TWI754811B - System for using device identification to identify via telecommunication server and method thereof - Google Patents

Abstract

A system for using a device identification to identify via a telecommunication server and a method thereof are provided. By using mobile communication network to transferring a device identification from a mobile to a telecommunication server, receiving a token from the telecommunication server by the mobile, transferring the token and a user data from the mobile to the telecommunication server through a service server, generating a result based on the token and the user data by the telecommunication server, and transferring the result from the telecommunication server to the service server, the system and the method can achieve the effect of using only mobile to complete identify .

Description

System and method for identifying identity through telecommunication server using device identification data

An identification system and method thereof, particularly a system and method for identifying an identity through a telecommunication server with device identification data.

In recent years, due to the high development of communication and network-related industries, people's demand for various services to be electronic and mobile has been increasing. Such demand is also reflected in the financial industry and the government sector. For example, securities companies, banks , insurance companies, investment consulting companies, and government agencies have begun to provide mobile applications (APPs) in addition to providing network services. Users can use various mobile devices such as mobile phones or tablets to execute mobile applications. After the network is connected to the corresponding service host (or called the application host), the user can operate the mobile device to perform mobile services such as securities trading, transfer, insurance, and application documents. In this way, the user can perform the desired mobile service without leaving the location.

When users use network services or mobile services, they usually need to identify themselves first. At present, most of the methods of identification through the network need to use a hardware carrier to identify the user's identity. When users perform mobile services, they can identify themselves by connecting a USB flash drive or smart card that stores the certificate data.

However, most of the ways to use a hardware carrier to identify a user's identity can only be done on a computer. The main reason is that the hardware carrier needs to be connected to the computer through a connection slot such as a USB, or through an external device such as a card reader. However, most of the current mobile devices do not have a connection slot that can be connected to the hardware carrier, or the user needs to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot be connected to the hardware. The vehicle, in this way, causes the user to be unable to use the mobile device for identification, so that the mobile service cannot be used, causing inconvenience to the user.

To sum up, it can be seen that there has been a long-standing problem in the prior art that the mobile device is not easy to connect to the hardware carrier to identify the user's identity. Therefore, it is necessary to propose an improved technical means to solve this problem.

In view of the problem in the prior art that the mobile device is difficult to connect to the hardware carrier to identify the user's identity, the present invention discloses a system and method for identifying an identity through a telecommunication server using device identification data, wherein:

The system for identifying an identity through a telecommunication server using device identification data disclosed in the present invention at least includes: a service server; a telecommunication server connected to the service server; a mobile device for executing an identification element, the identification element further comprising: : The data acquisition module is used to obtain user data and device identification data; the communication module is used to transmit the device identification data to the telecommunications server through the mobile communication network, and to receive the permission token sent by the telecommunications server, and used to Send the license token and user data to the telecommunications server through the service server through the mobile communication network, so that the telecommunications server generates an identification result according to the license token and the user information, and transmits the identification result to the service server.

The method for identifying an identity through a telecommunication server using device identification data disclosed in the present invention includes at least the steps of: obtaining the device identification data and user data by the mobile device; sending the device identification data to the telecommunication server through the mobile device through the mobile communication network; The server sends the license token to the mobile device; the mobile device transmits the license token and user data to the telecommunications server through the service server through the mobile communication network; the telecommunications server generates the identification result according to the license token and the user information, and transmits the identification results to the service server.

The system and method disclosed in the present invention are as above, and the difference between the present invention and the prior art lies in that the present invention transmits device identification data to the telecommunication server through the mobile device through the mobile communication network and receives the permission token returned by the telecommunication server, and then uses the service The server sends the license token and user data to the telecommunications server, and the telecommunications server generates an identification result based on the license token and user data and sends the identification result to the service server, so as to solve the problems existing in the prior art and achieve The technical effect of using the mobile device alone to complete the identification.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and examples, and the content is sufficient to enable any person skilled in the relevant art to easily and fully understand the technical means applied to solve the technical problems of the present invention and implement them accordingly, thereby achieving The effect that the present invention can achieve.

In the present invention, after the mobile device is connected with the service server, the telecommunication server can carry out the identification, and the telecommunication server transmits the identification result to the service server connected with the mobile device.

