TWM608117U - System of identity verification by third-party device driven chip card - Google Patents

Abstract

A system in which a third-party device drives a chip card for identity verification. It generates transfer data based on the card information input by the client through the identity recognition host, and the multimedia server provides the verification data obtained from the transfer data to the connected Chip card, after the chip card generates the identification information, the identification host judges whether the client has passed the technical means of identification according to the verification result corresponding to the identification information. The hardware carrier can be connected to the multimedia server provided by a third party. Perform identity verification and achieve the technical effect of increasing the way users perform identity verification.

Description

A system in which a third-party device drives the chip card for identity verification

An identity verification system, in particular, a system in which a third-party device drives a chip card for identity verification.

In recent years, due to the rapid development of communication and network-related industries, people’s demand for the electronic and mobile services of various services has been increasing. This demand also reflects that in various industries, users can currently use various mobile phones or tablets. The mobile device executes the mobile application. After the mobile application is connected to the corresponding service server via the Internet, the user can operate the mobile device to perform transactions, transfers, insurance, application documents and other mobile services. In this way, the user can perform the required mobile services without leaving the location.

Users may need to confirm their identity when using certain Internet services or mobile services. At present, most methods of identity verification through the Internet require the use of hardware vehicles, for example, using a specific USB flash drive or smart card (chip card) to store the key corresponding to the user’s certificate data, so that the user When performing mobile services, the identity is confirmed by connecting the USB flash drive or smart card that stores the key.

However, most of the ways to confirm the user's identity using hardware vehicles can only be done on a computer. The main reason is that the hardware vehicles need to be connected via USB or other connection slots, or Near-field communication (NFC) Readers such as card readers are connected to the computer, or read through external devices such as chip card readers, but most of the current mobile devices do not have a connection slot or NFC card reader that can be connected to a hardware carrier. Or the user needs to prepare an external device to read the hardware carrier. Therefore, most mobile devices cannot be connected to the hardware carrier. As a result, the user cannot use the mobile device for identity verification and cannot use the mobile service. Cause inconvenience to users.

In summary, it can be seen that in the prior art, there has been a problem that users generally cannot connect mobile devices and hardware carriers for identity verification for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problems in the prior art that users cannot connect to mobile devices and hardware carriers that provide identity verification, this creation discloses a system in which a third-party device drives a chip card for identity verification. Among them:

The system that the third-party device drives the chip card for identity verification disclosed in this creation includes at least: a client to generate card information; a chip card; an identity recognition host to receive card information and generate migration based on the card information. Transfer data; multimedia server, used to obtain transfer data, obtain verification data from the transfer data, and connect to the chip card, and send the verification data to the chip card, so as to obtain the identification information through the chip card, so that the identity can be recognized The host determines whether the client has passed the identity verification based on the verification result corresponding to the identity information.

The system that the third-party device drives the chip card to perform identity verification disclosed in this creation includes at least: a client to generate card information; a chip card; an identity host to generate verification data; a service server to Receive verification data, and use it to receive card information, and generate transfer data based on card information and verification data; multimedia server to obtain transfer data, obtain verification data from transfer data, and connect chip cards, And send the verification data to the chip card, so as to obtain the identification information through the chip card, so that the identification host can judge whether the client passes the identity verification based on the verification result corresponding to the identification information.

The system disclosed in this creation is as above. The difference between the system and the prior art is that this creation uses the identity host to generate transfer data based on the card information input by the client, and the multimedia server provides the verification data obtained from the transfer data to the corresponding The connected chip card enables the chip card to generate identity information, the identity host judges whether the client has passed the identity verification based on the verification result corresponding to the identity information, so as to solve the problems of the prior art and increase the number of users. The technical effect of the method of identity verification.

The following will describe the features and implementation methods of this creation in detail with the drawings and embodiments. The content is sufficient to enable any person familiar with relevant skills to easily and fully understand the technical means used in this creation to solve technical problems and implement them accordingly. The achievable effect of this creation.

This creation allows the user to drive the chip card through the multimedia server provided by a third party to confirm the user's identity when the user does not have a chip card reader but needs to use the chip card for identity verification. Among them, the multimedia server mentioned in this creation is usually a computing device installed in a convenience store, but this creation is not limited to this.

