TWM592629U - System to obtain appended data and execute corresponding operation when identity is confirmed - Google Patents

Abstract

A system for obtaining additional data to perform corresponding operations during identity verification. The identification data and user data of the mobile device through the service server through the identity verification server are sent to the telecommunication server for verification. The telecommunication server is identifying the data When the user data is verified, the door number related data obtained according to the identification data is sent to the authentication server. The identity server filters the door number related data according to the access authority to generate additional data, and sends the additional data to the service The server, the technical means by which the service server performs the operation requested by the mobile device according to the user data and the additional data, can achieve the technical effect of performing the account opening operation based on the additional data obtained when using the mobile device for identification.

Description

System for obtaining additional information to perform corresponding operation during identity confirmation

A service execution system, in particular, a system that obtains additional information to perform corresponding operations during identity verification.

In recent years, due to the rapid development of communications and network-related industries, the demand for electronic and mobile services has been increasing. Such demand is also reflected in the financial industry, for example, securities firms, banks, investment consulting companies In addition to providing network services, mobile applications (APPs) have also begun to be provided. Users can use various mobile devices such as mobile phones or tablets to execute mobile applications. The mobile applications are connected to corresponding service servers through the Internet (Or called the application host), users can operate mobile devices for securities trading, transfer and other mobile services. In this way, the user can perform the required mobile service without leaving the location.

But if you want to use the mobile services provided by the financial industry, you usually need to open an account in the bank first. In the past, opening an account at a bank usually required a personal counter, and with the opening of government regulations, bank account opening could also be done online.

However, during the operation of opening an account online, the user needs to be authenticated. In other words, users need to provide accounts of other banks or use natural person certificates to verify their identities. For users who do not have other bank accounts and natural person certificates, they cannot use the current identity verification methods used in online account opening operations, resulting in Users cannot open an account online.

In summary, it can be seen that some users have been unable to use the existing identity verification method to complete online account opening in the prior art for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem that some users cannot complete the online account opening by using the existing identity verification method in the prior art, the author has disclosed a system for obtaining additional information to perform the corresponding operation during identity verification, among which:

The system for obtaining additional data to perform the corresponding operations during the identity verification disclosed in this creation includes at least: a mobile device; a service server, which provides a connection for the mobile device to request the mobile device for identity verification and receive services generated by the mobile device Command, where the service command contains identification data and user data; the authentication server is used to set the access permission of the service server and to receive the service command sent by the service server; the telecommunication server is used to receive The identification data and user data sent by the identity verification server, and verifying the identification data and user data to generate a verification result, and used to obtain the door number related data based on the identification data when the identification data and user data pass the verification, And send the verification result and the door number related data to the identity verification server, so that the identity server filters the door number related data according to the access authority to generate additional data, and send the verification result and additional data to the service server, so that the service server When the verification result indicates that the verification is passed, the operation corresponding to the type of identity confirmation is performed according to the user data and the additional data.

The system disclosed in this creation is as above. The difference between this creation and the prior art is that this creation sends a service command containing identification data and user data to the service server when the service server requests identity verification through the mobile device. The service server The identification data and user data in the service command are sent to the telecommunications server through the authentication server, so that the telecommunications server verifies the identification data and user data to generate a verification result. When the identification data and user data pass the verification of the telecommunications server At that time, the telecommunications server obtains the door number related data based on the identification data, and sends the verification result and door number related data to the identity verification server. The identity verification server filters the door number related data according to the preset access rights to generate additional data. And send the verification result and additional data to the service server. When the verification result indicates that the verification server passes the verification, the service server performs the operation corresponding to the type of identity verification according to the user data and the additional data, so as to solve the problems existing in the previous technology, and It can achieve the technical effect of completing the online account opening operation by using the additional data provided during identification.

The following will describe the features and implementation of this creation in detail with reference to the drawings and examples. The content is sufficient for any person skilled in the relevant arts to easily fully understand and implement the technical means applied to solve the technical problems of this creation to implement accordingly, thereby realizing The effect that this creation can achieve.

