TWI753102B - Real-name authentication service system and real-name authentication service method - Google Patents

Abstract

A real-name authentication service system and method mainly encrypts and sends a mobile phone serial number and a mobile phone number identification number to a real-name authentication server by using an identity authentication application installed in a smart electronic device, The authentication server is authenticated by a carrier of the telecommunication company, and the real name authentication server transmits a authentication token to the intelligent electronic device after passing the authentication so as to utilize the real-name authentication service of the authentication token.

Description

Real-name authentication service system and real-name authentication service party Law

The present invention relates to a real-name authentication service system and a real-name authentication service method, in particular to a real-name authentication service system and a real-name authentication service method for providing real-name authentication services for intelligent electronic devices.

In recent years, due to the rapid development of the smart phone industry, the technology for manufacturing smart phones has become more and more sophisticated, which has greatly reduced the manufacturing cost of smart phones. Most people usually own one or more smartphones.

Due to the popularity of smart phones, more and more business activities are conducted through smart phones, among which mobile payment is the most notable. Among them, because smart phones have the function of surfing the Internet, many people will use smart phones to make purchases, book tickets or make payments on the Internet and need to enter confidential and sensitive information such as credit card numbers, bank account numbers or personal information. or when the connected website is hacked, the user's Confidential and sensitive information can easily be stolen, resulting in property damage to users.

In view of the fact that in the prior art, the vast majority of people use smart phones to surf the Internet, and conduct various behaviors on the Internet that require input of financial account numbers or personal information, and therefore it is easy to steal sensitive information; for this reason, the present invention The purpose of the invention is to provide a real-name authentication service system and a real-name authentication service method, so as to effectively solve the problem of easy theft when users make payments through smart phones.

In order to achieve the above object, the present invention provides a real-name authentication service system, which includes an intelligent electronic device, a real-name authentication server, and a third-party device.

The smart electronic device has a built-in identity verification application. The identity verification application uses a mobile phone number, a mobile phone serial number (International Mobile Equipment Identity, IMEI) and a door number identification code (International Mobile Subscriber ID) in an identity verification stage. Identity, IMSI) uses a hash function combined with an encryption key to calculate an identity verification key hash message authentication code (Hash-based message authentication code, HMAC).

The real-name authentication server is communicatively connected to the smart electronic device to receive the mobile phone number, mobile phone serial number, door number identification code and authentication key hash message authentication code, and hash the authentication key hash with the hash function combined with the encryption key message authentication code for verification After the sub-authentication key hash message authentication code is verified, the real-name authentication server verifies the mobile phone number and the door number identification code through a telecommunications company server to generate an authorization token, and transmits the authorization token to the intelligent electronic device.

The third-party device is communicatively connected to the smart electronic device, and has a built-in third-party application and an application programming interface key (API key) corresponding to the authentication application. The third-party application is based on the mobile phone The number and the application key are called by a software development kit (SDK) to the smart electronic device, and then the authentication application is awakened to display an authentication confirmation message. When the authentication confirmation information is confirmed, the authentication application It sends the authorization token and the application key to the real-name authentication server, so that the real-name authentication server authenticates the application key and the authorization token, and sends an authentication success signal to the smart electronic device after the authentication is successful. This in turn enables the authentication application to notify the third-party application that the authentication was successful.

Preferably, the real-name authentication service system further includes a bank server, which is communicatively connected to the real-name authentication server. When the smart electronic device receives the authorization token, the identity verification application further stores a bank account information and an identity certificate. The image data generates a bank-bound key hash message authentication code through a hash function and an encryption key, and transmits the bank account information, identity proof image data and bank-bound key hash message authentication code to the real-name authentication server; real-name authentication When the authentication server receives the bank account information, the identification image data and the bank binding key hash message authentication code, it first uses the hash function and the encryption key to bind the bank to the bank. The key hash message authentication code is used for verification, and after the verification, an optical character recognition program is used to extract an identity information from the identification image data, and then the identity information and bank account information are verified. The bank account information is encrypted and stored in the real-name authentication server.

