TWM586390U - A system for performing identity verification according to the service instruction to execute the corresponding service - Google Patents

Abstract

A system for performing identity confirmation according to a service instruction to perform corresponding services. When a service server requests identity confirmation through a mobile device, it sends a service instruction corresponding to the type of identity confirmation to the service server, and the service server confirms the identity by Select the connection method for the type, and send the identification data and user data in the service instruction to the telecommunication server according to the selected connection method, so that the telecommunication server verifies the identification data and user data to generate a verification result, and sends the verification result To the service server, when the verification result indicates that the verification is passed, the service server performs technical operations corresponding to the type of identity confirmation according to the user data, and can achieve the technical effect of using the mobile device alone to complete the identity identification.

Description

System for confirming identity according to service instruction to execute corresponding service

A service execution system, in particular, refers to a system that performs identity verification in accordance with service instructions to perform corresponding services.

In recent years, due to the rapid development of the communications and Internet-related industries, the demand for electronic and mobile services has been increasing. This demand is also reflected in the financial industry and government departments. For example, brokers, banks In addition to providing Internet services, insurance companies, investment consulting companies, and government units have also begun to provide mobile applications (APPs). Users can use various mobile devices such as mobile phones or tablets to run mobile applications. After the network is connected to the corresponding service server (or called the application host), the user can operate the mobile device to perform mobile services such as securities transactions, transfers, insurance, application documents, etc. In this way, the user can perform the required mobile service without leaving the location.

When users use online or mobile services, they usually need to be identified first. At present, most of the methods for identifying through the network require the use of a hardware carrier to identify the user's identity. For example, a specific USB flash drive or smart card (chip card) is used to store the user's credential data for use. When carrying out mobile services, the identity is identified by connecting a USB flash drive or a smart card that stores credential data.

However, most of the methods of using hardware carriers to identify users can only be performed on a computer. The main reason is that the hardware carriers need to be connected to the computer through a connection slot such as a USB or an external device such as a card reader. Read, but most current mobile devices do not have a connection slot that can be connected to the hardware carrier, or the user needs to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot connect to the hardware. Vehicles, as a result, users cannot use mobile devices for identification, so that they cannot use mobile services, causing inconvenience to users.

In summary, it can be known that in the prior art, there has been a problem that mobile devices cannot easily connect to a hardware carrier to identify a user's identity for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem that the mobile device cannot be easily connected to a hardware device to identify the user's identity in the prior art, this creation discloses a system for confirming the identity in accordance with a service instruction to perform a corresponding service. A system for confirming identity to perform corresponding services includes at least: a mobile device; a service server that provides a connection to the mobile device to request the identity confirmation of the mobile device and receive a service instruction corresponding to the type of identity confirmation generated by the mobile device, And used to select a connection method according to the type of identity confirmation, wherein the service instruction includes identification data and user data; an authentication server for receiving a service instruction transmitted by the service server according to the connection method; a telecommunications server, It is used to receive the identification data and user data transmitted by the authentication server, and used to authenticate the identification data and user data to generate a verification result, and through the authentication server The server sends the verification result to the service server, so that when the verification result indicates that the verification is passed, the service server performs operations corresponding to the type of identity confirmation according to the user data.

The system disclosed in this creation is as above. The difference from the previous technology lies in the fact that when the service server requests identity confirmation through a mobile device, this creation sends a service instruction corresponding to the type of identity confirmation to the service server. Select the connection method for the type of identity confirmation, and send the identification data and user data in the service instruction to the telecommunication server through the authentication server according to the selected connection method, so that the telecommunication server verifies the identification data and user data. Generate verification results, and send the verification results to the service server through the identity verification server. When the verification results indicate that the verification is passed, the service server performs operations corresponding to the type of identity verification based on user data, thereby solving the problems existing in the prior art. Problems, and can achieve the technical effect of using a mobile device alone for identification.