This creation allows the service server's identity to be verified on the mobile device through the telecommunications server, and can obtain additional data through the authentication server, so that the service server can use the additional data to perform the corresponding operation after the mobile device passes the verification.

The additional data mentioned in this creation is the data associated with the door number used by the mobile device to connect to the mobile communication network, including the status of the door number, the type of the corresponding SIM card, the holding time of the door number, and the door number Payment status, etc., but this creation is not limited to this.

The following is a system architecture diagram that obtains additional data to perform the corresponding operation when confirming the identity mentioned in the creation of "Picture 1A" to illustrate the system of the creation. As shown in "Figure 1A", the system of the present creation includes a mobile device 110, a service server 120, an authentication server 130, and a telecommunications server 140. Among them, the mobile device 110, the service server 120, the identity verification server 130, and the telecommunication server 140 are all computing devices.

The computing devices mentioned in this creation include but are not limited to one or more processors, one or more memory modules, and buses that connect different components (including memory modules and processors). Through the included multiple components, the computing device can load and execute the operating system, so that the operating system runs on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and the above-mentioned components are disposed in the housing.

The bus of the computing device mentioned in this creation may include one or more types, for example, including a data bus, an address bus, a control bus, and an extended function bus ( Expansion bus), and/or local bus (local bus) and other types of bus. Computing equipment buses include but are not limited to parallel industrial standard architecture (ISA) buses, peripheral component interconnect (PCI) buses, video electronics standards association (VESA) local buses, and serial universal serial buses (USB), fast peripheral component interconnect (PCI-E) bus, etc.

The processor of the computing device mentioned in this creation is coupled to the bus. The processor includes a register group or register space. The register group or register space can be completely set on the processing wafer, or all or part of it can be set outside the processing wafer and connected via a dedicated electrical connection. And/or coupled to the processor via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through the bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to run the operating system or execute various programs, modules, and/or element.

The processor of the computing device may be coupled to the chipset or electrically connected to the chipset through the bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral I/O controller, that is, the memory controller and peripheral I/O controller can be included in Within an integrated circuit, two or more integrated circuits can also be used. The chipset usually provides I/O and memory management functions, and provides multiple general-purpose and/or dedicated registers, timers, etc. Among them, the above-mentioned general-purpose and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above memory module includes any type of volatile memory (volatile memory) and/or non-volatile (non-volatile memory, NVRAM) memory, such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area may include any type of storage device or storage medium, for example, a hard disk drive, an optical disc, a flash drive (flash memory), a memory card (memory card), a solid state drive (Solid State Disk, SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard drives, and solid state drives.

The processor of the computing device can also connect and communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through the peripheral input and output busses through the peripheral input and output controllers. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, trackpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, printer, etc., peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface. The wireless communication interface may include a wireless communication network supporting Wi-Fi, Zigbee, etc., Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The interface of wireless communication or other wireless data transmission protocol, wired communication interface can be Ethernet device, asynchronous transmission mode (ATM) device, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through the various peripheral devices and interfaces, and can also communicate with another computing device having the components described above.

The mobile device 110 can be connected to the service server 120 through a wireless network, and can transmit data or signals to the service server 120, and can also receive data or signals transmitted by the service server 120. The wireless network mentioned in this creation includes, but is not limited to, wireless local area networks such as WiFi, and mobile communication networks such as 3G/4G.

The mobile device 110 can use the service provided by the connected service server 120, and can be responsible for generating the type corresponding to the type of identity confirmation requested by the service server 120 when receiving the request for identity confirmation sent by the service server 120 Service instructions. In this creation, the type of identity confirmation is usually defined by the service server 120, and includes at least two types of user identification and device confirmation, but this creation is not limited to this.

