portals, can also be applied. The user terminal 110 can be an electronic device/handheld electronic device such as a smart phone, a tablet computer or a personal digital assistant for Internet access and communication. The communication between the client 110 and the network service provider 120 can be made through the telecommunication network 130 and a wired/wireless network 140. Before using the network service provider 120 service for the first time, the user terminal 110 needs to perform identity registration and is authenticated by the network service provider 120. After the authentication is passed, the user can use the network service to provide the service. The network resources provided by the terminal 120. Therefore, the network service provider 120 provides an authentication module 112. In an embodiment, the authentication module is an application. Before the authentication, the user terminal 110 can connect to the network service provider 120 through the wired/wireless network 140 to download the authentication module 112 and store it in the memory device 111 for subsequent authentication process. .

In a preferred embodiment, the user terminal 110 can have a machine number for a smart phone. Since the machine numbers of each smart phone are different, that is, the machine number is unique, the hacker cannot use other machines. The smart phone is authenticated, so it can be used as an identification number for the authentication of the user terminal 110. Accordingly, when the authentication is performed, the user terminal 110 initiates the recognition. The authentication module 112 connects the network service provider 120 via the Internet 140, and the network service provider 120 transmits the exchange authentication code through the Internet 140 and the client 110, and the authentication module 112 automatically triggers. Or, after the user confirms, the short message communication mechanism of the user terminal 110 is triggered, and the received authentication code and the telecommunication number of the user terminal 110 are transmitted to the network service provider terminal 120 through the telecommunication network 130. The network service provider 120 can obtain the telecommunication number and identification number of the corresponding user terminal 110 through the comparison of the authentication code, and open the user terminal 110. In another embodiment, the network service provider 120 The mobile phone number of the user terminal 110 can be obtained by parsing the newsletter. Since the identification number is unique, the user can use the identification number to log in to the network service provider 120 and enjoy the service provided by the network service provider 120.

The authentication code is a random number and can be generated by the network service provider 120 or the user terminal 110. In an embodiment, the network service provider 120 generates the authentication code and stores the authentication code in the database 122 and transmits it to the user terminal 110 via the Internet 140. In addition, the network service provider 120 further has an authentication server 121 for receiving the short message transmitted by the user terminal 110, and comparing the authentication code contained in the short message with the authentication code stored in the database 122. If the comparison is correct, the authentication server 121 associates the mobile phone number contained in the short message with the identification number obtained from the user terminal 110 and stores it in the database 122 for subsequent authentication. It is noted that in the above embodiment, the machine number of the user terminal 110 is used as the identification number. In another embodiment, however, since the network service provider 120 processes the stream for each downloaded authentication module 112 The water number is downloaded by the statistical authentication module 112, so the serial number of each authentication module 112 is also unique. Therefore, the serial number of the authentication module 112 can also be used as the identification number to be transmitted to the authentication server 121 via the short message.

After the database 122 has the associated identification number and mobile phone number, the user terminal 110 can transmit the identification number to the authentication server 121 via the Internet 140 through the authentication module 112 for authentication. Accordingly, when the authentication server 121 of the network service provider 120 receives the identification number transmitted by the authentication module 112 via the Internet 140, the identification number is unique, so the user can use the identification number. Log in to the network service provider 120 and enjoy the services provided by the network service provider 120. Thereafter, after the user terminal 110 connects to the network service provider 120 through the authentication module 112, the authentication module 112 can directly log in to the network service provider 120 according to the identification number, and the user does not need to manually input any It is quite convenient to log in with your personal data. And since the database 122 has the associated identification number and the mobile phone number, the network service provider 120 can also know the mobile phone number of the user terminal 110 by using the identification number, and according to the phone number, Confirm the user. Accordingly, after the user end logs in to the network service provider 120 by using the identification number, since the network service provider 120 also knows the mobile phone number of the user terminal 110, the user terminal 110 provides the network service. Any consumption of the terminal 120 can be recorded based on the mobile phone number. That is, the network service provider 120 identifies the identification number as an identity, and after the identification, grants the user terminal 110 login and uses the services provided by the network service provider 120, such as playing games or Purchase activity. It is worth noting that the above authentication of the present invention The module 112 can be authenticated in conjunction with different network service provider terminals 120. That is to say, when the network service provider 120 needs to perform authentication, the authentication module 112 can be activated when the user visits the corresponding webpage of the network service provider 120.