Below, the system operation of the present invention is described with reference to "Fig. 1A" and "Fig. 1B" of the present invention, which is a system architecture diagram for identifying an identity through a telecommunication server by means of device identification data. As shown in FIG. 1A , the system of the present invention includes an application host 111 , an identification host 112 , an authentication server 113 , a mobile device 120 , and a telecommunication server 130 . The application host 111 , the identification host 112 , the authentication server 113 , the mobile device 120 , and the telecommunication server 130 are all computing devices.

The computing device mentioned in the present invention includes, but is not limited to, one or more processors, one or more memory modules, and elements such as bus bars connecting different elements (including memory modules and processors). Through the included components, a computing device can load and execute an operating system, causing the operating system to run on the computing device.

The bus of the computing device mentioned in the present invention may include one or more types, such as a data bus, an address bus, a control bus, an extended function bus ( expansion bus), and/or local bus type bus. Buses for computing devices include, but are not limited to, Side-by-Side Industry Standard Architecture (ISA) buses, Peripheral Component Interconnect (PCI) buses, Video Electronics Standards Association (VESA) Local Buses, and Serial Generic Serial Buses (USB), Peripheral Component Interconnect Express (PCI-E) bus, etc.

The processor of the computing device of the present invention is coupled to the bus. The processor contains a register bank or register space, which may be located entirely on the processing die, or wholly or partially located off the processing die and via dedicated electrical connections and/or coupled to the processor via a bus. A processor may be a processing unit, microprocessor or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to cause the computing device to perform specific operations or operations, such as mathematical operations, data comparisons, etc., to run the operating system or execute various programs, modules, and/or components in the operating system.

The processor of the computing device may be coupled to the chip set or electrically connected to the chip set through a bus bar. Chipsets are composed of one or more integrated circuits (ICs), including memory controllers and peripheral I/O controllers, that is, memory controllers and peripheral I/O controllers can be included in Within one integrated circuit, it can also be implemented using two or more integrated circuits. Chip sets usually provide I/O and memory management functions, and provide a plurality of general-purpose and/or special-purpose registers, timers, etc., wherein the above-mentioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access data in the memory modules and mass storage areas installed on the computing device through the memory controller. The above memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM), dynamic random access memory Memory (DRAM), Flash Memory (Flash), Read-Only Memory (ROM), etc. The above-mentioned large-capacity storage area can include any type of storage device or storage medium, such as a hard disk drive, an optical disc, a pen drive (flash memory), a memory card (memory card), a solid state hard disk (Solid State Disk, SSD), or any other storage device, etc. That is, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drive, and solid state hard disk.

The processor of the computing device may also communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral I/O controllers via peripheral I/O buses. The peripheral input device can be any type of input device, such as keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a monitor, printer, etc., the peripheral input device The peripheral output device can also be the same device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface, and the wireless communication interface may include a wireless local area network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The interface of the wireless data transmission protocol or other wireless data transmission protocol, the wired communication interface can be an Ethernet network device, an asynchronous transfer mode (ATM) device, a DSL modem, a cable modem, etc. The processor may periodically poll various peripheral devices and interfaces, enabling the computing device to input and output data and to communicate with another computing device having the elements described above.

The mobile device 120 can be connected to the application host 111 through a wired or wireless network, and can be connected to the telecommunication server 130 through a mobile communication network. The mobile device 120 can receive data or signals transmitted by the application host 111 and/or the telecommunication server 130 , and can transmit the data or signals to the application host 111 and/or the telecommunication server 130 .

The mobile device 120 is responsible for using the application service provided by the application host 111 , and is responsible for completing the identification through the telecommunication server 130 when the application service requires identification. Among them, the application service mentioned in the present invention is usually a service that needs to confirm the user identity of the mobile device 120, such as: online ordering, online banking, online insurance, tax declaration and payment, etc., but the present invention is not limited to this. .

As shown in FIG. 2 , the mobile device 120 may further include a data acquisition module 220 , a communication module 280 , and an additional data input module 240 , a verification module 250 , and a network judgment module 260 . In some embodiments, the mobile device 120 can execute the identification element 200 to generate the modules mentioned in the present invention. Wherein, the identification element 200 may be a single application program, or may be included in the application program and become one of multiple elements composing the application program.

The data obtaining module 220 is responsible for obtaining device identification data. More specifically, the data acquisition module 220 can detect the device identification data of the mobile device 120 . The device identification data detected by the data acquisition module 220 is usually a Subscriber Identity Module (SIM for short, referred to as “SIM card” in the present invention) installed on the mobile device 120 or an embedded subscriber The data recorded in the identity module (Embedded-SIM, referred to as “eSIM card” in the present invention), such as card number or door number, etc., but the present invention is not limited to this, the data acquisition module 220 can also Data such as the serial number of the mobile device 120 or the serial number of a specific hardware such as a processing chip installed in the mobile device 120 are detected as the device identification data.