110‧‧‧ mobile device

120‧‧‧Service Server

121‧‧‧Application Host

125‧‧‧Identification Host

130‧‧‧Authentication Server

140‧‧‧Telecom server

Step 210‧‧‧ connect mobile device and service server

Step 220‧‧‧ When the service server requests identity confirmation, the mobile device generates a service instruction corresponding to the type of identity confirmation, and sends the service instruction to the service server

Step 223‧‧‧Mobile device connects to telecommunication server to obtain permission token

Step 225‧‧‧ The mobile device generates a service instruction corresponding to the type of identity confirmation, and adds a license token to the service instruction

Step 227‧‧‧ The mobile device sends a service instruction to the service server

Step 230‧‧‧ The service server selects a connection method according to the type of identity confirmation, and sends a service instruction to the identity authentication server according to the connection method.

Step 240‧‧‧ The authentication server sends identification data and user data to the telecommunication server

Step 250‧‧‧ The telecommunication server verifies the identification data and user data to generate a verification result, and sends the verification result to the identity verification server

Step 260‧‧‧ The authentication server sends the authentication result to the service server

Step 270‧‧‧ The service server performs the operation corresponding to the type of identity confirmation according to the user data when the verification result indicates that the verification is passed

FIG. 1A is a system architecture diagram for performing identity verification according to a service instruction and performing corresponding services mentioned in the creation.

FIG. 1B is another system architecture diagram for identifying the identity of a service instruction to execute a corresponding service.

FIG. 2A is a flowchart of performing identity verification according to a service instruction to execute a corresponding service mentioned in the creation.

FIG. 2B is a flowchart of obtaining a license token from a mobile device mentioned in the creation and transmitting it to a service server.

The following will describe the features and implementation of this creation in detail with drawings and examples. The content is sufficient to enable any person skilled in the art to fully understand and implement the technical means applied to solve technical problems in this creation, thereby realizing What this creation can achieve.

In this creation, when the service server requests identity confirmation, the mobile device can send the relevant information for identity confirmation to the telecommunication server for confirmation of the relevant information through the service server and the authentication server, so that the service server can verify the relevant information. Verify user identity after verification. Among them, the relevant information for identity verification of this creation includes but is not limited to identification data and user data, which will be explained in more detail later.

The following first illustrates the creation of the system architecture diagram for the identification of the service according to the service instructions mentioned in the "Figure 1A". As shown in "Figure 1A", the system of the present invention includes a mobile device 110, a service server 120, an identity verification server 130, and a telecommunications server 140. Among them, the mobile device 110, the service server 120, the identity verification server 130, and the telecommunications server 140 are computing devices.

The computing devices mentioned in this creation include, but are not limited to, one or more processors, one or more memory modules, and buses and other components that connect different components (including memory modules and processors). Through the contained multiple components, the computing device can load and execute the operating system, so that the operating system can run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and each of the above components is disposed in the housing.

The buses of the computing devices mentioned in this creation can include one or more types, such as data buses, address buses, and control buses. buses, expansion buses, and / or local buses. Computing device buses include, but are not limited to, side-by-side Industry Standard Architecture (ISA) buses, peripheral component interconnect (PCI) buses, Video Electronics Standards Association (VESA) local buses, and serial universal buses (USB), PCI-E bus and so on.

The processor of the computing device mentioned in this creation is coupled to the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected through a dedicated electrical connection. And / or coupled to the processor via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copying / moving data, etc., to run the operating system or execute various programs, modules, and / or element.

The processor of the computing device may be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral input / output (I / O) controllers, that is, the memory controller and peripheral input / output controllers can be included in Within an integrated circuit, two or more integrated circuits can also be used. The chipset usually provides I / O and memory management functions, and provides multiple general and / or special registers, timers, etc., among which the above general and / or special registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above memory modules include any type of volatile memory (volatile memory) and / or non-volatile memory (NVRAM) Memory, such as static random access memory (SRAM), dynamic random access memory (DRAM), flash memory (Flash), read-only memory (ROM), and the like. The above-mentioned large-capacity storage area may include any type of storage device or storage medium, such as a hard disk drive, a compact disc, a flash drive (flash memory), a memory card, a solid state disk (Solid State Disk, SSD), or any other storage device. That is, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard drives, and solid-state hard drives.

The processor of the computing device can also connect and communicate with peripheral devices such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral input / output controllers via peripheral input / output buses. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a monitor, printer, etc. It may be the same device as the peripheral output device, such as a touch screen. The communication interface may include a wireless communication interface and / or a wired communication interface. The wireless communication interface may include a mobile communication network supporting Wi-Fi, Zigbee and other wireless LANs, Bluetooth, infrared, near field communication (NFC), 3G / 4G / 5G, etc. Interface of wireless or data transmission protocols, and the wired communication interface may be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL modem, a cable modem, etc. The processor may poll various peripheral devices and interfaces periodically, so that the computing device can input and output data through the various peripheral devices and interfaces, and can also communicate with another computing device having the components described above.