The service command generated by the mobile device 110 includes identification data and user data. The identification data and user data in the service order may be different depending on the type of identity verification. For example, when the type of identity verification is device verification, the identification data may be the device identification data of the mobile device 110 (such as the card number or door number of the SIM card used by the mobile device 110 to connect to the mobile communication network, etc.), or it may be The network identification data of the mobile device 110 connected to the mobile communication network (such as the network address used by the mobile device 110), the user data may be the gate number corresponding to the SIM card used by the mobile device 110 to connect to the mobile communication network ; For another example, when the type of identity confirmation is door number identification, the identification data may also be device identification data or network identification data of the mobile device 110, and the user data may include the mobile device 110 used to connect the mobile communication network. In addition to the door number corresponding to the SIM card used, it can also contain user identification data such as the ID number of the user of the mobile device 110 and the birthday of the user of the mobile device, and even the user data can also include the registration service server Personal data required by the service provided by the device 120, etc. Among them, the user identification data is sufficient to identify the user of the mobile device 110, and is usually unique; personal data may include data related to the user of the mobile device 110, such as gender, address, e-mail account, but this creation does not This is the limit.

The mobile device 110 can also be connected to the telecommunication server 140 through the mobile communication network to obtain the license token issued by the telecommunication server 140, and can add the obtained license token to the service command when generating the service command. That is, it can generate a service instruction containing a license letter. Among them, the license letter is the data generated by the telecommunication server 140 in the specific coding method for the specific data, which is usually composed of a certain number of letters, numbers, symbols, and is arbitrarily arranged. In addition to the generated data, it can also include time stamps and so on.

The service server 120 can provide one or more services for the mobile device 110 to use, and can perform operations corresponding to the services used by the mobile device 110. In some embodiments, the service server 120 may be composed of multiple computing devices. For example, as shown in FIG. 1B, the service server 120 may include an application host 121 and an identification host 125. That is to say, the functions of the application host 121 and the identity recognition host 125 are the functions of the service server 120, and the application host 121 and the identity recognition host 125 will be described below.

The application host 121 can provide the connection of the mobile device 110 through a wireless network, and can transmit data or signals to the mobile device 110, and can also receive data or signals transmitted by the mobile device 110. Similarly, the application host 121 can be connected to the identification host 125 through a physical line or circuit, a wired network, or a wireless network, and can send data or signals to the identification host 125, and can also receive data transmitted by the identification host 125 Or signal. The wired network mentioned in this creation includes but is not limited to Ethernet.

The service used by the mobile device 110 is usually provided by the application host 121. The application host 121 may first request the mobile device 110 to confirm the identity when the mobile device 110 requests to use a specific service.

The application host 121 can also receive the service command generated by the mobile device 110 corresponding to the type of identity confirmation, and can transmit the received service command to the identity recognition host 125.

The application host 121 can also receive the verification result generated by the telecommunication server 140 through the identity recognition host 125, and can indicate that the identification data and user data received from the mobile device 110 pass the verification when the received verification result is based on The user data of the mobile device 110 and the additional data from the authentication server 130 perform the operations required by the mobile device 110 that require identity verification, for example, scoring based on the additional data to determine whether to perform an online account opening operation, etc. Not limited to the above.

The identification host 125 can be connected to the application host 121 through a physical line or circuit, a wired network, or a wireless network. The identification host 125 can also be connected to the authentication server 130 through a wired or wireless network. The identification host 125 It can also send data or signals to the application host 121 or the authentication server 130, and can also receive data or signals sent by the application host 121 or the authentication server 130.

The identification host 125 can select the connection method with the identity verification server 130 according to the type of identity confirmation received, and can send the received service command to the identity verification server 130 according to the selected connection method, And receiving additional data returned by the authentication server 130. For example, the way for the identification host 125 to select the connection method may be to select different transmission interfaces provided by the authentication server 130 according to different types of identity confirmation, and use the selected transmission interface and the authentication server 130 to establish Connection, but this creation is not limited to this.

The authentication server 130 may be connected to the service server 120 through a wired network or a wireless network, and may transmit data or signals to the service server 120, and may also receive data or signals transmitted by the service server 120.

