TWM458040U - Network security and identity verification device - Google Patents

Description

Network security and identity verification device

This creation is about a network security and identity verification device, especially a smart phone installation application (APP) and OTP authentication system for transmitting and receiving one-time password OTP. When the partner website requires identity authentication and password security. At this time, the network security and identity verification device of the security mechanism can be achieved.

According to the general Internet website operators, the identity of the customer is often unable to be authenticated, causing many unnecessary troubles, and there is a risk of password theft. Therefore, the one-time password OTP is used in the market to solve the aforementioned problems. The principle is to use the characteristics of the failure, which reduces the risk of password theft, and can also be used as the basis for confirming the user identity authentication.

In the current market, the use of the one-time password OTP has a dynamic password generator (Token) combined with a physical device, a password obtained by using a telephone voice system, and a method of transmitting a one-time password by using a mobile phone short message. However, under the current trend of the popularity of smart phones, there is no more economical, convenient and effective solution for smart phones. In view of this, the applicant has been engaged in the business for many years. After continuous research and experimentation, Yan Mengsheng designed a network security and identity verification device to make network certification more economical, convenient and more effective.

The main purpose of this creation is to provide a network security and identity verification device that uses a smart phone to install an application (APP) and an OTP authentication system as a one-time password for transmitting and receiving OTP. When the password is secure, a secure mechanism can be achieved.

The aforementioned network security and identity verification device includes at least a smart phone and an OTP authentication system. Among them, the smart phone is equipped with an application (APP), which can constitute a function of surfing the Internet. The OTP authentication system has at least one database for generating or receiving a one-time password (OTP). When the partner website needs identity authentication and password security, in addition to inputting the content of the authentication webpage provided on the website, input the relevant information for verification, and then receive and transmit the one-time password (OTP) by using the mobile phone application of the smart phone. Through the comparison of the OTP verification system, after the confirmation is correct, the authentication procedure can be completed, thereby verifying the device to achieve a secure mechanism.

Please refer to the first figure and the first A picture at the same time, which is the architectural diagram and perspective view of the creation. As shown in the figure, the architecture of the present invention includes at least a smart phone 1 and an OTP authentication system 2 capable of accessing the Internet via the communication network A, wherein the smart phone 1 is equipped with an application (APP) 11, and the OTP authentication system 2 It can be used to generate or receive a one-time password (OTP). The OTP verification system 2 includes a database 21 for storing a one-time password (OTP) for comparison data.

The one-time password (OTP) transmission method of this creation is divided into an active transmission method and a passive reception method.

Please refer to the second figure, which is the flow chart of the active transmission OTP method for this creation. Please cooperate with the first picture and the first picture A, as shown in the figure, which includes the following steps:

1. On the website of the partner website operator, the customer actively enters the number of his smartphone 1 according to the website screen (this is the registered account number of the application [APP] or the member number [card number], this member number is first stored on the website) and starts at the same time. Smart Phone 1 Application (APP) 11.

2. The cooperation website will notify the OTP verification system 2 of the mobile phone number.

3. The OTP verification system 2 generates a set of one-time passwords (OTP), which are transmitted back to the cooperation website and displayed on the web page.

4. The customer transmits the OTP using the smart phone 1 application (APP) 11 according to the one-time password (OTP) displayed on the website.

5. The OTP verification system 2 starts the comparison work on the OTP received by the application (APP) 11, and returns the verification result to the cooperation website.

6. If the cooperation website receives the OTP verification system 2 to verify the correct notification, the customer can continue to use the services provided by the website. If the verification failure notification is received, an error message will be displayed and the action will be re-entered.

Through the foregoing steps, when the cooperation website needs identity authentication and password security, the authentication process can be completed through the OTP verification system 2, and the authentication process can be completed, thereby achieving a secure mechanism.

Please refer to the third figure, which is the flow chart of the passive transmission OTP method for this creation. Please cooperate with the first picture and the first picture A, as shown in the figure, which includes the following steps:

1. The customer actively enters his smart phone 1 number according to his website screen (this is the registered account or member number [card number] of the application [APP]11, this member number is first stored on the website) and the smart phone 1 application is started at the same time. Program (APP) 11.

2. The cooperation website will notify the OTP verification system 2 of the mobile phone number.

3. The OTP verification system 2 generates a set of one-time passwords (OTPs) that are transmitted to the application (APP) 11 on the consumer's smart phone 1.

4. The customer then enters the one-time password (OTP) on the cooperation website.

5. The cooperation website transmits the one-time password (OTP) to the OTP verification system 2 again.

6. The OTP verification system 2 receives the one-time password (OTP) of the cooperation website to start the comparison work, and returns the verification result to the cooperation website.

7. If the cooperation website receives the OTP verification system 2 to verify the correct notification, the customer can continue to use the services provided by the website. If the verification failure notification is received, an error message will be displayed and the action will be re-entered.

Through the foregoing steps, when the cooperation website needs identity authentication and password security, the authentication process can be completed through the OTP verification system 2, and the authentication process can be completed, thereby achieving a secure mechanism.

This creation is based on the use of one-time password (OTP) for smart phones. The biggest difference between the traditional mobile phone newsletter and OTP is as follows:

The foregoing embodiments are merely illustrative of the preferred embodiments of the present invention, and are not intended to limit the scope of the present invention, and the details of the present invention are not deviated from the spirit of the present invention.

In summary, the creation uses a mobile phone application of a smart phone to transmit or receive a one-time password (OTP), and constitutes a network security and identity verification device via an OTP verification system. When the partner website needs identity authentication and password security, the authentication process can be completed after the comparison is confirmed, thus achieving a secure mechanism. For a practical design, it is a novelty creation. If you apply for a patent in accordance with the law, you will be punished by the Bureau of Public Information, and you will be granted a patent as soon as possible.

1‧‧‧Smart mobile phone

11‧‧‧Application (APP)

2‧‧‧OTP Certification System

21‧‧‧Database

A‧‧‧Communication Network

The first picture is the architectural diagram of this creation.

The first A picture is a perspective view of the creation.

The second picture is a flow chart of the active transmission OTP method of the present creation.

The third picture is the flow chart of the passive transmission OTP method of this creation.

1‧‧‧Smart mobile phone

11‧‧‧Application (APP)

2‧‧‧OTP Certification System

21‧‧‧Database

Claims (3)

A network security and identity verification device comprising: a smart phone for Internet access, with an application (APP) installed for linking with an OTP verification system; and when the OTP verification system requires network security and identity verification, According to the content of the authentication webpage provided on the OTP verification system, input relevant data for verification, and receive or transmit a one-time password (OTP) to the authentication website system through an application (APP); the OTP verification system is for generating or Receiving the one-time password (OTP) transmitted by the smart phone, and comparing the one-time password (OTP), the authentication process can be completed without confirmation. For example, the network security and identity verification device described in claim 1 is characterized in that the installation account of the smart phone application (APP) is the phone number of the smart phone. The network security and identity verification device according to claim 1, wherein the OTP verification system includes a database for storing a one-time password (OTP) for comparison data.