The computing devices mentioned in this creation include but are not limited to one or more processing modules, one or more memory modules, and hardware such as buses connecting different hardware components (including memory modules and processing modules). Body components. Through the included multiple hardware components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and each of the above-mentioned hardware components is arranged in the housing.

The bus of the computing device mentioned in this creation can include one or more types, such as data bus, address bus, control bus, and extended function bus ( expansion bus), and/or local bus (local bus). The bus bars of computing devices include but are not limited to Industry Standard Architecture (ISA) bus, Peripheral Component Interconnect (PCI) bus, Video Electronics Standards Association (VESA) Bureau Domain bus, serial universal serial bus (Universal Serial Bus, USB), fast peripheral component interconnection (PCI Express, PCI-E/PCIe) bus, etc.

The processing module of the computing device mentioned in this creation is coupled with the bus. The processing module includes a register group or register space. The register group or register space can be completely set on the processing chip of the processing module, or all or part of it can be set outside the processing chip It is coupled to the processing chip via a dedicated electrical connection and/or via a bus. The processing module can be a central processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processing modules, the processing modules included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processing module can interpret a computer instruction or a series of multiple computer instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to drive other hardware in the computing device Components or run operating systems or execute various programs and/or modules.

Computing equipment usually also contains one or more chipsets. The processing module of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (Integrated Circuit, IC), including memory controller and peripheral input/output (I/O) controller, that is, memory controller and peripheral input/output control The device can be included in one integrated circuit, or it can be implemented using two or more integrated circuits. Chipsets usually provide I/O and memory management functions, as well as multiple general-purpose and/or special-purpose registers, timers, etc., among which the aforementioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processing modules electrically connected to the chipset are accessed or used.

The processing module of the computing device can also access the data in the memory module and the large-capacity storage area installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as Static Random Access Memory (SRAM) , Dynamic Random Access Memory (DRAM), Read-Only Memory (ROM), Flash memory, etc. The aforementioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives, memory cards, and solid state disks. , SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processing module of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O controller via the peripheral I/O bus. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for wireless local area networks (such as Wi-Fi, Zigbee, etc.), Bluetooth, infrared, near-field communication (NFC), 3G/4G/5G and other mobile communication network (cellular network) or other wireless data transmission protocol interface, wired communication interface can be Ethernet device, DSL modem, cable modem, asynchronous transmission Mode (Asynchronous Transfer Mode, ATM) devices, or optical fiber communication interfaces and/or components, etc. The processing module can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also interact with another computing device with the hardware components described above. To communicate.

The following first uses the system architecture diagram of the third-party device to drive the chip card for identity verification mentioned in the "Figure 1" to illustrate the system operation of this creation. As shown in "Figure 1", the creative system includes a client 110, a multimedia server 130, a chip card 140, an identity host 170, and a service server 120 and an application server 150 that can be attached.

Among them, the client 110 and the service server 120, the service server 120 and the identity host 170, the multimedia server 130 and the application server 150, and the application server 150 and the identity host 170 can communicate through wired or Wireless communication connection for data or signal transmission.

The client 110 may be a portable computing device such as a mobile phone, a tablet computer, or a notebook computer, or a computing device that cannot be carried around, such as a desktop computer, a car computer, or a smart TV, and there is no special restriction on this creation. It should be particularly noted that, in this creation, the client 110 may be one computing device, or two or more computing devices.

The client 110 is responsible for generating card information. Generally speaking, the client 110 can provide the user to input card information to generate card information, but this creation is not limited to this. The card information generated by the client 110 includes, but is not limited to, the identification data and the card type. In some embodiments, the card information may also include the issuing unit of the chip card. Among them, the identity identification data is usually the ID number, but this creation is not limited to this. For example, passport numbers and other data that can be used to indicate identity can be used as the identity identification data of this creation; the card type is what the user wants to use The types of chip cards for identity verification include, but are not limited to, chip financial cards, natural person certificates, industrial and commercial certificates, etc.; the issuer usually refers to the bank or government department that issued the chip card, but this creation is not limited to this.

The client 110 is also responsible for sending the generated card information to the identity host 170 or the service server 120, and can obtain the transfer data returned by the identity host 170 or the service server 120. Generally speaking, the client 110 can send card information to the identity host 170 through the service server 120, and receive the transfer data through the service server 120, but this creation is not limited to this, and the client 110 can also directly The card information is sent to the identity host 170, and the transfer data sent by the identity host 170 is directly received.