The data obtaining module 220 is also responsible for obtaining user data. More specifically, the data acquisition module 220 can read out the user data input by the user from the memory unit of the mobile device 120 . The user data obtained by the data obtaining module 220 includes the door number used by the mobile device 120 and the user's identification data. In some embodiments, the user data may also include the user's birthday. The user information mentioned is not limited to the above, for example, the user information may also include gender, address, etc. Wherein, the identification data mentioned in the present invention is usually a unique value, that is, different users have different data, including but not limited to the user's ID number, passport number, and the like.

In some embodiments, if two SIM cards are installed on the mobile device 120, or one SIM card and one eSIM card are installed, the data acquisition module 220 can detect two device identification data. The obtaining module 220 can prompt the user to confirm that the door number in the user information is consistent with the door number corresponding to the SIM card used by the mobile device 120 to connect to the mobile communication network, and obtain the user information after the user confirms, otherwise wait The user modifies the door number in the user profile. For example, when a SIM card and an eSIM card are installed on the mobile device 120, and the mobile device 120 uses the SIM card to connect to the mobile communication network, the data acquisition module 220 can prompt the user to confirm the user through the output unit of the mobile device 120 Check whether the door number in the data is consistent with the door number corresponding to the SIM card.

The data input module 240 can provide the user to input user data through the input unit of the mobile device 120 . More specifically, the data input module 240 can provide a user interface for inputting user data, and can store the user data input by the user in the memory unit of the mobile device 120 .

In some embodiments, if the data acquisition module 220 detects two device identification data, when the data input module 240 provides the user to input the user data, the data input module 240 may prompt the user to input and enter the user data in the user data. The door number corresponding to the SIM card used by the mobile device 120 to connect to the mobile communication network is currently set. For example, when a SIM card and an eSIM card are installed on the mobile device 120, and the mobile device 120 uses the SIM card to connect to the mobile communication network, the data input module 240 can prompt the user through the output unit of the mobile device 120 to Enter the door number corresponding to the SIM card in the data.

The verification module 250 can verify the user's identity through the device unlocking data. The device unlocking data mentioned in the present invention may be biometric data such as fingerprints, voiceprints, and faces, or may be passwords or gestures set by the user, but the present invention is not limited to the above.

More specifically, the verification module 250 can select the method of verifying the user's identity through the device unlocking data according to the type and version of the operating system running on the mobile device 120. For example, the verification module 250 can choose to require the user to use the mobile device to verify the user's identity. The input unit of 120 inputs the device unlocking data, and calls the operating system executed in the mobile device 120 to confirm whether the inputted device unlocking data is correct to verify the user identity; it can also choose to call the operating system executed in the mobile device 120 to provide The screen unlocking application interface provides the user to input the device unlocking information, and through the screen unlocking application interface to determine whether the entered device unlocking information is correct to verify the user's identity; or you can choose to close the screen and wait for the user to turn on the screen and enter the device The unlocking data completes the screen unlocking to confirm the user's identity, etc., but the method selected by the verification module 250 to verify the user's identity is not limited to the above.

The network determination module 260 can determine whether the mobile device 120 currently chooses to use the mobile communication network, and can determine whether the mobile device 120 currently chooses to use the mobile communication network, for example, when using a wireless local area network such as WiFi, through the mobile device. The output unit of 120 prompts the user to change the mobile device 120 to use the mobile communication network.

In some embodiments, the network determination module 260 can also prompt the user that the mobile device 120 will use the mobile communication network through the output unit of the mobile device 120 when it is determined that the mobile device 120 is not currently using the mobile communication network, and Switch the mobile device 120 to use the mobile communication network.

The communication module 280 is responsible for driving the SIM card installed on the mobile device 120 so as to connect with the telecommunication server 130 through the mobile communication network. Generally speaking, after the communication module 280 drives the SIM card, the SIM card can establish a connection with the corresponding telecommunication server 130 through the communication module 280 according to the recorded server identification data, so that the mobile device 120 can be connected to the telecommunications server 130 corresponding to the SIM card.

The communication module 280 is also responsible for transmitting the device identification data obtained by the data obtaining module 220 to the telecommunications server 130 and receiving the permission token sent by the telecommunications server 130 . The license token is the data generated by the telecommunications server 130 , which will be further described when the telecommunications server 130 is described.

