TWM586495U - System using network identification data for login through telecommunication server - Google Patents

Abstract

A system that uses network identification data to log in through a telecommunication server. After obtaining network identification data and door number data through the identity identification component executed by the mobile device, it transmits the network identification data and door number data to the mobile communication network. The service server, and the service server sends the network identification data and the door number data to the telecommunication server, so that the telecommunication server generates a login result based on the network identification data and the door number data and sends the login result to the service server. , You can achieve the technical effect of using a mobile device to complete the identification.

Description

System for logging in through telecommunication server based on network identification data

An identification system, especially a system that uses network identification data to log in through a telecommunications server.

In recent years, due to the rapid development of the communications and Internet-related industries, the demand for electronic and mobile services has been increasing. This demand is also reflected in the financial industry and government departments. For example, brokers, banks In addition to providing online services, insurance companies, investment consulting companies, and government units have also begun to provide mobile applications (APPs). Users can use various mobile devices such as mobile phones or tablets to run mobile applications. After the network is connected to the corresponding service host (or application host), the user can operate the mobile device to perform mobile services such as securities trading, fund transfer, insurance application, and application documents. In this way, the user can perform the required mobile service without leaving the location.

When users use online or mobile services, they usually need to be identified first. At present, most of the identification methods through the network require the use of a hardware carrier to identify the user's identity. For example, a specific USB flash drive or a smart card (chip card) is used to store the user's credential data for use. When carrying out mobile services, the identity is identified by connecting a USB flash drive or a smart card that stores credential data.

However, most of the methods of using hardware carriers to identify users can only be performed on a computer. The main reason is that the hardware carriers need to be connected to the computer through a connection slot such as a USB or an external device such as a card reader. Read, but most current mobile devices do not have a connection slot that can be connected to the hardware carrier, or the user needs to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot connect to the hardware. Vehicles, as a result, users cannot use mobile devices for identification, so that they cannot use mobile services, causing inconvenience to users.

In summary, it can be known that in the prior art, there has been a problem that mobile devices cannot easily connect to a hardware carrier to identify a user's identity for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem that the mobile device cannot be easily connected to the hardware to identify the user in the prior art, this creation then discloses a system that uses network identification data to log in through a telecommunications server, among which:

The system disclosed by this creation that uses network identification data to log in through a telecommunications server includes at least: a service server, a mobile device, and a telecommunications server. Among them, the mobile device is used to execute an identity component, and the identity component includes: Data acquisition module for door number data and network identification data, and a communication module for connecting to the service server through a mobile communication network and transmitting network identification data and door number data to the service server; a telecommunications server, for Receive the network identification data and door number data sent by the service server, and use it to generate login results based on the network identification data and door number data, and send the login results to the service server.

The system disclosed in this creation is as above. The difference from the previous technology is that after obtaining the network identification data and door number data through the identity identification component executed by the mobile device, this creation transmits the network identification data and door number through the mobile communication network. Data to the service server, and the service server sends network identification data and door number data to the telecommunication server, so that the telecommunication server generates a login result based on the network identification data and door number data and sends the login result to the service server, In this way, the problems existing in the prior art can be solved, and the technical effect of using a mobile device to complete identification can be achieved.

The following will describe the features and implementation of this creation in detail with drawings and examples. The content is sufficient to enable any person skilled in the art to fully understand and implement the technical means applied to solve technical problems in this creation, thereby realizing What this creation can achieve.

In this creation, after the mobile device and the service server are connected through a mobile communication network, the service server connects to the telecommunication server to perform user login operations, and the telecommunication server returns the login result to the service server. Among them, mobile communication networks such as 4G, 5G networks, etc., but the present invention is not limited thereto.

The following first illustrates the system operation of this creation by referring to the system architecture diagram of network creation data and login through telecommunication server mentioned in the "Figure 1A" and "Figure 1B". As shown in "Fig. 1A", the system of the present invention includes an application host 111, an identification host 112, an authentication server 113, a mobile device 120, and a telecommunication server 130. Among them, the application host 111, the identification host 112, the identity verification server 113, the mobile device 120, and the telecommunications server 130 are all computing devices.

The computing devices mentioned in this creation include, but are not limited to, one or more processors, one or more memory modules, and buses and other components that connect different components (including memory modules and processors). Through the contained multiple components, the computing device can load and execute the operating system, so that the operating system can run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and each of the above components is disposed in the housing.

