TWI754812B - System for using a device identification to log in via telecommunication server and method thereof - Google Patents

Abstract

A system for using a device identification to log in via a telecommunication server and a method thereof are provided. By using mobile communication network to transferring a device identification from a mobile to a telecommunication server, receiving a token from the telecommunication server by the mobile, transferring the token and a phone number from the mobile to the telecommunication server through a service server, generating a result based on the token and the phone number by the telecommunication server, and transferring the result from the telecommunication server to the service server, the system and the method can achieve the effect of using only mobile to log in service server.

Description

System and method for logging in through a telecommunication server with device identification data

An identification system and method thereof, particularly a system and method for logging in through a telecommunication server with device identification data.

In recent years, due to the high development of communication and network-related industries, people's demand for various services to be electronic and mobile has been increasing. Such demand is also reflected in the financial industry and the government sector. For example, securities companies, banks , insurance companies, investment consulting companies, and government agencies have begun to provide mobile applications (APPs) in addition to providing network services. Users can use various mobile devices such as mobile phones or tablets to execute mobile applications. After the network is connected to the corresponding service host (or called the application host), the user can operate the mobile device to perform mobile services such as securities trading, transfer, insurance, and application documents. In this way, the user can perform the desired mobile service without leaving the location.

When users use network services or mobile services, they usually need to log in to a service host that provides network services or mobile services. At present, in addition to simply using the account and password, some service hosts may require users to log in using the credentials stored in the hardware carrier in order to avoid account and password theft. , the user needs to store the user's certificate data in a USB flash drive or a smart card (chip card), and perform identification by connecting the USB flash drive or smart card storing the certificate data when performing mobile services.

However, most of the ways to log in using the credentials stored in the hardware carrier can only be done on the computer, mainly because the hardware carrier needs to be connected to the computer through a connection slot such as a USB, or through an external connection such as a card reader. However, most of the current mobile devices do not have a connection slot that can be connected to the hardware carrier. Therefore, most mobile devices cannot be connected to the hardware carrier. As a result, users cannot use the mobile device to log in to the service. host, so that the mobile service cannot be used, causing inconvenience to the user.

To sum up, it can be seen that in the prior art, the mobile device is not easy to connect to the hardware carrier for a long time, resulting in the inability to use the credentials stored in the hardware carrier to complete the login operation. Therefore, it is necessary to propose improved technical means to solve the problem. this question.

In view of the problem in the prior art that the mobile device is not easy to use the certificate stored in the hardware carrier to perform the login operation, the present invention discloses a system and method for logging in through a telecommunication server using device identification data, wherein:

The system for logging in through a telecommunication server using device identification data disclosed in the present invention at least includes: a service server; a telecommunication server connected to the service server; a mobile device for executing an identification element, the identification element further comprising: : The data acquisition module is used to obtain the door number data and device identification data; the communication module is used to transmit the device identification data to the telecommunications server through the mobile communication network, and to receive the permission token sent by the telecommunications server, and to The license token and door number data are sent to the telecommunications server through the service server through the mobile communication network, so that the telecommunications server generates a login result according to the license token and the door number data, and sends the login result to the service server.

The method for logging in through a telecommunication server with device identification data disclosed in the present invention at least includes the steps of: obtaining the device identification data and the door number data by the mobile device; transmitting the device identification data to the telecommunication server through the mobile device through the mobile communication network; The server sends the license token to the mobile device; the mobile device transmits the license token and door number data to the telecom server through the mobile communication network through the service server; the telecom server generates the login result according to the license token and the door number data, and sends the login result to service server.

The system and method disclosed in the present invention are as above, and the difference between the present invention and the prior art lies in that the present invention transmits device identification data to the telecommunication server through the mobile device through the mobile communication network and receives the permission token returned by the telecommunication server, and then uses the service The server sends the license token and door number data to the telecom server, and the telecom server generates the login result according to the license token and the door number data and transmits the login result to the service server, so as to solve the problems existing in the prior art and achieve independent use The technical effect of the mobile device completing the login operation.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and examples, and the content is sufficient to enable any person skilled in the relevant art to easily and fully understand the technical means applied to solve the technical problems of the present invention and implement them accordingly, thereby achieving The effect that the present invention can achieve.

In the present invention, after the mobile device is connected with the service server, the user login operation is performed through the telecommunication server, and the telecommunication server transmits the login result to the service server connected with the mobile device.

The system operation of the present invention will be described below with reference to "Fig. 1A" and "Fig. 1B". As shown in FIG. 1A , the system of the present invention includes an application host 111 , an identification host 112 , an authentication server 113 , a mobile device 120 , and a telecommunication server 130 . The application host 111 , the identification host 112 , the authentication server 113 , the mobile device 120 , and the telecommunication server 130 are all computing devices.

