WO2013013367A1

WO2013013367A1 - Method and device for authenticating identity of mobile terminal

Info

Publication number: WO2013013367A1
Application number: PCT/CN2011/077492
Authority: WO
Inventors: 李治国
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2011-07-22
Filing date: 2011-07-22
Publication date: 2013-01-31

Abstract

The present invention relates to the field of mobile terminals. Disclosed in an embodiment of the present invention are a method and device for authenticating the identity of a mobile terminal, improving the security when the mobile terminal logs into and uses a mobile internet service. The method of the present invention comprises: authenticating the identity of the mobile terminal according to the user name and password of the mobile terminal, and the current geographic location information of the mobile terminal; if the identity authentication of the mobile terminal is approved, then the mobile terminal is allowed to log into a network server and use the network service ordered by the mobile terminal. The embodiment of the present invention is mainly used in the identity authentication process of the mobile terminal.

Description

Mobile terminal identity verification method and device

The present invention relates to the field of mobile terminals, and in particular, to an identity verification method and apparatus for a mobile terminal.

Background technique

When the existing mobile terminal uses the Internet service, the identity verification of the mobile terminal is implemented by verifying whether the user name and password of the mobile terminal are correct. When it is determined that the user name and password of the mobile terminal respectively match the preset user name and password, It is determined that the identity of the mobile terminal is correct, and the Internet service scheduled by the mobile terminal can be used. However, when verifying that the mobile terminal's username and password are correctly authenticated to the mobile terminal, the mobile terminal's authentication information is easily stolen by Trojans or hackers, making the mobile terminal less secure when logging in to use the mobile Internet service. .

Summary of the invention

Embodiments of the present invention provide a method and apparatus for authenticating a mobile terminal, which improves security when a mobile terminal logs in using a mobile Internet service.

In order to achieve the above object, embodiments of the present invention use the following technical solutions:

A method for authenticating a mobile terminal includes:

Verifying the identity of the mobile terminal according to the username, password, and geographic location information of the mobile terminal;

If the identity verification of the mobile terminal passes, the mobile terminal is allowed to log in to the network server and use the network service scheduled by the mobile terminal.

A server, comprising:

An identity verification unit, configured to perform a risk on the identity of the mobile terminal according to the user name, the password of the mobile terminal, and the geographical location information of the mobile terminal;

a login unit, configured to allow the mobile terminal to log in to the network server when the identity verification unit determines that the identity verification of the mobile terminal is passed, and use the network service scheduled by the mobile terminal Business.

The method and device for verifying the identity of the mobile terminal provided by the embodiment of the present invention, when performing identity verification on the mobile terminal, according to the user name and password of the mobile terminal and the geographical location information of the location where the mobile terminal is registered, to the mobile terminal The identity of the mobile terminal is verified, and the geographical location information of the mobile terminal is not easily stolen by the Trojan or the hacker. In the prior art, the mobile terminal is authenticated only by the user name and password that are easily stolen by the Trojan or the hacker. In comparison, the security of the mobile terminal when using the mobile Internet service is improved.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the embodiments or the prior art description will be briefly described below. It is obvious that the drawings in the following description are only the present invention. For some embodiments, other drawings may be obtained from those of ordinary skill in the art without departing from the drawings.

1 is a flowchart of an identity verification method of a mobile terminal according to Embodiment 1 of the present invention;

2 is a flowchart of an identity verification method of a mobile terminal according to Embodiment 2 of the present invention;

3 is a flowchart of an identity verification method of a mobile terminal according to Embodiment 3 of the present invention;

4 is a block diagram showing the composition of a server in Embodiment 4 of the present invention;

Figure 5 is a block diagram showing the composition of another server in Embodiment 4 of the present invention;

6 is a block diagram showing the composition of another server in Embodiment 4 of the present invention;

Figure 7 is a block diagram showing the composition of another server in Embodiment 4 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Example 1

An embodiment of the present invention provides a method for authenticating a mobile terminal. As shown in FIG. 1, the method includes: 1 01. Verify the identity of the mobile terminal according to the username, password, and geographic location information of the mobile terminal.