The identity verification server 130 is responsible for receiving service commands sent by the service server 120. Generally speaking, the authentication server 130 can define the data format of the service command according to the transmission interface of the received service command, and read the identification data and user data from the received service command according to the defined data format.

The identity verification server 130 may also determine whether the service command is correct when receiving the service command, and then read the identification data and user data when determining that the service command is correct. For example, the authentication server 130 can determine whether the service command matches the transmission interface of the received service command. In more detail, the authentication server 130 can determine whether the length of the service command matches the data format and whether the specified location in the service command The method including specific characters or specific data to determine whether the service command is correct, but the method by which the authentication server 130 determines whether the service command is correct is not limited to the above.

The authentication server 130 is also responsible for sending the identification data and user data extracted from the service instruction to the telecommunications server 140. If the service instruction also includes the license letter, the authentication server 130 may also transfer the license letter from the service instruction Take out and send to the telecommunication server 140. The authentication server 130 can select the method of connecting with the telecommunications server 140 according to the connection method used by the service server 120 (or the transmission interface that receives the service command), so as to send the retrieved identification data and user data to The telecommunication server 140 and the authentication server 130 can also generate service messages corresponding to the connection method used by the service server 120, and can send all identification data and user data to the telecommunication server 140 at the same time. The generated service message is sent to the telecommunication server 140. The service message can enable the telecommunication server 140 to determine the authentication method to be performed, for example, the authentication identification data (device identification data or network identification data of the mobile device 110) and user data (the door where the mobile device 110 is connected to the mobile communication network) Number) whether it has been registered, or based on identification data (device identification data or network identification data of the mobile device 110) to verify user data (the door number used by the mobile device 110 to connect to the mobile communication network and the use of the user of the mobile device 110 Identification information) whether it matches or not.

The authentication server 130 is also responsible for setting the access authority of the service server 120 or the application host 121. The access authority set by the authentication server 130 can determine the items of additional data that the service server 120/application host 121 can obtain.

For example, the authentication server 130 may provide an input interface to input the owner identification name and the access permission of the service server 120/application host 121 in the certificate used by the service server 120/application host 121, and The input data sets the access authority of the service server 120/application host 121. However, the manner in which the authentication server 130 sets the access authority is not limited to the above.

The identity verification server 130 is also responsible for receiving the authentication message returned by the telecommunication server 140 including the verification result, and is responsible for transmitting the received verification result back to the service server 120. If the authentication message received by the identity verification server 130 also contains data related to the door number, the identity verification server 130 can also read out the service from the data related to the door number according to the access rights of the service server 120/application host 121 The data items that the server 120/application host 121 can obtain and generate additional data based on the read data items, or the gate server-related data in the service server 120/ according to the access permissions of the service server 120/application host 121 The data items that cannot be obtained by the application host 121 are deleted, and the data related to the gate number after the data is deleted is used as additional data. The identity verification server 130 may also send the generated additional data to the service server 120 together with the verification result in the authentication message.

The telecommunication server 140 may be connected to the authentication server 130 through a wired network or a wireless network, and may transmit data or signals to the authentication server 130, and may also receive data or signals transmitted by the authentication server 130.

The telecommunication server 140 is responsible for receiving the identification data and user data transmitted by the identity verification server 130, and is responsible for verifying the identification data and the user data to generate a verification result. For example, the telecommunication server 140 can determine whether there is a piece of data that contains both the received identification data and user data in the stored data, and when the telecommunication server 140 stores a piece of data that includes both identification data and user data For data, the telecommunication server 140 can generate a verification result that passes verification; otherwise, it generates a verification result that fails verification. However, the manner in which the telecommunication server 140 verifies the identification data and user data is not limited to the above.