The buses of computing devices mentioned in this creation can include one or more types, such as data buses, address buses, control buses, and extended function buses ( expansion bus), and / or local bus. Computing device buses include, but are not limited to, side-by-side Industry Standard Architecture (ISA) buses, peripheral component interconnect (PCI) buses, Video Electronics Standards Association (VESA) local buses, and serial universal buses (USB), PCI-E bus and so on.

The processor of the computing device mentioned in this creation is coupled to the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected through a dedicated electrical connection. And / or coupled to the processor via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copying / moving data, etc., to run the operating system or execute various programs, modules, and / or element.

The processor of the computing device may be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and a peripheral input / output (I / O) controller, that is, a memory controller and a peripheral input / output controller can be included in Within an integrated circuit, two or more integrated circuits can also be used. The chipset usually provides I / O and memory management functions, and provides multiple general and / or special registers, timers, etc., among which the above general and / or special registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above memory modules include any type of volatile memory and / or non-volatile memory (NVRAM) memory, such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area may include any type of storage device or storage medium, such as a hard disk drive, a compact disc, a flash drive (flash memory), a memory card, a solid state disk (Solid State Disk, SSD), or any other storage device. That is, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard drives, and solid-state hard drives.

The processor of the computing device can also connect and communicate with peripheral devices such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral input / output controllers via peripheral input / output buses. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a monitor, printer, etc. It may be the same device as the peripheral output device, such as a touch screen. The communication interface may include a wireless communication interface and / or a wired communication interface. The wireless communication interface may include a mobile communication network supporting Wi-Fi, Zigbee and other wireless LANs, Bluetooth, infrared, near field communication (NFC), 3G / 4G / 5G, etc. Or other wireless data transmission protocol interfaces. The wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL modem, or a cable modem. The processor can poll various peripheral devices and interfaces periodically, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device with the components described above.

The mobile device 120 may be connected to the application host 111 through a communication interface using a wired or wireless network. The mobile device 120 can receive data or signals transmitted by the application host 111 through a communication interface, and can transmit data or signals to the application host 111.

The mobile device 120 is responsible for using the application service provided by the application host 111 and is responsible for confirming through the telecommunication server 130 that the mobile device 120 has completed registration in advance and completing the login operation when the application service requires the user to log in. Among them, the application service mentioned in this creation is usually a service that requires users of mobile device 120 to register and log in first, such as: online ordering, online banking, online insurance, tax payment, etc., but this creation is not based on this Limited.

The mobile device 120 may further include a data acquisition module 220, a communication module 280, and an additional detection module 230, a data input module 240, a verification module 250, and a network judgment, as shown in FIG. Module 260. In some embodiments, the mobile device 120 may execute the identification component 200 to generate the modules mentioned in this creation. Among them, the identity recognition component 200 may be an independent application program and may be called by a web browser; the identity recognition component 200 may also be a module or component included in the web browser.

The data obtaining module 220 is responsible for obtaining network identification data. Generally speaking, the network identification data is the current network address of the mobile device 120. The data acquisition module 220 can detect the current network address of the mobile communication interface of the mobile device 120 to obtain the network identification data. . However, the network identification data mentioned in this creation is not limited to the above. Any data that can make the telecommunication server 130 distinguish the mobile device 120 can be used as the network identification data mentioned in this creation.

The data obtaining module 220 is also responsible for obtaining door number data. The door number data obtained by the data obtaining module 220 corresponds to a Subscriber Identity Module (SIM) installed in the mobile device 120, and may include the door number stored in the user identification module installed in the mobile device 120. Or card number, it can also include the name of the telecommunications agency / unit that owns the door number or issued the subscriber identification module. The user identification module mentioned in this creation includes a card-type user identification module (also referred to as "SIM card" in this creation) and an embedded user identification module (Embedded-SIM, also used in this creation "ESIM").

Generally speaking, the data acquisition module 220 can read the door number data entered by the user from the memory unit of the mobile device 120, but this creation is not limited to this. For example, the data acquisition module 220 can also detect The measurement module 230 obtains the door number or card number stored in the user identification module installed in the mobile device 120, and can also obtain the door number data transmitted by the application host 111 through the communication module 280.

