WO2014154058A1

WO2014154058A1 - System and method for mobile identity authentication and payment

Info

Publication number: WO2014154058A1
Application number: PCT/CN2014/072000
Authority: WO
Inventors: 陈大昭
Original assignee: 宝利数码有限公司
Priority date: 2013-03-27
Filing date: 2014-02-12
Publication date: 2014-10-02
Also published as: CN104077841A; HK1199320A1

Abstract

Disclosed are a system and method for fast mobile identity authentication based on a telecommunications carrier, the method comprising the following steps: transmitting an authentication request via a mobile device (20), the authentication request containing user settings; determining the phone number of the user according to the authentication request; generating a temporary code by using the user settings and the determined phone number; and using the temporary code for identity authentication. Also disclosed is an embodiment of applying the identity authentication system to mobile payment. The system is efficient, timesaving, and secure.

Description

Method and system for mobile identity authentication and payment

The present invention relates to a system for mobile identity authentication and payment, and more particularly to a system for fast mobile identity authentication and payment based on a telecommunications carrier. Background technique

In real life, people need different certifications to identify themselves on different occasions, such as: attending meetings and making consumption. However, excessive passes or documents can cause inconvenience in carrying, and the authentication process is cumbersome and time consuming. In addition, existing technology certification methods often have security problems, which are prone to the consequences of personal data leakage, especially when making consumption. Book content

In view of the foregoing background, it is an object of the present invention to provide a mobile authentication system that is convenient, fast and secure.

In one aspect, the present invention is an identity authentication method, comprising the steps of: transmitting, by a mobile device, an authentication request, the authentication request including a user's setting; determining, according to the authentication request, the user's phone number; using the user's setting Determining and determining the phone number to generate a temporary code; and using the temporary code for identity authentication.

In one embodiment of the invention, the temporary encoding includes conditional parameters to limit the identity authentication. The condition parameters include the effective number and the effective time. The effective number is used to define the number of times the temporary code can be used, and the effective time defines the usable time of the temporary code.

In another implementation, the identity authentication method of the present invention further includes encrypting the temporary encoding and storing the encrypted temporary encoding to the mobile device for multiple use. Subsequent steps of transmitting the authentication request, determining the telephone number, and generating the temporary code can be omitted, and the encrypted temporary code is used directly for identity authentication.

In an implementation, the identity authentication method of the present invention further includes the following steps: A unique identifier of the mobile device; the unique identifier is encrypted together with the temporary encoding to obtain an encrypted code, and the encrypted code is stored to the mobile device for multiple use; wherein the encrypted code can only be used by the mobile device.

In another embodiment, the step of determining the user's telephone number in the identity authentication method of the present invention is performed using one of the following methods: (i) obtaining an internet protocol address of the mobile device, and then obtaining an address corresponding to the internet protocol from the telecommunications carrier (ii) reading the data of the subscriber identity module in the mobile device and determining the subscriber's telephone number based on the data; or (iii) obtaining the subscriber's telephone number from the header of the authentication request.

In an embodiment, the step of using the temporary encoding for identity authentication in the identity authentication method of the present invention comprises: selecting a specific delivery mode to send the temporary encoding to the verification device; the verification device transmitting the verification data and the temporary encoding to the authentication server; the authentication server Check that the verification data and the temporary code are valid, and perform the following steps: (i) If both the verification data and the temporary code are valid, send the verification valid message and the user's phone number to the verification device; or (ii) if both the verification data and the temporary code are valid Valid, and the phone number in the verification data matches the phone number contained in the temporary code, sending a success message to the verification device; or (iii) if one or both of the verification data and the temporary code are invalid, or in the verification data The telephone number does not match the telephone number included in the temporary code, and the failure information is sent to the verification device; and the verification device completes the identity authentication based on the received verification valid information and the telephone number or success information or failure information.

In another embodiment, the particular mode of delivery includes barcodes, microwaves, and sound waves. The identity authentication method of the present invention further includes generating a plurality of different temporary codes according to the needs of the user to perform identity authentication on different occasions.

In another aspect, the present invention is an identity authentication system, comprising: a mobile device to transmit an authentication request, the authentication request including a user's settings; (b) an authentication server to receive the authentication request and determine the user according to the authentication request Telephone number, the authentication server generates a temporary encoding using the user's settings and telephone number and transmits the temporary encoding to the mobile device; and a verification device; wherein the mobile device transmits the temporary encoding through a specific delivery method Go to the verification device for identity authentication.