The computing device mentioned in the present invention includes, but is not limited to, one or more processors, one or more memory modules, and elements such as bus bars connecting different elements (including memory modules and processors). Through the included components, a computing device can load and execute an operating system, causing the operating system to run on the computing device.

The bus of the computing device mentioned in the present invention may include one or more types, such as a data bus, an address bus, a control bus, an extended function bus ( expansion bus), and/or local bus type bus. Buses for computing devices include, but are not limited to, Side-by-Side Industry Standard Architecture (ISA) buses, Peripheral Component Interconnect (PCI) buses, Video Electronics Standards Association (VESA) Local Buses, and Serial Generic Serial Buses (USB), Peripheral Component Interconnect Express (PCI-E) bus, etc.

The processor of the computing device of the present invention is coupled to the bus. The processor contains a register bank or register space, which may be located entirely on the processing die, or wholly or partially located off the processing die and via dedicated electrical connections and/or coupled to the processor via a bus. A processor may be a processing unit, microprocessor or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to cause the computing device to perform specific operations or operations, such as mathematical operations, data comparisons, etc., to run the operating system or execute various programs, modules, and/or components in the operating system.

The processor of the computing device may be coupled to the chip set or electrically connected to the chip set through a bus bar. Chipsets are composed of one or more integrated circuits (ICs), including memory controllers and peripheral I/O controllers, that is, memory controllers and peripheral I/O controllers can be included in Within one integrated circuit, it can also be implemented using two or more integrated circuits. Chip sets usually provide I/O and memory management functions, and provide a plurality of general-purpose and/or special-purpose registers, timers, etc., wherein the above-mentioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access data in the memory modules and mass storage areas installed on the computing device through the memory controller. The above memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM), dynamic random access memory Memory (DRAM), Flash Memory (Flash), Read-Only Memory (ROM), etc. The above-mentioned large-capacity storage area can include any type of storage device or storage medium, such as a hard disk drive, an optical disc, a pen drive (flash memory), a memory card (memory card), a solid state hard disk (Solid State Disk, SSD), or any other storage device, etc. That is, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drive, and solid state hard disk.

The processor of the computing device may also communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral I/O controllers via peripheral I/O buses. The peripheral input device can be any type of input device, such as keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a monitor, printer, etc., the peripheral input device The peripheral output device can also be the same device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface, and the wireless communication interface may include a wireless local area network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The interface of the wireless data transmission protocol or other wireless data transmission protocol, the wired communication interface can be an Ethernet network device, an asynchronous transfer mode (ATM) device, a DSL modem, a cable modem, etc. The processor may periodically poll various peripheral devices and interfaces, enabling the computing device to input and output data and to communicate with another computing device having the elements described above.

The mobile device 120 can be connected to the application host 111 through a wired or wireless network, and can be connected to the telecommunication server 130 through a mobile communication network. The mobile device 120 can receive data or signals transmitted by the application host 111 and/or the telecommunication server 130 , and can transmit the data or signals to the application host 111 and/or the telecommunication server 130 .

The mobile device 120 is responsible for using the application service provided by the application host 111 , and is responsible for confirming that the mobile device 120 has completed the registration in advance through the telecommunication server 130 when the application service requires the user to log in, and completes the login operation. Among them, the application service mentioned in the present invention is usually a service that requires the user of the mobile device 120 to register and log in first, such as: online ordering, online banking, online insurance, tax declaration and payment, etc., but the present invention does not use this limited.

As shown in FIG. 2 , the mobile device 120 may further include a data acquisition module 220 , a communication module 280 , and an additional data input module 240 , a verification module 250 , and a network judgment module 260 . In some embodiments, the mobile device 120 can execute the identification element 200 to generate the modules mentioned in the present invention. Wherein, the identification element 200 may be a single application program, or may be included in the application program and become one of multiple elements composing the application program.

The data obtaining module 220 is responsible for obtaining device identification data. More specifically, the data acquisition module 220 can detect the device identification data of the mobile device 120 . The device identification data detected by the data acquisition module 220 is usually a Subscriber Identity Module (SIM for short, referred to as “SIM card” in the present invention) installed on the mobile device 120 or an embedded subscriber The data recorded in the identity module (Embedded-SIM, referred to as "eSIM card" in the present invention), such as the card number, etc., but the present invention is not limited to this, the data acquisition module 220 can also detect actions The serial number of the device 120 or the serial number of a specific hardware such as a processing chip installed in the mobile device 120 is used as the device identification data.