The transfer data mentioned in this creation can enable the multimedia server 130 to obtain card information. In some embodiments, the transferred data can also enable the multimedia server 130 to obtain verification data. For example, the transfer data can be a text that directly records card information (and verification data), or it can be a message that can connect to the identity host 170 or the service server 120 to download the card information (and verification data), or it can be required The one-dimensional or two-dimensional bar code of the recorded card information (and verification data) can be obtained after decoding, but this creation is not limited to this. Wherein, the verification data may be the identity data in the card information, or it may be an identification token (token) generated by the identity recognition host 170.

In some embodiments, the client 110 may also send the device identification data when sending the card information. The device identification data sent by the client 110 includes, but is not limited to, the network address of the client 110, the product serial number, or the hardware serial number of the specific module or component included.

The client 110 may also provide the acquired transfer data to the multimedia server 130. For example, when the client 110 is a non-portable computing device or does not include a portable computing device, the client 110 can print the transfer data on paper to provide the multimedia server 130 for scanning; when the client 110 is It includes multiple computing devices such as a first client 110a and a second client 110b. The first client 110a is a non-portable computing device, and at least the second client 110b is a portable computing device, and the transfer data is When obtained by the first client 110a, the second client 110b can photograph the transferred data displayed by the first client 110a, or the first client 110a can download the transferred data, and can transfer the photographed or downloaded The transfer data is displayed to the multimedia server 130 to scan or provide the transfer data to the multimedia server 130 to read, etc.; and when the client 110 is a portable computing device or includes multiple portable computing devices, the client 110 can As described above, the transfer data is displayed to the multimedia server 130 for scanning or the multimedia server 130 is provided to read the transferred data.

The service server 120 can send the display data to the client 110 for display.

The service server 120 can also receive the card information sent by the client 110, and can send the received card information to the identity host 170; the service server 120 can also send the transfer data sent by the identity host 170 To the client 110.

The service server 120 may also receive the identification token generated by the identity identification host 170 and may generate transfer data including the identification token sent by the identification host 170 and the card information sent by the client 110.

The service server 120 may also receive the judgment result sent by the identity recognition host 170. The judgment result mentioned in this creation can indicate whether the client 110 passes the identity confirmation.

The service server 120 may also perform subsequent operations after the received judgment result indicates that the client 110 passes the identity confirmation. Subsequent operations performed by the service server 120 include, but are not limited to, generating and/or signing related documents.

The multimedia server 130 is responsible for obtaining the transfer data generated by the identity host 170, and obtains card information and verification data from the obtained transfer data. In more detail, the multimedia server 130 can obtain card information from the transfer data, and can also use the identity data in the card information as verification data. In some embodiments, if the transfer data also includes the service server The identification token obtained by the device 120 can be used by the multimedia server 130 as the verification data.

The multimedia server 130 is also responsible for connecting the chip card 140 and is responsible for driving the connected chip card 140. Generally speaking, the multimedia server 130 can drive the chip card 140 in a manner corresponding to the card type or the card type in the card information and the card issuing unit. The multimedia server 130 can also determine whether the connected chip card 140 matches the card type in the obtained card information. For example, the multimedia server 130 can access the chip card 140 using a drive mode or an access mode corresponding to the card type, and determine whether the chip card 140 matches the card type according to whether the drive or access is successful.

The multimedia server 130 is also responsible for transmitting the verification data to the chip card 140. In some embodiments, the multimedia server 130 may also receive the verification parameters sent by the application server 150, and may send the received verification parameters to the chip card 140 when sending the verification data. Among them, the verification parameters mentioned in this creation include but are not limited to signature parameters, betting parameters, etc.

The multimedia server 130 is also responsible for receiving the identification information returned by the chip card 140, and can transmit the received identification information to the application server 150.

The multimedia server 130 can also provide the user to input the chip password, and can transmit the input chip password to the chip card 140. Among them, the chip password can be a combination of words, numbers, and symbols, or biological characteristics, but this creation is not limited to this.

The chip card 140 is responsible for connecting with the multimedia server 130, and is responsible for receiving the verification data sent by the multimedia server 130. In some embodiments, the chip card 140 can also receive the verification parameters transmitted by the multimedia server 130.