The communication module 280 is also responsible for transmitting the license token returned by the telecommunications server 130 and the user data obtained by the data obtaining module 220 to the telecommunications server 130 through the application host 111 , and can also receive the telecommunications server 130 through the application host 111 The transmitted identification result. Generally speaking, the communication module 280 exchanges data with the application host 111 through a mobile communication network, but in some embodiments, the communication module 280 can also exchange data with the application host 111 through a wireless local area network. In this way, the communication module The group 280 can transmit the license token and user data to the telecommunication server 130 through the application host 111 and receive the identification result transmitted by the telecommunication server 130 .

The application host 111 can be connected to the identification host 112 through a wired or wireless network, and can also provide the mobile device 120 with a wired or wireless network connection. The application host 111 can receive data or signals sent by the connected mobile device 120 and/or the identification host 112 , and can transmit the data or signals to the connected mobile device 120 and/or the identification host 112 .

The application host 111 is responsible for providing application services to the mobile device 120, and may request the mobile device 120 to perform identification when the mobile device 120 requests a specific operation, for example, when the mobile device 120 requests registration.

The application host 111 is also responsible for receiving the license token and user data sent by the mobile device 120 , and transmitting the received license token and user data to the identification host 112 .

The application host 111 is also responsible for receiving the identification result sent by the identification host 112, and selects whether to execute the operation requested by the mobile device 120 according to the received identification result. That is, the application host 111 can indicate in the identification result. When the identification is successful, the operation requested by the mobile device 120 is executed, and when the identification result indicates that the identification fails, the operation requested by the mobile device 120 can be refused to be executed.

The identification host 112 can be connected to the application host 111 and the authentication server 113 respectively through wired or wireless networks, and can also receive data or signals sent by the application host 111 and/or the authentication server 113, and can transmit data or The signal is sent to the application host 111 and/or the authentication server 113 .

The identity recognition host 112 is responsible for receiving the license token and user data sent by the application host 111 , and sending the received license token and user data to the identity verification server 113 . The identity recognition host 112 is also responsible for receiving the identity recognition result sent by the identity verification server 113 , and transmitting the received identity recognition result to the application host 111 .

The identity verification server 113 can be connected to the identity identification host 112 and the telecommunication server 130 respectively through a wired or wireless network, and can also receive data or signals transmitted by the identity identification host 112 and/or the telecommunication server 130, and can transmit data or signal to the identification host 112 and/or the telecommunication server 130 .

The identity verification server 113 is responsible for receiving the license token and user data sent by the identity identification host 112 , and transmitting the received license token and user data to the telecommunications server 130 . The identity verification server 113 is also responsible for receiving the identity recognition result sent by the telecommunication server 130 , and transmitting the received identity recognition result to the identity recognition host 112 .

In some embodiments, the application host 111 , the identification host 112 , and the authentication server 113 may be included in the service server 110 , as shown in FIG. 1B . The service server 110 may include a computing device such as an application host 111 , an identification host 112 , an authentication server 113 and other entities, such as a blade server; the service server 110 may also be an integrated application host 111 to the mobile device 120 All functions of the authentication server 113 to all functions of the telecommunications server 130. That is, the service server 110 can be connected to the telecommunication server 130 through a wired or wireless network, and can also provide the mobile device 120 with a wired or wireless network connection. The service server 110 can receive data or signals transmitted by the connected mobile device 120 and/or the telecommunications server 130 , and can transmit the data or signals to the connected mobile device 120 and/or the telecommunications server 130 . In this way, the service server 110 can provide the mobile device 120 application service, and can transmit the license token and user data transmitted by the mobile device 120 to the telecommunications server 130 .

In addition, in some embodiments, the application host 111 and the identity identification host 112 can also be selected to be integrated, so that the mobile device 120 transmits the license token and user data to the telecommunications server 130 through the integrated computing device and the identity verification server. , or can choose to integrate the identity recognition host 112 and the identity verification server 113, so that the mobile device 120 transmits the credentials and user data to the telecommunications server 130 through the application host 111 and the integrated computing device, which is not repeated in the present invention.

The telecommunication server 130 can provide the connection of the mobile device 120 through a mobile communication network, and can also be connected to the authentication server 113 through a wired or wireless network. The telecommunication server 130 can receive data or signals transmitted by the mobile device 120 and/or the authentication server 113 , and can transmit the data or signals to the mobile device 120 and/or the authentication server 113 .