The detection module 230 can detect a user identification module installed in the mobile device 120, and can also obtain data stored in the user identification module, such as a door number or card number. In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, for example, two SIM cards are installed on the mobile device 120, or one SIM card is installed and one eSIM, when the data acquisition module 220 obtains the door number data, the data acquisition module 220 may first prompt the user to confirm that the door number data corresponds to the user identification module currently used by the mobile device 120 to connect to the mobile communication network, and Obtain the door number data after the user confirms, otherwise wait for the user to modify the door number data. For example, when a SIM card is installed on the mobile device 120 and includes an eSIM, when the mobile device 120 uses the SIM card to connect to a mobile communication network, the data acquisition module 220 may prompt the user to confirm the door number through the peripheral output device of the mobile device 120 Whether the data is consistent with the door number recorded on the SIM card.

The data input module 240 can provide a user to input door number data through a peripheral input device of the mobile device 120. In more detail, the data input module 240 may provide a user interface for inputting door number data, so that the door number data input by the user is stored in the memory unit of the mobile device 120.

In some embodiments, if the detection module 230 detects that there are two or more user identification modules on the mobile device 120, when the data input module 240 provides the user to input the door number data, The user may be prompted to enter the door number corresponding to the user identification module used by the mobile device 120 currently connected to the mobile communication network in the door number data. For example, when a SIM card is installed on the mobile device 120 and contains an eSIM, when the mobile device 120 uses the SIM card to connect to a mobile communication network, the data input module 240 may prompt the user to enter the door number through the peripheral output device of the mobile device 120 Enter the door number recorded in the SIM card in the data.

The verification module 250 may verify the identity of the user through the device unlocking data. Among them, the device unlocking data mentioned in this creation can be fingerprints, voiceprints, human faces and other biological data, or passwords or gestures set by users, but this creation is not limited to the above.

In more detail, the authentication module 250 may choose a method for verifying the identity of the user through the device unlocking data according to the type and version of the operating system running on the mobile device 120. For example, the authentication module 250 may choose to require the user to use the mobile device The peripheral input device of 120 enters the device unlocking data, and calls the operating system running on the mobile device 120 to confirm whether the entered device unlocking data is correct to verify the identity of the user; it can also choose to call the operation performed on the mobile device 120 The screen unlock application interface provided by the system provides users to enter the device unlock data, and the screen unlock application interface is used to determine whether the entered device unlock data is correct to verify the user's identity; or the user can choose to turn off the screen and wait for the user to turn on the screen And enter the device unlocking data to complete the screen unlocking to confirm the identity of the user, etc., but the way in which the verification module 250 chooses to verify the identity of the user is not limited to the above.

The network determination module 260 can determine whether the mobile device 120 currently chooses to use a mobile communication network, and can determine when the mobile device 120 is not currently selected to use a mobile communication network, such as when currently using a wireless local area network such as WiFi. The peripheral output device of 120 prompts the user to change the mobile device 120 to use a mobile communication network.

In some embodiments, the network determining module 260 may also prompt the user that the mobile device 120 will be changed to use the mobile communication network when determining that the mobile device 120 is not currently using the mobile communication network. And switch the mobile device 120 to use a mobile communication network.

The communication module 280 is responsible for driving the user identification module installed on the mobile device 120 so as to connect to the application host 111 through the communication interface of the mobile device 120 using a mobile communication network. Generally speaking, the communication module 280 can drive the user identification module and obtain the use right of the mobile communication network through the user identification module.

The communication module 280 is also responsible for connecting to the application host 111 using the mobile communication network through the communication interface of the mobile device 120, and is responsible for transmitting the network identification data and door number data obtained by the data acquisition module 220 to the application host 111. Receive the login result transmitted by the application host 111.

In some embodiments, the communication module 280 may also receive the door number data transmitted by the application host 111, and may store the received door number data in a memory module or a large-capacity storage area of the mobile device 120, etc. Memory unit.

The application host 111 may be connected to the identification host 112 using a wired or wireless network through a communication interface, and may also provide the mobile device 120 to be connected through a mobile communication network through a communication interface. The application host 111 can receive data or signals transmitted by the connected mobile device 120 and / or the identification host 112 through the communication interface, and can transmit data or signals to the connected mobile device 120 and / or the identification host 112. .

The application host 111 is responsible for providing one or more application services to the mobile device 120, and can confirm whether the mobile device 120 has completed user login when the mobile device requests a specific application service. If not, the application host 111 can request the mobile device 120 Perform user login.

The application host 111 is also responsible for receiving the network identification data and the door number data transmitted by the mobile device 120, and transmitting the received network identification data and the door number data to the identification host 112.