Another necessary technical means adopted by the present invention to solve the problems of the prior art is to provide a real-name authentication service method, comprising the following steps: step (a) is to use an identity verification application installed in a smart electronic device to authenticate a mobile phone The mobile phone number, a mobile phone serial number and a door number identification code are combined with an encryption key through a hash function to generate an identity verification key hash message authentication code; step (b) is to use the identity verification application to convert the mobile phone number, mobile phone serial number, door number The identification code and the key hash message authentication code are sent to a real-name authentication server; step (c) is that the real-name authentication server verifies the mobile phone number and the door number identification code through a telecommunications company server; step (d) when the mobile phone number After passing the verification with the door number identification code, the real-name authentication server generates an authorization token and transmits the authorization token to the intelligent electronic device.

Preferably, the authentication service method further includes the following steps: step (e) using an identity verification application to generate a bank-bound key hash message to authenticate a bank account information and an identity certificate image data through a hash function and an encryption key step (f) sending the bank account information, identity proof image data and bank binding key hash message authentication code to the real-name authentication server; step (g) the real-name authentication server receives the bank account information, identity proof image When hashing the message authentication code between the data and the bank binding key, first use the hash function and the encryption key to pair the bank binding key. The key hash message authentication code is used for verification, and after passing the verification, an optical character recognition program is used to extract an identity information from the self-identified image data, and then the identity information and the bank account information are verified; step (h) after the verification is successful After that, the bank account information is encrypted and stored in the real-name authentication server.

In addition, it further includes the following steps: step (i) a third-party application calls a signal to the smart electronic device through an application according to the mobile phone number, a payment amount and an application key; step (j) the identity verification application is based on The application calls the signal to the real-name authentication server to inquire whether the third-party application has passed the review; step (k) when the real-name authentication server confirms that the third-party application has passed the review, the real-name authentication server sends an approval signal to the smart electronic The device enables the smart electronic device to display a payment permission confirmation message for the user to confirm; in step (1), after the payment permission confirmation message is confirmed, the identity verification application sends the authorization token and the application key to the real-name authentication server Step (m) After receiving the authorization token and the application key, the real-name authentication server authenticates the application key and the authorization token, and sends a transaction request to a bank server after the authentication is successful; Step (n) After the real-name authentication server completes the transaction request to the bank server, the real-name authentication server transmits a transaction completion information to the smart electronic device, and the smart electronic device further transmits the transaction completion information to a third party device.

In another preferred embodiment, the authentication service method includes the following steps: step (o) a third-party application calls a signal to the smart electronic device through an application according to the mobile phone number and an application key; step In step (p), the authentication application is awakened by the application call signal, and an authentication confirmation message is displayed; in step (q), when the authentication confirmation information is confirmed, the authentication application transfers the authorization token and the application key. Send to the real-name authentication server; step (r) After receiving the authorization token and the application key, the real-name authentication server authenticates the application key and the authorization token, and sends an authentication success after the authentication is successful. Signal to the smart electronic device for the authentication application to notify the third-party application that the authentication is successful.

As mentioned above, in the real-name authentication service system and the real-name authentication service method provided by the present invention, the authentication key is mainly calculated by using the mobile phone number, the mobile phone serial number and the door number identification code through the hash function combined with the encryption key to identify the hash message. The mobile phone number, mobile phone serial number, door number identification code and identity verification key hash message authentication code are sent to the real-name authentication server for verification, and the real-name authentication server also sends the authorization token to the smart phone after the verification of the telecommunications company server is passed. This is a type of electronic device, whereby users can use the real-name authentication service through the authorization token without providing any financial information or personal information, effectively avoiding personal information or financial information being hacked and loss of property.

100‧‧‧Real-name authentication service system

1‧‧‧Smart Electronic Devices

11‧‧‧First storage module

111‧‧‧Mobile number

112‧‧‧Mobile phone number

113‧‧‧Door ID

12‧‧‧Processing module

121‧‧‧Authentication Apps

2‧‧‧Real-name authentication server

21‧‧‧Authentication Module

211‧‧‧Optical Character Recognition Programs

22‧‧‧Second storage module

3‧‧‧Third party device

31‧‧‧Real-name authentication module

311‧‧‧Third-party applications

312‧‧‧Application Key

4‧‧‧Bank Server

200‧‧‧Telecommunications company server

The first figure is a block diagram showing the real-name authentication service system provided by the first preferred embodiment of the present invention; the second figure is a flowchart showing the steps of the real-name authentication service method provided by the second preferred embodiment of the present invention; Figure 3 shows a flow chart of the steps of the real-name authentication service method provided by the third preferred embodiment of the present invention; and Figures 4 A and B show the real-name authentication provided by the fourth preferred embodiment of the present invention A flowchart of the steps of the service method.

