TWI780341B - System for using network identification to identify via telecommunication server and method thereof - Google Patents

Abstract

A system for using a network identification to identify via a telecommunication server and a method thereof are provided. By obtaining a network identification of a mobile and user data, using mobile communication network to transmitting the network identification and the user data from the mobile to a service server, transmitting the network identification and the user data from the service server to a telecommunication server, generating a result based on the network identification and the user data by the telecommunication server, and transmitting the result from the telecommunication server to the service server, the system and the method can achieve the effect of using only mobile to complete identify .

Description

System and method for identifying identity through telecommunications server with network identification data

An identification system and method thereof, especially a system and method for identifying an identity through a telecommunications server with network identification data.

In recent years, due to the high development of communication and network-related industries, people's demand for various electronic and mobile services is increasing. This demand is also reflected in the financial industry and government departments. For example, securities companies, banks In addition to providing network services, insurance companies, investment consulting companies, and government units have also begun to provide mobile applications (APPs). Users can use various mobile devices such as mobile phones or tablets to execute mobile applications. After the network is connected to the corresponding service host (or application host), the user can operate the mobile device to perform mobile services such as securities transactions, transfers, insurance applications, and application documents. In this way, the user can perform the desired mobile service without leaving the location.

When users use network services or mobile services, they usually need to identify themselves first. At present, most of the identification methods through the network require the use of hardware carriers to identify the user's identity. When users perform mobile services, they can identify themselves by connecting to a USB flash drive or a smart card that stores credential data.

However, most methods of using hardware carriers to identify users can only be carried out on computers. The main reason is that hardware carriers need to be connected to computers through connection slots such as USB, or through external devices such as card readers. However, most of the current mobile devices do not have a connection slot that can be connected to the hardware carrier, or the user needs to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot be connected to the hardware The carrier, in this way, causes the user to be unable to use the mobile device for identification, so that the mobile service cannot be used, causing inconvenience to the user.

To sum up, it can be seen that there has been a problem in the prior art for a long time that mobile devices are not easy to connect to hardware carriers to identify users. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem in the prior art that mobile devices are not easily connected to hardware carriers to identify users, the present invention discloses a system and method for identifying identities through telecommunication servers using network identification data, wherein:

The system disclosed in the present invention for identifying an identity through a telecommunication server using network identification data at least includes: a service server, a mobile device, and a telecommunication server, wherein the mobile device is used to execute an identity identification element, and the identity identification element includes: obtaining A data acquisition module for user data and network identification data, and a communication module that connects to the service server through a mobile communication network and transmits network identification data and user data to the service server; the telecommunications server is used to Receive the network identification information and user information sent by the service server, and use it to generate identification results based on the network identification information and user information, and send the identification results to the service server.

The method for identifying an identity through a telecommunications server with network identification data disclosed in the present invention comprises at least the steps of: connecting the mobile device to the service server through the mobile communication network; obtaining the network identification data and user information by the mobile device; The device sends the network identification data and user data to the service server; the service server sends the network identification data and user data to the telecommunications server; the telecommunications server generates an identification result based on the network identification data and user data, and Send the identification result to the service server.

The system and method disclosed in the present invention are as above, and the difference from the prior art is that the present invention obtains the network identification data and user data through the identity recognition element executed by the mobile device, and then transmits the network identification data and user data through the mobile communication network. The user information is sent to the service server, and the service server sends the network identification information and user information to the telecommunications server, so that the telecommunications server generates an identification result based on the network identification information and user information and sends the identification result to The service server is used to solve the problems existing in the prior art, and can achieve the technical function of using the mobile device alone to complete the identification.

The features and implementation methods of the present invention will be described in detail below in conjunction with the drawings and embodiments, the content is enough to enable anyone familiar with the relevant art to easily and fully understand the technical means used to solve the technical problems of the present invention and implement them accordingly, thereby realizing The effect that the present invention can achieve.

In the present invention, after the mobile device and the service server are connected through the mobile communication network, the service server is connected to the telecommunication server to identify the user of the mobile device, and the telecommunication server sends the identification result back to the service server device. Wherein, the mobile communication network is such as 4G, 5G network, etc., but the present invention is not limited thereto.

