TWM609003U - System for transferring to client end to continue operation after confirming the identity on the public equipment - Google Patents

Abstract

A system that transfers to the client to continue operations after the public equipment confirms the identity. It uses the multimedia server to drive the connected chip card to make the chip card generate verification data, and then sends the verification data to the verification server for identity verification. The verification server is in After the verification data is verified, a transfer message is generated, which enables the client to connect to the service server to complete subsequent operations based on the transfer message. This allows the public multimedia server to provide a full range of services and achieve the completion of a private device. The technical effect of the service started on the public equipment.

Description

After confirming the identity on the public equipment, transfer to the client to continue the operation system

A system for changing operating equipment, especially a system that transfers to the client to continue operating after the identity of the public equipment is confirmed.

The interactive information service station (Kiosk) can provide information and application services for communication, business, entertainment or education. Interactive information service stations are usually placed in high-traffic areas, such as shopping malls, hotel lobbies, or airports. In Taiwan, they are mainly set up in convenience stores.

With the advancement and integration of information technology, interactive information service stations can provide more diversified services such as self-service, such as providing users to order products or tickets, check library collections, search for product information, print documents, and so on. Moreover, the interactive information service station can be equipped with card readers, various connection interfaces, and thermal paper printers and other components to expand the available services, such as payment, micropayment, and exchange of goods.

The current interactive information service station is like a computer, which can provide and execute most online services. However, since the interactive information service station is a public device rather than a private device, the interactive information service station is not suitable for recording operations The private information of the user, such as private keys (private) and certificates, so there are still some services that the interactive information service station cannot provide, for example, online transactions that require signatures or services that require signatures to be provided.

Although you can use hardware vehicles that store private data such as private keys and certificates to perform services that require signatures or signatures, if the user does not have a hardware vehicle or forgets to bring it, the user will still be unable to use the service .

In summary, it can be seen that in the prior art, interactive information service stations are not suitable for storing private data and cannot perform certain services for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem of the prior art that the interactive information service station is not suitable for storing private data and cannot perform certain services, this creation discloses a system that transfers to the client to continue operation after confirming the identity of the public device, in which:

The system disclosed by this creation that after confirming the identity of the public equipment and transferring to the client to continue the operation, at least includes: a service server; a chip card to generate verification data; a multimedia server to connect and drive the chip card and receive verification Data; the verification server is used to receive the verification data sent by the multimedia server, and to determine that the verification data passes the verification to generate a transfer message; the client is used to obtain the transfer message and connect to the service server according to the transfer message The processor completes subsequent operations.

The system disclosed in this creation is as above. The difference between the system and the previous technology is that the creation uses the multimedia server to drive the connected chip card to make the chip card generate verification data, and then send the verification data to the verification server for identity verification and verification server. The server generates a transfer message after the verification data is verified, so that the client connects to the service server to complete the follow-up operations according to the transfer message, so as to solve the problems of the previous technology, and can be achieved with a private device to complete the start on a public device The technical efficacy of the service performed.

The following will describe the features and implementation methods of this creation in detail with the drawings and embodiments. The content is sufficient to enable any person familiar with relevant skills to easily and fully understand the technical means used in this creation to solve technical problems and implement them accordingly. The achievable effect of this creation.

This creation allows the user to select the service to be executed on the multimedia server, and the multimedia server first confirms the identity of the user with the chip card held by the user, and then the client used by the user completes the selection Follow-up work provided by the service. Among them, the multimedia server mentioned in this creation is usually a computing device installed in a convenience store, but this creation is not limited to this.

The computing devices mentioned in this creation include but are not limited to one or more processing modules, one or more memory modules, and hardware such as buses connecting different hardware components (including memory modules and processing modules). Body components. Through the included multiple hardware components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and each of the above-mentioned hardware components is arranged in the housing.

The bus of the computing device mentioned in this creation can include one or more types, such as data bus, address bus, control bus, and extended function bus ( expansion bus), and/or local bus (local bus). The bus bars of computing devices include but are not limited to Industry Standard Architecture (ISA) bus, Peripheral Component Interconnect (PCI) bus, Video Electronics Standards Association (VESA) Bureau Domain bus, serial universal serial bus (Universal Serial Bus, USB), fast peripheral component interconnection (PCI Express, PCI-E/PCIe) bus, etc.