The specific embodiments of the present invention will be described in more detail below with reference to the schematic diagrams. The advantages and features of the present invention will become more apparent from the following description and the scope of the claims. It should be noted that the drawings are all in a very simplified form and use inaccurate scales, and are only used to facilitate and clearly assist the purpose of explaining the embodiments of the present invention.

Please refer to the first figure. The first figure is a block diagram showing the real-name authentication service system provided by the first preferred embodiment of the present invention. As shown in the figure, a real-name authentication service system 100 includes an intelligent electronic device 1 , a real-name authentication server 2 , a third-party device 3 and a bank server 4 .

The intelligent electronic device 1 includes a first storage module 11 and a processing module 12 . The first storage module 11 stores a mobile phone number 111 , a mobile phone serial number 112 (International Mobile Equipment Identity, IMEI) and a door number identification code 113 (International Mobile Subscriber Identity, IMSI). The processing module 12 is electrically connected to the first storage module 11, and has a built-in identity verification application 121. The identity verification application 121 is connected to the mobile phone number 111, the mobile phone serial number 112 and the door number during an identity verification stage. The identification code 113 is combined with an encryption key through a hash function to calculate an authentication key hash message authentication Hash-based message authentication code (HMAC), and transmits the mobile phone number 111, the mobile phone serial number 112, the door number identification code 113 and the authentication key hash message authentication code. In practice, the intelligent electronic device 1 is an electronic device with the function of mobile communication and networking, which can be used to transmit and calculate data, and the first storage module 11 is, for example, a memory, which stores the data corresponding to the intelligent electronic device 1 . The mobile phone serial number 112 of the device body and the mobile phone number 111 and the door number identification code 113 provided by the SIM (Subscriber Identity Module) card; the processing module 12 is, for example, a processor.

The real-name authentication server 2 includes an identity verification module 21 and a second storage module 22 . The identity verification module 21 is communicatively connected to the intelligent electronic device 1 and a telecommunication company server 200 , and an optical character recognition program 211 is built in the identity verification module 21 . The second storage module 22 is electrically connected to the identity verification module 21 . The real-name authentication server 2 refers to a server used to provide real-name authentication services. In addition, the identity verification module 21 is actually connected to the smart electronic device 1 through a secure channel, for example, the transmission is performed through the transport layer security protocol TLS1.2 (Transport Layer Security).

As mentioned above, the identity verification module 21 is used to receive the mobile phone number 111 , the mobile phone serial number 112 , the door number identification code 113 and the authentication key hash message authentication code transmitted by the smart electronic device 1 during the identity verification stage. , and use the hash function combined with the encryption key to verify the authentication key hash message authentication code; wherein, the authentication module 21 and the authentication application 121 use the same hash function (MD5 or SHA-512) and encryption key Encryption and decryption are performed, which means that the authentication module 21 and the authentication application 121 are agreed in advance, or each communication It has been negotiated before that the same hash function and encryption key are used to verify whether the mobile phone number 111, the mobile phone serial number 112, and the door number identification code 113 have been tampered with during the transmission process. In practice, a timestamp can be added to the encryption process to prevent retransmission attacks.

In addition, after the identity verification key hash message authentication code is verified by the identity verification module 21, the real-name authentication server 2 further verifies the mobile phone number 111 and the door number identification code 113 through a telecommunication company server 200 to generate an authorization token (token), and transmit the authorization token to the smart electronic device 1 . In practice, the door number identification code 113 is the international mobile subscriber identification code, and when the user applies for the mobile phone number 111, the telecommunications company has linked the unique door number identification code 113 with the mobile phone number 111 and stored it in the telecommunications company The server 200, so the telecommunications company server 200 compares the mobile phone number 111 with the door number identification code 113 to identify whether it corresponds, and can further obtain the identity card number and name left by the user when applying for the mobile phone number 111. personal information. In addition, in order to increase the overall security, when the smart electronic device 1 receives the authorization token sent by the real-name authentication server 2, it can also add a way of entering the user's personal identification number (PIN) to encrypt the authorization order Card.

