TWM549918U - Cross verification system implemented along with a mobile device - Google Patents

Description

Interactive verification system implemented with a mobile device

This creation is about an interactive verification system, in particular, an interactive verification system implemented in conjunction with a mobile device.

With the popularity of the Internet, financial operators are constantly adding new channels of different functions to develop business development and ensure the quality of operational services. For example: increase the various website functions, various mobile device APP functions, remote connection action office, remote maintenance operation system and other external channels. Compared with the opening of branches, the operation mode of ATM bases and the external mode (closed network to open network), it is completely different.

However, there are doubts about the security of the Internet. In recent years, hackers have continuously developed various computer viruses, worms, phishing websites, social projects, and side-recording Trojans. The purpose is to obtain computer system resources, and then Get illegal benefits. Most of the current financial industry still follow the traditional model, using passwords to control computer system resources, which is the target of hackers to steal system passwords as a means of attack. In the face of this kind of attack, most financial companies still use protective measures such as increasing the length of passwords, restricting password coding rules, shortening the password change cycle, strengthening employee security training, or adding various hardware and software devices. To protect computer system resources. However, if the user's account number and password are stolen, the hacker has the opportunity to fraudulently use the user's identity and log in to the computer system to steal information on the intranet or the Internet. Disasters may be derived from the leakage of sensitive information, loss of financial and goodwill, or even the operation of the company.

For this reason, how to provide a verification system, which is an important issue facing financial institutions, is evident in its importance.

In view of this, the present invention provides an interactive verification system implemented with a mobile device, which can be used to solve the above problem.

In one aspect, the present disclosure discloses an interactive verification system implemented in conjunction with a mobile device. The interactive verification system implemented by the mobile device includes a server, a two-dimensional barcode, and a software product (App). The two-dimensional barcode is generated by the server. The software product is downloaded from the server and installed on the mobile device.

The two-dimensional barcode is generated by the method comprising: receiving, by the server, a user account, an identification information of the mobile device, and an abstract, randomly selecting a specific combination method from the plurality of combination methods, and Combining the user account and the identification information according to the specific combination method to generate a first key; and the server encrypts an original code content based on the first key to obtain an encrypted content, and according to the The encrypted content generates the two-dimensional barcode, wherein the original code content includes the abstract and a first hash value of the first key, the first hash value being generated by a hash method.

The server encrypts the user account based on the first key to obtain an App tag file, and provides the mobile device with storage. In addition, the server, the two-dimensional barcode, and the application are mutually authenticated by a method comprising: the App transmitting the user password to the server and the App label file obtained from the mobile device, the server After the confirmation is correct, the encrypted information and the first hash value are transmitted to the App, and the encrypted information includes: a first number for identifying the specific combination method; the App obtains the user account and the identification from the mobile device Information, and selecting the specific combination method according to the first number, and combining the user account and the identification information according to the specific combination method to generate a second key; the App generates the second by the hash method a second hash value of the key, and verifying the consistency of the first hash value and the second hash value, if the verification is passed, displaying a scan interface on the mobile device for scanning the two-dimensional barcode; The app interprets the encrypted content of the two-dimensional barcode read by the second key to obtain the original code content and the first hash value thereof, and verifies the first hash value and the first Consistency hash value.

According to the present invention, the two-dimensional barcode is preferably a solid two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon.

In some embodiments of the present creation, the two-dimensional barcode is a QR code.

In some embodiments of the present invention, the software product has a plurality of combination methods and corresponding numbers embedded therein, so that the software product can select the specific combination method according to the number.

In some embodiments of the present work, the abstract is selected by the user of the mobile device.

In some specific embodiments of the present invention, the identification information includes an IMEI, a UDID, a keychain, a MAC address, a mobile number, or a combination thereof.