The data obtaining module 220 is also responsible for obtaining the door number data. For example, the data acquisition module 220 can read the door number data from the memory unit of the mobile device 120 , and can also receive the door number data sent by the service host 111 or the service server 110 through the communication module 280 .

In some embodiments, if two SIM cards are installed on the mobile device 120, or one SIM card and one eSIM card are installed, the data acquisition module 220 can detect two device identification data. The module 220 can prompt the user to confirm that the door number information is consistent with the door number corresponding to the SIM card used by the mobile device 120 to connect to the mobile communication network, and obtain the door number information after the user confirms, otherwise wait for the user to modify the door number material. For example, when a SIM card and an eSIM card are installed on the mobile device 120, and the mobile device 120 uses the SIM card to connect to the mobile communication network, the data acquisition module 220 can prompt the user to confirm the door number through the output unit of the mobile device 120 Whether the data is consistent with the door number corresponding to the SIM card.

The data input module 240 can provide the user with inputting door number data through the input unit of the mobile device 120 . More specifically, the data input module 240 can provide a user interface for inputting the door number data, and can store the door number data input by the user in the memory unit of the mobile device 120 .

In some embodiments, if the data acquisition module 220 detects two device identification data, the data input module 240 can prompt the user to input and currently set the mobile device 120 when the data input module 240 provides the user to input the door number data. The door number corresponding to the SIM card used to connect to the mobile communication network. For example, when a SIM card and an eSIM card are installed on the mobile device 120, and the mobile device 120 uses the SIM card to connect to the mobile communication network, the data input module 240 can prompt the user to input and SIM card through the output unit of the mobile device 120. The door number corresponding to the card.

The verification module 250 can verify the user's identity through the device unlocking data. The device unlocking data mentioned in the present invention may be biometric data such as fingerprints, voiceprints, and faces, or may be passwords or gestures set by the user, but the present invention is not limited to the above.

More specifically, the verification module 250 can select the method of verifying the user's identity through the device unlocking data according to the type and version of the operating system running on the mobile device 120. For example, the verification module 250 can choose to require the user to use the mobile device to verify the user's identity. The input unit of 120 inputs the device unlocking data, and calls the operating system executed in the mobile device 120 to confirm whether the inputted device unlocking data is correct to verify the user identity; it can also choose to call the operating system executed in the mobile device 120 to provide The screen unlocking application interface provides the user to input the device unlocking data, and through the screen unlocking application interface to determine whether the entered device unlocking data is correct to verify the user's identity; or you can choose to close the screen and wait for the user to turn on the screen and enter the device The unlocking data completes the screen unlocking to confirm the user's identity, etc., but the method selected by the verification module 250 to verify the user's identity is not limited to the above.

The network determination module 260 can determine whether the mobile device 120 currently chooses to use the mobile communication network, and can determine whether the mobile device 120 currently chooses to use the mobile communication network, such as when the mobile device 120 is currently using a wireless local area network such as WiFi, through the mobile device 120 The output unit of the prompts the user to change the mobile device 120 to use the mobile communication network.

In some embodiments, the network determination module 260 may also prompt the user that the mobile device 120 will use the mobile communication network through the output unit of the mobile device 120 when it is determined that the mobile device 120 is not currently using the mobile communication network, and /or switch the mobile device 120 to use the mobile communication network.

The communication module 280 is responsible for driving the SIM card installed on the mobile device 120 so as to connect with the telecommunication server 130 through the mobile communication network. Generally speaking, after the communication module 280 drives the SIM card, the SIM card can establish a connection with the corresponding telecommunication server 130 through the communication module 280 according to the recorded server identification data, so that the mobile device 120 can be connected to the telecommunications server 130 corresponding to the SIM card.

The communication module 280 is also responsible for transmitting the device identification data obtained by the data obtaining module 220 to the telecommunications server 130 and receiving the permission token sent by the telecommunications server 130 . The license token is the data generated by the telecommunications server 130 , which will be further described when the telecommunications server 130 is described.

The communication module 280 is also responsible for transmitting data through the application host 111 and the telecommunication server 130 . Generally speaking, the communication module 280 is connected to the application host 111 using a mobile communication network, so as to transmit data through the application host 111 and the telecommunication server 130, but in some embodiments, the communication module 280 can also use a wireless local area network The road is connected to the application host 111 .

More specifically, the communication module 280 can transmit the license token returned by the telecommunication server 130 and the door number data acquired by the data acquisition module 220 to the application host 111 , so as to transmit the license token and user data through the application host 111 . To Telecom Server 130. The communication module 280 can also receive the login result sent by the telecommunication server 130 via the application host 111 .