The chip card 140 is also responsible for performing specific operations on the received verification data to generate a corresponding identity information, and is responsible for transmitting the generated identity information back to the multimedia server 130. The specific operations performed by the chip card 140 include, but are not limited to, signing or depositing the verification data. If the chip card 140 receives the verification parameters, the chip card 140 can sign or pledge the verification data according to the received verification parameters. Otherwise, the chip card 140 can use the predetermined parameters to sign or pledge the verification data.

The chip card 140 can also receive the chip code transmitted by the multimedia server 130, and can determine whether the received chip code is correct. If the chip password is incorrect, the chip card 140 can refuse to perform operations on the verification data, and can return a response message indicating that the chip password is incorrect; and if the chip password is correct, the chip card 140 can perform operations on the verification data to generate an identity Identify information.

The application server 150 can provide one or more different operation modes according to the different ways of matching with the body identification host 170. In more detail, when the identification information is verified by the identification host 170 instead of the application server 150, the application server 150 can receive the request message sent by the multimedia server 130, and can receive the request message Then, it connects to the identity host 170 to obtain the authentication parameters, and transmits the obtained authentication parameters to the multimedia server 130.

When the identification information is not verified by the identification host 170 but is verified by the application server 150, the application server 150 can receive the identification information sent by the multimedia server 130 and verify the received identification information The corresponding verification result can be obtained, and the obtained verification result can be sent to the identity host 170. Among them, the application server 150 can verify the identity information to verify the identity information, or can use the same betting operation as the chip card 140 and compare whether the calculated value generated by the operation is the same as the received identity information. To verify the identification information, the application server 150 may also send the received identification information to the authorization server 160, so as to verify the identification information through the authorization server 160.

The authorization server 160 may receive the identification information sent by the application server 150, and may verify the identification information to generate a verification result, that is, return the generated verification result to the application server 150. Wherein, the authorization server 160 can usually use the same betting operation as the chip card 140, and can compare whether the operation value generated by the operation is the same as the received identity information to verify the identity information, but this creation does not This is limited. For example, the authorization server 160 may also verify the identity information to verify the identity information.

The identity host 170 is responsible for receiving the card information generated by the client 110 and generating transfer data based on the received card information. In some embodiments, the identification host 170 may first generate the identification token when generating the transfer data, and then generate the transfer data including the identification token and card information. Wherein, the identity host 170 can randomly generate an identification token, but this creation is not limited to this. For example, the identity host 170 can also perform a specific calculation on the device identification data sent by the client 110 to generate an identification token. Specific operations include but are not limited to MD5, etc.

The identity host 170 is also responsible for judging whether the client 110 passes the identity verification based on the verification result corresponding to the identity information generated by the chip card 140. In more detail, if the verification result is generated by the application server 150 in this creation, the identity recognition host 170 can determine whether the client 110 passes the identity verification based on the received verification result.

If the verification result is generated by the identity host 170, the identity host 170 can first generate and send the verification parameters to the application server 150, and can receive the identity information sent by the multimedia server 130, and can be based on the generated The verification parameter verifies the received identity information, so as to generate a corresponding verification result after verification. Among them, the identity host 170 can use the verification parameters to verify the seal to determine whether the client 110 passes the identity verification; or it can use the verification parameters to perform the same operation on the verification data as the chip card 140, and compare the calculated value generated by the operation with the result. When the received identity information is the same, it means that the client 110 has passed the identity confirmation; otherwise, it means that the client 110 has not passed the identity confirmation.

The identity host 170 can send a judgment result indicating whether the client 110 passes the identity verification to the service server 120. Wherein, the identity recognition host 170 can send the judgment result to the service server 120 in real time, or can send the judgment result to the service server 120 in batches at a predetermined time or at regular intervals.

Next, the first embodiment is used to explain the operating system of this creation, and please refer to the flowchart of the third-party device driving the chip card for identity verification mentioned in "Figure 2A" of this creation. In this embodiment, it is assumed that the client 110 includes a first client 110a and a second client 110b, where the first client 110a is a notebook computer, and the second client 110b is a mobile phone, but this creation is not based on this Is limited. It should be noted that in this embodiment, the client 110 can also be implemented using a single computing device such as a mobile phone. That is, the first client 110a and the second client 110b mentioned in this embodiment are the same computing device. .