The third-party device 3 is communicatively connected to the smart electronic device 1, and includes a real-name authentication module 31. The real-name authentication module 31 has a built-in third-party application 311 and an application key corresponding to the identity verification application 121 312 (application programming interface key, API key). Among them, in an authentication stage, the third-party application 311 is based on the mobile phone number 111 and the application key 312 through a software The software development kit (SDK) calls the signal to the smart electronic device 1, and then wakes up the identity verification application 121 to display an authentication confirmation message. After the authentication confirmation information is confirmed, the identity verification application 121 will authorize the token and the application key 312 are sent to the real-name authentication server 2, so that the real-name authentication server 2 authenticates the application key 312 and the authorization token, and sends an authentication success signal to the smart electronic device 1 after the authentication is successful, Then, the identity verification application 121 notifies the third-party application 311 that the authentication is successful. In practice, the third-party device 3 is, for example, an electronic device that can execute an application program, such as a desktop computer, a tablet computer, a smart phone, or a smart cash register.

The bank server 4 is connected to the real-name authentication server 2 for communication. Among them, in the authentication stage, after the smart electronic device 1 receives the authorization token sent by the third-party device 3, the user can further input a bank account information and an identity proof image data, so that the identity verification application 121 will The bank account information and the identity proof image data generate a bank binding key hash message authentication code through the hash function and the encryption key, and send the bank account information, the identity proof image data and the bank binding key hash message authentication code to the Real-name authentication server 2. When the real-name authentication server 2 receives the bank account information, the identification image data and the bank-bound key hash message authentication code, it also firstly uses the hash function and the encryption key to verify the bank-bound key hash message authentication code. , and after passing the verification, an Optical Character Recognition (OCR) program 211 built in the identity verification module 21 is used to extract an identity information from the self-identification image data, and then the identity information and bank account information Verify, and after successful verification add the bank account The data is encrypted and stored in the second storage module 22 of the real-name authentication server 2 with AES256 encryption. In practice, the identity proof image data is, for example, the image file of the identity card or passport and other documents that can prove identity.

Please refer to the first figure and the second figure together. The second figure is a flowchart showing the steps of the real-name authentication service method provided by the second preferred embodiment of the present invention. As shown in the figure, under the framework of the above-mentioned real-name authentication service system 100, a real-name authentication service method includes the following steps: First, step S101 is to use an identity verification application 121 installed in a smart electronic device 1 to convert a mobile phone number 111. A mobile phone serial number 112 and a door number identification code 113 are combined with an encryption key through a hash function to generate an authentication key hash message authentication code.

Step S102 is to transmit the mobile phone number 111 , the mobile phone serial number 112 , the door number identification code 113 and the key hash message authentication code to a real-name authentication server 2 through the identity verification application 121 . In practice, the identity verification application 121 combines the mobile phone number 111, the mobile phone serial number 112 and the door number identification code 113 with the encryption key to generate the identity verification key hash message authentication code through the hash function, and then the mobile phone number 111, the mobile phone number 111, the mobile phone number 111 and the mobile phone number The serial number 112 , the door number identification code 113 and the authentication key hash message authentication code are transmitted to the real-name authentication server 2 through the wireless transmission module; wherein, the intelligent electronic device 1 is a device with the function of connecting to the Internet, and is connected to the real-name authentication server 2 . The way to connect to the Internet may be to connect to the Internet through a mobile communication chip or WIFI wireless communication.

Step S103 is that the real-name authentication server 2 verifies the mobile phone number 111 and the door number identification code 113 through a telecommunication company server 200 . In practice, the telecommunication company server 200 corresponds to the mobile phone number 111 The signal processing center of the telecommunications company with the door number identification code 113, and therefore, the telecommunications company server 200 pre-stores the user personal data corresponding to the mobile phone number 111 and the door number identification code 113.

In step S104 , after the mobile phone number 111 and the door number identification code 113 are verified, the real-name authentication server 2 generates an authorization token, and transmits the authorization token to the smart electronic device 1 .