The system operation of the present invention will be described below with "FIG. 1A" and "FIG. 1B", the system architecture diagrams of the present invention that use network identification data to identify identities through telecommunication servers. As shown in FIG. 1A , the system of the present invention includes an application host 111 , an identification host 112 , an authentication server 113 , a mobile device 120 , and a telecommunications server 130 . Among them, the application host 111 , the identification host 112 , the identity verification server 113 , the mobile device 120 , and the telecommunication server 130 are all computing devices.

The computing device mentioned in the present invention includes but is not limited to one or more processors, one or more memory modules, and components such as busses connecting different elements (including memory modules and processors). Through the multiple components included, the computing device can load and execute the operating system, so that the operating system can run on the computing device, and can also execute software or programs. In addition, the computing device also includes a casing, and the above-mentioned components are arranged in the casing.

The bus of the computing device mentioned in the present invention can include one or more types, such as data bus (data bus), address bus (address bus), control bus (control bus), expansion function bus ( expansion bus), and/or local bus (local bus) and other types of bus. Computing device buses include, but are not limited to, side-by-side Industry Standard Architecture (ISA) buses, Peripheral Component Interconnect (PCI) buses, Video Electronics Standards Association (VESA) local area buses, and serial Universal Serial Buses (USB), Peripheral Component Interconnect Express (PCI-E) bus, etc.

The processor of the computing device mentioned in the present invention is coupled to the bus. Processors contain register banks or register spaces that can be entirely located on the processing die, or wholly or partially located off the processing die and via dedicated electrical connections And/or coupled to the processor via a bus. A processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copying/moving data, etc., to run the operating system or execute various programs, modules, and/or element.

The processor of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (ICs), including memory controllers and peripheral input/output (I/O) controllers, that is, memory controllers and peripheral I/O controllers can be included in Within one integrated circuit, it can also be implemented using two or more integrated circuits. Chipsets usually provide input/output and memory management functions, and provide multiple general and/or special registers, timers, etc., wherein the above general and/or special registers and timers can be coupled or Accessed or used by one or more processors electrically connected to the chipset.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The memory modules mentioned above include any type of volatile memory (volatile memory) and/or non-volatile (non-volatile memory, NVRAM) memory, such as static random access memory (SRAM), dynamic random access memory Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area can include any type of storage device or storage medium, for example, a hard disk drive, a CD, a flash drive (flash memory), a memory card (memory card), a solid state drive (Solid State Disk, SSD), or any other storage device, etc. That is to say, the memory controller can access data in SRAM, DRAM, flash memory, hard disk drive, and solid-state hard disk.

The processor of the computing device can also connect and communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through the peripheral I/O controller via the peripheral I/O bus. The peripheral input device can be any type of input device, such as keyboard, mouse, trackball, touch pad, joystick, etc., and the peripheral output device can be any type of output device, such as display, printer, etc., peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for Wi-Fi, Zigbee and other wireless local area networks, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL modem, a cable (Cable) modem, etc. The processor can poll various peripheral devices and interfaces periodically, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device having the components described above.

The mobile device 120 can be connected to the application host 111 through a wired or wireless network. The mobile device 120 can receive the data or signal sent by the application host 111 , and can send the data or signal to the application host 111 .

The mobile device 120 is responsible for using the application services provided by the application host 111 , and is responsible for completing the identification through the telecommunications server 130 when the application services require identification. Among them, the application services mentioned in the present invention are usually services that need to confirm the identity of the user of the mobile device 120, such as: online ordering, online banking, online insurance application, tax declaration and payment, etc., but the present invention is not limited thereto. .

The mobile device 120 can further include a data acquisition module 220, a communication module 280, and an optional detection module 230, a data input module 240, a verification module 250, and a network judgment module as shown in "Fig. Module 260. In some embodiments, the mobile device 120 can execute the identity recognition component 200 to generate various modules mentioned in the present invention. Wherein, the identity recognition component 200 can be an application program that operates independently and can be called by a web browsing program; the identity recognition component 200 can also be a module or component included in the web browsing program.

The data obtaining module 220 is responsible for obtaining network identification data. Generally speaking, the network identification data is the network address currently used by the mobile device 120, and the data acquisition module 220 can detect the network address currently used by the mobile communication interface of the mobile device 120 to obtain the network identification data . However, the network identification data mentioned in the present invention is not limited to the above, and any data that can enable the telecommunications server 130 to distinguish the mobile device 120 can be used as the network identification data mentioned in the present invention.