When the user operates the first client 110a to connect to the service server 120 to browse a webpage, if the service server 120 requires the user to confirm the identity, the user can choose to use the multimedia server 130 on the page provided by the service server 120 As a card reader, it can operate the first client 110a to input card information and send the input card information to the identity host 170 (step 210). In this embodiment, it is assumed that the service server 120 is a server that provides online services, and as shown in the process of "Figure 2B", the service server 120 can send display data of the available services to the first client 110a (Step 203), enabling the first client 110a to display a webpage that can provide the service purchased by the user. When the user operates the first client 110a to choose to purchase the service, the user of the first client 110a can choose the method of identity verification. If the user wants to use the chip card for identity verification, but the user does not have a card reader or When the card reader cannot be successfully used in the first client 110a, the user can select the option to use the multimedia server 130 installed in the convenience store on the web page, and enter the ID number (identity identification data) on the web page And card information such as card type (step 207), the first client 110a can also send the card information entered by the user to the service server 120 after the user completes the input (step 211), and the service server 120 is receiving After the card information sent by the first client 110a is received, the received card information can be sent to the identity host 170 (step 215).

After the identity host 170 receives the card information generated by the first client 110a, it can generate transfer data based on the received card information (step 220). In this embodiment, assuming that the transferred data is a two-dimensional bar code, the identification host 170 can encode the card information in the form of a two-dimensional bar code.

After the identity host 170 generates the transfer data, the multimedia server 130 can obtain the transfer data generated by the identity host 170. In this embodiment, it is assumed that as shown in the process of "Figure 2C", after the identity host 170 generates the transfer data, the transfer data can be sent to the service server 120, so that the service server 120 will transfer the data Transfer to the first client 110a (step 231).

After that, the second client 110b may provide the transfer data received by the first client 110a to the multimedia server 130 (step 237). In this embodiment, it is assumed that the user can operate the first client 110a to display the received transfer data, and can operate the second client 110b to photograph the transfer data displayed by the first client 110a, and then the user The second client 110b can be carried to the convenience store, and the multimedia server 130 set in the convenience store can be operated, so that the multimedia server 130 scans the transfer data displayed by the second client 110b, or the user can also connect After the multimedia server 130 and the second client 110b are operated, the multimedia server 130 is operated to read the files (such as image files or PDF files) that contain the transferred data stored in the second client 110b. There is no special restriction on this creation ) To obtain transfer data.

Returning to "Figure 2A", after the multimedia server 130 obtains the transfer data generated by the identity host 170, verification data can be obtained from the obtained transfer data (step 240). In this embodiment, assuming that the verification data is the user's identity data, the multimedia server 130 can obtain the card information after decoding the transferred data, and read the card type and the identity data as the verification data from the card information.

Similarly, after the first client 110a receives the transfer data sent by the service server 120, the multimedia server 130 can connect to the chip card 140 (step 250). In this embodiment, it is assumed that the multimedia server 130 can prompt the user to insert the corresponding chip card 140 into the chip card slot of the multimedia server 130 according to the card type read from the card information, so as to connect with the chip card 140. The server 130 can even detect whether the connected chip card 140 matches the card type after it is connected to the chip card 140. If it does not match, the multimedia server 130 can prompt the user to insert the chip card that matches the card type into the chip. Card slot.

After the multimedia server 130 is connected to the chip card 140, the obtained verification data can be sent to the chip card 140, so as to obtain the identity information through the chip card 140 (step 260). In this embodiment, assuming that the chip card 140 needs a chip password to be driven, the multimedia server 130 may prompt the user to input the chip password after connecting the chip card 140, and may send the chip password entered by the user to Chip card 140. After verifying that the chip password is correct, the chip card 140 can read the chip card information, and generate the identity information including the read chip card information and the received verification data, and the generated identity The information is transmitted back to the multimedia server 130.

After the multimedia server 130 obtains the identity information through the chip card 140, the identity host 170 can obtain a verification result corresponding to the identity information obtained by the multimedia server 130. In this embodiment, if the identity information is verified by the application server 150, the multimedia server 130 can send the obtained identity information to the application server 150 ( Step 271) After receiving the identity information, the application server 150 can verify the received identity information to obtain a verification result (step 273), and can send the obtained verification result to the identity host 170 (step 275) ). Among them, the application server 150 can verify the identity information by itself, or send the identity information to the authorization server 160, so as to verify the identity information through the authorization server 160; the authorization server 160 can, after receiving the identity information, The identity information is verified and the corresponding verification result is generated, and the generated verification result can be sent back to the application server 150, so that the application server 150 can obtain the verification result.