The telecommunication server 130 is responsible for receiving the device identification data transmitted by the mobile device 120 . In some embodiments, the telecommunication server 130 can determine whether the device identification data is issued by a telecommunication unit or a telecommunication institution to which the telecommunication server 130 belongs. For example, when the telecommunication unit or telecommunication institution is a telecommunication company, the telecommunication server 130 can determine whether Whether the received device identification data is covered by the data record pre-established by the telecommunications company (for example, the device identification data is recorded in the data record or a range recorded in the data record includes the device identification data, etc.), but the present invention does not use this limited. The telecommunication server 130 may also refuse to provide the mobile communication service to the mobile device 120 when it is determined that the device identification data is not issued by the telecommunication unit or telecommunication agency to which it belongs.

The telecommunications server 130 is also responsible for generating a license token corresponding to the received device identification data. Generally speaking, the license token generated by the telecommunication server 130 is data generated by performing a specific encoding method on specific data, and is usually formed by a certain number of letters, numbers, and symbols arranged arbitrarily, and is temporal. For example, the license token may be the data generated by the telecommunications server 130 performing hash operation on specific data, wherein the above-mentioned specific data includes but not limited to the device identification data, the gate number corresponding to the device identification data, and the device identification data corresponding to the data. Items such as the user's birthday, the server identification data of the telecommunication server 130 and/or the time stamp are not particularly limited in the present invention. When a specific material contains two or more kinds of items, the various items may be arranged in a predetermined order or position.

The telecommunications server 130 is also responsible for receiving the license token and user data sent by the identity verification server 113 , and is responsible for generating an identity recognition result based on the received license token and user data, and sending the identity recognition result to the service server 110 or authentication server 113.

The telecommunications server 130 can determine whether the received license token is generated by the telecommunications server 130, and whether the door number in the received user data is included in the data record pre-established by the telecommunications server 130, or in the user data. Whether the door number corresponding to the license token and whether the door number in the user data corresponds to the identification data in the user data is judged, and a corresponding identification result can be generated after the judgment. For example, the telecommunication server 130 can use the same items, arrangement order/position and coding method as that used to generate the license token, and the telecommunication server 130 can use the same items, arrangement order/position and coding method to process the gate number (and the user's birthday) in the received user data and the telecommunication server 130 The device identification data and other data are encoded, and the encoded data and the license token are compared. When the two are the same, it means that the license token is generated by the telecommunications server 130 and the door number in the user data corresponds to the license token. Otherwise, It means that the license token is not generated by the telecom server 130 and/or the door number in the user data does not correspond to the license token, but the telecom server 130 determines whether the license token is generated by the telecom server 130 and the door number in the user data Whether it corresponds to the license token is not limited to the above. Wherein, when the telecommunication server 130 determines that any of the above items is negative, it can generate an identification result indicating that the identification fails; and when the telecommunication server 130 determines that all the above items are yes, it can generate an identification result indicating that the identification is successful. result. That is to say, when the identification result indicates that the identification is successful, it also means that the telecommunication server 130 determines that the user of the mobile device 120 is consistent with the data recorded by the telecommunication server 130, and the identity of the user of the mobile device 120 can be confirmed; When the identification result indicates that the identification fails, it indicates that the telecommunications server 130 cannot confirm the identity of the user of the mobile device.

Next, an embodiment is used to explain the operation system and method of the present invention, and please refer to "FIG. 3A" for the flow chart of the method of identifying the identity through the telecommunication server with the device identification data mentioned in the present invention. In this embodiment, it is assumed that the mobile device 120 is a mobile phone, and the service server 110 is composed of computing devices such as an application host 111 , an identification host 112 , and an authentication server 113 , but the invention is not limited to this.

After the user operates the mobile device 120 to open the application program including the identification element 200 , the user can operate the mobile device 120 to execute various functions in the application program. In the present embodiment, it is assumed that the application program is a service program provided by a government agency, and a user needs to perform a user registration operation before using a specific function in the application program.

After the user chooses to perform the registration function in the application, the application can display the authorization terms of personal data and ask the user whether to agree. After the user agrees to the authorization terms, the application can display the user interface for inputting user information. In this embodiment, it is assumed that the user information includes the user's door number, ID number, birthday, and other personal information required for registration, such as gender, email address, and household registration address, which is used by the user on the mobile device 120 . , mailing address, etc.

