TWI648979B - Authentication method and system thereof - Google Patents

Abstract

The present invention provides an authentication method and system thereof. The foregoing authentication method is applied to the authentication system and includes the following steps: First, the authentication system transmits the authentication voice having the one-time password to the external traffic device according to the message information and through the traffic link. Next, the authentication system is connected to an external authentication device to trigger the authentication device to acquire and upload the authentication voice played by the traffic device. Furthermore, the authentication system authenticates the uploaded authentication voice and provides an imaged one-time secret after passing the authentication code. The invention transmits the authentication voice with the one-time password to the traffic device through the traffic link, and then obtains the authentication voice and performs the authentication operation through the authentication device, thereby effectively improving the security of the authentication.

Description

Authentication method and system thereof

The present invention relates to an authentication method and system thereof, and more particularly to an authentication method and system for improving authentication security by authenticating voice.

With the rapid development of network technology, many important information transmission, or commercial transactions, financial services, etc., rely on the Internet to provide services, and to improve the security of online transactions, the user identity and user devices Certification operations are increasingly important.

When the current network server receives the authentication request from the client, most of the one-time password for authentication is transmitted to the client device through an electronic mail box or a short message. However, when the client device is implanted with a malicious software such as a Trojan, the malicious third party can easily obtain the authentication code from the client device through the malicious software, and seriously affects the security of the network service.

In summary, how to provide a solution to the aforementioned problems is a technical problem that needs to be solved in the field.

In order to solve the problems disclosed above, an object of the present invention is to provide an authentication scheme that can effectively improve authentication security.

To achieve the above object, the present invention proposes an authentication method. The foregoing method is applied to an authentication system and includes the following steps: First, the authentication system is based on a message number and The service link transmits the authenticated voice with a one-time password to the external traffic device. Next, the authentication system is connected to an external authentication device to trigger the authentication device to acquire and upload the authentication voice played by the traffic device. Furthermore, the authentication system authenticates the uploaded authentication voice and provides an imaged one-time password after passing the authentication.

To achieve the above object, the present invention proposes an authentication system. The aforementioned authentication system includes an audio cryptographic server, an authentication website server, and a processing module. The aforementioned audio cryptographic server is connected to an external traffic device via a traffic link. The aforementioned authentication website server connects the external authentication device via the network. The processing module is connected to the audio cryptographic server and the authentication website server, and transmits the authentication voice to the traffic device with the one-time password via the audio cryptographic server, and the authentication device is triggered by the authentication website server to acquire and upload the traffic device. The authenticated voice played, and the uploaded authentication voice is authenticated, and an imaged one-time password is provided after passing the authentication.

In summary, the authentication method and system thereof of the present invention transmit an authentication voice with a one-time password to a traffic device through a traffic link, and then obtain an authentication voice through the authentication device, and then send the authentication voice once it passes the verification. Sex passwords can effectively improve the security of the certification process.

1‧‧‧Certificate system

11‧‧‧Optical password server

12‧‧‧Certified Website Server

13‧‧‧Processing module

2‧‧‧Attendance device

3‧‧‧Authorized device

4‧‧‧Traffic link

5‧‧‧Network link

1 is a flow chart of an authentication method according to a first embodiment of the present invention.

2 is a system block diagram of an authentication system according to a second embodiment of the present invention.

The specific embodiments are described below to illustrate the embodiments of the invention, but are not intended to limit the scope of the invention.

Please refer to FIG. 1, which is a flowchart of an authentication method according to a first embodiment of the present invention. The aforementioned authentication method is applied to the authentication system and includes the following steps:

S101: The authentication system transmits the authentication voice with one time password (OPT) to the external traffic device according to the one-voice information and transmits the one-time password (OPT) through the traffic link.

S102: The authentication system is connected to an external authentication device to trigger the authentication device to acquire and upload the authentication voice played by the traffic device.

S103: The authentication system authenticates the uploaded authentication voice, and provides an imaged one-time password after passing the authentication.

In another embodiment, the authentication system or authentication device of the aforementioned method authenticates the visualized image of the voice for authentication.

In another embodiment, the visual image of the foregoing method is a signal waveform of the authentication voice. In another embodiment, the signal waveform of the foregoing method further includes a time domain waveform or a frequency domain pattern.

In another embodiment, the authentication system of the foregoing method enables the microphone unit of the authentication device to obtain the authentication voice.

Please refer to FIG. 2, which is a system block diagram of an authentication system 1 according to a second embodiment of the present invention. The authentication system 1 includes an audio cryptographic server 11, an authentication website server 12, and a processing module 13. The aforementioned audio cryptographic server 11 is connected to the external traffic device 2 via the traffic link 4. The aforementioned authentication website server 12 connects the external authentication device 3 via the network. The foregoing processing module 13 is connected The audio cryptographic server 11 and the authentication website server 12 transmit the authentication voice with the one-time password to the traffic device 2 via the audio cryptographic server 11, and trigger the authentication device 3 to acquire and upload the traffic device via the authentication website server 12. 2 The authenticated voice played, and authenticates the uploaded authentication voice, and provides an imaged one-time password after passing the authentication.

In another embodiment, the aforementioned authentication system 1 authenticates the visualized image of the voice.

In another embodiment, the visualized image of the authentication system 1 is a signal waveform of the authentication voice. In another embodiment, the aforementioned authentication system 1 signal waveform further includes a time domain waveform or a frequency domain graphic.