When the mobile terminal first performs the registration network service, the network server sends a prompt message to the mobile terminal whether to log in to use the network service only after receiving the network service registration request sent by the mobile terminal, if the user determines Only when the login service is used to register the network service, the geographical location information registered by the mobile terminal is obtained, and the registered geographical location information will not be modified once determined. The geographic location information of the mobile terminal can be obtained by the server through the GPS. However, the embodiment of the present invention does not limit this, and may be acquired by the mobile terminal and sent to the server.

1 02. If the identity verification of the mobile terminal passes, the mobile terminal is allowed to log in to the network server, and uses the network service scheduled by the mobile terminal.

In the embodiment of the present invention, when authenticating the mobile terminal, the identity of the mobile terminal is verified according to the user name and password of the mobile terminal and the geographical location information of the mobile terminal registration, and the mobile terminal The geographical location information of the registered place is not easily stolen by the Trojan or the hacker. Compared with the prior art, the mobile terminal is authenticated only by the user name and password that are easily stolen by the Trojan or the hacker. Security when using mobile internet services.

Example 2

The embodiment of the invention provides an identity verification method for a mobile terminal. As shown in FIG. 2, the method includes:

201. After receiving the network service registration request sent by the mobile terminal, send, to the mobile terminal, prompt information for whether to log in to use the network service only at the registered location.

It should be noted that, when the mobile terminal first performs the registration network service, after receiving the network service registration request sent by the mobile terminal, the mobile terminal sends a prompt message to the mobile terminal whether to log in to use the network service only at the registered location, So that the user can determine the mode of logging in to use the web service.

202. After receiving the response information that the user determines to log in to use the prompt information of the network service only, the location information of the mobile terminal registration location is obtained; and according to the geographic location The set information and the predetermined rule set the range of the geographic location of the mobile terminal.

The obtaining the geographical location information registered by the mobile terminal may be obtained by the server through the GPS, but the embodiment of the present invention does not limit this, and may also be acquired by the mobile terminal and sent to the server.

In addition, the predetermined rule is a defined rule of the range of the location value, and may be specifically set according to the needs of the user, which is not limited by the embodiment of the present invention, for example, within 50 meters or around the specific geographical location where the mobile terminal is registered. Within 100 meters.

203. Receive a request sent by the mobile terminal to log in to the network server.

The request may be a request triggered by an operation of the terminal in any form, for example, a request that is triggered after the login of the network service login user name and password. The embodiment of the present invention is not limited thereto, and may also be when the network login interface is opened. The request that was triggered.

204. Obtain a username and password of the mobile terminal.

The obtaining the user name and password of the mobile terminal may be implemented by, but not limited to, receiving the user name and password sent by the mobile terminal; when the mobile terminal sends the user name and password, the user may input the user name and the password. After the password is sent to the network server, the user name and password input by the user are sent to the network server. The default user name and password in the default login mode are directly sent to the network server when the login interface is opened. .

205. Perform identity verification on the mobile terminal according to the username and password. If the username and password respectively match the corresponding username and password of the preset value of the mobile terminal, perform step 206; If the name and password respectively do not match the corresponding user name and password of the preset value of the mobile terminal, step 210 is performed.

The user is authenticated according to the user name and password, and the user name and password are respectively matched with the corresponding user name and password of the preset value of the mobile terminal.

206. Obtain geographic location information of the mobile terminal.

The obtaining of the geographic location information of the mobile terminal may be obtained by the server through the GPS. However, the embodiment of the present invention does not limit this, and may be acquired by the mobile terminal and sent to the server. 207. The obtained geographical location information is compared with the geographical location information of the mobile terminal to be registered. If the geographical difference value obtained by the comparison is within the geographic location wide value range, step 208 is performed; If the geographical difference value obtained by the comparison is not within the range of the geographic location, step 209 is performed.

208. Determine that the identity verification of the mobile terminal passes, allow the mobile terminal to log in to the network server, and use the network service scheduled by the mobile terminal; and end the login of the current mobile terminal.

209. Send a notification message that the mobile terminal fails to log in to the network server to the mobile terminal; and end the login of the mobile terminal.