The processing module of the computing device mentioned in this creation is coupled with the bus. The processing module includes a register group or register space. The register group or register space can be completely set on the processing chip of the processing module, or all or part of it can be set outside the processing chip It is coupled to the processing chip via a dedicated electrical connection and/or via a bus. The processing module can be a central processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processing modules, the processing modules included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processing module can interpret a computer instruction or a series of multiple computer instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to drive other hardware in the computing device Components or run operating systems or execute various programs and/or modules.

Computing equipment usually also contains one or more chipsets. The processing module of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (Integrated Circuit, IC), including memory controller and peripheral input/output (I/O) controller, that is, memory controller and peripheral input/output control The device can be included in one integrated circuit, or it can be implemented using two or more integrated circuits. Chipsets usually provide I/O and memory management functions, as well as multiple general-purpose and/or special-purpose registers, timers, etc., among which the aforementioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processing modules electrically connected to the chipset are accessed or used.

The processing module of the computing device can also access the data in the memory module and the large-capacity storage area installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as Static Random Access Memory (SRAM) , Dynamic Random Access Memory (DRAM), Read-Only Memory (ROM), Flash memory, etc. The aforementioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives, memory cards, and solid state disks. , SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processing module of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O controller via the peripheral I/O bus. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for wireless local area networks (such as Wi-Fi, Zigbee, etc.), Bluetooth, infrared, near-field communication (NFC), 3G/4G/5G and other mobile communication network (cellular network) or other wireless data transmission protocol interface, wired communication interface can be Ethernet device, DSL modem, cable modem, asynchronous transmission Mode (Asynchronous Transfer Mode, ATM) devices, or optical fiber communication interfaces and/or components, etc. The processing module can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also interact with another computing device with the hardware components described above. To communicate.

The following first uses the system architecture diagram of "Figure 1" mentioned in the creation of the public equipment to confirm the identity and then transfer to the client to continue the operation to illustrate the system operation of this creation. As shown in "Figure 1", the creative system includes a multimedia server 130, a chip card 140, a verification server 170, a client 190, and a service server 120 and an application server 150 that can be attached. Among them, the service server 120, the multimedia server 130, the application server 150, the verification server 170, and the client 190 may all be computing devices.

The service server 120 can provide a connection to the multimedia server 130 to provide services on the multimedia server 130. When the service server 1210 provides services, the multimedia server 130 may be required to confirm the identity of the operator (user).

The service server 120 may provide one or more services. Generally speaking, each service provided by the service server 120 may have a corresponding icon and one or more return parameters. Among them, the return parameter can be the URL of the service provided, or it can include the network address (IP address) or domain name of the service server 120, the application program interface of the service provided by the service server 120, The port of the service server 120, the parameters that need to be provided to the service server 120, and other data, but this creation is not limited to this.

The multimedia server 130 can obtain the icon and return parameters corresponding to the service provided by the service server 120, and can display the icon corresponding to the service provided by the service server 120, and when the icon is selected, Connect to the service server 120 that provides the corresponding service.

The multimedia server 130 may also generate an identity confirmation request when requested by the service server 120 to confirm the identity of the operator, and send the generated identity confirmation request to the application server 150.

The multimedia server 130 is also responsible for connecting the chip card 140. Generally speaking, the multimedia server 130 may include a chip card slot (not shown in the figure), and the chip card 140 can be connected through the chip card slot, but the connection method of the multimedia server 130 and the chip card 140 is not in this way. However, for example, the multimedia server 130 can also be connected to the chip card 140 through a near field communication or the like.

The multimedia server 130 can also input card information. The card information input by the multimedia server 130 includes the card type and the issuing unit of the chip card 140 to be connected. Among them, the card types include but are not limited to financial cards, natural person certificates, industrial and commercial certificates, etc.; the card issuer usually refers to the bank or government department that issued the chip card, but this creation is not limited to this.

In some embodiments, the card information may also include the chip password of the chip card 140. Chip passwords can be in the form of text or biometrics. Among them, chip passwords in text form are traditional passwords composed of letters, numbers, and symbols, and chip passwords in biometric form are features extracted from fingerprints, irises, or human faces, etc. , But the chip cipher mentioned in this creation is not limited to the above.

The multimedia server 130 can also provide the operator to input contact information. The contact information input by the multimedia server 130 includes, but is not limited to, the operator's phone number or e-mail account, or the account registered in the application server 150 in advance, and other information capable of contacting the operator.