On the other hand, the present invention provides an interactive verification method implemented in conjunction with a mobile device. The interactive verification method implemented by the mobile device includes the following steps: a server generates a two-dimensional barcode, wherein the two-dimensional barcode is generated by the method comprising: receiving a user account, and identifying information of the mobile device; And an abstract, randomly selecting a specific combination method from the plurality of combination methods, and combining the user account and the identification information according to the specific combination method to generate a first key; and based on the first key pair An original code content is encrypted to obtain an encrypted content, and the two-dimensional barcode is generated according to the encrypted content, wherein the original code content includes the abstract, and a first hash value of the first key, the first hash The value is generated by a hash method; the server encrypts the user account based on the first key to obtain an App tag file, and provides the mobile device with storage; a software product (App) is downloaded from the server. And installing on the mobile device, transmitting the user password to the server and the App label file obtained from the mobile device, and the server confirms the error Transmitting, to the App, an encrypted information, and the first hash value, the encrypted information includes: a first number for identifying the specific combination method; the App obtains the user account and the identification information from the mobile device, and according to the The first number selects the specific combination method, and then combines the user account and the identification information according to the specific combination method to generate a second key; the App generates the second key by the hash method. a second hash value, and verifying the consistency of the first hash value and the second hash value, if the verification is passed, displaying a scan interface on the mobile device for scanning the two-dimensional barcode; and the App is The second key interprets the encrypted content of the read two-dimensional barcode to obtain the original code content and the first hash value thereof, and verify that the first hash value is consistent with the second hash value Sex.

In some embodiments of the present invention, the two-dimensional barcode is a physical two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon.

In some embodiments of the present creation, the two-dimensional barcode is a QR code.

In some embodiments of the present work, the abstract is selected by the user of the mobile device.

In some embodiments of the present invention, the software product has a plurality of combination methods and corresponding numbers embedded therein, so that the software product can select the specific combination method according to the number.

In some specific embodiments of the present invention, the identification information includes an IMEI, a UDID, a keychain, a MAC address, a mobile number, or a combination thereof.

The interactive verification system and method implemented by the present invention combined with a mobile device can be used to provide a secure login mechanism for users not to be separated when the mobile device and the two-dimensional barcode generated by the server are separated from each other. The password can be used to log into the office computer system, and the user identification and password can be used as the unique identity authentication mechanism for logging into the office computer system. Moreover, since the interactive verification system and method implemented by the present invention combined with a mobile device does not require a password, there is no burden or risk to the user to store, change, lose, stolen or forget the password. In addition, hackers cannot obtain access to the office computer system (password) through attacks such as viruses, worms, phishing websites, social projects, Trojans, and APT.

Other objects and advantages of the present invention are described in the following description or may be understood by the embodiments of the present invention. It is to be understood that the foregoing description of the present invention and the following description of the present invention are intended to be illustrative and illustrative only.

It is to be noted that all technical and scientific terms used herein have the meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise indicated. In addition, the word "a" used in the specification, unless otherwise specified, means the quantity of at least one (one or more).

In one aspect, the present disclosure provides an interactive verification system implemented in conjunction with a mobile device that includes a server, a two-dimensional barcode, and a software product (App). The two-dimensional barcode is generated by the server. The software product is downloaded from the server and installed on the mobile device. The two-dimensional barcode is generated by the method comprising: the server receiving (for example, logging in by the user of the mobile device) a user account, an identification information of the mobile device, and an abstract, Selecting a specific combination method in a plurality of combination methods, and combining the user account and the identification information according to the specific combination method to generate a first key; the server is based on the first key content of the first key pair Encrypting to obtain an encrypted content, and generating the two-dimensional barcode according to the encrypted content, wherein the original code content includes the abstract, and a first hash value of the first key, the first hash value is The hash method is produced.

The server encrypts the user account based on the first key to obtain an App tag file and provides the mobile device with storage. In addition, the server, the two-dimensional barcode, and the application are mutually authenticated by a method comprising: the App transmitting the user password to the server and the App label file obtained from the mobile device, the server After the confirmation is correct, the encrypted information and the first hash value are transmitted to the App, and the encrypted information includes: a first number for identifying the specific combination method; the App obtains the user account and the identification from the mobile device Information, and selecting the specific combination method according to the first number, and combining the user account and the identification information according to the specific combination method to generate a second key; the App generates the second by the hash method a second hash value of the key, and verifying the consistency of the first hash value and the second hash value, if the verification is passed, displaying a scan interface on the mobile device for scanning the two-dimensional barcode; The app interprets the encrypted content of the two-dimensional barcode read by the second key to obtain the original code content and the first hash value thereof, and verifies the first hash value and the first Consistency hash value.