210. The user name and password input to the mobile terminal are incorrect. Please re-enter the notification message of the user name and password.

211. Receive a password that is input by the mobile terminal again, and perform step 205.

Example 3

The embodiment of the invention provides an identity verification method for a mobile terminal. As shown in FIG. 3, the method includes:

301. After receiving the network service registration request of the mobile terminal, send, to the mobile terminal, prompt information for whether to log in to use the network service only at the registered location.

302. After receiving, by the user, the response information of the prompt information for logging in to use the network service, the location information of the mobile terminal registration location is obtained; and according to the geographic location The set information and the predetermined rule set the range of the geographic location of the mobile terminal.

The predetermined rule is a defined rule of the range of the location value, and may be specifically set according to the requirements of the user, which is not limited by the embodiment of the present invention, for example, within 50 meters or around the specific geographical location where the mobile terminal is registered. Within 100 meters.

303. Receive a request sent by the mobile terminal to log in to the network server.

304. Obtain geographic location information of the mobile terminal.

The obtaining of the geographic location information of the mobile terminal may be obtained by the server through the GPS. However, the embodiment of the present invention does not limit the mobile terminal, and may be acquired by the mobile terminal and sent to the server.

305. The obtained geographical location information is compared with the geographical location information of the mobile terminal registration location; if the geographical difference value obtained by the comparison is within the geographic location wide value range, step 306 is performed; If the geographical difference value obtained by the comparison is not within the range of the geographic location, step 309 is performed.

306. Obtain a username and password of the mobile terminal.

307. Perform identity verification on the mobile terminal according to the username and password. If the username and password respectively match the corresponding username and password of the mobile terminal preset value, perform Step 308: If the user name and password respectively do not match the corresponding user name and password of the preset value of the mobile terminal, step 309 is performed.

308. Determine that the identity verification of the mobile terminal passes, allow the mobile terminal to log in to the network server, and use the network service scheduled by the mobile terminal; and end the login of the current mobile terminal.

309. The user name and password input to the mobile terminal are incorrect. Please re-enter the notification message of the user name and password.

310. Receive a password that is input by the mobile terminal again, and perform step 306.

311. Send a notification message that the mobile terminal fails to log in to the network server to the mobile terminal; and end the login of the mobile terminal.

And, in the embodiment of the present invention, after receiving the request for logging in to the network server sent by the mobile terminal, acquiring geographical location information of the mobile terminal, and pre-setting the geographic location information with the mobile terminal Comparing the geographical value range, when the compared geographical difference is within the range of the geographic value, the mobile terminal is authenticated according to the username and password, and the geographical difference is compared. When the value is not in the range of the location value, the mobile terminal is not authenticated according to the username and password, which avoids unnecessary verification operations of the server and saves operating resources of the server.

Example 4

The embodiment of the invention provides a server. As shown in FIG. 4, the server includes: an identity verification unit 41 and a login unit 42.

The identity verification unit 41 is configured to verify the identity of the mobile terminal according to the username, password, and geographic location information of the mobile terminal. The login unit 42 is configured to allow the mobile terminal to log in to the network server when the identity verification unit 41 determines that the identity verification of the mobile terminal passes, and use the network service scheduled by the mobile terminal.

Further, as shown in FIG. 5, the identity verification unit 41 includes: a first receiving module 41 1 , a first obtaining module 412 , a first identity verifying module 41 3 , a second acquiring module 414 , and a first comparing module 415 . The first determining module 416 and the sending module 417.

The first receiving module 411 is configured to receive a request sent by the mobile terminal to log in to the network server.

The first obtaining module 412 is configured to obtain a username and a password of the mobile terminal.

The first identity verification module 41 3 is configured to perform identity verification on the mobile terminal according to the username and password obtained by the first obtaining module 412.

The second obtaining module 414 is configured to determine, in the first identity verification module 41 3, that the user name and password acquired by the first obtaining module 412 are respectively matched with corresponding user names and passwords of the preset value of the mobile terminal. And acquiring geographic location information of the mobile terminal.

The first comparison module 415 is configured to compare the geographical location information acquired by the second obtaining module 414 with a geographical location information range of the mobile terminal registration.