The telecommunication server 140 can also receive the license letter sent by the identity verification server 130, and can verify the license letter. For example, the telecommunication server 140 determines whether the license letter is sent by the telecommunication server 140. If the license letter contains a time stamp, etc. With a time-sensitive message, the telecommunications server 140 can even determine whether the license letter is within the valid time, but the way for the telecommunications server to verify the license letter is not limited to the above. When the permission letter is verified by the telecommunication server 140, that is, the telecommunication server 140 determines that the permission letter is indeed issued by the telecommunication server 140 (and the permission letter is within a limited time), then the telecommunication server 140 can generate a verified result of the verification; On the contrary, the telecommunication server 140 may generate a verification result that fails verification. The telecommunications server 140 may store the issued license letter and the identification data of the mobile device 110 issued to the license letter as a license verification data when issuing the license letter to the mobile device 110, and based on the stored license verification data Whether the received license letter is included to determine whether the received license letter is issued by itself (telecom server 140), that is, whether there is a piece of license verification data containing the received license letter and identification data in the license verification data Data, but this creation is not limited to this.

The telecommunication server 140 is also responsible for generating and including verification results, and transmitting the generated verification results to the identity verification server 130. Generally speaking, the telecommunication server 140 can generate an authentication message including the verification result, and send the authentication message to the identity verification server 130.

The telecommunication server 140 is also responsible for obtaining the corresponding gate number related data according to the received identification data after generating the verified result, and adding the obtained gate number related data to the generated authentication message, so as to The verification result is sent to the identity verification server 130 together with the gate number related data. The telecommunications server 140 can read the corresponding target door number based on the identification data, and read the data such as the parental status, card type, processing time, payment record, etc. based on the target door number, and calculate the holding time based on the processing time, and Judging the payment status based on the payment records, in order to generate door number related data including data items such as pro-handling status, card type, holding time, payment status, etc., but this creation is not limited to this.

Next, an embodiment is used to explain the operation of the system of this creation, and please refer to the flow chart of obtaining additional data to perform the corresponding operation during the identity confirmation mentioned in "Figure 2A" of this creation. In this embodiment, it is assumed that the mobile device 110 is a mobile phone, and the service server 120 includes an application host 121 and an identity recognition host 125, but this creation is not limited to this.

First, the authentication server 130 may first set the access authority of the service server 120 (step 201). In this embodiment, it is assumed that the administrator of the authentication server 130 can set the access right of the service server 120 to the data related to the door number according to the name of the owner in the certificate of the service server 120 or the application host 121. If the data related to the door number includes data items such as in-person status, card type, holding time, payment status, etc., the authentication server 130 can set whether the service server 120 has the ability to read the in-person status, card type, and Have access rights to data items such as time and payment status.

After that, when the user operates the mobile device 110 to connect to the service server 120 (step 210), the user can operate the mobile device 110 to request the service provided by the application host 121 in the service server 120. When the service requested by the user operating the mobile device 110 requires identity confirmation, for example, when the service used by the user requires registration or the user identity needs to be confirmed, the application host 121 may request the mobile device 110 to perform identity confirmation. In this embodiment, it is assumed that the service requested by the user is an online account opening.

The mobile device 110 may generate a service instruction corresponding to the type of identity confirmation requested by the application host 121 when the application host 121 in the service server 120 requests identity confirmation, and send the generated service instruction to the service server 120 (Step 220). In this embodiment, it is assumed that the identity confirmation requested by the application host 121 includes user registration and user confirmation. Since the service requested by the user is an online account opening, the application host 121 can request the mobile device 110 to perform the category The identity of the registered user is confirmed. In this way, the service command generated by the mobile device 110 may include the device identification data or network identification data (identification data) of the mobile device 110 and the ID number, birthday, The door number (user data) used by the user on the mobile device 110; and if the application host 121 requests the mobile device 110 to perform the identity confirmation of the type confirmed by the user, the service command generated by the mobile device 110 may include the action The device identification data or network identification data (identification data) of the device 110 and the gate number (user data) used by the user on the mobile device 110.