The application host 111 is also responsible for receiving the login result transmitted by the identification host 112 and selecting whether to execute the application service requested by the mobile device 120 according to the received login result. That is, the application host 111 can indicate that the login fails on the login result , The application service requested by the mobile device 120 is refused to be executed, and the application service requested by the mobile device 120 may be executed when the login result indicates that the login is successful. In some embodiments, the application host 111 may determine whether the mobile device 120 is logged in after the login result indicates that the login is successful. If it is, then the application service requested by the mobile device 120 is directly executed. The transmitted door number data reads all or part of the user data of the user of the mobile device 120, and uses the read user data to log in to the mobile device 120, and then executes the service requested by the mobile device 120.

The identification host 112 can be connected to the application host 111 and the authentication server 113 through a communication interface using a wired or wireless network. The identification host 112 can also receive the transmission from the application host 111 and / or the authentication server 113 through the communication interface. Data or signals, and can send data or signals to the application host 111 and / or the authentication server 113.

The identification host 112 is responsible for receiving the network identification data and the door number data transmitted by the application host 111, and transmitting the received network identification data and the door number data to the identity verification server 113. The identification host 112 is also responsible for receiving the login result transmitted by the authentication server 113 and transmitting the received login result to the application host 111.

The authentication server 113 can be connected to the identification host 112 and the telecommunication server 130 through a communication interface using a wired or wireless network. The authentication server 113 can also receive the identification host 112 and / or the telecommunication server 130 through the communication interface. The transmitted data or signals may also be transmitted to the identification host 112 and / or the telecommunication server 130.

The identity verification server 113 is responsible for receiving the network identification data and the door number data transmitted by the identification host 112, and transmitting the received network identification data and the door number data to the telecommunication server 130. The identity verification server 113 is also responsible for receiving the login result transmitted by the telecommunication server 130 and transmitting the received login result to the identity identification host 112.

In some embodiments, the application host 111, the identification host 112, and the authentication server 113 may be included in the service server 110, as shown in FIG. 1B. The service server 110 may include computing devices such as the application host 111, the identification host 112, and the authentication server 113, such as a blade server. The service server 110 may also integrate the application host 111 with the mobile device 120. All functions of the authentication server 113 and all functions of the telecommunications server 130. That is, the service server 110 may be connected to the telecommunication server 130 through a communication interface using a wired or wireless network, and may also provide the mobile device 120 to be connected through a mobile communication network. The service server 110 may receive data or signals transmitted by the connected mobile device 120 and / or the telecommunication server 130 through a communication interface, and may transmit data or signals to the connected mobile device 120 and / or the telecommunication server. 130. In this way, the service server 110 can provide application services for the mobile device 120 and can transmit the network identification data and door number data transmitted by the mobile device 120 to the telecommunication server 130.

In addition, in some embodiments, you can also choose to integrate the application host 111 and the identification host 112, so that the mobile device 120 transmits the network identification data and door number data to the telecommunications server through the integrated computing device and the identity verification server. Device 130, or may choose to integrate the identification host 112 and the authentication server 113, so that the mobile device 120 transmits the network identification data and the door number data to the telecommunication server 130 through the application host 111 and the integrated computing device. Not much more.

The telecommunication server 130 can be connected to the authentication server 113 using a wired or wireless network through a communication interface, and can also receive data or signals transmitted by the authentication server 113 through a communication interface, and can transmit data or signals to the communication interface through the communication interface. Identity authentication server 113.

The telecommunication server 130 is also responsible for receiving the network identification data and door number data transmitted by the identity verification server 113, and is responsible for generating a login result based on the received network identification data and door number data, and transmitting the login result to the identity verification Server 113.