After the user completes the input of the user data, the application program can call the identification element 200 to start the identification element 200 to execute. In this way, the data acquisition module 220 of the identification element 200 can obtain the device identification data and the user data ( step 330). In this embodiment, assuming that the device identification data is the card number of the SIM card installed in the mobile device 120, the data obtaining module 220 can read the card number of the SIM card, and can obtain the user input by the user on the user interface. material.

After the data obtaining module 220 of the identification element 200 obtains the device identification data and user data (step 330 ), the communication module 280 of the identification element 200 can transmit the device identification obtained by the data obtaining module 220 through the mobile communication network data to the telecommunications server 130 (step 360).

In this embodiment, assuming that the identification element 200 includes the verification module 250 , before the communication module 280 of the identification element 200 transmits the device identification data to the telecommunication server 130 through the mobile communication network (step 360 ), the verification module 250 may first call an application programming interface (API) provided by the operating system of the mobile device 120, so that the operating system of the mobile device 120 requires the user of the mobile device 120 to input the device unlocking data and verify the device unlocking data input by the user (step 340 ). ) to authenticate the user. The communication module 280 may transmit the device identification data to the telecommunications server 130 after the verification module 250 determines that the device unlocking data is verified by the operating system of the mobile device 120 (step 360 ). It should be noted that the data acquisition module 220 of the identification element 200 and the verification module 250 are not in the order of execution, but generally speaking, the verification module 250 can usually be used in the data acquisition module 220 of the identification element 200 After obtaining the device identification data and user data (step 330 ), the operating system of the mobile device 120 is called, so that the operating system of the mobile device 120 determines whether the device unlocking data input by the user is verified (step 340 ).

After the communication module 280 of the identification element 200 transmits the device identification data to the telecommunication server 130 through the mobile communication network (step 360 ), the telecommunication server 130 may transmit the permission token to the mobile device 120 (step 370 ). In this embodiment, it is assumed that after receiving the device identification data transmitted by the mobile device 120, the telecommunication server 130 can determine whether the received device identification data is issued by the telecommunication company to which the telecommunication server 130 belongs, that is Whether the received device identification data is included in the data record pre-established by the telecommunications company to which the telecommunications server 130 belongs, and if so, a license token can be generated and the generated license token can be sent back to the mobile device 120; 130 judging that the received device identification data is not included in the pre-established data record, the permission token may not be generated or the permission token may be refused to be returned.

After the communication module 280 of the identification element 200 receives the license token sent by the telecommunications server 130 through the mobile communication network, the communication module 280 can obtain the license token and data received from the telecommunications server 130 through the service server 110 The user data obtained by the module 220 is sent to the telecommunications server 130 (step 380). In this embodiment, that is, the communication module 280 transmits the license token and user data to the application host 111 , and the identity recognition host 112 transmits the license token and user data received by the application host 111 through the authentication server 113 . The data is forwarded to the telecommunications server 130 .

After the telecommunication server 130 receives the permission token and the user data sent by the mobile device 120 , the telecommunication server 130 can generate an identification result according to the received permission token and the user data. In this embodiment, it is assumed that the telecommunications server 130 can first determine whether the received license token is generated by the telecommunications server 130. If not, the telecommunications server 130 can generate an identification result indicating that the identification fails; The server 130 can then determine whether the door number in the received user data is included in the pre-established data record; if not, the telecommunications server 130 can generate an identification result indicating that the identification fails; if so, the telecommunications server 130 can continue to determine whether the door number in the user data corresponds to the license token, if not, the telecommunication server 130 can generate an identification result indicating that the identification fails; Whether the identification information corresponding to the telecommunication server 130 can generate an identification result indicating that the identification fails; if so, the telecommunication server 130 can generate an identification result indicating that the identification is successful.

After the telecommunications server 130 generates an identification result according to the received license token and user data, the generated identification result may be transmitted to the service server 110 (step 390 ). In this embodiment, the telecommunication server 130 may transmit the identification result to the authentication server 113, and the identification host 112 will forward the identification result received by the authentication server 113 to the application host 111, so that the application The host 111 can select whether to complete the registration operation requested by the mobile device 120 according to the identification result. When the identification result indicates that the identification fails, the application host 111 can determine that the door number in the user data is not used by the user corresponding to the ID number in the user data, so it can determine that the user's data is incorrect and reject The registration operation of the mobile device 120; and when the identification result indicates that the identification is successful, the application host 111 can determine that the door number in the user information is indeed used by the user corresponding to the ID number in the user information. It is determined that the user identity is true. In this way, the application host 111 can complete the registration operation of the mobile device 120, that is, write the user information into the member database. Thus, through the present invention, the service server 110 can obtain the identification result of the mobile device 120 through the telecommunication server 130, so as to confirm the user's identity through the correctness of the user data.