If, in this embodiment, the identity information is verified by the identity host 170, the identity host 170 verifies the identity information by itself, or the application server 150 sends the identity information to the authorization server 160 as described above. Verify the identity information through the authorization server 160.

Returning to "Figure 2A", after the multimedia server 130 obtains the verification result corresponding to the identity information generated by the chip card 140, the identity host 170 can determine whether the client 110 passes the identity verification based on the obtained verification result ( Step 280), and a corresponding judgment result can be generated.

In this way, through this creation, the user can use the multimedia server 130 provided by a third party as a card reader for identity verification.

In the above-mentioned embodiment, after the identity recognition host 170 generates a determination result indicating whether the client 110 passes the identity verification, the generated determination result may be transmitted to the service server 120.

The service server 120 may perform subsequent operations after receiving the judgment result generated by the identity recognition host 170 (step 290). In this embodiment, it is assumed that the service server 120 can generate a service purchase contract and actively send the generated contract to the first client 110a for signature. The service server 120 can also send follow-up messages via short messages or instant messages or push broadcasts. The operating web address is given to the second client 110b, so that the user operates the second client 110b to open the web address sent by the service server 120 to obtain and sign the contract generated by the service server 120.

Continue to explain this creation with the second embodiment, please also refer to "Figure 2A". In this embodiment, it is also assumed that the client 110 includes a first client 110a and a second client 110b, but the same as the first embodiment, the first client 110a and the second client 110b mentioned in this embodiment It can also be the same computing device.

When the user operates the first client 110a to connect to the service server 120 to browse a webpage, if the webpage that the user browses requires the user to confirm the identity first, the service server 120 may provide the webpage for identity confirmation to the user , So that the user can choose to use the multimedia server 130 as a card reader on the page provided by the service server 120, and can operate the first client 110a to input card information and send the input card information to the service server 120 (step 210).

After the service server 120 receives the card information generated by the first client 110a, it can generate transfer data based on the received card information (step 220). In this embodiment, assuming that the transferred data is a two-dimensional barcode, the service server 120 may first request the identification token (verification data) from the identity identification host 170, so that the identification host 170 generates the identification token and sends it back to the service server 120. The service server can encode the card information received from the first client 110a and the verification data received from the self-identification host 170 into a two-dimensional bar code as the transfer data.

After the service server 120 generates the transfer data, the multimedia server 130 can obtain the transfer data generated by the service server 120. In this embodiment, it is assumed that the multimedia server 130 can obtain the transfer data from the first client 110a from the second client 110b as shown in the process shown in "Figure 2C".

After the multimedia server 130 obtains the transfer data generated by the service server 120, verification data can be obtained from the obtained transfer data (step 240). In this embodiment, the multimedia server 130 can obtain card information and verification data after decoding the transferred data.

Similarly, after the multimedia server 130 obtains the transfer data generated by the service server 120, the multimedia server 130 can connect the chip card 140 according to the card information in the transfer data (step 250). In this embodiment, it is assumed that the multimedia server 130 can prompt the user to insert the corresponding chip card 140 into the chip card slot of the multimedia server 130 according to the card type in the card information, and can use the access corresponding to the card type The way is connected with the chip card 140.

After the multimedia server 130 is connected to the chip card 140, the obtained verification data can be sent to the chip card 140, so as to obtain the identity information through the chip card 140 (step 260). In this embodiment, assuming that the chip card 140 needs a chip password to be able to be driven, the multimedia server 130 can prompt the user to enter the chip password after connecting the chip card 140, and follow the process shown in "Figure 2E". The multimedia server 130 can generate and send a request to the application server 150. After receiving the request from the multimedia server 130, the application server 150 can connect to the identity host 170 and obtain the authentication generated by the identity host 170 Parameters, and the obtained verification parameters can be transmitted to the multimedia server 130 (step 276). Among them, the verification parameter can be a signature parameter or a bet parameter.

After the multimedia server 130 receives the verification parameters sent by the application server 150, the multimedia server 130 can send the chip password input by the user, the received verification parameters and the obtained verification data to the chip card 140. After verifying that the chip password is correct, the chip card 140 can perform specific operations such as signature or staking on the verification data according to the received verification parameters to generate identity information (step 277), and can transmit the generated identity information给Multimedia server 130.