The data obtaining module 220 is also responsible for obtaining user data. The user data obtained by the data acquisition module 220 includes the door number information corresponding to the user identification module installed in the mobile device 120 and the user's identification data. In some embodiments, the user data can also include The birthday of the user, but the user information mentioned in the present invention is not limited to the above, for example, the user information may also include gender, address, etc. Among them, the identification information mentioned in the present invention is usually a unique value, that is, different users have different information, including but not limited to the user's ID number, passport number, etc.; Information such as the name of the telecommunications institution/unit of the number.

Generally speaking, the data acquisition module 220 can read the user information input by the user from the memory unit of the mobile device 120, but for some items in the user information, such as the door number, the data acquisition module 220 can detect The measurement module 230 is obtained.

The detection module 230 can detect a Subscriber Identity Module (SIM) installed in the mobile device 120, and can also obtain information stored in the SIM, such as a door number. The subscriber identification module detected by the detection module 230 includes a card-type subscriber identification module (represented by a "SIM card" in the present invention) and an embedded subscriber identification module (Embedded-SIM, in this paper) will be denoted as "eSIM" in the invention).

In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, for example, the mobile device 120 has two SIM cards installed, or one SIM card is installed and one eSIM, when the data acquisition module 220 obtains user data, the data acquisition module 220 can first prompt the user to confirm the phone number information in the user data and the current user identification module used by the mobile device 120 to connect to the mobile communication network. Corresponding to the group, and obtain the user information after the user confirms, otherwise wait for the user to modify the phone number information in the user information. For example, when a SIM card is installed on the mobile device 120 and includes an eSIM, when the mobile device 120 uses the SIM card to connect to the mobile communication network, the data acquisition module 220 can prompt the user to confirm the user through the peripheral output device of the mobile device 120 Whether the phone number information in the data is consistent with the phone number corresponding to the SIM card.

The data input module 240 can provide the user to input user data through peripheral input devices of the mobile device 120 . In more detail, the data input module 240 can provide a user interface for inputting user data, and can store the user data input by the user into the memory unit of the mobile device 120 .

In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, when the data input module 240 provides the user to input user information, The user may be prompted to input the phone number information corresponding to the user identification module currently configured for the mobile device 120 to connect to the mobile communication network in the user information. For example, when a SIM card is installed on the mobile device 120 and includes an eSIM, when the mobile device 120 uses the SIM card to connect to the mobile communication network, the data input module 240 can prompt the user through the peripheral output device of the mobile device 120. Enter the phone number information corresponding to the SIM card in the data.

The verification module 250 can verify the identity of the user through the device unlocking information. Among them, the device unlocking data mentioned in the present invention can be biological data such as fingerprints, voiceprints, and faces, or passwords or gestures set by users, but the present invention is not limited to the above.

In more detail, the verification module 250 can select the method of verifying the user's identity through the device unlocking data according to the type and version of the operating system running on the mobile device 120, for example: the verification module 250 can choose to require the user to use the mobile device The input unit of 120 inputs the device unlocking data, and calls the operating system executed in the mobile device 120 to confirm whether the input device unlocking data is correct to verify the identity of the user; it is also possible to choose to call the operating system provided in the mobile device 120 The screen unlock application program interface to provide users with input device unlock information, and through the screen unlock application program interface to determine whether the input device unlock information is correct to verify the user's identity; or you can choose to turn off the screen and wait for the user to open the screen and input the device The unlocking data is used to unlock the screen to confirm the identity of the user, etc., but the method of verifying the identity of the user selected by the verification module 250 is not limited to the above.

The network determination module 260 can determine whether the mobile device 120 currently chooses to use the mobile communication network, and can determine whether the mobile device 120 currently does not choose to use the mobile communication network, such as when currently using a wireless local area network such as WiFi, through the mobile device. The peripheral output device 120 prompts the user to change the mobile device 120 to use the mobile communication network.

In some embodiments, the network determination module 260 may also prompt the user through the peripheral output device of the mobile device 120 that the mobile device 120 will be changed to use the mobile communication network when it is determined that the mobile device 120 is not currently using the mobile communication network. , and switch the mobile device 120 to use the mobile communication network.