The multimedia server 130 is also responsible for driving the connected chip card 140. Generally speaking, the multimedia server 130 can drive the chip card 140 in a manner corresponding to the card type in the card information (in some implementations, the card issuing unit needs to be referred to). The multimedia server 130 can also determine whether the connected chip card 140 matches the card type in the obtained card information. For example, the multimedia server 130 can access the chip card 140 using a drive mode or an access mode corresponding to the card type, and determine whether the chip card 140 matches the card type according to whether the drive or access is successful.

In some embodiments, the multimedia server 130 may also receive the verification parameters transmitted by the application server 150, and may provide the received verification parameters to the chip card 140. The verification parameters mentioned in this creation include items such as identification tokens (token) and calculation parameters.

The multimedia server 130 is also responsible for obtaining the verification data generated by the chip card 140 through the connection with the chip card 140. The verification data obtained by the multimedia server 130 is usually data composed of a specific number of letters, numbers, and symbols. In some embodiments, the multimedia server 130 may also add return parameters to the verification data. Among them, the return parameter corresponds to the service provided by the service server 120 corresponding to the selected icon.

The multimedia server 130 may also send the obtained verification data to the verification server 170. Among them, the multimedia server 130 may directly send the verification data to the verification server 170, or may indirectly send the verification data to the verification server 170 through the application server 150.

The multimedia server 130 can also receive the transfer message sent by the application server 150. The transfer message mentioned in this creation can allow the client 190 to connect to the verification server 170. For example, the transfer message can be a URL or connection information connected to the verification server 170, or it can be obtained and verified. The web address or connection information to which the server 170 is connected, such as a two-dimensional bar code or a picture. Wherein, the connection parameters may include the application program interface or IP address or domain name provided by the authentication server 170, the port of the authentication server 170, and the port that needs to be provided to the authentication server 170 Parameters, etc., but this creation is not limited to this.

The multimedia server 130 may also display the received transfer message, or may send the received transfer message to the client 190. Among them, the multimedia server 130 can transmit the transfer message to the client 190 through a connection line or near field communication.

The chip card 140 is responsible for generating verification data, and is responsible for transmitting the generated verification data to the multimedia server 130. Generally speaking, the chip card 140 can perform specific operations on specific data to generate verification data. The above-mentioned specific data may be predetermined data or data provided by the multimedia server 130, such as the identification token in the verification parameter, but the specific data mentioned in this creation is not limited to the above.

In more detail, the specific operation performed by the chip card 140 varies with the card type of the chip card. For example, when the card type of the chip card 140 is a financial card, the specific operation performed by the chip card 140 is a deposit; When the card type of the chip card 140 is a certificate carrier such as a natural person certificate or an industrial and commercial certificate, the specific calculation performed by the chip card is a signature. But this creation is not limited to this. In addition, it should be noted that if the verification parameters include calculation parameters, the chip card 140 can perform specific calculations according to the calculation parameters, but this creation is not limited to this.

The application server 150 can receive the identity confirmation request sent by the multimedia server 130, and when receiving the identity confirmation request, it can connect to the authentication server 170 to download the authentication parameters, and can send the downloaded authentication parameters to the multimedia service机130. It should be noted that if the verification parameter contains multiple items, the application server 150 can download all the items at once, or download different items in stages. For example, the application server 150 can first connect to the verification server 170 after downloading the identification tokens. , Connect to the verification server 170 again to download the calculation parameters.

The application server 150 can also receive the verification data generated by the chip card 140 sent by the multimedia server 130, and can forward the received verification data to the verification server 170. In some embodiments, the application server 150 may also receive the contact information input by the operator provided by the multimedia server 130.

The application server 150 may also send the device identification data to the verification server 170. The device identification data can be the network address or domain name of the application server 150, the product serial number of the application server 150, or the hardware serial number of a specific hardware set in the application server 150, which can represent the application server 150. Data, but this creation is not limited to this.

The application server 150 may also receive the transfer message generated by the verification server 170, and may send the received transfer message to the client 190 or the multimedia server 130. Among them, the application server 150 can obtain the operator's phone number or email account based on the contact information sent by the multimedia server 130, and can send the transfer message to the operator by means of SMS, push broadcast, or email.的Client 190.