After the multimedia server 130 receives the identity information generated by the chip card 140, the multimedia server 130 may send the received identity information to the identity host 170 (step 278). After the identity host 170 receives the identity information sent by the multimedia server 130, it can verify the identity information to generate a verification result (step 279).

Returning to "Figure 2A", after the identity host 170 generates a verification result corresponding to the identity information generated by the chip card 140, the identity host 170 can determine whether the first client 110a passes the identity based on the generated verification result Confirm (step 280), and a corresponding judgment result can be generated.

After that, the identity recognition host 170 may send the generated judgment result to the service server 120. The service server 120 may perform subsequent operations after receiving the judgment result generated by the identity recognition host 170 (step 290).

In summary, it can be seen that the difference between this creation and the prior art is that the host with identity recognition generates transfer data according to the card information input by the client, and the multimedia server provides the verification data obtained from the transfer data to the connected Chip card, after the chip card generates identification information, the identification host determines whether the client has passed the technical means of identity verification based on the verification result corresponding to the identification information. This technical means can solve the existing users of the prior art Generally, it is not possible to connect a mobile device and a hardware vehicle for identity verification, thereby achieving the technical effect of increasing the ways for users to perform identity verification.

Although the implementation of this creation is disclosed as above, the content described is not used to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope of this creation, makes a little modification in the form and details of the implementation of this creation, and it belongs to the patent protection of this creation. range. The scope of patent protection for this creation shall still be subject to the scope of the attached patent application.

110: client 110a: the first client 110b: second client 120: service server 130: Multimedia server 140: chip card 150: application server 160: License server 170: Identity host Step 203: The service server sends the display data to the client Step 207: The client enters the card information Step 210: The client sends the card information to the service server or identity host Step 211: The client sends the card information to the service server Step 215: The service server sends the card information to the identity host Step 220: The service server or identity host generates transfer data based on the card information Step 231: The service server sends the migration data to the client Step 237: The client provides the transfer data to the multimedia server Step 240: The multimedia server obtains the transfer data, and obtains the verification data from the transfer data Step 250: Connect the multimedia server and chip card Step 260: The multimedia server sends the verification data to the chip card, so as to obtain the identification information through the chip card Step 271: The multimedia server sends the identification information to the application server Step 273: The application server verifies the identification information to obtain the verification result Step 275: The application server sends the verification result to the identity host Step 276: Apply the server to the identity host to obtain verification parameters, and send the verification parameters to the multimedia server Step 277: The multimedia server sends the verification parameters to the chip card, and the chip card generates identification information after performing specific operations on the verification data according to the verification parameters Step 278: The chip card sends the identity information to the multimedia server, and the multimedia server sends the identity information to the identity host Step 279: The identity host verifies the identity information to generate a verification result Step 280: The identity host determines whether the client has passed the identity verification based on the verification result corresponding to the identity information Step 290: The service server performs subsequent operations after the client's identity is confirmed

Figure 1 is the system architecture diagram of the third-party device driving the chip card for identity verification mentioned in the creation. Figure 2A is the flow chart of the third-party device driving the chip card for identity verification mentioned in the creation. Figure 2B is the flow chart of the creation of the client to send card information to the identity host. Figure 2C is the flow chart of the client providing transfer data to the multimedia server mentioned in the creation. Figure 2D is the flow chart of the application server mentioned in the creation to send the obtained verification result to the identity host. Figure 2E is the flow chart of the creation of the identity host verifying the identity information sent by the multimedia server.

110: client

110a: the first client

110b: second client

120: service server

130: Multimedia server

140: chip card

150: application server

160: License server

170: Identity host

Claims (18)