After the service server 120 receives the service command sent by the mobile device 110, the service server can send the identification data and user data to the telecommunication server 140 through the authentication server 130 (step 230). In this embodiment, it is assumed that the application host 121 in the service server 120 can read the identification data and user data from the service command after receiving the service command sent by the mobile device 110, and send the service command to the service The identity recognition host 125 and the application host 121 in the server 120 may also generate a type message corresponding to the type of identity confirmation required by the mobile device 110 after receiving the service instruction, and may convert the received service instruction and all The generated type message is sent to the identification host 125. After the identity recognition host 125 receives the service command transmitted by the application host 121, the identity recognition host 125 can determine the type of connection that the application host 121 requires the mobile device 110 to perform identity confirmation according to the service instruction, and select the connection method, and according to the selected connection The service instruction is sent to the authentication server 130 in a manner. After the authentication server 130 receives the service command sent by the service server 120, the authentication server 130 can read the identification data and user data from the received service command, and can read the The identification data and user data are sent to the telecommunication server 140, or when the service command is received, the type message is also received. The identity verification server 130 can also select the identity verification server 130 according to the type message received. Provide the corresponding transmission interface (connection method), and send the received service command to the authentication server 130 through the selected transmission interface.

After the telecommunication server 140 receives the identification data and user data transmitted by the identity verification server 130, the telecommunication server 140 can verify the received identification data and user data and generate a corresponding verification result (step 250 ). In this embodiment, it is assumed that the telecommunication server 140 can determine whether there is a piece of data in the stored data that contains the received identification data and user data, so as to verify the identification data and user data. If the data stored in the telecommunication server 140 contains data including identification data and user data, the telecommunication server 140 can generate an authentication result that passes the verification. On the contrary, if the data stored in the telecommunication server 140 does not exist, it also contains If the data of the identification data and the user data is identified, the telecommunication server 140 may generate a verification result that fails verification.

If the verification result generated by the telecommunication server 140 indicates that the identification data and the user data have not passed the verification, the telecommunication server 140 may generate an authentication message including the verification result and send the generated authentication message to the identity verification server 130.

If the verification result generated by the telecom server 140 indicates that the identification data and the user data have been verified, the telecom server 140 may obtain the gate number related data according to the identification data (step 260). In this embodiment, assuming that the data related to the door number obtained by the telecommunication server 140 includes data items such as the status of the parent, card type, holding time, payment status, etc., the telecommunication server 140 may generate the data including the verification result and the door number. The authentication message of the data and send the generated authentication message to the authentication server 130 (step 270).

After the identity verification server 130 receives the authentication message returned by the telecommunication server 140, it can determine whether the authentication message contains the gate number related information. If the gate number related information is not included, the identity verification server 130 can directly The verification result in the authentication message is sent to the service server 120, and if the authentication message contains the gate number related data, the identity verification server 130 can select the gate number related data according to the access rights of the service server 120/application host 121 The data items that the service server 120 can access are filtered to generate additional data, and the received verification result and the generated additional data can be returned to the service server 120 (step 280). In this embodiment, it is assumed that the access authority of the service server 120/application host 121 indicates that the service server 120/application host 121 can access the parental status, holding time, and payment status in the door number-related information, but cannot Access card type, the identity verification server 130 can read out the in-person status, holding time, payment status and other items of data that can be accessed by the service server 120/application host 121 from the door number related information, and The read item data generates additional data, and transmits the generated additional data to the identification host 125 of the service server 120 together with the verification result in the authentication message. After receiving the verification result (and additional data) sent by the identity verification server 130, the identification host 125 may send the received verification result (and additional data) to the application host 121 of the service server 120.

After the service server 120 receives the verification result (and additional data) sent by the identity verification server 130, the service server 120 can determine whether the received verification result indicates that the verification is passed. If the verification result indicates that the verification is not passed, the application host 121 in the service server 120 can refuse to execute the service that the mobile device 110 wants to use; and if the verification result indicates that the verification is passed, the application host 121 in the service server 120 can be based on The user data received from the mobile device 110 and the additional data received from the authentication server 130 perform an operation that requires identity confirmation (step 290), in this embodiment, that is, to check whether the additional data meets the predetermined security control conditions and basis User data creation account data and other operations included in the online account opening service requested by the mobile device 110.