The telecommunications server 130 may determine whether the received network identification data is sent by the telecommunications server 130, whether the received door number data is included in a data record pre-established by the telecommunications server 130, and whether the door number data is connected to the Internet. The road identification data is judged correspondingly, and a corresponding login result can be generated after the judgment. For example, when the telecommunications unit or telecommunication company is a telecommunications company and the network identification data is a network address, the telecommunications server 130 may determine whether the received network identification data is covered by a data record established in advance by the telecommunications company (such as The network record is recorded in the data record or the network segment recorded in the data record contains network identification data, etc.), so as to determine whether the network identification data is owned by the telecommunications unit or telecommunication agency to which the telecommunication server 130 belongs, that is, the judgment network Whether the road identification data is sent by the telecommunication server 130, but the way in which the telecommunication server 130 determines whether the network identification data is sent by the telecommunication server 130 is not limited to the above; similarly, the telecommunication server 130 can determine the received Whether the door number is covered by the data record established by the telecommunications company in advance (such as the door number recorded in the data record or the door number falls within the door number range recorded in the data record, etc.), so as to determine whether the door number is a telecommunication server 130 is owned by a telecommunications unit or telecommunications agency, but the telecommunications server 130 determines whether the door number belongs to the telecommunications server 130 The method of the telecommunications unit / organization to which it belongs is not limited to the above; in addition, the telecommunications server 130 may also search whether to store the data including the door number and network identification data in the received door number data, and if so, the door The number data corresponds to the network identification data. If not, it means that the door number data does not correspond to the network identification data. Wherein, the telecommunication server 130 may generate a login result indicating that the identification is failed when any one of the above items is judged to be negative, and may generate a login result indicating that the identification is successful when all the above items are judged as yes. That is, when the login result indicates that the identification is successful, it also means that the telecommunication server 130 determines that the user of the mobile device 120 matches the data recorded by the telecommunication server 130, and can confirm the identity of the user of the mobile device 120; When the login result indicates that the identification fails, it means that the telecommunication server 130 cannot confirm the identity of the user of the mobile device.

Next, the first embodiment is used to explain the operation system of this creation, and please refer to the flow chart of login through the telecommunication server with network identification data mentioned in "Creation 3A". In this embodiment, it is assumed that the mobile device 120 is a mobile phone, and the service server 110 is composed of a computing device such as an application host 111, an identification host 112, and an authentication server 113, but this creation is not limited thereto.

After the user operates the mobile device 120 to open the web browser including the identification element 200, the user can operate the mobile device 120 to use the web browser to connect to the service server 110 through the mobile communication network (step 301), and send the request to the service server. The browser 110 requests to download a web page. In this embodiment, it is assumed that the service server 110 is set up by a bank or a securities company to provide application services such as an online bank or an online securities trading platform.

After the web browser executed in the mobile device 120 displays the requested web page, the user can click on the web page displayed by the web browser to select and execute one of one or more application services provided by the web page. In this embodiment, if the application service selected by the user needs to log in, the web browser may display a web page including a login interface, so as to provide the user to enter the door number data and display the door number data entered by the user; the web page The browser may also read the door number data stored in a specific storage location or a specific storage space after displaying the web page including the login interface, and write the read door number data into the web page.

After the user finishes entering the door number data, the web browser can prompt the user with a dialog box or a pop-up page on the web page containing the login interface to choose whether to choose to send the door number data in the displayed web page to the service Server 110.

After the user chooses to agree to transmit the door number data to the service server 110, the web browser can call the identification element 200, so that the identification element 200 starts to execute. After the identification element 200 is executed, the data obtaining module 220 of the identification element 200 can obtain network identification data and door number data (step 330). In this embodiment, assuming that the network identification data is a network address, the data acquisition module 220 can detect the network address used by the mobile device 120 and can obtain the door number in the web page displayed by the web browser. data.

After the data acquisition module 220 of the identification component 200 obtains the network identification data and the door number data (step 330), the communication module 280 of the identification component 200 can transmit the network obtained by the data acquisition module 220 through the mobile communication network. The road identification data and door number data are sent to the service server 110 (step 360). In this embodiment, the communication module 280 transmits network identification data and gate number data to the application host 111.

In addition, in this embodiment, if the identification element 200 includes the authentication module 250, the communication module 280 of the identification element 200 transmits the network identification data and the door number data to the service server 110 through the mobile communication network (step 360), the authentication module 250 may first call the application program interface (API) provided by the operating system of the mobile device 120, so that the operating system of the mobile device 120 requires the user of the mobile device 120 to input the device unlocking data and verify the user input Of the device (step 340) to verify the identity of the user. If the verification module 250 determines that the device unlocking data does not pass the verification of the operating system of the mobile device 120, the communication module 280 may not transmit network identification data and door number data, and the verification module 250 may call the operating system of the mobile device 120 again The provided application program interface; and when the verification module 250 determines that the device unlocking data passes the verification of the operating system of the mobile device 120, the communication module 280 transmits the network identification data and the door number data to the service server 110 (step 360 ). It should be noted that the relationship between the data acquisition module 220 and the authentication module 250 of the identification component 200 does not perform a sequential relationship, but in general, the authentication module 250 can usually obtain network identification data at the data acquisition module 220 And the door number data (step 330), the application program interface provided by the operating system of the mobile device 120 is called, so that the operating system of the mobile device 120 determines whether the device unlocking data input by the user passes the verification (step 340).