According to the present creation, the mobile device is included, but is not limited to a tablet computer or a smart phone. The mobile device can include a storage unit storing the code of the software product, and a processing unit for executing the code of the software product. In a preferred embodiment of the present invention, the mobile device is a smart phone. For example, the user can enter the user account and an activation password through the software product to log in to the server. The activation password can be transmitted by the server to the user after the software product and its binding to the mobile device are authenticated by the server.

The system of the present invention may further include the mobile device. In other words, the present invention also provides an interactive verification system including the server, the two-dimensional barcode, the mobile device, and the software product (App) as described above.

According to the present creation, the software product is preferably a mobile application (App).

According to a preferred embodiment of the present invention, the App tag file is downloaded to the mobile device with the App.

In some embodiments of the present invention, the two-dimensional barcode is a physical two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon. For example, the two-dimensional barcode is a two-dimensional barcode sticker, and the user can paste the two-dimensional barcode sticker on a portable item (other than the mobile device) so as to be scanned by the mobile device when needed.

In some embodiments of the present creation, the two-dimensional barcode is a QR code.

According to a preferred embodiment of the present invention, the abstract is a user-selected abstract.

In some embodiments of the present invention, the identification information includes an IMEI, a UDID, a Keychain, a MAC address, a mobile number, or a combination thereof.

In some embodiments of the present invention, the software product has a plurality of combination methods and corresponding numbers embedded therein, so that the software product can select the specific combination method according to the number.

In another aspect, the present invention provides an interactive verification method implemented by a mobile device, the method comprising: a server generating a two-dimensional barcode, wherein the two-dimensional barcode is generated by the method comprising: receiving a user account An identification information of the mobile device, and an abstract, randomly selecting a specific combination method from the plurality of combination methods, and combining the user account and the identification information according to the specific combination method to generate a first key; And encrypting an original code content based on the first key to obtain an encrypted content, and generating the two-dimensional barcode according to the encrypted content, wherein the original code content includes the abstract, and a first key of the first key a hash value, the first hash value is generated by a hash method; the server encrypts the user account based on the first key to obtain an App tag file, and provides the mobile device with storage; a software product ( App), downloaded from the server and installed in the mobile device, transmitting the user password to the server and the App tag obtained from the mobile device After the server confirms that the error is correct, transmitting an encrypted information and the first hash value to the App, the encrypted information includes: a first number for identifying the specific combination method; the App obtains the user from the mobile device An account number and the identification information, and selecting the specific combination method according to the first number, and combining the user account and the identification information according to the specific combination method to generate a second key; the App uses the hash method Generating a second hash value of the second key, and verifying the consistency of the first hash value and the second hash value. If the verification is passed, displaying a scan interface on the mobile device for scanning the two-dimensional a barcode; and the app interprets the encrypted content of the two-dimensional barcode read by the second key to obtain the original code content and the first hash value thereof, and verify the first hash value Consistency with the second hash value.

In some embodiments of the present work, the abstract is selected by the user of the mobile device.

In some embodiments of the present invention, the two-dimensional barcode is a physical two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon. In some embodiments of the present creation, the two-dimensional barcode is a QR code.

According to a preferred embodiment of the present invention, the App tag file is downloaded to the mobile device with the App.

According to a preferred embodiment of the present invention, the abstract is a user-selected abstract.

In some embodiments of the present invention, the identification information includes an IMEI, a UDID, a Keychain, a MAC address, a mobile number, or a combination thereof.

In some embodiments of the present invention, the software product has a plurality of combination methods and corresponding numbers embedded therein, so that the software product can select the specific combination method according to the number.

A preferred embodiment of the interactive verification system and method implemented by the mobile device in conjunction with FIG. 1 and FIG. 2 will now be described.

Referring to FIG. 1, an interactive verification system implemented by a mobile device according to an embodiment of the present invention is shown. In this embodiment, the interactive verification system 1 implemented by a mobile device includes a server 10, a two-dimensional barcode 11 and a software product 12. The two-dimensional barcode 11 is generated by the server 10. The software product 12 is downloaded from the server 10 and mounted to a mobile device 9.

In some embodiments of the present invention, the two-dimensional barcode 11 is a solid two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon. The two-dimensional barcode 11 is generated by a method comprising: the server 10 receiving (for example, logging in by the user of the mobile device 9) a user account, an identification information of the mobile device 9, and an abstract And randomly selecting a specific combination method from the plurality of combination methods, and combining the user account and the identification information according to the specific combination method to generate a first key.