In this way, through this creation, the service server 120 can verify the data provided by the user of the mobile device 110 through the third-party telecommunications server 140 and obtain additional data through the identity verification server 130, so that the user on the mobile device 110 On the premise that the provided data is verified, the service requested by the mobile device 110 from the service server 120 is executed based on the available additional data.

In the above embodiment, when the mobile device 110 generates a service command (step 220), as shown in the flow of "Figure 2B", the mobile device 110 may first connect to the telecommunications server 140 through the mobile communication network and obtain telecommunications The license token issued by the server 140 (step 223), and then, when the mobile device 110 generates the service command, it can add the license token obtained from the telecommunication server 140 to the generated service command (step 225), that is, generate The service instruction containing the license letter is then sent to the mobile device 110 to the service server 120 (step 229).

In this way, when the telecommunication server 140 verifies the received identification data and user data (step 250), the permission letter may also be verified together. In other words, the telecommunication server 140 can determine whether there is a piece of data containing the received identification data and user data in the stored data, and can determine whether the permission letter is issued by the telecommunication server 140 itself. If the data stored in the telecommunication server 140 contains data including identification data and user data, and the license letter is issued by the telecommunication server 140, the telecommunication server 140 can generate a verified result of verification, otherwise, if the telecommunications If the data stored in the server 140 does not contain data containing both identification data and user data, or the license letter is not sent by the telecom server 140, the telecom server 140 may generate an unverified verification result.

In summary, it can be seen that the difference between this creation and the prior art is that a mobile device sends a service command to the service server when the service server requests identity confirmation, and the service server recognizes the service command through the authentication server The data and user data are sent to the telecom server, so that the telecom server verifies the identification data and user data to generate a verification result. When the identification data and user data pass the verification of the telecom server, the telecom server reads according to the identification data Gate number related data and send the verification result and gate number related data to the identity verification server. The identity verification server can read the corresponding additional data from the gate number related data according to the preset access permissions of the service server and send verification The results and additional data are sent to the service server. When the verification result indicates that the service server passes the verification, the technical means of performing the operation of requesting identity verification based on the user data and the additional data, by which a technical means can solve the existing part of the prior art The user cannot use the existing identity verification method to complete the online account opening problem, thereby achieving the technical effect of performing the account opening operation based on the additional data obtained when using the mobile device for identification.

In addition, the system for obtaining additional data to perform the corresponding operation when the identity of this creation is confirmed can be implemented in hardware, software, or a combination of hardware and software, or can be implemented in a centralized manner or distributed in different components in a computer system Implemented in a decentralized manner in several interconnected computer systems.

Although the embodiments disclosed in this creation are as above, the content described is not intended to directly limit the patent protection scope of this creation. Anyone with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which belongs to the patent protection of this creation range. The scope of patent protection for this creation must still be as defined in the scope of the attached patent application.

110: mobile device 120: service server 121: Application Host 125: Identification host 130: authentication server 140: Telecom server Step 201: The authentication server sets the access permissions of the service server Step 210: connect the mobile device and the service server Step 220: When the service server requests identity confirmation, the mobile device generates a service command and sends the service command to the service server Step 223: Connect the mobile device to the telecommunications server to obtain the license token Step 225: The mobile device generates a service instruction corresponding to the type of identity confirmation, and adds the permission letter to the service instruction Step 229: The mobile device sends a service command to the service server Step 230: The service server sends the identification data and user data to the telecommunications server through the authentication server Step 250: The telecommunication server verifies the identification data and user data to generate a verification result Step 260: When the identification data and user data pass the verification, the telecommunications server obtains the door number related data according to the identification data Step 270: The telecom server sends the verification result and the gate number related data to the identity verification server Step 280: The authentication server filters the door number related data according to the access authority to generate additional data, and sends the verification result and the additional data to the service server Step 290: When the verification result indicates that the service server passes the verification, the identity verification operation is performed based on the user data and additional data