The first determining module 416 is configured to determine, when the geographical difference value obtained by the first comparison module 415 is within the range of the geographic location, determine the identity verification of the mobile terminal.

The sending module 417 is configured to send, to the mobile terminal, a notification message that the mobile terminal fails to log in to the network server when the geographical difference value obtained by the first comparison module 415 is not within the geographical range.

Further, as shown in FIG. 6, the ID card unit 41 includes: a second receiving module 418, a third obtaining module 419, a second comparing unit 4110, a fourth obtaining module 4111, and a second identity verification module. 4112. The second determining module 411 3. The sending module 4114.

The second receiving module 418 is configured to receive a request sent by the mobile terminal to log in to the network server.

The third obtaining module 419 is configured to obtain geographic location information of the mobile terminal. The second comparing unit 4110 is configured to compare the geographic location information acquired by the third acquiring module 419 with geographic location information of the mobile terminal registration location.

The fourth obtaining module 4111 is configured to acquire the username and password of the mobile terminal when the geographically significant difference value obtained by the second comparing unit 4110 is within the range of the geographic location.

The second identity verification module 412 is configured to perform identity verification on the mobile terminal according to the user name and password obtained by the fourth obtaining module 4111.

The second determining module 4113 is configured to determine, when the second identity verification module 4112 determines that the username and password respectively match the corresponding username and password of the preset value of the mobile terminal, determine the identity of the mobile terminal. Verification passed.

The sending module 4114 is configured to send, to the mobile terminal, a notification message that the mobile terminal fails to log in to the network server when the geographical difference value obtained by the second comparison module 4110 is not within the geographical range.

Further, as shown in FIG. 7, the server further includes: a sending unit 43, an obtaining unit 44, and a setting unit 45.

The sending unit 43 is configured to receive the mobile terminal before the identity verification unit authenticates the identity of the mobile terminal according to the user name and password of the mobile terminal and the geographical location information of the mobile terminal. After the network service registration request, the mobile terminal is sent a prompt message indicating whether to log in to use the network service only at the registered place.

The obtaining unit 44 is configured to: after receiving the response information that the user determines to log in to use the prompt information of the network service only, to obtain the geographical location information of the mobile terminal registration place.

a setting unit 45, configured to set a range of geographic location values of the mobile terminal according to the geographic location information acquired by the obtaining unit 44 and a predetermined rule; the predetermined rule is a defined rule of a geographic location wide value range, and According to the specific needs of the user, the embodiment of the present invention does not limit this, for example, within 50 meters or within 100 meters of the specific geographical location where the mobile terminal is registered.

It should be noted that, for other descriptions of the functional modules included in the server in the embodiment of the present invention, reference may be made to the related descriptions in the first embodiment to the third embodiment. Narration.

The embodiment of the present invention can be applied in any application scenario that needs to be kept secret. For example, when a user performs a login service on a mobile terminal such as a mobile phone, such as synchronizing, uploading, or transmitting data that is very private to the user, the security requirement is high or Users with strong privacy only want to log in and use at home. Therefore, when the user can only log in locally, the hacker in the field can steal the user's username and password, and the hacker cannot know the user registration. The geographical location information greatly increases security.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus necessary general hardware, and of course, by hardware, but in many cases, the former is a better implementation. . Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer. A hard disk or optical disk or the like includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention. The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

Claim

A method for authenticating a mobile terminal, comprising:

The method for authenticating an identity of a mobile terminal according to claim 1, wherein the identity of the mobile terminal is performed according to a user name, a password of the mobile terminal, and geographical location information of the location where the mobile terminal is registered. Verification, including:

Receiving a request sent by the mobile terminal to log in to the network server;

Obtaining a username and password of the mobile terminal;

Performing identity verification on the mobile terminal according to the username and password;

And acquiring the geographic location information of the mobile terminal, if the user name and password respectively match the corresponding user name and password of the preset value of the mobile terminal;

Comparing the obtained geographical location information with geographic location information of the mobile terminal registration place;

If the obtained geographical difference value is within the range of the geographical value, it is determined that the identity verification of the mobile terminal passes.