In some embodiments, the communication module 280 can also receive the door number data sent by the service host 111 , and can store the received door number data in the memory unit of the mobile device 120 .

The application host 111 can be connected to the identification host 112 through a wired or wireless network, and can also provide the mobile device 120 with a wired or wireless network connection. The application host 111 can receive data or signals sent by the connected mobile device 120 and/or the identification host 112 , and can transmit the data or signals to the connected mobile device 120 and/or the identification host 112 .

The application host 111 is responsible for providing one or more application services to the mobile device 120, and can request the mobile device 120 to perform a user login operation when the mobile device requests a specific application service. The application host 111 is also responsible for receiving the license token and the door number data sent by the mobile device 120 , and transmitting the received license token and the door number data to the identification host 112 .

The application host 111 is also responsible for receiving the login result sent by the identification host 112, and selects whether to execute the application service requested by the mobile device 120 according to the received login result. That is, the application host 111 may indicate that the login fails in the login result. , refuse to execute the application service requested by the mobile device 120, and can execute the application service requested by the mobile device 120 when the login result indicates that the login is successful. In some embodiments, the application host 111 may determine whether the mobile device has been logged in after the login result indicates that the login is successful, and if so, directly execute the application service requested by the mobile device 120 , and The transmitted door number data is loaded into all or part of the user data of the user of the mobile device 120 , and after logging into the mobile device 120 , the service requested by the mobile device 120 is executed.

The identification host 112 can be connected to the application host 111 and the authentication server 113 respectively through wired or wireless networks, and can also receive data or signals sent by the application host 111 and/or the authentication server 113, and can transmit data or The signal is sent to the application host 111 and/or the authentication server 113 .

The identity identification host 112 is responsible for receiving the license token and the gate number data sent by the application host 111 , and transmits the received license token and the gate number data to the identity verification server 113 . The identity recognition host 112 is also responsible for receiving the login result sent by the identity verification server 113 , and transmitting the received login result to the application host 111 .

The identity verification server 113 can be connected to the identity identification host 112 and the telecommunication server 130 respectively through a wired or wireless network, and can also receive data or signals transmitted by the identity identification host 112 and/or the telecommunication server 130, and can transmit data or signal to the identification host 112 and/or the telecommunication server 130 .

The identity verification server 113 is responsible for receiving the license token and door number data sent by the identity identification host 112 , and transmitting the received license token and door number data to the telecommunications server 130 . The identity verification server 113 is also responsible for receiving the login result sent by the telecommunication server 130 and transmitting the received login result to the identity recognition host 112 .

In some embodiments, the application host 111 , the identification host 112 , and the authentication server 113 may be included in the service server 110 , as shown in FIG. 1B . The service server 110 may include a computing device such as an application host 111 , an identification host 112 , an authentication server 113 and other entities, such as a blade server; the service server 110 may also be an integrated application host 111 to the mobile device 120 All functions of the authentication server 113 to all functions of the telecommunications server 130. That is, the service server 110 can be connected to the telecommunication server 130 through a wired or wireless network, and can also provide the mobile device 120 with a wired or wireless network connection. The service server 110 can receive data or signals transmitted by the connected mobile device 120 and/or the telecommunications server 130 , and can transmit the data or signals to the connected mobile device 120 and/or the telecommunications server 130 . In this way, the service server 110 can provide the mobile device 120 application service, and can transmit the license token and door number data transmitted by the mobile device 120 to the telecommunications server 130 .

In addition, in some embodiments, the application host 111 and the identity identification host 112 can also be selected to be integrated, so that the mobile device 120 transmits the license token and door number data to the telecommunications server 130 through the integrated computing device and the identity verification server. , or can choose to integrate the identity recognition host 112 and the identity verification server 113 , so that the mobile device 120 transmits the license token and door number data to the telecommunications server 130 through the application host 111 and the integrated computing device, which is not repeated in the present invention.

The telecommunication server 130 can provide the connection of the mobile device 120 through a mobile communication network, and can also be connected to the authentication server 113 through a wired or wireless network. The telecommunication server 130 can receive data or signals transmitted by the mobile device 120 and/or the authentication server 113 , and can transmit the data or signals to the mobile device 120 and/or the authentication server 113 .

The telecommunication server 130 is responsible for receiving the device identification data transmitted by the mobile device 120 . In some embodiments, the telecommunication server 130 can determine whether the device identification data is issued by a telecommunication unit or a telecommunication institution to which the telecommunication server 130 belongs. For example, when the telecommunication unit or telecommunication institution is a telecommunication company, the telecommunication server 130 can determine whether Whether the received device identification data is covered by the data record pre-established by the telecommunications company (for example, the device identification data is recorded in the data record or a range recorded in the data record includes the device identification data, etc.), but the present invention does not use this limited. The telecommunication server 130 may also refuse to provide the mobile communication service to the mobile device 120 when it is determined that the device identification data is not issued by the telecommunication unit or telecommunication agency to which it belongs.