After the authentication process is completed, the user terminal 110 directly logs in to the network service provider 120 according to the identification number via the authentication module 112. Since the identification number has been associated with the phone number of the user terminal 110, the network service provider end 120 can confirm the identity of the user terminal 110. Therefore, the client 110 can use various services provided by the network service provider 120. In an embodiment, the authentication module 112 also provides a payment function. The user can establish multiple credit card data, such as a card number, a check code, and a card holder, in the authentication module 112 before the user terminal 110. The name of the person is paid directly through the authentication module 112.

2 is a flow chart showing an authentication method according to an embodiment of the present invention. Please refer to FIG. 1 and FIG. 2 simultaneously. The authentication method 200 can be implemented as a computer program and stored in a computer readable recording medium, so that a computer or an electronic device can read the recording medium. A method of playing multimedia on a virtual desktop. Computer-readable recording media can be read-only memory, flash memory, floppy disk, hard disk, optical disk, flash drive, tape, network accessible database or familiar with the art can easily think of the same The function of the computer can read the recording medium. First, in step 201, the authentication module 112 of the client 110 is activated to connect to the network service provider 120 via the Internet 140. The user terminal 110 can connect to the network service provider 120 through the wired/wireless network 140 to download the authentication. The module 112 is stored in the memory device 111. After the user terminal 110 activates the authentication module 112, the user terminal 110 connects to the network service provider 120 via the Internet 140. The authentication module 112 triggers the short message communication mechanism of the user terminal 110. Next, in step 202, the network service provider 120 transmits the exchange authentication code through the Internet 140 and the client 110. The authentication code is a random number and can be generated by the network service provider 120 or the user terminal 110. In an embodiment, the network service provider 120 generates the authentication code and stores the authentication code in the database 122 and transmits it to the user terminal 110 via the Internet 140. In step 203, the authentication module 112 also triggers the short message communication mechanism of the user terminal 110, and transmits the received authentication code and the telecommunication number of the user terminal 110 to the network service provider terminal 120 through the telecommunication network 130. The authentication module 112 automatically triggers or triggers the SMS communication mechanism of the user terminal 110 after confirmation by the user. Next, in step 204, the network service provider 120 can obtain the telecommunication number and identification number of the corresponding user end 110 through the comparison of the authentication codes, and open the user terminal 110. In an embodiment, the network service provider 120 has an authentication server 121 for receiving the short message transmitted by the user terminal 110, and the authentication code contained in the short message and the authentication code stored in the database 122. For comparison, if the comparison is correct, the authentication server 121 associates the mobile phone number contained in the short message with the identification number obtained from the user terminal 110 and stores it in the database 122 for subsequent authentication.

Finally, in step 205, the user end can log in to the network service provider 120 through the identification number. After the user terminal 110 connects to the network service provider 120 through the authentication module 112, the authentication module 112 can directly The identification number is logged into the network service provider 120.

Accordingly, since the authentication method of the present invention transmits the verification data to the network service provider by the messenger, the cost is borne by the user, so that a user can deliberately repeat the registration. Furthermore, the present invention automatically fills in the identification number by the authentication module each time the user logs in, and the user does not need to manually fill in, so it is quite convenient.

The present invention has been disclosed in the above embodiments, and is not intended to limit the invention, and it is intended that various modifications and changes may be made without departing from the spirit and scope of the invention. The scope of the invention is defined by the scope of the appended claims.