After the service server 110 receives the network identification data and the door number data transmitted by the mobile device 120, it can transmit the received network identification data and the door number data to the telecommunication server 130 (step 370). In this embodiment, the application host 111 transmits the network identification data and the door number data to the identification host 112, and the identification host 112 transmits the network identification data transmitted by the application host 111 through the authentication server 113. And the door number data is transferred to the telecommunication server 130.

After the telecommunication server 130 receives the network identification data and the door number data transmitted by the mobile device 120, the telecommunication server 130 may generate a login result according to the received network identification data and the door number data. In this embodiment, it is assumed that the telecommunication server 130 can first determine whether the received network address is owned by the telecommunication unit / institution to which the telecommunication server 130 belongs, that is, whether the network address is included in the pre-established In the data record, if not, the telecommunication server 130 can generate a login result indicating that the identification has failed; if so, the telecommunication server 130 can then determine whether the door number in the received door number data is the telecommunication to which the telecommunication server 130 belongs. Owned by the unit / institution, that is, determining whether the door number is included in the pre-established data record; if not, the telecommunication server 130 can generate a login result indicating that the identification has failed; if it is, the telecommunication server 130 can continue to judge the door number data Whether the gate number in the map corresponds to the network address, that is, to determine whether there is a piece of data containing both the gate number and the network address. If not, the telecommunication server 130 can generate a login result indicating that the identification has failed; if so, the telecommunication server The device 130 may generate a login result indicating that the identification is successful.

After the telecommunication server 130 generates a login result according to the received network identification data and door number data, the generated login result may be transmitted to the service server 110 (step 380). In this embodiment, the telecommunication server 130 may transmit the login result to the identity verification server 113, and the identity recognition host 112 forwards the login result received by the identity verification server 113 to the application host 111, so that the application host 111 Whether the mobile device 120 is successfully logged in may be determined according to the login result. When the login result indicates that the login fails, the application host 111 can determine that the door number in the door number data is not used by the user of the mobile device 120, so it can determine that the user's data is incorrect and reject the login of the mobile device 120; and when When the login result indicates that the login is successful, the application host 111 can determine that the door number in the door number data is indeed used by the user of the mobile device 120. Therefore, the user identity can be determined to be true. In this way, the application host 111 can complete the mobile device 120 The login operation is to read the user data of the user of the mobile device 120 according to the door number data sent by the mobile device 120, and complete the user login operation according to the read user data. In this way, through this creation, the service server 110 can obtain the login result of the mobile device 120 through the telecommunication server 130, and can log in the mobile device 120 to the service server 110.

Continuing to explain the operation system of this creation with the second embodiment, please also refer to "Figure 3A". In this embodiment, it is assumed that the mobile device 120 and the service server 110 are the same as the first embodiment, and the mobile device 120 has been connected to the application host 111 in the service server 110 through a mobile communication network (step 301), and has been Log in to the application host 111.

Different from the first embodiment, in this embodiment, it is assumed that, after the user of the mobile device 120 logs in to the application host 111, if he clicks in the web browser to confirm that the user who executes the service is the user who signed in Services, such as performing a transfer transaction in an online bank or placing an order in an online securities trading platform, the application host 111 may ask the user to log in again. At this time, the application host 111 may first read the user data When transmitting the webpage of the service for placing an order to the web server running on the mobile device 120, the readout of the webpage data is also transmitted.

The web browser can display the received web page after receiving the web page and door number data transmitted by the application host 111, and can display the received door number data on the web page, and can prompt the user to confirm whether to choose The displayed door number data is transmitted to the telecommunication server 130 for user login. After the user selects consent, the application program can call the identity recognition element 200.

After the identification element 200 is awakened, the data acquisition module 220 of the identification element 200 can obtain the network identification data and the door number data (step 330), and the communication module 280 of the identification element 200 can transmit the data through the mobile communication network. The network identification data obtained by the obtaining module 220 is transmitted to the service server 110 (step 360). The service server 110 may transmit the network identification data and door number data received from the mobile device 120 to the telecommunication server 130 (step 370). The telecommunication server 130 may generate a login result according to the received network identification data and door number data, and may transmit the generated login result to the service server 110 (step 380). In this embodiment, since the above steps are the same as those in the first embodiment, they are not described again.