In one embodiment, the temporary encoding includes conditional parameters to limit identity authentication, and the conditional parameters include a valid number of times and a valid time, the effective number of times defines the number of times the temporary encoding is available, and the effective time defines the usable time of the temporary encoding.

In another embodiment, the temporary encoding is encrypted and stored in the memory of the mobile device for multiple use and for fast authentication.

In another embodiment, the identity authentication system of the present invention further includes a mobile subscriber data server of the telecommunications carrier to accept the challenge from the authentication server and return the subscriber's telephone number to the authentication server.

In an embodiment, the verification device transmits the verification data and the temporary encoding to the authentication server, the authentication server checks whether the verification data and the temporary encoding are valid, and performs the following steps: (i) if both the verification data and the temporary encoding are valid, the transmission verification Valid information and the user's phone number to the verification device; or (ii) if both the verification data and the temporary code are valid, and the phone number in the verification data matches the phone number contained in the temporary code, the success message is sent to the verification device; or (iii) if one or both of the verification data and the temporary code are invalid, or the phone number in the verification data does not match the phone number contained in the temporary code, the failure message is sent to the verification device; and the verification device is based on the received verification Valid information and phone number or success or failure information completes identity authentication.

In another embodiment, the particular mode of delivery includes barcodes, microwaves, and sound waves. In another aspect, the present invention is a method for fast mobile payment, comprising the steps of: transmitting an authentication request by a mobile device, the authentication request including a setting of the user; determining a phone number of the user according to the authentication request; and obtaining the corresponding phone number User data and establish the identity of the user; use the user's settings and phone number to generate temporary encoding; and use temporary encoding for fast mobile payments.

In one embodiment, the temporary encoding includes conditional parameters to limit fast mobile payments. The condition parameters include: a valid number, which defines the number of times the temporary code can be used; a valid time, which defines the usable time of the temporary code; and a valid amount, which defines the temporary The usable amount of the code.

In another embodiment, the method of fast mobile payment of the present invention further includes encrypting the temporary encoding and storing the encrypted temporary encoding to the mobile device for multiple use. The subsequent steps of transmitting the authentication request, determining the user's telephone number, obtaining the user data corresponding to the telephone number, establishing the identity of the user, and generating the temporary encoding may be omitted, and the encrypted temporary code is directly used for fast mobile payment.

In another embodiment, the method of fast mobile payment of the present invention further comprises: obtaining a unique identifier of the mobile device; encrypting the unique identifier together with the temporary encoding to obtain an encrypted code, and storing the encrypted code to the mobile device for Used multiple times; where the encryption code can only be used by the mobile device.

In another embodiment, the step of using the temporary encoding for fast mobile payment in the method of fast mobile payment of the present invention comprises: selecting a specific delivery mode to transmit the temporary encoding to the verification device; and the verification device transmitting the verification data and the temporary encoding to the authentication server The authentication server checks whether the verification data and the temporary code are valid, and performs the following steps: (i) If both the verification data and the temporary code are valid, the payment information is sent to the mobile operator's mobile user data server in the corresponding account of the user. Deduct the corresponding amount; or (ii) If one or both of the verification data and the temporary code are invalid, cancel the transaction and send the failure message to the verification device.

In one embodiment, the particular delivery method includes barcodes, microwaves, and sound waves. In another aspect, the present invention is a fast mobile payment system, comprising: a mobile device to transmit an authentication request, the authentication request including a user's setting; an authentication server to receive an authentication request and determine a user's phone based on the authentication request Number and the user data corresponding to the phone number and establish the identity of the user, the authentication server generates the temporary code using the user's settings and the phone number and transmits the temporary code to the mobile device; and the verification device; wherein the mobile device passes the specific delivery method A temporary code is sent to the verification device for fast mobile payment.

The invention has many advantages. First, after the temporary encoding is generated, the user can directly make Use it for quick certification or shopping, saving time and efficiency. Secondly, the establishment of the user identity is guaranteed by a third party (telecom company) and the security is improved. Temporary encoding can be bundled with a unique mobile device, not afraid of stealing temporary encoding. In addition, the user can additionally set the login password, which increases the flexibility of use and further enhances the security. Even if the mobile device is lost, there is no need to worry about the account being taken. Users can also customize different effective times, effective time and effective amount according to their needs to meet the different needs of different situations.