The verification server 170 may generate verification parameters, and may transmit the generated verification parameters to the application server 150. The verification server 170 can generate verification parameters in one or more ways, such as random, serial number, and specific calculations on the device identification data of the application server 150, but this creation is not limited to this. Among them, the above-mentioned specific operations include but are not limited to MD5 and so on.

The verification server 170 is responsible for receiving the verification data sent by the multimedia server 130, and is responsible for determining whether the received verification data passes the verification. For example, the verification server 170 can verify the verification data, and can determine whether the verification data passes the verification based on the verification result; the verification server 170 can also use the same specific operation as the chip card 140 to generate the calculated value, and compare the results. Whether the generated calculated value is the same as the verification data is used to determine whether the verification data passes the verification, but the manner in which the verification server 170 determines whether the verification data passes the verification is not limited to the above.

The verification server 170 is also responsible for generating the transfer message. Generally speaking, the verification server 170 can generate a transfer message when determining that the received verification data passes verification. In some embodiments, if the verification data includes return parameters, the verification server 170 may add the return parameters in the verification data to the generated migration message when generating the migration message.

The client 190 is responsible for obtaining the transfer message generated by the verification server 170. The client 190 can capture the transfer message displayed by the multimedia server 130, and can also receive the transfer message sent by the application server 150 or the multimedia server 130, but the client 190 obtains the transfer message in a different way. limit.

The client 190 is also responsible for connecting to the service server 120 according to the obtained transfer message. The client 190 can convert the obtained transfer message into a return parameter that can be connected to the service server 120, and connect to the service server 120 according to the return parameter.

The client 190 is also responsible for completing subsequent operations after connecting to the service server 120. The above-mentioned subsequent operations include, but are not limited to, document signing and/or certificate application through the verification server 170, etc.

Next, an example is used to explain the operation of this authoring, and please refer to the flowchart of "Figure 2A" in this authoring for the transfer to the client after confirming the identity on the public device. In this embodiment, it is assumed that the client 190 is a mobile phone, but the creation is not limited to this.

When the operator of the multimedia server 130 is operating the multimedia server 130, if the operator selects a specific icon on the multimedia server 130, the multimedia server 130 can connect the chip card 140 and drive the connected chip card 140 ( Step 220). In this embodiment, it is assumed that the multimedia server 130 can prompt the operator to insert the chip card 140 into the chip card slot on the multimedia server 130 after the operator selects the icon, and can detect that the chip card 140 is inserted The chip card slot is connected to and drives the chip card 140 after the chip card slot.

After the chip card 140 is driven by the multimedia server 130, the chip card 140 can generate verification data, and can transmit the generated verification data back to the multimedia server 130 (step 240). In this embodiment, if the chip card 140 is a credential carrier, the chip card 140 can perform a signature operation to generate verification data; and if the chip card is a financial card, the chip card 140 can perform a code operation to generate verification data .

In practice, the above-mentioned multimedia server 130 connects and drives the chip card 140 (step 220) and the chip card 140 generates verification data and sends the generated verification data back to the multimedia server 130 (step 240). Figure" shows the process.

When the operator operates the multimedia server 130, after the operator selects an icon, the multimedia server 130 may transmit a service request to the service server 120 corresponding to the selected icon. If the service server 120 determines that the service requested by the received service request requires identity verification, the service server 120 may request the multimedia server 130 to perform identity verification (step 205).

After receiving the request from the service server 120, the multimedia server 130 may generate an identity confirmation request and may transmit the generated identity confirmation request to the application server 150 (step 211). After receiving the identity confirmation request generated by the multimedia server 130, the application server 150 can connect to the authentication server 170 to download the authentication parameters, and can transmit the downloaded authentication parameters to the multimedia server 130 (step 215). Among them, the verification parameters may include the identification tokens and calculation parameters generated by the verification server 170.

After the multimedia server 130 receives the authentication parameters generated by the authentication server 170 sent by the application server 150, it can display a prompt message for inserting the chip card 140 into the chip card slot of the multimedia server 130 for identity confirmation, so that the operation Insert the chip card 140 into the chip card slot. The multimedia server 130 can also display an input interface for inputting card information after detecting that the chip card 140 is inserted into the chip card slot, so that the operator can input card information such as card type, card issuing unit, chip password, etc. (step 225). The multimedia server 130 can also connect the chip card 140 inserted into the chip card slot by the operator after the operator completes the input of the card information, and drive the station according to the card type (and the issuing unit) in the card information input by the operator. The connected chip card 140 (step 227), and the verification parameters received from the application server 150 are provided to the chip card 140 (step 230).