The telecommunications server 130 is also responsible for generating the license token corresponding to the received device identification information. Generally speaking, the license token generated by the telecommunication server 130 is data generated by performing a specific encoding method on specific data, and is usually formed by a certain number of letters, numbers, and symbols arranged arbitrarily, and is temporal. For example, the license token may be data generated by the telecommunications server 130 performing hash operation on specific data, wherein the specific data includes but not limited to the door number data, the birthday of the user corresponding to the door number data, the telecommunications server 130 Items such as server identification data and/or time stamps are not particularly limited in the present invention. When a specific material contains two or more kinds of items, the various items may be arranged in a predetermined order or position.

The telecommunications server 130 is also responsible for receiving the license token and the door number data sent by the identity verification server 113, and is responsible for generating the login result according to the received license token and door number data, and sending the login result to the service server 110 or the identity Authentication server 113.

The telecommunications server 130 can determine whether the received license token is generated by the telecommunications server 130, whether the received door number data is included in the data record pre-established by the telecommunications server 130, and whether the door number data corresponds to the license token. Make a judgment, and can generate a corresponding login result after the judgment. For example, the telecommunication server 130 can use the same items, arrangement order/position and coding method as that used to generate the license token, and the telecommunication server 130 can use the same items, arrangement order/position and coding method to process the gate number (and the user's birthday) in the received user data and the telecommunication server 130 Code the device identification data and other data, and compare the encoded data and the license token. When the two are the same, it means that the license token is generated by the telecommunications server 130 and the door number data corresponds to the license token. Otherwise, it means the license token. It is not generated by the telecommunications server 130 and/or the door number data does not correspond to the license token, but the manner in which the telecommunications server 130 determines whether the license token is generated by the telecommunications server 130 and whether the door number data corresponds to the license token is not the same as the above. limit. The telecommunications server 130 may generate a login result indicating that the login fails when any of the above items is judged to be negative; and when the telecommunications server 130 judges all the above-mentioned items to be yes, it may generate a login result indicating that the login is successful.

Next, the first embodiment is used to explain the operation system and method of the present invention, and please refer to "FIG. 3A" for the flowchart of the method of logging in through the telecommunication server with device identification data. In this embodiment, it is assumed that the mobile device 120 is a mobile phone, and the service server 110 is composed of computing devices such as an application host 111 , an identification host 112 , and an authentication server 113 , but the invention is not limited to this.

After the user operates the mobile device 120 to open the application program including the identification element 200 , the user can operate the mobile device 120 to execute the application service provided by the application program. In this embodiment, it is assumed that the application program is a service program provided by a bank or a securities company, that is, the application program can provide one or more application services, and some of the application services require the user to register and log in.

When a user chooses to execute an application service that requires the user to log in, for example, an application service such as an online bank or an online securities trading platform, the application can read and display the door number information in the pre-stored user data, or can provide The user enters the door number information and displays the entered door number information, and prompts the user whether to choose to transmit the displayed door number information to the telecommunications server 130 for user login. After the user chooses to agree, the application can call Identification element 200 .

After the identification element 200 is activated, the data obtaining module 220 of the identification element 200 can obtain the device identification data and the door number data (step 330 ). In this embodiment, assuming that the device identification data is the card number of the SIM card installed in the mobile device 120, the data obtaining module 220 can read the card number of the SIM card and obtain the door number data pre-read by the application. Wherein, if the data acquisition module 220 detects two SIM card numbers, it can prompt the user to confirm whether the door number data read out by the application program corresponds to the SIM card currently set for the mobile device 120 to use the mobile communication network The door number is the same.

After the data obtaining module 220 of the identification element 200 obtains the device identification data and the door number data (step 330 ), the communication module 280 of the identification element 200 can transmit the data through the mobile communication network to obtain the device identification obtained by the module 220 data to the telecommunications server 130 (step 360).

In this embodiment, assuming that the identification element 200 includes the verification module 250 , before the communication module 280 of the identification element 200 transmits the device identification data to the telecommunication server 130 through the mobile communication network (step 360 ), the verification module 250 may first call an application programming interface (API) provided by the operating system of the mobile device 120, so that the operating system of the mobile device 120 requires the user of the mobile device 120 to input the device unlocking data and verifies the device unlocking data entered by the user (step 340). ) to authenticate the user. The communication module 280 may transmit the device identification data to the telecommunications server 130 after the verification module 250 determines that the device unlocking data is verified by the operating system of the mobile device 120 (step 360 ). It should be noted that the data acquisition module 220 of the identification element 200 and the verification module 250 are not in the order of execution, but generally speaking, the verification module 250 can usually be acquired from the data acquisition module 220 of the mobile device 120 After the device identification data and the door number data (step 330 ), the operating system of the mobile device 120 is called, so that the operating system of the mobile device 120 determines whether the device unlocking data input by the user passes the verification (step 340 ).