A system in which a third-party device drives a chip card for identity verification. The system includes at least: A client terminal for generating a card information; A chip card; An identity host for receiving the card information and generating a transfer data based on the card information; and A multimedia server for obtaining the transfer data and obtaining a verification data from the transfer data, and for connecting the chip card and sending the verification data to the chip card, so as to obtain an identity through the chip card The identification information enables the identification host to determine whether the client has passed the identification verification based on a verification result corresponding to the identification information. The system in which a third-party device drives a chip card for identity verification as described in claim 1, wherein the system further includes an application server for receiving the identity information sent by the multimedia server, The identification information is verified to generate the verification result, and the application server is further used to send the verification result to the identity host, so that the identity host determines whether the client passes the identity verification according to the verification result. The system in which a third-party device drives a chip card for identity verification as described in claim 2, wherein the system further includes an authorization server for receiving the identification information sent by the application server and verifying the identity Identify the information to generate the verification result, and send the verification result to the application server. As described in claim 1, the third-party device drives the chip card for identity verification system, wherein the system further includes an application server, the application server is used to obtain a verification parameter from the identity host, and verify the verification The parameter is sent to the multimedia server, and the multimedia server is further used to send the verification parameter to the chip card, so that the chip card performs a specific operation on the verification data according to the verification parameter to generate the identity information and identify the identity The information is returned to the multimedia server, and the multimedia server is further used to send the identity information to the identity host, so that the identity host verifies the identity information to generate the verification result. In the system in which a third-party device drives a chip card for identity verification as described in claim 1, wherein the client is further used to obtain the transfer data and provide the transfer data to the multimedia server. The system in which a third-party device drives a chip card for identity verification as described in claim 1, wherein the system further includes a service server for sending the card information sent by the client to the identity host, And send the transfer data sent by the identity host to the client. The system in which the chip card is driven by a third-party device for identity verification as described in claim 1, wherein the system further includes a service server for performing subsequent operations after the identity host determines that the client's identity verification is passed . As described in claim 7, the third-party device drives the chip card to perform identity verification system, wherein the identity recognition host transmits the judgment result indicating whether the client passes the identity verification to the service server in real time or in batches. As described in claim 1, the third-party device drives the chip card for identity verification system, wherein the multimedia server is further used to provide input of a chip code, and transmit the chip code to the chip card, so that the chip card After determining that the chip password is correct, the personal identification information is generated and the personal identification information is transmitted back to the multimedia server. A system in which a third-party device drives a chip card for identity verification. The system includes at least: A client terminal for generating a card information; A chip card; An identity host for generating a verification data; A service server for receiving the verification data, and for receiving the card information, and generating a transfer data based on the card information and the verification data; and A multimedia server for obtaining the transfer data and obtaining the verification data from the transfer data, and for connecting the chip card and sending the verification data to the chip card, so as to obtain an identity through the chip card The identification information enables the identification host to determine whether the client has passed the identification verification based on a verification result corresponding to the identification information. The system in which a third-party device drives a chip card for identity verification as described in claim 10, wherein the system further includes an application server for receiving the identity information sent by the multimedia server, The identification information is verified to generate the verification result, and the application server is further used to send the verification result to the identity host, so that the identity host determines whether the client passes the identity verification according to the verification result. The system in which a third-party device drives a chip card for identity verification as described in claim 11, wherein the system further includes an authorization server for receiving the identification information sent by the application server and verifying the identity Identify the information to generate the verification result, and send the verification result to the application server. As described in claim 10, the third-party device drives the chip card to perform identity verification system, wherein the system further includes an application server for obtaining a verification parameter from the identity host, and verifying The parameter is sent to the multimedia server, and the multimedia server is further used to send the verification parameter to the chip card, so that the chip card performs a specific operation on the verification data according to the verification parameter to generate the identity information and identify the identity The information is returned to the multimedia server, and the multimedia server is further used to send the identity information to the identity host, so that the identity host verifies the identity information to generate the verification result. As described in claim 10, the third-party device drives the chip card to perform identity verification system, wherein the client is further used to obtain the transfer data and provide the transfer data to the multimedia server. As described in claim 10, the third-party device drives the chip card to perform identity verification system, wherein the service server is further used to send the card information sent by the client to the identity host, and to transfer the identity Identify the transfer data sent by the host and send it to the client. As described in claim 10, the third-party device drives the chip card to perform identity verification system, wherein the service server is further used to perform subsequent operations after the identity recognition host determines that the client's identity verification is passed. As described in claim 16, the third-party device drives the chip card to perform identity verification system, wherein the identity recognition host transmits the judgment result indicating whether the client passes the identity verification to the service server in real time or in batches. As described in claim 10, the third-party device drives the chip card for identity verification system, wherein the multimedia server is further used to provide input of a chip password, and transmit the chip password to the chip card, so that the chip card After determining that the chip password is correct, the personal identification information is generated and the personal identification information is transmitted back to the multimedia server.

Images