After receiving the verification parameters provided by the multimedia server 130, the chip card 140 may generate verification data according to the verification parameters provided by the multimedia server 130 (step 245). That is, the identification tokens in the verification parameters are calculated according to the calculation parameters in the verification parameters to generate verification data.

Returning to "Figure 2A", after the multimedia server 130 obtains the verification data generated by the chip card 140, the multimedia server 130 may send the obtained verification data to the verification server 170 (step 250). In this embodiment, the multimedia server 130 may add the return parameters corresponding to the service selected by the operator to the obtained verification data, and may directly send the verification data to the verification server 170 or through the application server 150 The verification data is sent to the verification server 170 indirectly.

After the verification server 170 receives the verification data generated by the chip card 140 sent by the multimedia server 130, the verification server 170 can verify the received verification data. If the verification server 170 determines that the verification data has not passed the verification, the verification server 170 can generate a verification result indicating that the verification failed, and can send the verification result back to the multimedia server 130 in the same way as the multimedia server 130 sends the verification data to the verification server 170. The server 130 allows the multimedia server 130 to display a corresponding result screen after receiving the verification result indicating that the verification failed.

If the verification server determines that the verification data is verified, the verification server 170 may generate a transfer message (step 260). In this embodiment, it is assumed that the verification server 170 can first extract the return parameters from the verification data, then generate a transfer message including the return parameters, and then generate a verification result including the transfer message indicating that the verification is successful. Among them, the transfer message can be a QR code.

After the verification server 170 generates the transfer message, the client 190 (the mobile phone used by the operator of the multimedia server 130) can obtain the transfer message generated by the verification server 170 (step 280). In this embodiment, assuming that the process shown in "Figure 2D" can be used, the verification server 170 can use the same method as the multimedia server 130 to send verification data to the verification server 170, directly or indirectly through the application server 150. The generated verification result is sent to the multimedia server 130 (step 275), and the multimedia server 130 may provide the transfer message contained in the verification result to the client 190 after receiving the verification result indicating that the verification is passed (step 277), for example , The multimedia server 130 can display a result screen containing the transfer message, and the operator can operate the client 190 to capture the transfer message displayed by the multimedia server 130, or, if the multimedia server 130 can communicate with the client 190 in the near field or Connected via a USB cable, etc., the operator can also operate the client 190 and the multimedia server 130, so that the client 190 downloads the transfer message from the multimedia server 130; in addition, in this embodiment, it is also possible to "2C In the process shown in Figure, the verification server 170 may also send the generated verification result to the application server 150 (step 271). The application server 150 may determine that the verification result indicates that the verification data has passed the verification. Fetch the transfer data, and provide the fetched transfer data to the client 190 (step 273). For example, the application server 150 can send the transfer data to the client 190 through push broadcast, and the operator can operate the client 190 Open the application that received the push to obtain the transfer data, or the application server 150 can also send the transfer data to the operator via email, and the operator can operate the client 190 to open the email program to download the transfer data. email of.

Returning to "Figure 2A", after the client 190 obtains the migration data generated by the verification server 170 (step 280), it can connect to the service server 120 according to the migration data to complete subsequent operations (step 290). In this embodiment, it is assumed that the client 190 can decode the acquired transfer data into a URL containing the return parameters, and then connects to the service server 120 according to the URL generated by the decoding, and the service server 120 can access the client 190 When there is no usable certificate in the server, the client 190 is directed to the verification server 170 to apply for a certificate. The service server 120 can also generate a contract when the client 190 has a usable certificate, or after the client 190 has applied for a certificate And other related documents and send the related documents to the client 190. The client 190 can send the signature value back to the service server 120 after signing the related documents. The service server 120 can store the generated related documents and the received documents. The signature value of.

In this way, through this creation, the operator of the multimedia server 130 can use the chip card 140 to complete the identity verification on the multimedia server 130, and the client 190 will continue the subsequent procedures.

In summary, it can be seen that the difference between this creation and the prior art is that after the chip card is connected to the multimedia server driver to generate the verification data, the verification data is sent to the verification server for identity verification. The verification server is in After the verification data is verified, a transfer message is generated, which enables the client to connect to the service server to complete subsequent operations based on the transfer message. This technical method can solve the problem that the interactive information service station in the previous technology is not suitable for storage. The problem of private data so that it is impossible to perform a specific service, and then achieve the technical effect of using private equipment to complete the service started on the public equipment.