After the communication module 280 of the identification element 200 transmits the device identification data to the telecommunication server 130 through the mobile communication network (step 360 ), the telecommunication server 130 may transmit the permission token to the mobile device 120 (step 370 ). In this embodiment, it is assumed that after receiving the device identification data transmitted by the mobile device 120, the telecommunication server 130 can determine whether the received device identification data is issued by the telecommunication company to which the telecommunication server 130 belongs, that is Whether the received device identification data is included in the data record pre-established by the telecommunications company to which the telecommunications server 130 belongs, and if so, a license token can be generated and the generated license token can be sent back to the mobile device 120; 130 judging that the received device identification data is not included in the pre-established data record, the permission token may not be generated or the permission token may be refused to be returned.

After the communication module 280 of the identification element 200 receives the license token generated by the telecommunications server 130 through the mobile communication network, the communication module 280 can obtain the license token and data received from the telecommunications server 130 through the service server 110 The door number data obtained by the module 220 is sent to the telecommunications server 130 (step 380). In this embodiment, that is, the communication module 280 transmits the license token and the door number data to the application host 111 that performs the user registration operation with the mobile device 120 , and the identity recognition host 112 sends the application host through the identity verification server 113 to the application host 111 . The license token and door number data received by 111 are forwarded to the telecommunication server 130 .

After the telecommunication server 130 receives the permission token and the door number data sent by the mobile device 120 , the telecommunication server 130 can generate a login result according to the received permission token and the door number data. In this embodiment, it is assumed that the telecommunications server 130 can first determine whether the received license token is generated by the telecommunications server 130, and if not, the telecommunications server 130 can generate a login result indicating that the device confirmation fails or the login fails; If so, the telecommunications server 130 can then determine whether the door number in the received door number data is included in the pre-established data record, and if not, the telecommunications server 130 can generate a login result indicating a device verification failure or a login failure If yes, the telecommunication server 130 can continue to determine whether the door number data corresponds to the license token, if not, the telecommunication server 130 can generate a login result indicating that the device has failed to confirm or log in; Confirm the login result of successful or successful login.

After the telecommunications server 130 generates a login result according to the received license token and door number data, it can transmit the generated login result to the service server 110 (step 390 ), and the service server 110 can also send the received The login result is sent to the application running in the mobile device 120 . In this embodiment, the telecommunications server 130 can transmit the login result to the authentication server 113 , and the identity recognition host 112 transmits the login result received by the authentication server 113 to the application host 111 , so that the application host 111 Whether the mobile device 120 is successfully logged in can be determined according to the login result, and when the mobile device 120 is successfully logged in, the user data of the user of the mobile device 120 can be read according to the door number data sent by the mobile device 120, so as to read out the user data of the mobile device 120. user data to complete the user login operation. In this way, through the present invention, the service server 110 can obtain the login result of the mobile device 120 through the telecommunication server 130 , and can log the mobile device 120 into the service server 110 .

Continue to use the second embodiment to explain the operation system and method of the present invention, please also refer to "FIG. 3A". In this embodiment, it is assumed that the mobile device 120 and the service server 110 are the same as the first embodiment.

Different from the first embodiment, in this embodiment, it is assumed that the mobile device 120 has logged into the application host 111, but if the user of the mobile device 120 operates the application to perform a specific service, for example, to perform a transfer in an online bank For services such as trading or placing an order on the online securities trading platform, the application host 111 may require the user to log in again to confirm the user. At this time, the application host 111 can first read the door number data in the user data, and send The read door number data is given to the application program running on the mobile device 120 .

After the application program receives the door number data sent by the application host 111, it can display the received door number data, and can prompt the user to confirm whether to choose to transmit the displayed door number data to the telecommunications server 130 for the user. After logging in, after the user chooses to agree, the application can call the identification element 200 .

After the identification element 200 is activated, the data acquisition module 220 of the identification element 200 can obtain the device identification data and the door number data (step 330 ), and the communication module 280 of the identification element 200 can obtain the data by transmitting the data through the mobile communication network The device identification data obtained by the module 220 is sent to the telecommunication server 130 (step 360 ), and the telecommunication server 130 can transmit the license token to the mobile device 120 (step 370 ). The server 110 transmits the license token received from the telecommunications server 130 and the door number data obtained by the data acquisition module 220 to the telecommunications server 130 (step 380 ). The login result is generated based on the number data, and the generated login result can be transmitted to the service server 110 (step 390 ). In this embodiment, since the above steps are the same as those in the first embodiment, they will not be repeated.