The communication module 280 is responsible for driving the subscriber identification module installed on the mobile device 120 so as to connect with the application host 111 through the mobile communication network. Generally speaking, the communication module 280 can drive the subscriber identification module, and obtain the right to use the mobile communication network through the subscriber identification module.

The communication module 280 is also responsible for connecting with the application host 111 through the mobile communication network, and is responsible for sending the network identification data and user data obtained by the data acquisition module 220 to the application host 111. In some embodiments, the communication module The group 280 can also receive the identification result sent by the application host 111 .

The application host 111 can be connected to the identification host 112 through a wired or wireless network, and can also connect the mobile device 120 through a mobile communication network. Wherein, the application host 111 can receive the data or signal sent by the connected mobile device 120 and/or the identification host 112 , and can transmit the data or signal to the connected mobile device 120 and/or the identification host 112 .

The application host 111 is responsible for providing application services to the mobile device 120, and may require the mobile device 120 to perform identification when the mobile device requests a specific operation, for example, when the mobile device 120 requests registration.

The application host 111 is also responsible for receiving the network identification data and user data sent by the mobile device 120 , and sending the received network identification data and user data to the identification host 112 .

The application host 111 is also responsible for receiving the identification result sent by the identification host 112, and chooses whether to execute the operation requested by the mobile device 120 according to the received identification result. That is to say, the application host 111 can indicate in the identification result When the identification is successful, the operation requested by the mobile device 120 is executed, and when the identification result indicates that the identification fails, the operation requested by the mobile device 120 is refused to be executed.

The identification host 112 can be respectively connected to the application host 111 and the identity verification server 113 through a wired or wireless network, and can also receive data or signals sent by the application host 111 and/or the identity verification server 113, and can transmit data or The signal is sent to the application host 111 and/or the authentication server 113.

The identification host 112 is responsible for receiving the network identification data and user data sent by the application host 111 , and sending the received network identification data and user data to the identity verification server 113 . The identity identification host 112 is also responsible for receiving the identity identification result sent by the identity verification server 113 , and sending the received identity identification result to the application host 111 .

The identity verification server 113 can be connected to the identity recognition host 112 and the telecommunications server 130 respectively through a wired or wireless network, and can also receive data or signals sent by the identity recognition host 112 and/or the telecommunications server 130, and can transmit data Or signal to the identification host 112 and/or the telecommunications server 130 .

The identity verification server 113 is responsible for receiving the network identification information and user information sent by the identity identification host 112 , and sending the received network identification information and user information to the telecommunications server 130 . The identity verification server 113 is also responsible for receiving the identity verification result sent by the telecommunications server 130 , and sending the received identity verification result to the identity verification host 112 .

In some embodiments, the application host 111, the identification host 112, and the authentication server 113 may be included in the service server 110, as shown in "FIG. 1B". Wherein, the service server 110 may include computing devices such as the application host 111, the identity recognition host 112, and the identity verification server 113, such as a blade server; All functions of the authentication server 113 and all functions of the telecommunications server 130. That is to say, the service server 110 can be connected to the telecommunications server 130 through a wired or wireless network, and can also provide the mobile device 120 with a wired or wireless network connection. Wherein, the service server 110 can receive the data or signal sent by the connected mobile device 120 and/or the telecommunications server 130 , and can transmit the data or signal to the connected mobile device 120 and/or the telecommunications server 130 . In this way, the service server 110 can provide the mobile device 120 with application services, and can transmit the network identification data and user data sent by the mobile device 120 to the telecommunications server 130 .

In addition, in some embodiments, it is also possible to choose to integrate the application host 111 and the identification host 112, so that the mobile device 120 transmits the network identification data and user data to the telecommunications server through the integrated computing device and identity verification server. device 130, or can choose to integrate the identity recognition host 112 and the identity verification server 113, so that the mobile device 120 transmits the network identification data and user data to the telecommunications server 130 through the application host 111 and the integrated computing device, the present invention I won't go into details.

The telecommunications server 130 can be connected to the identity verification server 113 through a wired or wireless network, and can also receive data or signals sent by the identity verification server 113 and send data or signals to the identity verification server 113 .

The telecommunications server 130 is also responsible for receiving the network identification information and user information sent by the identity verification server 113, and is responsible for generating an identification result based on the received network identification information and user information, and sending the identification result to The service server 110 or the authentication server 113 .