Figure 1A is a system architecture diagram for obtaining additional data to perform the corresponding operation when the identity mentioned in the creation is confirmed. Figure 1B is another system architecture diagram for obtaining additional data to perform the corresponding operation upon confirmation of the identity mentioned in the creation. Figure 2A is a flow chart of obtaining additional information to perform the corresponding operation when the identity mentioned in the creation is confirmed. Fig. 2B is a flow chart of obtaining a license letter from the mobile device mentioned in the creation and sending it to the service server.

110: mobile device

120: service server

130: authentication server

140: Telecom server

Claims (11)

A system for acquiring additional data to perform corresponding operations during identity verification, the system at least includes: a mobile device; a service server, providing the mobile device connection to request the mobile device to perform an identity verification and receive the mobile device A service command generated, wherein the service command includes an identification data and a user data; an authentication server for setting an access authority of the service server, and for receiving the service server The service instruction sent; and a telecommunications server to receive the identification data and the user data sent by the identity verification server, and verify the identification data and the user data to generate a verification result, and use When the identification data and the user data pass the verification, obtain a door number-related data based on the identification data, and send the verification result and the door number-related data to the identity verification server, so that the identity verification server is based on the The access authority filters the data related to the gate number to generate an additional data, and sends the verification result and the additional data to the service server. When the verification result indicates that the verification is passed, the service server is based on the user data and the The additional information performs the operation that requires the identity confirmation. A system for obtaining additional data to perform corresponding operations during identity verification as described in item 1 of the patent application scope, wherein the identity verification server sets the access authority based on the service server's credentials. A system for obtaining additional data to perform corresponding operations during identity verification as described in item 1 of the patent scope, wherein the telecommunications server obtains a target gate number based on the identification data and The target gate number reads the corresponding in-person status, card type, holding time, and payment status to generate relevant data of the gate number. A system for obtaining additional data to perform corresponding operations during identity verification as described in item 1 of the patent application scope, wherein the mobile device is further used to connect to the telecommunications server to obtain a license letter and add the license letter to the service Instruction. The system for obtaining additional information to perform the corresponding operation when confirming the identity as described in item 1 of the patent scope, wherein the service server selects the transmission interface provided by the identity verification server to select the identity according to the type of identity confirmation A connection method between the verification servers, and sending the service command to the identity verification server according to the connection method. A system for obtaining additional data to perform corresponding operations during identity verification as described in item 5 of the patent application scope, wherein the identity verification server selects the method of connecting to the telecommunications server according to the connection method to transmit the identification The data and the user data are sent to the telecommunication server, or when the identification data and the user data are sent to the telecommunication server, a service message corresponding to the connection method is also sent to the telecommunication server. The system for obtaining additional data to perform the corresponding operation when confirming the identity as described in item 1 of the patent scope, wherein the telecommunications server is to determine whether a piece of data contains the identification data and the user data to verify the identification data and the User information. The system for obtaining additional information to perform the corresponding operation when confirming the identity as described in item 1 of the patent application scope, wherein the identity verification server reads the identification data and the service instruction from the service instruction when determining that the service instruction is correct User information. The system for obtaining additional information to perform the corresponding operation when confirming the identity as described in item 1 of the scope of patent application, in which the license letter is time-sensitive. A system for obtaining additional data to perform corresponding operations during identity verification as described in item 1 of the scope of the patent application, wherein the identification data is device identification data of the mobile device or network identification data of the mobile device connected to a mobile communication network. The system for obtaining additional data to perform the corresponding operation when confirming the identity as described in item 1 of the scope of the patent application, wherein the user data includes the gate number of the mobile device connected to the mobile communication network.

Images