As mentioned above, because the smart electronic device 1 can encrypt the mobile phone number 111, the mobile phone serial number 112 and the door number identification code 113 through the identity verification application 121 to the real-name authentication server 2, and the real-name authentication server 2 passes the decryption verification Then, the mobile phone number 111 and the door number identification code 113 are sent to the telecommunications company server 200, so that the telecommunications company server 200 can verify the identity of the user according to the personal information left by the user for the mobile phone number 111, and the real name The authentication server 2 will send the authorization token to the smart electronic device 1 after learning that the verification of the telecommunication company server 200 has passed, so that when the user needs to use the service for further identification, he can pass the authorization token The card is sent to the real-name authentication server 2 to prove the identity.

Please refer to the first figure and the third figure together. The third figure is a flowchart showing the steps of the real-name authentication service method provided by the third preferred embodiment of the present invention. As shown in the figure, under the framework of the above-mentioned real-name authentication service system 100, a real-name authentication service method includes the following steps: First, step S201 is to use an identity verification application 121 installed in a smart electronic device 1 to convert a mobile phone number 111. A mobile phone serial number 112 and a door number identification code 113 are combined with an encryption key through a hash function to generate an authentication key hash message authentication code.

Step S202 is to transmit the mobile phone number 111 , the mobile phone serial number 112 , the door number identification code 113 and the key hash message authentication code to a real-name authentication server 2 through the identity verification application 121 . In practice, the identity verification application 121 combines the mobile phone number 111, the mobile phone serial number 112 and the door number identification code 113 with the encryption key to generate the identity verification key hash message authentication code through the hash function, and then the mobile phone number 111, the mobile phone number 111, the mobile phone number 111 and the mobile phone number The serial number 112 , the door number identification code 113 and the authentication key hash message authentication code are transmitted to the real-name authentication server 2 through the wireless transmission module; wherein, the intelligent electronic device 1 is a device with the function of connecting to the Internet, and is connected to the real-name authentication server 2 . The way to connect to the Internet may be to connect to the Internet through a mobile communication chip or WIFI wireless communication.

Step S203 is that the real-name authentication server 2 verifies the mobile phone number 111 and the door number identification code 113 through a telecommunication company server 200 . In practice, the telecommunications company server 200 is the signal processing center of the telecommunications company corresponding to the mobile phone number 111 and the door number identification code 113. Therefore, the telecommunications company server 200 pre-stores the corresponding mobile phone number 111 and the door number identification code 113. user personal data.

In step S204 , after the mobile phone number 111 and the door number identification code 113 are verified, the real-name authentication server 2 generates an authorization token, and transmits the authorization token to the smart electronic device 1 .

Step S205 is that a third-party application 311 calls the signal to the smart electronic device 1 through an application according to the mobile phone number 111 and an application key 312 .

In step S206, the identity verification application 121 is awakened by the application calling signal, and an authentication confirmation message is displayed.

In step S207 , after the authentication confirmation information is confirmed, the identity verification application 121 sends the authorization token and the application key 312 to the real-name authentication server 2 .

Step S208 is that after receiving the authorization token and the application key 312, the real-name authentication server 2 authenticates the application key 312 and the authorization token, and sends an authentication success signal to the smart electronic device after the authentication is successful 1. Make the authentication application 121 notify the third-party application 311 that the authentication is successful.

As mentioned above, this embodiment is mainly applied to the confirmation of user identity in practice. For example, the real-name authentication service method provided by this embodiment is used to prove identity to apply for identity card or to confirm user identity when opening a bank account. Compared with the prior art, it is necessary to prepare various certificates for application, because the real-name authentication service method provided by this embodiment has already used the mobile phone number, mobile phone serial number and door number identification code to verify through the real-name authentication server and the server of the telecommunications company. An authorization token is generated, so the authorization token can be further used to quickly prove the user's identity.

Please refer to Figure 1, Figure 4A and Figure 4B together. Figures 4A and 4B are flowcharts showing the steps of the real-name authentication service method provided by the fourth preferred embodiment of the present invention. As shown in the figure, under the framework of the above-mentioned real-name authentication service system 100 , a real-name authentication service method includes the following steps: First, step S301 is to use an identity verification application 121 installed in a smart electronic device 1 to convert a mobile phone number 111. A mobile phone serial number 112 and a door number identification code 113 are combined with an encryption key through a hash function to generate an authentication key hash message authentication code.