After the service server 110 receives the login result generated by the telecommunications server, it can determine whether the mobile device 120 has successfully logged in according to the received login result, and can execute the mobile device 120 when the login result indicates that the mobile device 120 has successfully logged in. The specific service requested to be performed. In this embodiment, after the application host 111 included in the service server 110 determines that the mobile device 120 has successfully logged in, the mobile device 120 executes the transfer transaction or online ordering and other services requested by the mobile device 120, and returns the execution result to the action The device 120 enables the application program executed on the mobile device 120 to display the execution result. When the application host 111 determines that the received login result indicates that the login fails, it can refuse to execute the specific service requested by the mobile device 120 and send a prompt message to the mobile device 120, so that the application program prompts the user of the mobile device 120 to log in fail.

In the above-mentioned two embodiments, if the identification element 200 further includes the network determination module 260, as shown in the flow of "FIG. 3B", the data acquisition module 220 of the identification element 200 can obtain the device identification data and the door. Before the number data (step 330), the network determination module 260 can first determine whether the mobile device 120 uses the mobile communication network (step 321). If the network determination module 260 determines that the mobile device 120 is currently using the mobile communication network, the data is obtained The module 220 can obtain the device identification data and the door number data (step 330 ); and if the network determination module 260 determines that the mobile device 120 does not currently choose to use a mobile communication network, for example, determines that a wireless local area network such as WiFi is currently used, the network The path determination module 260 can prompt the user to set the mobile device 120 to use the mobile communication network (step 325 ), or can directly disable the wireless LAN function of the mobile device 120 to set the mobile device 120 to use the mobile communication network.

In addition, in the above two embodiments, if the identification element 200 includes the data input module 240, the application program including the identification element 200 can be provided by the data input module 240 to the user after the user selects the application service to be logged in. The door number data is input, so that the data obtaining module 220 of the identification element 200 obtains the device identification data and the door number data (step 330 ). Wherein, when the data obtaining module 220 obtains the device identification data and the door number data (step 330 ), the data obtaining module 220 may first determine whether two or two are detected as shown in the flow of “FIG. 3C” The above device identification data (step 311 ), if not, the data obtaining module 220 can directly obtain the device identification data and the door number data (step 330 ); and if the data obtaining module 220 detects multiple device identification data, Then the data acquisition module 220 can prompt the user to input the door number data corresponding to the SIM card of the mobile communication network currently used for setting the mobile device 120 in the door number data (step 315 ), and obtain the device after the user confirms. Identification data and door number data (step 330).

From the above, it can be seen that the difference between the present invention and the prior art is that the mobile device transmits the device identification data to the telecommunication server through the mobile communication network and receives the license token returned by the telecommunication server, and then transmits the license through the service server. The token and door number data are sent to the telecommunications server, and the telecommunications server generates the login result according to the permission token and the door number data and transmits the login result to the service server. The technical means can solve the problem of mobile devices existing in the prior art. The problem of using the certificate stored in the hardware carrier to perform the login operation, and then achieve the technical effect of using the mobile device alone to complete the login operation to log in to the service server.

Furthermore, the method for logging in through a telecommunication server using device identification data of the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner in a computer system or distributed with different components. Implemented in a decentralized manner across several interconnected computer systems.

Although the embodiments disclosed in the present invention are as above, the above-mentioned contents are not intended to directly limit the scope of the patent protection of the present invention. Any person with ordinary knowledge in the technical field to which the present invention pertains, without departing from the spirit and scope disclosed by the present invention, makes slight modifications to the form and details of the implementation of the present invention, all belong to the patent protection of the present invention Scope. The scope of patent protection of the present invention shall still be defined by the appended patent application scope.