In some embodiments, the abstract is a user-selected abstract. For example, a short essay or a piece of lyrics, etc., selected by the user. The number of bits in the abstract is preferably between 512 and 1024 bits. In addition, the specific combination method randomly combines the user account and the identification information, and the combination manner includes but is not limited to: a complete data combination of a single field or multiple fields, a partial data combination of multiple fields, and / or multiple combinations of the same field data.

The server 10 encrypts an original code content based on the first key to obtain an encrypted content, and generates the two-dimensional barcode 11 according to the encrypted content. The content of the original code includes the digest, and a first hash value of the first key, the first hash value is generated by a hash method.

In addition, the server 10 encrypts the user account based on the first key to obtain an App tag file, and provides the mobile device 9 for storage. The server 10, the two-dimensional barcode 11 and the App system mutually authenticate each other by the method comprising the following steps: the App transmits the user password to the server 10 and the App label file obtained from the mobile device 9. After the server 10 confirms that it is correct, it transmits an encrypted information and the first hash value to the App.

The encrypted information includes: a first number for identifying the specific combination method; the App obtains the user account and the identification information from the mobile device 9, and selects the specific combination method according to the first number, and then The user account and the identification information are combined according to the specific combination method to generate a second key.

Then, the App generates a second hash value of the second key by the hash method, and verifies the consistency of the first hash value and the second hash value. If the verification is passed, a scanning interface is displayed on the mobile device 9, and the two-dimensional barcode 11 can be scanned through the scanning interface. In addition, the app interprets the encrypted content of the two-dimensional barcode 11 read by the second key to obtain the original code content and the first hash value thereof, and verify the first hash value. Consistency with the second hash value.

In some embodiments, the mobile device 9 cooperated with the interactive verification system 1 implemented by a mobile device may be a tablet computer or a smart phone. In the preferred embodiment of the present invention, the mobile device 9 cooperated with the interactive verification system 1 implemented by a mobile device is a smart phone. In addition, the mobile device 9 can include a scanning element (not shown) for scanning the two-dimensional barcode 11. For example, the scanning element can be a photographic element. The two-dimensional barcode 11 can be a QR code.

Additionally, in some embodiments, server 10 may include a database (not shown) for storing the particular combination method described above.

In some embodiments, the identification information includes one or more of an IMEI, a UDID, a keychain, a MAC address, and a mobile phone number, but the present invention is not limited thereto.

On the other hand, the present invention provides an interactive verification method implemented in conjunction with a mobile device. Referring to FIG. 2, FIG. 2 is a flow chart showing an interactive verification method implemented by a mobile device according to an embodiment of the present invention. As shown, the method includes the following steps: (S20) a server generates a two-dimensional barcode, wherein the two-dimensional barcode is generated by a method comprising: receiving a user account, an identification information of the mobile device And an abstract, randomly selecting a specific combination method from the plurality of combination methods, and combining the user account and the identification information according to the specific combination method to generate a first key; and based on the first key pair The original code content is encrypted to obtain an encrypted content, and the two-dimensional barcode is generated according to the encrypted content, wherein the original code content includes the abstract, and a first hash value of the first key, the first hash value (S21) the server encrypts the user account based on the first key to obtain an App tag file, and provides the mobile device file for storage; (S22) downloading a software product (App) The server is installed in the mobile device, and transmits the user password and the App tag file obtained from the mobile device to the server. After the server confirms the error, the server The app transmits an encrypted information, and the first hash value, the encrypted information includes: a first number used to identify the specific combination method; (S23) the App obtains the user account and the identification information from the mobile device, and Selecting the specific combination method according to the first number, and combining the user account and the identification information according to the specific combination method to generate a second key; (S24) the App generates the second by the hash method a second hash value of the key, and verifying the consistency of the first hash value and the second hash value, if the verification is passed, displaying a scan interface on the mobile device for scanning the two-dimensional barcode; and S25) the App interprets the encrypted content of the two-dimensional barcode read by the second key to obtain the original code content and the first hash value thereof, and verify the first hash value and The consistency of the second hash value.

The two-dimensional barcode is a physical two-dimensional barcode, and includes a matrix and a two-dimensional barcode displayed thereon, the two-dimensional barcode is a QR code. The App tag file is downloaded to the mobile device with the app. The abstract is a user-selected abstract. The identification information includes an IMEI, a UDID, a keychain, a MAC address, a mobile number, or a combination thereof.