After the service server 110 receives the login result generated by the telecommunications server, it can determine whether the mobile device 120 has successfully logged in based on the received login result, and can execute the mobile device 120 when the login result indicates that the mobile device 120 has successfully logged in. The requested service. In this embodiment, that is, the application host 111 included in the service server 110 determines that the mobile device 120 has successfully logged in, executes the transfer transaction or online ordering service requested by the mobile device 120, and returns the execution result to the The web browser executed on the mobile device 120 enables the web browser to display the execution results. When the application host 111 determines that the received login result indicates that the login fails, it may refuse to execute the service requested by the mobile device 120, and send a prompt message to the web browser executed on the mobile device 120, so that the web browser uses the The webpage or a dialog box is used to prompt the user of the mobile device 120 that the login fails.

In the above two embodiments, if the identity recognition component 200 further includes a network determination module 260, as shown in the flowchart of FIG. 3B, the data acquisition module 220 of the identity identification component 200 can obtain network identification data and Before the door number data (step 330), the network determination module 260 may first determine whether the mobile device 120 is using a mobile communication network (step 321). If the network determination module 260 determines that the mobile device 120 is currently using a mobile communication network, the data The obtaining module 220 can obtain network identification data and door number data (step 330); and if the network determining module 260 determines that the mobile device 120 is not currently using a mobile communication network, such as determining that a wireless local area network such as WiFi is currently used, The network determining module 260 can directly turn off the wireless LAN function of the mobile device 120, thereby setting the mobile device 120 to use a mobile communication network, so that the data acquisition module 220 can obtain network identification data of the mobile communication network; The determination module 260 may also prompt the user to use the mobile device 120 when determining that the mobile device 120 is not currently using a mobile communication network. Determined to use a mobile communication network (step 325), the data acquisition module 220 may obtain the network identification data and door number data only after the network determination module 260 determines that the mobile device 120 is set to use the mobile communication network (step 330) .

In addition, in the above embodiment, if the identity recognition element 200 further includes a data input module 240, a web browser including the identity recognition element 200 can call the identity recognition service after the user selects or executes a service that requires login in the webpage. Component 200 without displaying a web page for entering door number information. After the identification element 200 is executed, the data input module 240 can provide a user interface for the user to input the door number data. In this way, the data acquisition module 220 of the identification element 200 can also obtain the door number data input by the user. At the same time, the identification component 200 can also detect network identification data used by the mobile device 120 (step 330). Among them, before the data acquisition module 220 obtains the door number data, the mobile device 120 may first detect the installed on the mobile device 120 by the detection module 230 of the identification component 200 as shown in the flow chart in FIG. 3C. User identification module (step 311). When the data acquisition module 220 obtains the door number data, the data acquisition module 220 can determine whether the detection module 230 has detected two or more user identification modules (step 313), if not, the data acquisition module 220 can directly obtain the network identification data and the door number data (step 330); and if the data acquisition module 220 detects multiple user identification modules, the data acquisition module 220 may prompt the user to enter the door number data corresponding to the user identification module of the mobile communication network currently used by the mobile device 120 in the door number data (step 315), and obtain the door number data after the user confirms, and Detect network identification data (step 330).

In summary, it can be seen that the difference between this creation and the prior art lies in the fact that the identity identification component executed by the mobile device obtains network identification data and door number data, and then transmits the network identification data and door number data to The service server, and the service server sends the network identification data and the door number data to the telecommunication server, so that the telecommunication server generates a login result based on the network identification data and the door number data and sends the login result to the service server. With this technical method, the problem that the mobile device in the prior art cannot easily connect to a hardware carrier to identify the user's identity can be solved, and the technical effect of using the mobile device to complete the identity identification can be achieved.

Furthermore, the system created by using the network identification data to log in through a telecommunication server can be implemented in hardware, software, or a combination of hardware and software. It can also be implemented in a computer system in a centralized manner or with different components. Achieved in a decentralized manner spread across several interconnected computer systems.

Although the implementation method disclosed in this creation is as above, the content is not intended to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope disclosed by this creation, can make some modifications to the form and details of the implementation of this creation, which are all covered by the patent protection of this creation. range. The scope of patent protection for this creation must still be defined by the scope of the attached patent application.