100‧‧‧Certification System

110‧‧‧User end

111‧‧‧ memory device

112‧‧‧Certificate Module

120‧‧‧Internet Service Provider

121‧‧‧Authentication server

122‧‧‧Database

130‧‧‧Telecom network

140‧‧‧Internet

Claims (18)

An authentication system includes: at least one network service provider; and a user terminal having an authentication module for communicating with the network service provider through an internet and a telecommunication network; When the authentication is performed, the network service provider transmits an authentication code to the user terminal through the Internet, wherein the authentication module triggers a short message communication mechanism of the user end, and the authentication module uses the authentication code Automatically writing a message, transmitting the authentication code and the user terminal telecommunication number to the network service provider through the telecommunication network, and the network service provider obtains the result according to the authentication code comparison result The user terminal telecommunication number and the user end have an identification number, and the user end is opened, and the user end logs in to the network service provider end according to the identification number via the authentication module. The authentication system of claim 1, wherein the user terminal is a smart phone, a tablet computer, a personal digital assistant or other handheld electronic device capable of accessing the Internet and communicating. The authentication system of claim 1, wherein the network service provider is an online game provider, an online shopping service provider, an online banking service provider, or Other needs to recognize The network service provider of the card. The authentication system of claim 1, wherein the network service provider further includes a database for storing the authentication code, the identification number, and the telecommunication number. The authentication system of claim 4, wherein the network service provider further comprises an authentication server for transmitting the authentication code of the user terminal via the telecommunication network via the telecommunication network, and the authentication code The authentication code stored in the database is compared to obtain the user terminal telecommunication number and the identification number of the user end. The authentication system of claim 1, wherein the identification number is a machine number of the user end. The authentication system of claim 1, wherein the authentication code is a random number. The authentication system of claim 1, wherein the authentication module is an application. The authentication system of claim 1, wherein the network service provider further associates the identification number with the user terminal telecommunication number. An authentication method for providing a network service provider to authenticate a user end, wherein the user terminal can communicate with the network service provider through an internet and a telecommunication network respectively The method at least includes: initiating the user terminal, an authentication module is connected to the network service provider via the internet; the network service provider transmitting an authentication code to the user through the internet The authentication module triggers the user terminal to send a short message communication mechanism to automatically write the authentication code into a short message, and returns the authentication code and the user terminal telecommunication number to the network through the telecommunication network. a service provider end; the network service provider obtains the user terminal telecommunication number and the user terminal identification number according to the authentication code comparison result, and opens the user terminal; and the user terminal passes the The authentication module logs in to the network service provider according to the identification number. The authentication method of claim 10, wherein the identification number is a machine number of the user end. The authentication method of claim 10, wherein the authentication code is a random number. The authentication method of claim 10, wherein the authentication module is An application. The authentication method of claim 10, wherein the network service provider further associates the identification number, the authentication code, and the user terminal telecommunication number. The authentication method of claim 10, wherein the network service provider directly sets the identification number in the authentication module. The authentication method of claim 10, further comprising storing the authentication code, the identification number, and the telecommunication number in a database. The authentication method of claim 16, further comprising comparing the authentication code sent back by the user end to the telecommunication network via the telecommunication network, and comparing the authentication code stored in the database to obtain The user terminal telecommunication number and the identification number of the user end. A computer readable recording medium storing a computer program for performing an authentication method for providing a network service provider to authenticate a user terminal, wherein the user terminal can respectively access an internet and A telecommunications network and the network service provider communicate, the method comprising: initiating the user end, an authentication module is connected to the network service provider via the internet; The network service provider transmits an authentication code to the user terminal through the Internet; the authentication module triggers the user terminal to send a short message communication mechanism to automatically write the authentication code into a message, and The telecommunication network returns the authentication code and the user terminal telecommunication number to the network service provider end; the network service provider obtains the user terminal telecommunication number and the use according to the authentication code comparison result The user end has an identification number and opens the user terminal; and the user terminal logs in to the network service provider terminal according to the identification number via the authentication module.