The mobile device 110 can be connected to the service server 120 through a wireless network, and can send data or signals to the service server 120, and can also receive data or signals transmitted by the service server 120.

The mobile device 110 may use the services provided by the connected service server 120, and may be responsible for generating an identity confirmation request sent by the service server 120 before using certain services provided by the service server 120. A service instruction corresponding to the type of identity confirmation requested by the service server 120. In this creation, the type of identity confirmation is usually defined by the service server 120, which includes at least the user's door number identification and device confirmation, but this creation is not limited to this.

The service instruction generated by the mobile device 110 includes identification data and user data. The identification information and user data in the service order may vary depending on the type of identification. For example, when the type of identity confirmation is device confirmation, the identification data may be device identification data of the mobile device 110 (such as the card number or door number of the SIM card used by the mobile device 110 to connect to the mobile communication network), or it may be The network identification data of the mobile device 110 connected to the mobile communication network (such as the network address used by the mobile device 110). The user data may be the door number corresponding to the SIM card used by the mobile device 110 to connect to the mobile communication network. ; For another example, when the type of identity confirmation is door number identification, the identification data may also be device identification data or network identification data of the mobile device 110, in addition to the user data may include the mobile device 110 used to connect to a mobile communication network. In addition to the gate number corresponding to the SIM card used, it can also contain user identification information such as the identity card number of the user of the mobile device 110 and the birthday of the user of the mobile device, and even the user data can include the registration service server Personal data and other services required by the server 120. Among them, the user identification data is data sufficient to identify the user of the mobile device 110, and the personal data may be data related to the user of the mobile device 110 such as gender, address, email account, etc., but this creation is not limited to this .

The mobile device 110 may also connect to the telecommunications server 140 through a mobile communication network to obtain a license token issued by the telecommunications server 140, and may add the obtained license token to the service instruction when generating a service instruction, or It is possible to generate a service instruction containing a license token. Among them, the license token is data generated by the telecommunication server 140 in a specific encoding method for the specific data, and is usually formed by arbitrarily arranging a certain number of letters, numbers, and symbols, and has a temporal nature.

The service server 120 may provide services to the mobile device 110 for use. In some embodiments, the service server 120 may include an application host 121 and an identification host 125 as shown in FIG. 1B. That is, the service server 120 includes all functions of the application host 121 and the identification host 125.

The application host 121 can provide the mobile device 110 connection through a wireless network, and can send data or signals to the mobile device 110, and can also receive data or signals sent by the mobile device 110. Similarly, the application host 121 may be connected to the identification host 125 through a physical line or circuit, a wired or wireless network, and may transmit data or signals to the identification host 125, or may receive data or signals transmitted by the identification host 125. .

The services used by the mobile device 110 are usually provided by the application host 121. The application host 121 may first request the mobile device 110 to confirm the identity, and may provide specific services to the mobile device 110 after the mobile device 110 passes the identity confirmation. use.

The application host 121 may also receive a service instruction corresponding to the type of identity confirmation generated by the mobile device 110, and may transmit the received service instruction to the identity identification host 125.

The application host 121 may also receive a verification result, and may perform an operation corresponding to a type of identity confirmation according to the received user data when the received verification result indicates that the verification is passed. For example, when the type of identity confirmation is door number identification, the application host 121 can perform user registration; when the type of identity confirmation is device confirmation, the application host 121 can perform user login operations. Not limited to the above.

The identification host 125 can be connected to the application host 121 through a physical line or circuit, a wired or wireless network, and the identification host 125 can also be connected to the authentication server 130 through a wired or wireless network. The identification host 125 can also transmit data Or a signal to the application host 121 or the authentication server 130, and may also receive data or signals transmitted by the application host 121 or the authentication server 130.