In the above-mentioned embodiment, if the identification element 200 further includes the network determination module 260, as shown in the flow of "FIG. 3B", the data acquisition module 220 of the identification element 200 can obtain the device identification data and the user. Before the data (step 330 ), the network determination module 260 can first determine whether the mobile device 120 uses the mobile communication network (step 321 ). If the network determination module 260 determines that the mobile device 120 is currently using the mobile communication network, the data acquisition module The group 220 can obtain the device identification data and user data (step 330 ); and if the network determination module 260 determines that the mobile device 120 is not currently using a mobile communication network, for example, determines that a wireless local area network such as WiFi is currently used, the network determines The module 260 may prompt the user to configure the mobile device 120 to use the mobile communication network (step 325 ), or may directly disable the wireless LAN function of the mobile device 120 to configure the mobile device 120 to use the mobile communication network.

In addition, in the above-mentioned embodiment, if the identification element 200 further includes the data input module 240, the application program including the identification element 200 can be provided by the data input module 240 after the user chooses to perform the registration function to provide user input for use. user data, so that the data obtaining module 220 of the identification element 200 can obtain the device identification data and user data (step 330). Wherein, when the data obtaining module 220 can obtain the device identification data and the user data (step 330 ), the data obtaining module 220 can first determine whether two or two or two are detected as shown in the flow of “Figure 3C”. more than one device identification data (step 311), if not, the data obtaining module 220 can directly obtain the device identification data and user data (step 330); and if the data obtaining module 220 detects multiple device identification data , the data obtaining module 220 can prompt the user to input the door number corresponding to the SIM card of the mobile communication network used by the mobile device 120 in the user data (step 315 ), and obtain the device identification data after the user confirms and user data (step 330).

From the above, it can be seen that the difference between the present invention and the prior art is that the mobile device transmits the device identification data to the telecommunication server through the mobile communication network and receives the license token returned by the telecommunication server, and then transmits the license through the service server. The token and user data are sent to the telecommunications server, and the telecommunications server generates an identification result according to the license token and user data and transmits the identification result to the service server. The technical means can solve the existing actions of the prior art by this technical means The problem is that the device is not easy to connect to the hardware carrier to identify the user's identity, so as to achieve the technical effect of using the mobile device alone to complete the identity identification.

Furthermore, the method for identifying an identity through a telecommunication server using device identification data of the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner in a computer system or distributed with different components. Implemented in a decentralized manner across several interconnected computer systems.

Although the embodiments disclosed in the present invention are as above, the above-mentioned contents are not intended to directly limit the scope of the patent protection of the present invention. Any person with ordinary knowledge in the technical field to which the present invention pertains, without departing from the spirit and scope disclosed by the present invention, makes slight modifications to the form and details of the implementation of the present invention, all belong to the patent protection of the present invention Scope. The scope of patent protection of the present invention shall still be defined by the appended patent application scope.

110: Service server 111: Application host 112: Identification host 113: Authentication server 120: Mobile device 130: Telecom server 200: Identification element 220: Data acquisition module 240: Data input module 250: Verification module Group 260: Network Judgment Module 280: Communication Module Step 311: The mobile device judges whether to obtain multiple device identification data Step 315: The mobile device prompts to input the door number corresponding to the device identification data corresponding to the mobile communication network Step 321: Action The device determines whether to use the mobile communication network. Step 325: The mobile device prompts to switch to the mobile communication network. Step 330: The mobile device obtains the device identification data and user data. Step 340: The mobile device determines whether the device unlocking data has passed the verification. The communication network sends the device identification data to the telecommunications server. Step 370: The telecommunications server sends the permission token to the mobile device. Step 380: The mobile device sends the permission token and user data to the telecommunications server through the service server. Step 390: The telecommunications server complies with the permission. The token and user data generate the identification result, and send the identification result to the service server

FIG. 1A is a schematic diagram of a system for identifying an identity through a telecommunication server with device identification data according to the present invention. FIG. 1B is another system architecture diagram of identifying an identity through a telecommunication server using device identification data according to the present invention. FIG. 2 is a schematic diagram of the components of the mobile device according to the present invention. FIG. 3A is a flow chart of a method for identifying an identity through a telecommunication server using device identification data according to the present invention. FIG. 3B is a flow chart of the method for prompting network switching proposed by the present invention. FIG. 3C is a flow chart of the method for prompting input of a door number for using a mobile communication network according to the present invention.