The telecommunications server 130 can base on whether the received network identification data is issued by the telecommunications server 130, whether the phone number in the user information belongs to the telecommunications unit/organization to which the telecommunications server 130 belongs, and whether the phone number in the user information It is judged whether the information corresponds to the network identification information, and whether the door number in the user information corresponds to the identification information in the user information, and can generate corresponding identification results after the judgment. For example, when the telecommunication unit or organization is a telecommunication company and the network identification data is a network address, the telecommunication server 130 can determine whether the received network identification data is covered by the data records pre-established by the telecommunication company (such as The network identification data recorded in the data record or the network segment recorded in the data record contains network identification data, etc.), so as to determine whether the network identification data is owned by the telecommunications unit or telecommunications organization to which the telecommunications server 130 belongs, that is, to judge the network Whether the network identification data is issued by the telecommunications server 130, but the method for the telecommunications server 130 to determine whether the network identification data is issued by the telecommunications server 130 is not limited to the above; similarly, the telecommunications server 130 can determine whether the received Whether the received phone number is covered by the pre-established data record of the telecommunications company to which it belongs (for example, the phone number recorded in the data record or the phone number falls within the range of the phone number recorded in the data record, etc.), so as to determine whether the phone number is a telecommunications server 130 belongs to the telecommunications unit or telecommunications institution, but the way that the telecommunications server 130 judges whether the door number belongs to the telecommunications unit/organization to which the telecommunications server 130 belongs is not limited to the above; in addition, the telecommunications server 130 can also search whether Store the data including the door number and the network identification data in the received door number data. If yes, it means that the door number data corresponds to the network identification data; if not, it means that the door number data does not correspond to the network identification data. Wherein, when the telecommunication server 130 judges as no in any of the above-mentioned items, it can generate an identification result indicating that the identification fails; result. That is to say, when the identification result indicates that the identification is successful, it means that the telecommunications server 130 judges that the user of the mobile device 120 is consistent with the data recorded by the telecommunications server 130, and can confirm the identity of the user of the mobile device 120; And when the identification result indicates that the identification fails, it means that the telecommunications server 130 cannot confirm the identity of the user of the mobile device.

Next, an embodiment is used to explain the operating system and method of the present invention, and please refer to "Fig. 3A" for the flow chart of the method for identifying an identity through a telecommunications server using network identification data according to the present invention. In this embodiment, it is assumed that the mobile device 120 is a mobile phone, and the service server 110 is composed of computing devices such as the application host 111 , the identification host 112 , and the identity verification server 113 , but the present invention is not limited thereto.

After the user operates the mobile device 120 to open the web browser containing the identity recognition element 200, the user can operate the mobile device 120 to use the web browser to connect to the service server 110 through the mobile communication network (step 301), and send a request to the service server The device 110 requests to download a web page.

After the web browser executed in the mobile device 120 displays the downloaded web page, the user can operate the mobile device 120 to click on the web page displayed by the web browser, so as to execute various functions in the web page displayed by the web browser. In this embodiment, it is assumed that the service server 110 is set up by a government agency, and the webpage displayed by the web browser includes a user registration function, or a function that requires the user to register first.

After the user chooses to perform the user registration function, the web browser can display the authorization terms containing personal data and ask the user whether to agree to the web page, the user operates the mobile device 120 to click on the web page displayed in the web browser After agreeing to the option of the license terms, the web browser can display the web page containing the entered user data. In this embodiment, it is assumed that the user information includes the door number used by the user on the mobile device 120, the name of the telecommunications organization/unit that owns the phone number, the user's ID number, the user's birthday, and other registered The personal information required when using the website, such as the user's gender, e-mail address, household registration address, mailing address, etc.

After the user finishes inputting the user information, the web browser can call the identity recognition component 200, so that the identity recognition component 200 starts to execute. After the identity recognition component 200 is executed, the data acquisition module 220 of the identity recognition component 200 can obtain network identification data and user data (step 330 ). In this embodiment, assuming that the network identification data is a network address, the data acquisition module 220 can detect the network address used by the mobile device 120, and can obtain the information in the webpage displayed by the user in the web browser. The user data entered.