The identification host 125 may select a connection method according to the type of the received identity confirmation, and may transmit the received service instruction to the identity verification server 130 according to the selected connection method. In this creation, the connection mode selected by the identity recognition host 125 may be to select different transmission interfaces provided by the authentication server 130 according to different types of identity confirmation, and use the selected transmission interface to establish a connection with the authentication server 130. Line, but this creation is not limited to this.

The identity authentication server 130 may be connected to the service server 120 through a wired or wireless network, and may transmit data or signals to the service server 120, and may also receive data or signals transmitted by the service server 120.

The identity verification server 130 is responsible for receiving service instructions transmitted by the service server 120. Generally speaking, the identity verification server 130 can define the data format of the service order according to the transmission interface receiving the service order, and read the identification data and user data from the received service order according to the defined data format.

The identity verification server 130 may also determine whether the service instruction is correct when receiving the service instruction, and read out the identification data and user data when determining that the service instruction is correct. For example, the identity verification server 130 may determine whether the service order matches the transmission interface of the received service order. In more detail, the identity verification server 130 may determine whether the length of the service order is consistent with the data format and whether the specified position in the service order is Including specific characters or specific data to determine service instructions The order is correct, but the manner in which the identity verification server 130 determines whether the service instruction is correct is not limited to the above.

The identity verification server 130 is also responsible for transmitting the identification data and user data retrieved from the service order to the telecommunication server 140. If the service order also includes a license token, the identity verification server 130 may also send the license token to the service instruction It is taken out and transmitted to the telecommunication server 140. The authentication server 130 may select a connection method with the telecommunication server 140 according to the connection method (or the transmission interface receiving the service instruction) used by the service server 120 to transmit the extracted identification data and user data to The telecommunication server 140 and the identity verification server 130 can also generate service messages corresponding to the connection methods used by the service server 120, and can send identification data and user data to the telecommunication server 140 at the same time. The generated service message is transmitted to the telecommunication server 140. The service information may enable the telecommunications server 140 to determine the authentication method that needs to be performed, for example, authentication identification data (device identification data or network identification data of the mobile device 110) and user data (the door of the mobile device 110 connected to the mobile communication network). No.) Is it registered or is the user data verified based on the identification data (device identification data or network identification data of the mobile device 110) (the door number of the mobile device 110 connected to the mobile communication network and the user identification of the user of the mobile device 110) Information) whether they match.

The identity verification server 130 is also responsible for receiving the verification results returned by the telecommunications server 140, and is responsible for transmitting the received verification results back to the service server 120.

The telecommunication server 140 may be connected to the authentication server 130 through a wired or wireless network, and may transmit data or signals to the authentication server 130, and may also receive data or signals transmitted by the authentication server 130.

The telecommunication server 140 is responsible for receiving the identification data and user data transmitted by the identity verification server 130, and for verifying the identity data and user data to generate verification results, and is responsible for transmitting the generated verification results to the identity verification server器 130。 130.

The telecommunication server 140 can determine whether there is a piece of data in the stored data containing both the received identification data and user data, so as to verify the identification data and user data. Wherein, when the telecommunication server 140 stores a piece of data containing both identification data and user data, the telecommunication server 140 can generate a verification result that passes the verification; otherwise, it generates a verification result that fails the verification.

The telecommunication server 140 can also receive the permission token transmitted by the identity verification server 130, and can verify the permission token, that is, determine whether the permission token is issued by the telecommunication server 140, or even determine whether the permission token is within the valid time. When the authorized token passes the verification of the telecommunication server 140, the telecommunication server 140 may generate a verification result that passes the verification; otherwise, the telecommunication server 140 may generate a verification result that fails the verification. Among them, the telecommunication server 140 may store the identification information of the issued license token and the mobile device issued to the license token as a piece of license verification data, and determine whether the license token is issued by the telecommunications server 140 according to the stored license verification data. , But this creation is not limited to this.

Next, an embodiment is used to explain the operation of the system of this creation, and please refer to the flow chart of “2A” in this creation for confirming the identity according to the service instruction to execute the corresponding service. In this embodiment, it is assumed that the mobile device 110 is a mobile phone, and the service server 120 includes an application host 121 and an identification host 125, but this creation is not limited thereto.

After the user operates the mobile device 110 to connect to the service server 120 (step 210), the user can operate the mobile device 110 to use the application host 121 in the service server 120. service provided. When the user needs to perform identity verification when operating the service used by the mobile device 110, for example, when the service used by the user needs to log in first or the user identity needs to be confirmed again, the application host 121 may request the mobile device 110 to perform identity verification.