Although the implementation of this creation is disclosed as above, the content described is not used to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope of this creation, makes a little modification in the form and details of the implementation of this creation, and it belongs to the patent protection of this creation. range. The scope of patent protection for this creation shall still be subject to the scope of the attached patent application.

120: service server 130: Multimedia server 140: chip card 150: application server 170: Verify server 190: client Step 205: The service server requests the multimedia server to confirm the identity Step 211: The multimedia server sends an identity confirmation request to the application server Step 215: The application server connects to the verification server to download the verification parameters and send the verification parameters to the multimedia server Step 220: The multimedia server connects the chip card and drives the chip card Step 225: Multimedia server enters card information Step 227: The multimedia server drives the chip card according to the card information Step 230: The multimedia server provides verification parameters to the chip card Step 240: The chip card generates verification data and sends the verification data back to the multimedia server Step 245: The chip card generates verification data according to the verification parameters Step 250: The multimedia server sends the verification data to the verification server Step 260: The verification server generates a migration message after determining that the verification data has passed verification Step 271: Verify that the server sends a migration message to the application server Step 273: The application server provides the transfer data to the client Step 275: The application server sends a transfer message to the multimedia server Step 277: The multimedia server provides the transfer message to the client Step 280: The client obtains the transfer message Step 290: The client connects to the service server according to the transfer message to complete subsequent operations

Figure 1 is a system architecture diagram of the creation of the system that the public equipment confirms the identity and then transfers to the client to continue the operation. Figure 2A is the flow chart of transferring to the client to continue the operation after confirming the identity on the public device mentioned in the creation. Figure 2B is the flow chart of triggering the multimedia server to drive the chip card to generate verification data. Figure 2C is the flow chart of the creation of the client to obtain the transfer data generated by the verification server. Figure 2D is a flow chart for another client to obtain the transfer data generated by the verification server.

120: service server

130: Multimedia server

140: chip card

150: application server

170: Verify server

190: client

Claims (10)

A system that transfers to the client to continue operations after the identity of the public device is confirmed, the system at least includes: A service server; A chip card for generating a verification data; A multimedia server for connecting and driving the chip card and receiving the verification data; A verification server for receiving the verification data sent by the multimedia server, and generating a transfer message after determining that the verification data has passed the verification; and A client is used to obtain the transfer message, and connect to the service server according to the transfer message to complete subsequent operations. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity on the public device, wherein the system further includes an application server for connecting to the multimedia server when the identity confirmation request sent by the multimedia server is received The verification server downloads a verification parameter and transmits the verification parameter to the multimedia server. The multimedia server is further used to provide the verification parameter to the chip card so that the chip card generates the verification data according to the verification parameter. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity of the public device, wherein the service server is further used to provide the multimedia server connection and request the multimedia server to confirm the identity. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity of the public equipment, wherein the multimedia server inputs a card information and drives the chip card according to the card information. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity of the public equipment, wherein the system further includes an application server for receiving the verification data sent by the multimedia server and sending the verification data to The verification server. As described in claim 1, the system that transfers to the client to continue the operation after the identity is confirmed on the public equipment, wherein the system further includes an application server for receiving the transfer message sent by the authentication server and for sending the The transfer message is transferred to the client, the application server sends the transfer message to the multimedia server so that the multimedia server displays the transfer message to the client for shooting, or the application server sends the transfer message to the multimedia service The machine causes the multimedia server to send the transfer message to the client, so that the client obtains the transfer message. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity on the public device, where the client uses the authentication server to apply for certificate, sign documents and/or connect with the service server to complete subsequent operations . As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity on the public device, wherein the multimedia server is further used to add a return parameter corresponding to the service server to the verification data, and the verification server It is further used to add the returned data to the transfer message, so that the client can connect to the service server based on the returned data. As described in claim 1, the system that transfers to the client to continue the operation after confirming the identity of the public equipment, wherein the multimedia server is further used to input a card information, and drive the chip card according to the card information. As described in claim 9, the system that transfers to the client to continue the operation after confirming the identity on the public equipment, wherein the chip card is further used to generate the verification data after the chip password in the card information is verified.

Images