After the data acquisition module 220 of the identity recognition device 200 obtains the network identification data and user information (step 330), the communication module 280 of the identity recognition device 200 can transmit the network information obtained by the data acquisition module 220 through the mobile communication network. Send the identification data and user data to the service server 110 (step 360). In this embodiment, the communication module 280 transmits the network identification data and user data to the application host 111 .

In addition, in this embodiment, if the identity recognition element 200 includes a verification module 250, the communication module 280 of the identity recognition element 200 transmits the network identification data and user data to the service server 110 through the mobile communication network (step 360), the verification module 250 can first call the application program interface (API) provided by the operating system of the mobile device 120, so that the operating system of the mobile device 120 requires the user of the mobile device 120 to input device unlocking information and verify the user input device unlocking information (step 340), so as to verify the identity of the user. If the verification module 250 judges that the device unlocking information has not passed the verification of the operating system of the mobile device 120, the communication module 280 may not transmit the network identification data and user information, and the verification module 250 may call the operating system of the mobile device 120 again. Provided API; and when the verification module 250 judges that the device unlocking data has passed the verification of the operating system of the mobile device 120, the communication module 280 sends the network identification data and user data to the service server 110 (step 360 ). It should be noted that the data acquisition module 220 and the verification module 250 of the identity recognition element 200 do not have a sequence of execution, but generally speaking, the verification module 250 can usually obtain the network identification data in the data acquisition module 220 and user information (step 330), the API provided by the operating system of the mobile device 120 is called, so that the operating system of the mobile device 120 determines whether the device unlocking information input by the user is verified (step 340).

After the service server 110 receives the network identification information and user information sent by the mobile device 120 , it may transmit the received network identification information and user information to the telecommunications server 130 (step 370 ). In this embodiment, that is, the application host 111 transmits the network identification data and user information to the identity identification host 112, and the identity identification host 112 transmits the network identification information transmitted by the application host 111 through the identity verification server 113 And the user data is transferred to the telecommunications server 130 .

After the telecommunications server 130 receives the network identification information and user information sent by the mobile device 120 , the telecommunications server 130 can generate an identification result according to the received network identification information and user information. In this embodiment, it is assumed that the telecommunications server 130 can first determine whether the received network identification data is owned by the telecommunications unit/organization to which the telecommunications server 130 belongs, and if not, the telecommunications server 130 can generate a message indicating that the identification has failed. If so, the telecommunications server 130 can then determine whether the door number in the received user data is included in the pre-established data record, if not, the telecommunications server 130 can generate an identity that indicates that the identification failed Identification result; if so, the telecommunications server 130 can continue to judge whether the door number in the user data corresponds to the network identification data, if not, then the telecommunications server 130 can produce an identity identification result indicating that the identification fails; if so, the telecommunications server 130 judges again whether the door number corresponds to the identification data in the user data, if not, the telecommunications server 130 can generate an identification result indicating that the identification failed; if so, the telecommunications server 130 can generate an identification result indicating that the identification is successful .

After the telecommunications server 130 generates an identification result according to the received network identification information and user information, it may transmit the generated identification result to the service server 110 (step 380 ). In this embodiment, the telecommunications server 130 can transmit the identification result to the identity verification server 113, and the identification host 112 forwards the identification result received by the identity verification server 113 to the application host 111, so that the application The host 111 can choose whether to complete the registration operation requested by the mobile device 120 according to the identification result. When the identification result shows that the identification fails, the application host 111 can judge that the door number in the user data is not used by the user corresponding to the ID number in the user data, so it can be determined that the user's data is wrong, and reject The registration operation of the mobile device 120; and when the identification result indicates that the identification is successful, the application host 111 can determine that the door number in the user data is indeed used by the user corresponding to the ID number in the user data. Therefore, it can Assuming that the user identity is true, the application host 111 can complete the registration operation of the mobile device 120, that is, write the received user information into the member database. Thus, through the present invention, the service server 110 can obtain the identification result of the mobile device 120 through the telecommunications server 130, so as to confirm the identity of the registered user through the correctness of the user information.