Furthermore, the flexibility of the present invention is high, and it can be applied to different categories as long as the steps in the steps are fine-tuned according to different usage methods. DRAWINGS

The performance and advantages of the present invention will be further understood by reference to the remainder of the specification and the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a block diagram of an authentication system in one embodiment of the present invention.

Figure 2 shows a flow chart when a user authenticates using the authentication system of the present invention. Figure 3 illustrates an authentication flow diagram of an authentication request provider side in one embodiment of the present invention.

Fig. 4 is a flow chart of the retailer side when performing mobile payment in an embodiment of the present invention. detailed description

As described in FIG. 1, an authentication system includes a mobile device 20, an authentication server 22, a mobile user data server 24, and a verification device 26, in accordance with an embodiment of the present invention. The mobile device 20 includes all portable devices that have a Subscriber Identity Module (SIM card) built in and can be connected to the network, such as a mobile phone, a Personal Digital Assistant (PDA), and a tablet. The authentication server 22 is responsible for the authentication work, which receives the authentication request from the mobile device 20, and then determines the phone number of the mobile device 20 based on the characteristics of the authentication request. There are a number of methods that can be used to determine the phone number of the mobile device 20. In one embodiment of the invention, the following method is used: First, the authentication server 22 acquires an Internet Protocol address (IP address) of the mobile device 20 when receiving the authentication request of the mobile device 20, and then the authentication server 22 transmits the Internet Protocol address of the mobile device 20 to the telecommunications. The mobile subscriber data server 24 of the operator also requests the mobile subscriber data server 24 to pair to provide the telephone number and subscriber data corresponding to the internet protocol address. The mobile operator's mobile subscriber data server 24 stores the mobile subscriber's personal information, including his/her name, address, mobile phone number, account number, account balance, and the like. The mobile subscriber data server 24 also stores a map of Internet Protocol addresses that record the mobile phone number corresponding to the particular Mobile Internet Protocol address, and the corresponding subscriber can also be determined based on the determined telephone number. Because each mobile phone number is bundled with a unique mobile internet protocol address, the identity of the user identified by this method is true and unique, and is guaranteed by a third party (telecom company). The authentication server 22 uses the resulting phone number along with the user settings data contained in the authentication request to generate a temporary code that can be encrypted and sent to the mobile device 20 for authentication. Thereafter, the mobile device 20 transmits the temporary encoding to the verification device 26 by a specific delivery method, and the verification device 26 transmits the received temporary encoding along with the necessary additional related data to the authentication server 22 to complete the authentication. The verification device 26 is provided in a related mechanism that requires authentication, and has the ability to communicate with the mobile device 20 by a specific delivery method. The specific delivery mode includes all delivery modes supported by the mobile device 20, such as barcode, microwave, and sound waves, including fast response matrix code, near field communication (NFC), Bluetooth, infrared, wireless fidelity (Wi-Fi), and radio frequency. Identification (RFID) and so on. The verification device 26 may be a company's punch card machine, an exhibition sign-in machine, a club door opening device, a payment verification machine, and the like.

The authentication process of the present invention is described in detail below. The authentication method of the present invention mainly relates to data processing between a user (mobile device 20) requiring authentication and a certification request provider (verification device 26), and includes a third party (telecom company) guaranteeing the identity of the user. Figure 2 illustrates a flow chart when a user authenticates using the authentication system of the present invention. The user starts the authentication process from step 28, and in step 30, the user first opens the mobile device 20 for installation. A specific application on the computer, or through the network function of the mobile device 20, to a specific website. The particular application connects the user to the authentication server 22 via a data communication network, and the particular website is also hosted by the authentication server 22. Data communication networks include General Packet Radio Service (GPRS), Third Generation Mobile Communication Technology (3G), and Fourth Generation Mobile Communication Technology (4G).