Step S302 is to transmit the mobile phone number 111 , the mobile phone serial number 112 , the door number identification code 113 and the key hash message authentication code to a real-name authentication server 2 through the identity verification application 121 . In practice, the identity verification application 121 combines the mobile phone number 111, the mobile phone serial number 112 and the door number identification code 113 with the encryption key to generate the identity verification key hash message authentication code through the hash function, and then the mobile phone number 111, the mobile phone number 111, the mobile phone number 111 and the mobile phone number The serial number 112 , the door number identification code 113 and the authentication key hash message authentication code are transmitted to the real-name authentication server 2 through the wireless transmission module; wherein, the intelligent electronic device 1 is a device with the function of connecting to the Internet, and is connected to the real-name authentication server 2 . The way to connect to the Internet may be to connect to the Internet through a mobile communication chip or WIFI wireless communication.

Step S303 is that the real-name authentication server 2 verifies the mobile phone number 111 and the door number identification code 113 through a telecommunication company server 200 . In practice, the telecommunications company server 200 is the signal processing center of the telecommunications company corresponding to the mobile phone number 111 and the door number identification code 113. Therefore, the telecommunications company server 200 pre-stores the corresponding mobile phone number 111 and the door number identification code 113. user personal data.

In step S304 , after the mobile phone number 111 and the door number identification code 113 are verified, the real-name authentication server 2 further transmits the authorization token to the smart electronic device 1 .

Step S305 is to use the identity verification application 121 to generate a bank binding key hash message authentication code by applying a hash function and an encryption key to a bank account data and an identity proof image data.

Step S306 is to transmit the bank account information, the identity certificate image data and the bank binding key hash message authentication code to the real-name authentication Server 2.

Step S307 is that when the real-name authentication server 2 receives the bank account information, the identification image data and the bank binding key hash message authentication code, it first uses the hash function and the encryption key to perform the bank binding key hash message authentication code. After the verification, an optical character recognition program 211 is used to extract an identity information from the self-identifying image data, and then the identity information and the bank account information are verified.

Step S308 is to encrypt and store the bank account information in the real-name authentication server 2 after the verification is successful.

Step S309 is that the third-party application 311 calls the signal to the smart electronic device 1 through an application according to the mobile phone number 111 , a payment amount and an application key 312 .

In step S310, the identity verification application 121 asks the real-name authentication server 2 whether the third-party application 311 has passed the audit according to the application calling signal.

In step S311, when the real-name authentication server 2 confirms that the third-party application 311 has passed the review, the real-name authentication server 2 sends an approval signal to the smart electronic device 1, so that the smart electronic device 1 displays a payment permission confirmation message for use the person confirms.

In step S312 , after the payment permission confirmation message is confirmed, the identity verification application 121 sends the authorization token and the application key 312 to the real-name authentication server 2 .

Step S313 is that after the real-name authentication server 2 receives the authorization token and the application key 312, it authenticates the application key 312 and the authorization token, and reports to a bank server 4 after the authentication is successful. Make a trade request.

In step S314, after the real-name authentication server 2 completes the transaction request to the bank server 4, the real-name authentication server 2 transmits a transaction completion information to the intelligent electronic device 1, and the intelligent electronic device 1 further transmits the transaction completion information. to third-party device 3.

In other embodiments, the third-party device 3 is, for example, an e-billing server, and the third-party application 311 can also be an e-bill application, which is installed in the smart electronic device 1 by the user and used in the merchant. When you want to use the e-billing server to serve users, you need to apply for a merchant ID from the service provider first, and after passing the verification, you will get the merchant ID and the certificate used to apply for billing; among them, the user is using the e-bill service. , the e-billing application installed on the smart electronic device 1 will send a software development kit call signal to call up the identity verification application 121 to complete the identity verification. After the verification is successful, the e-billing application will send the mobile phone serial number 112 Send it to the electronic billing server to complete the process of device registration. After that, the user can view the billing information through the electronic billing application, and directly use the identity verification application 121 to connect to the real-name authentication server 2 and pass How can the real-name authentication server 2 and the bank server 4 be used for deduction of electronic bills?