110‧‧‧Service Server
111‧‧‧Application Host
112‧‧‧Identification Host
113‧‧‧Authentication Server
120‧‧‧ mobile device
130‧‧‧Telecom server
200‧‧‧Identification component
220‧‧‧Data Acquisition Module
230‧‧‧ Detection Module
240‧‧‧Data Entry Module
250‧‧‧ Verification Module
260‧‧‧Network judgment module
280‧‧‧ Communication module step 301‧‧‧ Mobile device connects to the service server via mobile communication network Step 311‧‧‧ Mobile device detection user identification module Step 313‧‧‧ Mobile device determines whether multiple detected Steps 315‧‧‧ Mobile device prompts to enter the gate number corresponding to the network identification data corresponding to the mobile communication network Step 321‧‧‧ The mobile device determines whether to use the mobile communication network Step 325‧‧‧ Mobile device prompts to change Use the mobile communication network step 330‧‧‧ mobile device to obtain network identification data and door number data step 340‧‧‧ mobile device to determine whether the device unlock data passed the verification step 360‧‧‧ mobile device to send network identification data and door number data To the service server, step 370‧‧‧ The service server sends network identification data and door number data to the telecommunication server. Step 380‧‧‧, the telecommunication server generates a login result based on the network identification data and door number data, and sends the login result. To service server

Figure 1A is a diagram of the system architecture used to log in through a telecommunications server using network identification data.
Figure 1B is a diagram of another system architecture that uses network identification data to log in through a telecommunications server.
Figure 2 is a schematic diagram of the components of the mobile device mentioned in the creation.
Figure 3A is a flow chart of login through a telecommunication server using network identification data mentioned in the creation.
Fig. 3B is a flow chart for prompting network switching mentioned in the creation.
Fig. 3C is a flow chart for prompting input of a gate number for using a mobile communication network mentioned in the creation.

Claims (10)

A system for logging in through a telecommunications server with network identification data, the system includes at least:
A service server;
A mobile device for executing an identity recognition element, the identity recognition element includes:
A data acquisition module for acquiring a door number data and a network identification data; and a communication module for connecting to the service server through a mobile communication network and transmitting the network identification data and the door number data To the service server; and a telecommunications server for receiving the network identification data and the door number data transmitted by the service server, and for generating a login based on the network identification data and the door number data As a result, the login result is transmitted to the service server. The system for logging in through a telecommunication server using network identification data as described in item 1 of the scope of the patent application, wherein the identification element further includes a network judgment module for determining whether the mobile device currently uses a mobile communication network . The system for logging in through a telecommunication server using network identification data as described in item 1 of the scope of the patent application, wherein the identification element further includes a verification module for providing input of a device unlocking data and verifying the device unlocking data . The system for logging in through a telecommunication server using network identification data as described in item 1 of the scope of the patent application, wherein the mobile device further includes a detection module for detecting a user identification module installed in the mobile device , The data acquisition module is further used when the detection module detects two or more user identification modules, prompts for input in the door number data and the user currently using the mobile communication network Identify the door number data corresponding to the module. The system for logging in through a telecommunication server using network identification data as described in item 1 of the scope of the patent application, wherein the data acquisition module reads the door number data stored in advance or the door transmitted by the service server No. information to get the door number information. As described in item 1 of the scope of the patent application, a system for logging in through a telecommunication server using network identification data, wherein the telecommunication server is further used to determine whether the device identification data is included in a pre-established data record. As described in item 1 of the scope of patent application, a system for logging in through a telecommunication server using network identification data, wherein the telecommunication server judges that the network identification data is issued by the telecommunication server, and the door number data is included in advance In the created data record, the door number data corresponds to the network identification data to determine that the network identification data is correct and the user data is correct. As described in item 1 of the scope of the patent application, a system for logging in through a telecommunication server using network identification data, wherein the service server further includes an application host, an identification host, and an authentication server. The system for logging in through a telecommunication server using network identification data as described in item 1 of the scope of patent application, wherein the service server is further configured to execute the application service requested by the mobile device after the login result indicates that the login is successful . As described in item 1 of the scope of patent application, a system for logging in through a telecommunication server using network identification data, wherein the service server is further used to determine that the mobile device is not logged in after the login result indicates successful login, based on The door number data loads user data of a user of the mobile device and logs in to the mobile device.