The mobile device 110 may generate a service instruction corresponding to the type of identity confirmation requested by the application host 121 when the application host 121 in the service server 120 requests identity confirmation, and transmit the generated service instruction to the service server 120 (Step 220). In this embodiment, it is assumed that the types of identity confirmation required by the application host 121 are user login and user confirmation. When the type of identity confirmation is user login, the service command generated by the mobile device 110 may include actions. Device identification data or network identification data (identification data) of the device 110 and the identity card number, birthday, and door number (user data) of the user on the mobile device 110; and mobile When the type of the identity confirmation of the device 110 is user confirmation, the service instruction generated may include device identification data or network identification data (identification data) of the mobile device 110 and a door number used by the user on the mobile device 110 ( User profile).

After the service server 120 receives the service instruction sent by the mobile device 110, the service server 120 may select a connection method according to the type of identity confirmation required by the mobile device 110, and receive the mobile device 110 according to the selected connection method. The service instruction of 110 is transmitted to the authentication server 130 (step 230). In this embodiment, after receiving the service instruction, the application host 121 of the service server 120 may generate a type message corresponding to the type of identity confirmation required by the mobile device 110, and may receive the received service instruction and the The generated type message is transmitted to the identification host 125 in the service server 120. After receiving the service instruction and the type message transmitted by the application host 121, the identification host can select the authentication server 130 according to the received type message. Provided The corresponding transmission interface (connection mode), and the received service instruction is transmitted to the identity verification server 130 through the selected transmission interface.

After the identity authentication server 130 receives the service instruction transmitted by the service server 120, the identity authentication server 130 can read the identification data and user data from the received service instruction, and can read the read out The identification data and user data are sent to the telecommunication server 140 (step 240).

After the telecommunications server 140 receives the identification data and user data transmitted by the identity verification server 130, the telecommunications server 140 can verify the received identification data and user data. In this embodiment, it is assumed that the telecommunications server 140 can determine whether there is a piece of data including the received identification data and user data in the stored data, so as to verify the identification data and user data. If the data stored by the telecommunication server 140 includes identification data and user data, the telecommunication server 140 can generate a verification verification result. On the contrary, if the data stored by the telecommunication server 140 does not exist and contains both The data of the identification data and the user data, the telecommunication server 140 may generate a verification result that fails the verification.

After the telecommunication server 140 verifies the identification data and the user data and generates a verification result, the telecommunication server 140 may transmit the generated verification result to the identity verification server 130 (step 250).

After receiving the verification result returned by the telecommunications server 140, the identity verification server 130 may return the received verification result to the service server 120 (step 260). In this embodiment, the identity host 125 of the service server 120 may receive the verification result transmitted by the identity verification server 130, and may transmit the received verification result to the application host 121 of the service server 120.

After the service server 120 receives the verification result transmitted by the identity verification server 130, the service server 120 may determine whether the verification result indicates that the verification is passed. If the verification result indicates that the verification fails, the application host 121 in the service server 120 may refuse to provide the service intended by the mobile device 110; and if the verification result indicates that the verification is passed, the application host 121 in the service server 120 may The receiving is the user data of the mobile device 110 to perform an operation corresponding to the type of identity confirmation (step 270). In this embodiment, it is a user registration operation or a user login operation, so that the user can operate the mobile device 110 to use The services provided by the application host 121.

Thus, through this creation, the service server 120 can verify the data provided by the user of the mobile device 110 through the third-party telecommunication server 140, so as to provide the action on the premise that the data provided by the user of the mobile device 110 is verified The device 110 uses services provided by the service server 120.

In the above embodiment, when the mobile device 110 generates a service instruction corresponding to the type of identity confirmation requested by the service server 120, the mobile device 110 may first connect through a mobile communication network as shown in the flow chart in FIG. 2B. Go to the telecommunication server 140 and obtain the license token issued by the telecommunications server 140 (step 223). Then, when the mobile device 110 generates a service instruction, it can add the license token obtained from the telecommunications server 140 to the generated service. In the instruction (step 225), that is, a service instruction including a license token is generated. After that, the mobile device 110 may transmit the generated service instruction to the service server 120 (step 227).