The user sends an authentication request to the authentication server 22 via the mobile device 20 in a specific application or a specific website. The authentication request includes the user's setting data, and the setting data includes the user-defined authentication effective number and effective time. After receiving the authentication request in step 32, the authentication server 22 obtains the user's data through different methods. One of the methods is to obtain the user's data by obtaining the Internet Protocol address of the mobile device 20 and asking the mobile user data server 24 as described above. Upon receiving the query and mapping, the mobile user data server 24 passes the user data, including the telephone number, back to the authentication server 22. The authentication server 22 receives the user's data in step 34 and the identity of the user is determined. The authentication server 22 stores the user's data in a database, and then generates a temporary code using the phone number and the user's setting data, the temporary code including condition parameters such as the effective number and the effective time, and the effective number defines the temporary code. The number of times that can be used, and the effective time defines the usable time of the temporary code. The effective number and effective time of temporary coding are determined by the user according to their needs. If the user often needs to perform the authentication action, he/she can set the effective number of times, such as 10 times. On the contrary, if the user feels it is necessary or for security For reasons, he/she can set the temporary encoding to be used only once, and the temporary encoding will become invalid after the first use, even if others get it. By the same token, the effective time of the temporary encoding limits the scope of use of the temporary encoding. The user can set the temporary encoding to be valid only for a certain period of time, such as one day, one week or one month, exceeding the effective time, even if the temporary encoding is still The number of remaining valid times, the temporary encoding will also become invalid, which greatly improves security.

After the temporary encoding is generated, the authentication server 22 transmits it to the mobile device 20. The mobile device 20 is configured with a memory to store temporary encodings, based on the number of times the temporary encoding is valid and valid Time, temporary coding can be used multiple times. In one embodiment, the temporary encoding is first encrypted and then stored in the memory of the mobile device 20 for increased security. The encryption process can be performed at the authentication server 22 or at the mobile device 20. When needed, the mobile device 20 decrypts the temporary code using appropriate means. In another embodiment, to further enhance security, the authentication system of the present invention can obtain a unique identifier for the mobile device 20, then encrypt the unique identifier along with the temporary encoding to obtain an encrypted encoding, and authenticate using the encrypted encoding. The encryption code can be stored in the memory of the mobile device 20 for multiple use. Likewise, the encryption process can be performed at the authentication server 22 or the mobile device 20. When using encryption encoding for authentication, the system decrypts it first, then compares the decrypted unique identifier with the unique identifier of the mobile device 20, and only performs the next step if the two identifiers are the same. Actions. If the two identifiers are not the same, it proves that the encryption code has been stolen, and the system will reject the authentication request. Using this method, the encryption code can only be used by the unique mobile device 20, since each mobile device 20 has a unique identifier and the security is thus further enhanced.

After the temporary encoding is obtained, the user can authenticate at any time. In step 38, the user transmits the temporary encoding to the verification device 26 using the mobile device 20 and selecting a particular delivery method. After the temporary encoding is sent, the authentication procedure on the user side has been completed, and the program ends, step 40. The user only needs to perform steps 28, 30, 32, 34 and 36 when generating the temporary code for the first time. After the temporary encoding is generated, the user can omit the steps described above and jump directly to step 38 to authenticate using the temporary encoding stored in the mobile device 20. As long as the effective number of times of temporary coding and the effective time are valid, the mobile device 20 does not need to be connected to the network, and does not need to transmit redundant data or perform complicated program processing to complete the authentication action, thereby eliminating cumbersome operations and saving time. Convenient and secure.

In addition, the user does not need to input personal information when logging into the system of the present invention, and does not need to input a username and password to determine the identity of the user as in the prior art. The system obtains the user's personal data through the support of a third party (telecom company) to determine the identity of the user in the system. One of the methods has been described above. Another party that gets user information The method is to first determine the telephone number of the user's mobile device 20, then pass the determined telephone number to the mobile subscriber data server 24 and request it to return user data corresponding to the telephone number. The mobile subscriber data server 24 pairs the telephone number by way of a mapping table and then transmits the resulting subscriber data to the authentication server 22 to allow the system of the present invention to establish the identity of the subscriber. The method of determining the phone number of the mobile device 20 may be: reading data of the user identity module in the mobile device 20, and then determining its phone number based on the data; or obtaining the header of the authentication request issued by the mobile device 20 The user's phone number. Therefore, the system login of the present invention does not require the user to input personal data, and others cannot imitate the identity of the user to log into the system because the user's data is provided by the telecommunications company. Each time a user needs to create a new temporary code, it needs to log into the system, and its identity is determined by the system through the telecommunications company. The most important principle is to use the unique phone number and the unique user binding. The user's mobile phone number can be thought of as a hidden username. To further enhance security, users can set a login password after the system has determined its identity. Then, the next time the user logs in to the system, they need to pass the verification of the telecommunications company and enter the correct password to log in successfully.

In one embodiment, the user can simultaneously generate a plurality of different temporary encodings for authentication using different temporary encodings in different combinations, increasing flexibility.