In the above embodiment, if the identity recognition element 200 also includes a network judgment module 260, as shown in the flow of "Fig. 3B", the data acquisition module 220 of the identity recognition element 200 can obtain network identification data and door Before the number data (step 330), the network determination module 260 can first determine whether the mobile device 120 uses a mobile communication network (step 321). If the network determination module 260 determines that the mobile device 120 is currently using a mobile communication network, then the data is The module 220 can obtain network identification data and door number data (step 330); and if the network judgment module 260 judges that the mobile device 120 is not currently using a mobile communication network, such as judging that a wireless local area network such as WiFi is currently used, then the network The road judgment module 260 can directly close the wireless area network function of the mobile device 120, so as to set the mobile device 120 to use the mobile communication network, so that the data acquisition module 220 can obtain the network identification data of the mobile communication network; network judgment The module 260 can also prompt the user to set the mobile device 120 to use the mobile communication network when it is determined that the mobile device 120 is not currently using the mobile communication network (step 325). The mobile device 120 is set to use the mobile communication network to obtain network identification data and door number data (step 330 ).

In addition, in the above-mentioned embodiment, if the identity recognition element 200 also includes a data input module 240, the web browser including the identity recognition element 200 can call the identity recognition Component 200 instead of displaying the webpage for entering user information. After the identity recognition component 200 is executed, the data input module 240 can provide a user interface for the user to input user data. In this way, the data acquisition module 220 of the identity recognition component 200 can also obtain the user data input by the user. At the same time, the identification device 200 can also detect the network identification data used by the mobile device 120 (step 330 ). Among them, before the data obtaining module 220 obtains the user data, the mobile device 120 can be shown in the process of "Fig. User identification module (step 311), when the data acquisition module 220 obtains user data, the data acquisition module 220 can judge whether the detection module 230 has detected two or more user identification modules (step 311). 313), if not, the data acquisition module 220 can directly obtain network identification data and user information (step 330); and if the data acquisition module 220 detects multiple user identification modules, the data acquisition module 220 may prompt the user to input the phone number data corresponding to the subscriber identification module of the mobile communication network currently used by the mobile device 120 in the user data (step 315), and obtain the user data after the user confirms, and Detect to obtain network identification information (step 330).

In summary, it can be seen that the difference between the present invention and the prior art lies in that the identity recognition element executed by the mobile device obtains the network identification data and user data, and then transmits the network identification data and user data to The service server, and the service server sends the network identification data and user data to the telecommunications server, so that the telecommunications server generates an identification result based on the network identification data and user data and sends the identification result to the service server The technical means can solve the problem in the prior art that the mobile device is not easy to connect to the hardware carrier to identify the user's identity, and then achieve the technical effect of using the mobile device alone to complete the identity identification.

Furthermore, the method for identifying an identity through a telecommunications server using network identification data of the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a computer system in a centralized manner or with different components A decentralized implementation spread across several interconnected computer systems.

Although the embodiments disclosed in the present invention are as above, the content described is not intended to directly limit the scope of protection of the present invention. Anyone with ordinary knowledge in the technical field of the present invention, without departing from the spirit and scope disclosed in the present invention, makes some changes and modifications to the form and details of the implementation of the present invention, all of which belong to the patent protection of the present invention scope. The scope of patent protection of the present invention shall still be defined by the scope of the attached patent application.

110: Service server 111: application host 112: Identification host 113:Authentication server 120:Mobile device 130: Telecom server 200: Identification element 220: Data acquisition module 230: Detection Module 240: Data input module 250: Verification module 260: Network Judgment Module 280:Communication module Step 301: The mobile device connects to the service server through the mobile communication network Step 311: The mobile device detects the user identification module Step 313: The mobile device judges whether multiple network identification data are detected Step 315: The mobile device prompts to input the phone number corresponding to the network identification data corresponding to the mobile communication network Step 321: The mobile device determines whether to use the mobile communication network Step 325: The mobile device prompts to switch to the mobile communication network Step 330: The mobile device obtains network identification information and user information Step 340: The mobile device judges whether the device unlocking information has passed the verification Step 360: The mobile device sends the network identification information and user information to the service server Step 370: The service server sends the network identification information and user information to the telecommunications server Step 380: The telecommunications server generates an identification result based on the network identification data and user information, and sends the identification result to the service server

FIG. 1A is a system architecture diagram of the present invention for identifying an identity through a telecommunications server using network identification data. FIG. 1B is another system architecture diagram of the present invention for identifying identity through a telecommunications server using network identification data. Figure 2 is a schematic diagram of components of the mobile device proposed by the present invention. FIG. 3A is a flowchart of a method for identifying an identity through a telecommunications server using network identification data proposed by the present invention. FIG. 3B is a flow chart of the method for prompting to switch networks proposed by the present invention. FIG. 3C is a flow chart of the method for prompting the input of the door number for using the mobile communication network proposed by the present invention.