The third-party application 311 calls the smart electronic device 1 through a software development kit (SDK) according to the mobile phone number 111 and the application key 312, and then wakes up the identity verification application 121 to display an authentication confirmation message. The e-bill application will pass

As described above, the real-name authentication service method of this embodiment In the identity verification stage, the authorization token and bank account information obtained from the verification are sent to the real-name authentication server, and after verification, the bank account information is encrypted and stored in the real-name authentication server, so that the smart electronic device does not The bank account information needs to be stored, and when payment is required, the payment amount and the authorization token can be sent to the real-name authentication server, and after the verification is passed, the bank server will be notified directly based on the bank account information stored in the real-name authentication server. device for deduction.

To sum up, since the smart electronic device is in the identity verification stage, the mobile phone number, mobile phone serial number and door number identification code can be encrypted and transmitted to the real-name authentication server through the identity verification application, and the real-name authentication server can pass the decryption verification. After that, the mobile phone number and the door number identification code are sent to the server of the telecommunications company, so that the server of the telecommunications company can verify the identity of the user according to the personal information left by the user for the mobile phone number. After the verification of the telecommunications company's server is passed, an authorization token will be generated based on the user's personal information and sent to the smart electronic device. Sent to the real-name authentication server to prove identity.

The above are only preferred embodiments of the present invention, and do not limit the present invention in any way. Any person skilled in the art, within the scope of not departing from the technical means of the present invention, makes any form of equivalent replacement or modification to the technical means and technical content disclosed in the present invention, all of which do not depart from the technical means of the present invention. content still falls within the protection scope of the present invention.

100‧‧‧Real-name authentication service system

1‧‧‧Smart Electronic Devices

11‧‧‧First storage module

111‧‧‧Mobile number

112‧‧‧Mobile phone number

113‧‧‧Door ID

12‧‧‧Processing module

121‧‧‧Authentication Apps

2‧‧‧Real-name authentication server

21‧‧‧Authentication Module

211‧‧‧Optical Character Recognition Programs

22‧‧‧Second storage module

3‧‧‧Third party device

31‧‧‧Real-name authentication module

311‧‧‧Third-party applications

312‧‧‧Application Key

4‧‧‧Bank Server

200‧‧‧Telecommunications company server

Claims (7)