In this way, when the telecommunications server 140 verifies the received identification data and user data (step 250), it is also possible to verify the permitted tokens together. In other words, the telecommunication server 140 can determine whether there is a piece of data including the received identification data and user data among the stored data, and can determine whether the permission token is issued by the telecommunication server 140 itself. If telecommunications server 140 The stored data includes data including identification data and user data, and the license token is issued by the telecommunication server 140, and the telecommunication server 140 can generate a verification verification result. On the contrary, if the telecommunication server 140 stores If there is no data that contains both identification data and user data, or the license is not issued by the telecommunications server 140, the telecommunications server 140 can generate a verification result that fails the verification.

In summary, it can be seen that the difference between this creation and the prior art is that a mobile device sends a service instruction corresponding to the type of identity confirmation to the service server when the service server requires identity confirmation, and the service server confirms based on the identity The connection method is selected, and the identification data and user data in the service instruction are transmitted to the telecommunication server through the authentication server according to the selected connection method, so that the telecommunication server verifies the identification data and user data to generate verification. As a result, the verification result is transmitted to the service server through the identity verification server. When the verification result indicates that the verification is passed, the service server performs technical operations corresponding to the type of identity confirmation based on user data. It can solve the problem that the mobile device is difficult to connect to the hardware carrier to identify the user's identity in the prior art, and then achieve the technical effect of using the mobile device to complete the identity identification.

In addition, the system of identity creation in accordance with the service instructions to perform corresponding services in this creation can be implemented in hardware, software or a combination of hardware and software, and can also be implemented in a centralized manner in computer systems or distributed with different components. Decentralized in several interconnected computer systems.

Although the implementation method disclosed in this creation is as above, the content is not intended to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope disclosed by this creation, can make some modifications to the form and details of the implementation of this creation, which are all covered by the patent protection of this creation. range. The scope of patent protection for this creation must still be defined by the scope of the attached patent application.

Claims (10)

A system for confirming identity in accordance with a service instruction to perform a corresponding service, the system includes at least:
A mobile device
A service server providing the mobile device connection, for requesting the mobile device to perform an identity confirmation, and receiving a service instruction corresponding to the type of the identity confirmation generated by the mobile device, and for confirming the identity based on the identity The type selects a connection method, wherein the service instruction includes an identification data and a user data;
An authentication server for receiving the service instruction transmitted by the service server according to the connection mode; and a telecommunication server for receiving the identification data and the user data transmitted by the authentication server , And for verifying the identification data and the user data to generate a verification result, and transmitting the verification result to the service server through the identity verification server, so that the service server indicates that the verification result passes the verification, The operation corresponding to the type of the identity confirmation is performed according to the user data. The system for performing identity verification according to a service instruction as described in item 1 of the scope of the patent application to perform corresponding services, wherein the service server further includes an application host and an identification host, and the application host is used to transmit the service instruction and the The type of identity confirmation corresponds to a type of message to an identity host in the service server. The identity host selects the connection method according to the type of message, and sends the service instruction to the identity according to the connection method. Host. The system for performing identity confirmation according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the service server selects a transmission interface provided by the authentication server to select the connection method. The system for performing identity verification according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the authentication server selects a connection method with the telecommunication server according to the connection method, thereby transmitting the identification The data and the user data are transmitted to the telecommunication server, or when the identification data and the user data are transmitted to the telecommunication server, a service message corresponding to the connection method is also transmitted to the telecommunication server. The system for performing identity verification according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the identity verification server reads the identification information and the service instruction from the service instruction when determining that the service instruction is correct. User data. The system for performing identity verification according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the mobile device is further used to connect to the telecommunication server to obtain a license token and add the license token to the service Instruction. The system for confirming identity in accordance with a service instruction to perform corresponding services as described in item 1 of the scope of patent application, wherein the license token is time-sensitive. The system for performing identity confirmation according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the telecommunication server determines whether a piece of data contains the identification data and the user data to verify the identification data and User data. The system for performing identity verification according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the identification data is device identification data of the mobile device or network identification data of the mobile device connected to a mobile communication network. The system for performing identity verification according to a service instruction as described in item 1 of the scope of patent application to perform corresponding services, wherein the user data includes a gate number of the mobile device connected to a mobile communication network.