Step 330: The mobile device obtains device identification data and user data

Step 340: The mobile device determines whether the device unlocking data has passed the verification

Step 360: The mobile device transmits the device identification data to the telecommunication server through the mobile communication network

Step 370: The telecommunications server sends the license token to the mobile device

Step 380: The mobile device sends the license token and user data to the telecommunications server via the service server

Step 390: The telecommunication server generates an identification result according to the license token and user data, and transmits the identification result to the service server

Claims (10)

A method for identifying an identity through a telecommunication server with device identification data, the method at least comprises the following steps: a mobile device obtains a user data, and obtains a device identification data from the mobile device, the user data includes a door number and Identity data; the mobile device transmits the device identification data to a telecommunication server through the mobile communication network; when the telecommunication server determines that the device identification data is issued by the telecommunication unit or telecommunication agency to which the telecommunication server belongs, the mobile device transmits and transmits the device identification data to a telecommunication server. The device identification data corresponds to a license token to the mobile device; the mobile device transmits the license token and the user data to the telecommunications server through a service server through a mobile communication network; and the telecommunications server sends the license token and the user data to make a judgment to generate an identification result, and send the identification result to the service server, wherein the above judgment includes judging whether the license token is generated by the telecommunications server, the door number and the license token Whether it corresponds, whether the door number corresponds to the identity information. The method for identifying an identity through a telecommunication server using device identification data as described in item 1 of the scope of the patent application, wherein before the step of the mobile device transmitting the device identification data to the telecommunication server through a mobile communication network, the method further comprises: When the mobile device determines that the mobile device is not currently using the mobile communication network, it prompts the step of using the mobile communication network instead. The method for identifying an identity through a telecommunication server using device identification information as described in item 1 of the scope of the patent application, wherein the method transmits the device identification information through the mobile communication network in the mobile device Before the step of predicting the telecommunication server, the mobile device further includes a step of inputting a device unlocking data provided by the mobile device and verifying the device unlocking data. As described in item 1 of the scope of the patent application, the method for identifying an identity through a telecommunication server using device identification data, wherein the method obtains the device identification data and the user data from the mobile device, and further includes the mobile device determining the When the mobile device obtains other device identification data other than the device identification data, it prompts the user to enter the door number corresponding to the device identification data in the user data. The method for identifying an identity through a telecommunication server using device identification data as described in item 1 of the scope of the patent application, wherein the step of obtaining the user data by the mobile device is that the mobile device reads the user data input by the user. A system for identifying an identity through a telecommunication server with device identification data, the system at least comprises: a service server; a telecommunication server connected to the service server; and a mobile device for executing an identity identification element, the The identification element includes: a data acquisition module for acquiring a user data and obtaining a device identification data from the mobile device, wherein the user data includes a door number and an identification data; and a communication module , used to transmit the device identification data to the telecommunications server through the mobile communication network, and receive the information sent by the telecommunications server when it determines that the device identification data is issued by the telecommunications unit or telecommunications agency to which the telecommunications server belongs. A license token corresponding to the device identification data, and used to transmit the license token and the user data to the telecommunications server through the service server through the mobile communication network, so that the telecommunications server can obtain the license The token and the user data are judged to generate an identity recognition result, and the identity recognition result is sent to the service server, wherein the above judgment includes judging whether the license token is generated by the telecommunications server, the door number and the license Whether the token corresponds, and whether the door number corresponds to the identity information. As described in item 6 of the scope of the patent application, the system for identifying an identity through a telecommunication server using device identification data, wherein the identification element further includes a network judging module for judging whether the mobile device currently uses a mobile communication network. The system for identifying an identity through a telecommunication server using device identification data as described in item 6 of the scope of the patent application, wherein the identification element further comprises a verification module for inputting a device unlocking data and verifying the device unlocking data. According to the system for identifying identity through a telecommunication server using device identification data as described in item 6 of the scope of the patent application, the data acquisition module is further used to prompt the user when obtaining other device identification data other than the device identification data. Enter the door number corresponding to the device identification data in the user data. As described in item 6 of the scope of the patent application, the system for identifying identity through a telecommunication server using device identification data, wherein the data obtaining module reads the user data input by the user to obtain the user data.

Images