In another embodiment, the aforementioned authentication system 1 enables the microphone unit of the authentication device 3 to obtain the authentication voice.

The following description of the present invention is exemplified by the authentication system 1 of the second embodiment, but the authentication method of the first embodiment also has the same or similar technical effects. Taking the application scenario of the micropayment as an example, the traffic device 2 is a telephone device (for example, a smart phone) held by the client, and the authentication device 3 is a networkable device held by the client, for example, a computer or a virtual device. Reality device (VR)...etc. When the client uses the traffic device 2 to perform the authentication system 1, and inputs the voice number, the license number, and confirms the identity of the user via the back end of the authentication system 1, the authentication system 1 transmits the authentication voice to the user voice password server, the foregoing The authentication voice can hide the OTP message, and the user does not directly hear the OTP code (the user hears the general welcome message, but the audio of the OTP code is hidden in it, and the audio is converted by the receiving end and can be recognized after being converted). Then, the user voice cryptographic server transmits the authentication voice to the traffic device 2 through the traffic link 4 (for example, a local telephone link, a mobile communication link, etc.), at which time the user terminal will use the traffic device 2 The speaker faces the microphone unit of the authentication device 3, and causes the traffic device 2 to play the authentication language After the authentication device 3 obtains the authentication voice via the microphone unit, the authentication voice is transmitted to the authentication website server of the authentication system 1 via the network link 5 (for example, a mobile network link, a fixed network link, etc.). 12. When the authentication website server 12 completes the verification, an imaged one-time password will be transmitted to the authentication device 3, so that the user can obtain the imaged one-time password.

According to the signal synthesis theory, the signal waveform can be changed by the fundamental frequency waveform of the summed signal and the waveform of the harmonics (for example, the sine wave and its harmonics can be combined into a square wave), so the audio cryptographic server 11 can be in the authentication voice. Add a signal of a specific frequency and its harmonics to change the visual pattern of the authentication voice (for example, signal characteristics such as pulse width, peak, trough, etc.). After the authentication website server 12 obtains the authentication voice, the visualized graphics are graphically recognized, and the authentication voice is authenticated. Since the confidentiality of the traffic processing unit in the traffic link 4 and the traffic device 2 is extremely high, it is difficult for a malicious third party to steal authentication voice by installing a malicious program such as a Trojan (in the case of the Android system, the traffic processing unit is located). The core of the system is therefore not easy to be implanted with malicious programs. Therefore, the authentication method and system of the present invention can improve the security during the transmission of the authentication data.

In view of various authentication requirements, the present invention further provides four types of voice authentication, and the foregoing authentication method or system 1 can set the strength of the authentication according to requirements:

The first type: simple voice authentication. The authentication system 1 transmits a general voice file via the short message, and the voice of the authenticated voice can recognize the OTP code for the authentication process.

The second type: the authentication voice that cannot directly hear the OTP code. The authentication system 1 transmits the general voice file, and the audio in the voice file cannot recognize the OTP code. After receiving the authentication page of the authentication device 3 (for example, a VR device or a computer), the audio is converted into the correct OTP code for authentication. program.

The third type: the voice file is located in the system side voice mailbox. The user's traffic device 2 is connected to the voice mail box. Moreover, the audio of the authenticated voice cannot recognize the OTP code, and after receiving the authentication page of the authentication device 3 (for example, a VR device or a computer), the correct OTP code is converted via audio to perform the authentication procedure.

The fourth type: the voicemail of the user device 2 has a time limit for authentication. After the voicemail of the user device 2 receives the authentication voice, it is necessary to input the OTP within the deadline (for example, within 1 minute) to complete the authentication procedure. If the time limit is not completed, the OTP will be void. According to the system settings, it will decide whether to generate new OTP audio in the voice mailbox, and then avoid the hacking Trojan to record the voice file and steal it.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

Claims (10)

An authentication method is applied to an authentication system, comprising: the authentication system transmitting, according to a message number information, an authentication voice having a one-time password to an external traffic device through a traffic link; the authentication system is connected to an external authentication device, Trimming the authentication device to obtain and upload the authentication voice played by the traffic device; and the authentication system authenticates the uploaded authentication voice and provides an imaged one-time password after the authentication, wherein the traffic device Different from the authentication device. The authentication method of claim 1, wherein the authentication system or the authentication device authenticates the visualized image of the authentication language. The authentication method of claim 2, wherein the visualized image is a signal waveform of the authentication voice. The authentication method of claim 3, wherein the signal waveform further comprises a time domain waveform or a frequency domain graphic. The authentication method of claim 1, wherein the authentication system enables the microphone unit of the authentication device to obtain the authentication voice. An authentication system comprising: an audio cryptographic server, connecting an external traffic device via a traffic link; authenticating a website server, connecting an external authentication device via a network; processing a module, connecting the audio cryptographic server, and The authentication website server, the processing module transmits an authentication voice with a one-time password to the traffic device via the audio password server, and triggers the authentication device to acquire and upload the service device via the authentication website server The authenticated voice played is set, and the uploaded authentication voice is authenticated, and after authentication, an imaged one-time password is provided, wherein the traffic device is different from the authentication device. The authentication system according to claim 6 is for authenticating the visualized image of the authentication voice. The authentication system of claim 7, wherein the visualized image is a signal waveform of the authenticated voice. The authentication system of claim 8, wherein the signal waveform further comprises a time domain waveform or a frequency domain pattern. The authentication system of claim 6 is configured to enable the microphone unit of the authentication device to obtain the authentication voice.