The method for verifying the identity of the mobile terminal according to claim 1, wherein the identity of the mobile terminal is performed according to the user name, the password of the mobile terminal, and the geographical location information of the location where the mobile terminal is registered. Verification, including:

Obtaining geographic location information of the mobile terminal;

Obtaining a username and a password of the mobile terminal, and performing identity verification on the mobile terminal according to the username and password, if the obtained geographical difference value is within the range of the geographic location; If the username and password respectively match the corresponding username and password of the mobile terminal preset value, it is determined that the identity verification of the mobile terminal passes.

The method for authenticating the mobile terminal according to claim 2 or 3, wherein the method further comprises:

And if the obtained geographical difference value is not within the geographical value range, sending a notification message that the mobile terminal fails to log in to the network server to the mobile terminal.

The method for authenticating an identity of a mobile terminal according to any one of claims 1 to 3, wherein the mobile terminal is based on a user name, a password of the mobile terminal, and geographical location information of the mobile terminal registration location. Before the identity of the terminal is verified, the method further includes:

After receiving the network service registration request sent by the mobile terminal, sending, to the mobile terminal, prompt information for whether to log in to use the network service only in registration;

After receiving the response information that the user determines to log in to use the prompt information of the network service only, the location information of the mobile terminal registration location is obtained, and the mobile terminal is set according to the geographic location information and a predetermined rule. The geographical range of the location.

6. A server, comprising:

An identity verification unit, configured to verify, according to a username, a password, and a geographical location information of the mobile terminal, the identity of the mobile terminal;

And a login unit, configured to allow the mobile terminal to log in to the network server when the identity verification unit determines that the identity verification of the mobile terminal passes, and use the network service scheduled by the mobile terminal.

The server according to claim 6, wherein the identity verification unit comprises: a first receiving module, configured to receive a request sent by the mobile terminal to log in to the network server; Obtaining a username and password of the mobile terminal;

a first identity verification module, configured to perform identity verification on the mobile terminal according to the username and password obtained by the first acquiring module received by the first receiving module;

a second acquiring module, configured to: when the first identity verification module determines that the user name and password acquired by the first acquiring module respectively match a corresponding user name and password of the mobile terminal preset value, The geographical location information of the mobile terminal; a first comparison module, configured to compare the geographical location information acquired by the second acquiring module with geographic location information of a location where the mobile terminal is registered;

And a first determining module, configured to determine, when the geographical location difference obtained by the comparing module is within the geographic location threshold, determine identity verification of the mobile terminal.

The server according to claim 6, wherein the identity card unit comprises: a second receiving module, configured to receive a request sent by the mobile terminal to log in to the network server; and a third acquiring module, Obtaining geographic location information of the mobile terminal;

a second comparing unit, configured to compare the geographical location information acquired by the third acquiring module with geographic location information of a location where the mobile terminal is registered;

a fourth obtaining module, configured to acquire a username and a password of the mobile terminal when the geographical difference value obtained by comparing the second comparison unit is within the range of the geographic location;

a second identity verification module, configured to perform identity verification on the mobile terminal according to the username and password obtained by the fourth obtaining module;

a second determining module, configured to: when the second identity verification module determines that the user name and password respectively match the corresponding user name and password of the preset value of the mobile terminal, determine that the identity verification of the mobile terminal passes .

The server according to claim 7 or 8, wherein the identity verification unit further comprises:

a sending module, configured to send a mobile terminal login network to the mobile terminal when the geographical difference value obtained by comparing the first comparison module or the second comparison module is not within the geographical range Notification message that failed.

The server according to any one of claims 6-8, wherein the server further comprises:

a sending unit, configured to send, before the identity verification unit, the identity of the mobile terminal according to a user name, a password, and a geographical location information of the mobile terminal currently located by the mobile terminal, After the network service registration request, send, to the mobile terminal, prompt information for whether to log in to use the network service only at the registered place; An obtaining unit, configured to: after receiving the response information that the user determines to log in to use the prompt information of the network service only, to obtain the geographical location information of the mobile terminal registration location;

And a setting unit, configured to set a geographic value threshold range of the mobile terminal according to the geographical location information acquired by the acquiring unit and a predetermined rule.