A real-name authentication service system, comprising: an intelligent electronic device with an identity verification application built in, the identity verification application is a mobile phone number, a mobile phone serial number (International Mobile Equipment Identity, IMEI) and an International Mobile Subscriber Identity (IMSI) through a hash function combined with an encryption key to calculate an identity verification key Hash-based message authentication code (HMAC); a real-name authentication server A device, which is communicatively connected to the smart electronic device, is used to receive the mobile phone number, the mobile phone serial number, the door number identification code and the authentication key hash message authentication code, and combine the encryption key pair with the hash function The authentication key hash message authentication code is verified, and after the authentication key hash message authentication code is verified, the real-name authentication server further verifies the mobile phone number and the door number identification code through a telecommunications company server generating an authorization token, and transmitting the authorization token to the intelligent electronic device; and a third-party device, which is communicatively connected to the intelligent electronic device, and has a built-in third-party application program and a corresponding The application programming interface key (API key) of the authentication application, the third-party application calls the signal to the mobile phone number and the application key through a software development kit (SDK) The smart electronic device then wakes up the identity verification application to display an authentication confirmation message. After the authentication confirmation information is confirmed, the identity verification application The program sends the authorization token and the application key to the real-name authentication server, so that the real-name authentication server authenticates the application key and the authorization token, and sends an authentication success after the authentication is successful The signal is sent to the smart electronic device, so that the authentication application notifies the third-party application that the authentication is successful. The real-name authentication service system described in item 1 of the scope of the application further includes a bank server, which is communicatively connected to the real-name authentication server. After the smart electronic device receives the authorization token, the identity authentication application The program further generates a bank binding key hash message authentication code by using a bank account information and an identity proof image data input by the user through the hash function and the encryption key, and converts the bank account information, the identity proof The image data and the bank-bound key hash message authentication code are sent to the real-name authentication server; the real-name authentication server receives the bank account information, the identity proof image data and the bank-bound key hash message authentication code. When the hash function and the encryption key are used, the bank-bound key hash message authentication code is first verified, and after the verification is passed, an optical character recognition program is used to extract an identity from the identification image data information, and then verify the identity information and the bank account information, and after the verification is successful, the bank account information is encrypted and stored in the real-name authentication server. When the third-party application calls a signal to the smart phone through an application An electronic device, the identity verification application asks the real-name authentication server whether the third-party application has passed the audit according to the call signal of the application, and when the real-name authentication server confirms that the third-party application has passed the audit When the real-name authentication server sends an approval signal to the smart electronic device, so that the smart electronic device displays a payment permission confirmation message for the user to confirm. After the payment permission confirmation message is confirmed, the identity verification application sends the authorization token and the application key to the real-name authentication server, and the real-name authentication server receives the authorization token and the application key and the application key and the authorization token Authenticate, and make a transaction request to the bank server after the authentication is successful. The real-name authentication service system as described in item 1 of the scope of the application, wherein the intelligent electronic device comprises a first storage module, and the first storage module stores the mobile phone number, the mobile phone serial number and the identification of the door number code. A real-name authentication service method, comprising the following steps: (a) using an identity verification application installed on a smart electronic device to combine a mobile phone number, a mobile phone serial number and a door number identification code with an encryption key through a hash function generate an authentication key hash message authentication code; (b) send the mobile phone number, the mobile phone serial number, the door number identification code and the authentication key hash message authentication code to a real-name authentication server through the authentication application program (c) the real-name authentication server verifies the mobile phone number and the door number identification code through a telecommunications company server; and (d) when the mobile phone number and the door number identification code are verified, the real name The authentication server generates an authorization token and transmits the authorization token to the intelligent electronic device. The real-name authentication service method described in Item 4 of the scope of the patent application further includes the following steps: (e) using the identity authentication application to convert a bank account information and an identity authentication image data through the hash function and the encryption key Generate a bank-bound key hash message authentication code; (f) send the bank account information, the identity proof image data and the bank-bound key hash message authentication code to the real-name authentication server; (g) the real-name authentication server When receiving the bank account information, the identity proof image data and the bank binding key hash message authentication code, the authentication server first uses the hash function and the encryption key to hash the bank binding key hash message authentication code Carry out verification, and after the verification, use an optical character recognition program to extract an identity information from the identity certificate image data, and then verify the identity information and the bank account information; and (h) after the verification is successful, send The bank account information is encrypted and stored in the real-name authentication server. The real-name authentication service method as described in item 5 of the scope of application, further comprising the following steps: (i) a third-party application of a third-party device through an application according to the mobile phone number, a payment amount and an application key program call the signal to the smart electronic device; (j) the identity verification application asks the real-name authentication server whether the third-party application has passed the audit according to the application call signal; (k) when the real-name authentication server confirms the When the third-party application passes the review, the real-name authentication server sends an approval signal to the smart electronic device, so that the smart electronic device displays a payment permission confirmation message for the user to confirm; (l) when the payment permission is granted After the confirmation message is confirmed, the authentication application sends the authorization token and the application key to the real-name authentication server; (m) the real-name authentication server receives the authorization token and the application After the key is generated, the application key and the authorization token are authenticated, and after the authentication is successful, a transaction request is made to a bank server; and (n) when the real-name authentication server conducts a transaction to the bank server After the request is completed, the real-name authentication server transmits a transaction completion information to the intelligent electronic device, and the intelligent electronic device further transmits the transaction completion information to the third-party device. The real-name authentication service method described in Item 4 of the scope of the application further includes the following steps: (e) a third-party application of a third-party device calls a signal to a third-party device through an application according to the mobile phone number and an application key. the intelligent electronic device; (f) the identity verification application is awakened by the application call signal and displays an authentication confirmation message; (g) when the authentication confirmation information is confirmed, the identity verification application associates the authorization token with the The application key is sent to the real-name authentication server; and (h) the real-name authentication server authenticates the application key and the authorization token after receiving the authorization token and the application key , and send an authentication success signal to the smart electronic device after the authentication is successful, so that the identity verification application notifies the third-party application that the authentication is successful.

Images