It should be noted that the interactive verification method implemented by the present invention in conjunction with a mobile device may be completed with or without the aforementioned interactive verification system 1 implemented by a mobile device.

In summary, in recent years, hackers have continuously developed various computer viruses, worms, phishing websites, social projects, and side-recording Trojans. The purpose is to obtain computer system resources and obtain illegal interests. Most of the current financial industry still follow the traditional model, using passwords to control computer system resources, which is the target of hackers to steal system passwords as a means of attack. Once the user's account and password are stolen, the hacker has the opportunity to fraudulently use the user's identity and log in to the computer system to steal information either internally or externally. For the financial industry, the risky information leakage, financial and goodwill loss, Even jeopardizing disasters such as company operations. Compared with the prior art, the interactive verification system and method implemented by the present invention combined with a mobile device can achieve at least the following effects: 1. In the case where the two-dimensional barcode generated by the mobile device and the server is physically separated from each other, A secure login mechanism is provided to enable the user to log into the office computer system without a password, and to change the user identity account and password as the only identity authentication mechanism for logging into the office computer system. 2. Since no password is required, there is no burden or risk to the user to keep, change, lose, stolen or forget the password. 3. The hacker cannot obtain the login permission (password) of the office computer system by means of viruses, worms, phishing websites, social engineering, Trojans, APT and other means of attack.

The features and spirit of the present invention are intended to be more apparent from the detailed description of the preferred embodiments. On the contrary, it is intended to cover a variety of variations and equivalent arrangements within the scope of the scope of the patent application.

1 ‧‧‧Interactive verification system with a mobile device
10 ‧‧‧Server
11 ‧‧‧2D barcode
12 ‧‧‧Software products
9 ‧‧‧Mobile devices
S20~S25 ‧‧‧Step process

1 is a block diagram showing an interactive verification system implemented by a mobile device in one embodiment of the present invention.

FIG. 2 is a flow chart showing an interactive verification method implemented by a mobile device according to an embodiment of the present invention.

1 ‧‧‧Interactive verification system with a mobile device

10 ‧‧‧Server

11 ‧‧‧2D barcode

12 ‧‧‧Software products

9 ‧‧‧Mobile devices

Claims (6)

An interactive verification system implemented by a mobile device, comprising: a server; a two-dimensional barcode generated by the server; and a software product (App) downloaded from the server and installed in the mobile device; The two-dimensional barcode is generated by the method comprising the following steps: the server receives a user account, an identification information of the mobile device, and an abstract, randomly selecting a specific combination method from the plurality of combination methods, and according to the The specific combination method combines the user account and the identification information to generate a first key; and the server encrypts an original code content based on the first key to obtain an encrypted content, and according to the encrypted content Generating the two-dimensional barcode, wherein the original code content includes the digest, and a first hash value of the first key, the first hash value is generated by a hash method; wherein the server is based on the first gold The key is encrypted to obtain an App tag file and provided to the mobile device for storage; and wherein the server, the 2D barcode, and the Ap The p is mutually verified by the method comprising the following steps: the App transmits the user password to the server and the App tag file obtained from the mobile device, and after the server confirms the error, transmits an encrypted information to the App, And the first hash value, the encrypted information includes: a first number for identifying the specific combination method; the App obtains the user account and the identification information from the mobile device, and selects the specific number according to the first number Combining the method, combining the user account and the identification information according to the specific combination method to generate a second key; the App generates a second hash value of the second key by using the hash method, and verifying the Consistency of the first hash value and the second hash value, if the verification is passed, displaying a scanning interface on the mobile device for scanning the two-dimensional barcode; and reading the application by the second key interpretation Obtaining the encrypted content of the two-dimensional barcode to obtain the original code content and the first hash value thereof, and verifying the first hash value and the second hash value Consistency. The system of claim 1, wherein the two-dimensional barcode is a physical two-dimensional barcode comprising a substrate and a two-dimensional barcode displayed thereon. The system of claim 1 or 2, wherein the two-dimensional barcode is a QR code. The system of claim 1, wherein the App tag file is downloaded to the mobile device with the App. The system of claim 1, wherein the digest is a user-selected digest. The system of claim 1, wherein the identification information comprises an IMEI, a UDID, a keychain, a MAC address, a mobile number, or a combination thereof.