110: Service server 111: Application host 112: Identification host 113: Authentication server 120: Mobile device 130: Telecom server 200: Identification element 220: Data acquisition module 240: Data input module 250: Verification module Group 260: Network determination module 280: Communication module Step 311: The mobile device determines whether to obtain multiple device identification data Step 315: The mobile device prompts to input the door number data corresponding to the device identification data corresponding to the mobile communication network Step 321: The mobile device determines whether to use the mobile communication network. Step 325: The mobile device prompts to switch to the mobile communication network. Step 330: The mobile device obtains the device identification data and the door number data. Step 340: The mobile device determines whether the device unlocking data has passed the verification. The mobile communication network sends the device identification data to the telecommunications server Step 370 : The telecommunications server sends the permission token to the mobile device Step 380 : The mobile device sends the permission token and door number data to the telecommunications server through the service server Step 390 : The telecommunications server is based on The permission token and door number data generate the login result, and send the login result to the service server

FIG. 1A is a system architecture diagram of logging in through a telecommunication server with device identification data according to the present invention. FIG. 1B is another system architecture diagram of logging in through a telecommunication server with device identification data according to the present invention. FIG. 2 is a schematic diagram of the components of the mobile device according to the present invention. FIG. 3A is a flowchart of a method for logging in through a telecommunication server with device identification data according to the present invention. FIG. 3B is a flow chart of the method for prompting network switching proposed by the present invention. FIG. 3C is a flow chart of the method for prompting input of a door number for using a mobile communication network according to the present invention.

Step 330: The mobile device obtains the device identification data and the door number data

Step 340: The mobile device determines whether the device unlocking data has passed the verification

Step 360: The mobile device transmits the device identification data to the telecommunication server through the mobile communication network

Step 370: The telecommunications server sends the license token to the mobile device

Step 380: The mobile device sends the license token and door number data to the telecommunications server via the service server

Step 390: The telecommunications server generates a login result according to the license token and door number data, and sends the login result to the service server

Claims (10)

A method for logging in through a telecommunication server with device identification data, the method at least comprises the following steps: a mobile device obtains a device identification data from the mobile device and reads a door number data stored by the mobile device; the mobile device Send the device identification data to a telecommunication server through the mobile communication network; the telecommunication server sends a license token to the mobile device; the mobile device transmits the license token and the door number data to the mobile device through the service server through the mobile communication network the telecommunications server; and the telecommunications server determines according to the license token and the door number data to generate a login result, and transmits the login result to the service server, wherein the above judgment includes determining whether the license token is the Generated by the telecommunications server and whether the gate number data corresponds to the license token. The method for logging in through a telecommunication server using device identification data as described in item 1 of the scope of the patent application, wherein before the step of the mobile device transmitting the device identification data to the telecommunication server through a mobile communication network, the method further comprises: When the mobile device determines that the mobile device is not currently using the mobile communication network, it prompts the step of using the mobile communication network instead. The method for logging in through a telecommunication server using device identification data as described in item 1 of the scope of the patent application, wherein before the step of the mobile device transmitting the device identification data to the telecommunication server through a mobile communication network, the method further comprises: The mobile device uses the device unlock data to verify the user's identity. The method for logging in through a telecommunication server using device identification data as described in item 1 of the scope of the patent application, wherein the method obtains the device identification data and the door number data from the mobile device The step further includes a step of prompting the mobile device to input the door number data corresponding to the device identification data when the mobile device determines that the mobile device has obtained other device identification data than the device identification data. The method for logging in through a telecommunication server using device identification information as described in item 1 of the scope of the patent application, wherein the method further includes the telecommunication server determining before the step of transmitting the license token to the mobile device by the telecommunication server The steps to generate the license token when the device identification data is issued by the telecommunications unit or agency to which it belongs. A system for logging in through a telecommunication server with device identification data, the system at least comprises: a service server; a telecommunication server connected to the service server; and a mobile device for executing an identification element, the The identification element includes: a data acquisition module for reading the door number data stored by the mobile device and for obtaining a device identification data from the mobile device; and a communication module for passing through the mobile communication network Send the device identification data to the telecommunications server, and receive a license token sent by the telecommunications server, and use the mobile communication network to transmit the license token and the door number data to the telecommunications server through the service server a device to make the telecommunications server make a judgment according to the license token and the door number data to generate a login result, and send the login result to the service server, wherein the above judgment includes judging whether the license token is the telecommunications server Generate and whether the gate number data corresponds to the license token. The system for logging in through a telecommunication server using device identification data as described in item 6 of the scope of the application, wherein the identification element further includes a network judging module for judging whether the mobile device currently uses a mobile communication network. The system for logging in through a telecommunication server using device identification data as described in item 6 of the scope of the patent application, wherein the identification element further includes a verification module for verifying the user's identity through the device unlocking data. According to the system for logging in through a telecommunication server using device identification data as described in item 6 of the scope of the patent application, the data acquisition module is further used to prompt for input of the device identification data other than the device identification data when obtaining other device identification data. The door number data corresponding to the device identification data. The system for logging in through a telecommunication server using device identification data as described in item 6 of the scope of the patent application, wherein the telecommunication server is further used to generate the license when judging that the device identification data is issued by the telecommunication unit or agency to which it belongs keepsake.

Images