Step 301: The mobile device connects to the service server through the mobile communication network

Step 330: The mobile device obtains network identification information and user information

Step 340: The mobile device judges whether the device unlocking information has passed the verification

Step 360: The mobile device sends the network identification information and user information to the service server

Step 370: The service server sends the network identification information and user information to the telecommunications server

Step 380: The telecommunications server generates an identification result based on the network identification data and user information, and sends the identification result to the service server

Claims (10)

A method for identifying an identity through a telecommunications server using network identification data, the method at least includes the following steps: a telecommunications server sends a network address to a mobile device; the mobile device uses a web browser to connect to Line to a service server, the web browser includes an identity identification element; the mobile device calls the identity identification element through the web browser, so as to obtain a user from the webpage displayed by the web browser through the identity identification element and detect the network address currently used by the mobile communication interface of the mobile device as a network identification data through the identification element; the mobile device sends the network identification data and the user information to the service server; the service server sends the network identification data and the user data to a telecommunications server; Whether the number data falls within the range of pre-established phone numbers, whether the network identification data is issued by the telecommunications server, and whether the phone number data and the identification data in the user data correspond to generate an identification result, and send The identification result is sent to the service server. The method for identifying an identity through a telecommunications server using network identification data as described in item 1 of the scope of patent application, wherein the method is before the mobile device transmits the network identification data and the user information to the service server , further comprising a step of prompting to switch to a mobile communication network when the mobile device determines that the mobile device is not currently using a mobile communication network. The method for identifying an identity through a telecommunications server using network identification data as described in item 1 of the scope of patent application, wherein the method is before the mobile device transmits the network identification data and the user information to the service server , further comprising the mobile device providing a step of inputting a device unlocking information and verifying the device unlocking information. The method of using network identification data to identify an identity through a telecommunications server as described in item 1 of the scope of the patent application, wherein the step of obtaining the network identification data and the user information on the mobile device in the method further includes the mobile device Detect the installed Subscriber Identity Module (SIM), and when two or more SIMs are detected, prompt to enter the user ID currently used to use the mobile communication network in the user information Steps for the door number corresponding to the module. The method for identifying an identity through a telecommunications server using network identification data as described in item 1 of the scope of the patent application, wherein the step for the mobile device to obtain the user data is that the mobile device reads the user data input by the user . A system for identifying an identity through a telecommunications server using network identification data, the system at least includes: a service server; a mobile device, used to execute a web browser including an identity identification element, and call through the web browser The identity recognition element, the identity recognition element includes: a data acquisition module, used to obtain a user data from the webpage displayed by the web browser and used to detect one of the mobile communication interface currently used by the mobile device The network address is used as a network identification data; and a communication module is used to connect with the service server through a mobile communication network, and transmit the network identification data and the user information to the service server; and A telecommunications server, used to issue the network address to the mobile device, receive the network identification data and the user data sent by the service server, and use the network identification data to communicate with the user Whether one of the phone number data in the data corresponds, whether the phone number data falls within the pre-established phone number range, whether the network identification data is issued by the telecommunications server, and the phone number data and the identity identification in the user data Whether the data corresponds to generate an identification result, and send the identification result to the service server. As described in item 6 of the scope of the patent application, the system for identifying an identity through a telecommunications server using network identification data, wherein the identification element further includes a network judgment module for judging whether the mobile device is currently using a mobile communication network . The system for identifying an identity through a telecommunications server using network identification data as described in item 6 of the scope of the patent application, wherein the identity identification element further includes a verification module for inputting a device unlocking data and verifying the device unlocking data . The system for identifying an identity through a telecommunications server using network identification data as described in item 6 of the scope of the patent application, wherein the mobile device further includes a detection module for detecting the user identification module installed on the mobile device , the data acquisition module is further used to prompt the user information to enter the user currently using the mobile communication network when the detection module detects two or more user identification modules Identify the door number corresponding to the module. As described in item 6 of the scope of the patent application, the system for identifying an identity through a telecommunications server using network identification data, wherein the data obtaining module reads the user data input by the user to obtain the user data.

Images