Referring now to Figure 3, there is shown the authentication process for the certification request provider side. The certification request provider begins the authentication process at step 42. The certification request provider is an organization that needs to confirm the identity of the user. It can be the organizer of the exhibition, the company or the private club that asks the employee to sign in. The authentication request provider uses the verification device 26 for authentication. Typically, the verification device 26 is directly connected to the Internet to perform authentication operations at any time. At step 44, the verification device 26 receives the temporary code transmitted by the mobile device 20, after which the verification device 26 transmits the temporary code along with the verification data to the authentication server 22. The verification data includes information of the certification request provider, including the institution name, the institution registration code, and the authentication details. The certification request provider needs to register in advance to use the system for authentication, and the registration system can use the authentication system of the present invention. After registration, the certification request provider will get the agency The registration code is used by the system to identify its identity. At step 46, the authentication server 22 receives the temporary encoding and verification data transmitted by the verification device 26, and the authentication server 22 first verifies the validity of the temporary encoding, such as the effective number of times and the effective time contained therein. If the temporary encoding is valid, the authentication process proceeds to step 48, otherwise proceeds to step 58. At step 58, because the temporary encoding has expired, the authentication server 22 sends a failure message to the authentication device 26 of the authentication request provider, and the verification device 26 then determines that the authentication has failed, ending the authentication process, step 62. If the temporary encoding is valid, the authentication server 22 verifies at step 48 whether the authentication request provider is valid, primarily to verify that the authentication request provider has a valid institution registration code. If the authentication request provider has previously registered, the authentication server 22 stores the valid institution registration code of the authentication request provider, and the pairing method can determine whether the authentication request provider is valid. If the result is invalid, proceeding to step 60, the authentication server 22 transmits the failure information to the authentication device 26 of the authentication request provider, and the verification device 26 then determines that the authentication has failed, and ends the authentication process, step 62. If the authentication request provider is valid, proceed to step 54 or step 50. There are two situations, one of which is that the authentication request provider has already known part of the user's information before the authentication starts, that is, its telephone number, which may be input from the user or other means. In this case, The verification data sent by the verification device 26 will include the user's telephone number, and the authentication server 22 will proceed to step 50 instead of step 54. At step 50, the authentication server 22 determines the user's telephone number from the temporary code, which compares it with the telephone number sent by the verification device 26. If the results match, step 52 is performed, otherwise step 64 is performed. At step 52, the authentication server 22 sends a success message to the authentication device 26 of the authentication request provider, the authentication is successful, and the process ends at step 62. In another case, the certification request provider did not obtain any data from the user beforehand, but it stored some of the personal data of its own members, including the phone number, by some means. In this case, the authentication data transmitted by the verification device 26 does not include the user's telephone number, and the authentication server 22 thus proceeds to step 54 instead of step 50. At step 54, the authentication server 22 transmits the verification valid information and the telephone number of the user to the authentication device 26 of the authentication request provider. Certification request provider's test The card device 26 will pair the obtained phone number with its stored data table in step 56. When the data table contains the phone number, the user is a member of the organization, the identity is determined, the authentication is successful, and the program is in the step. 62 ends. Conversely, if the phone number is not included in the data table, the certificate fails and the program ends.

Embodiment for performing fast mobile payment using the authentication system of the present invention

The authentication system of the present invention has been described in detail above and can be used for different occasions and for different purposes, such as signing in, entering a facility, attending a conference, and the like. The application of mobile payment (ie, consumer shopping) will be described below. The main principles and procedures for the application of mobile payment are basically the same as those described above, except that the steps are partially increased or decreased.

The fast mobile payment system requires the same hardware configuration as the authentication system. As shown in Fig. 1, it includes a mobile device 20, an authentication server 22, a mobile user data server 24, and an authentication device 26. In this embodiment, the authentication request provider is a retailer, and the verification device 26 is usually a payment request terminal. In addition, the authentication server 22 is responsible for the central settlement of the transaction in addition to the authentication work. The process by which a user uses temporary coding for consumption is essentially the same as the process of authentication, as shown in Figure 2. The difference is that the user can set the available amount and the usable time, such as 100 yuan, 500 yuan or more. Therefore, the conditional parameters of the temporary encoding include the effective number, the effective time, and the effective amount, and the effective amount defines the usable amount of the temporary encoding. Each time you make a mobile payment, the amount you can use will be reduced. When the amount you need to pay is greater than the usable amount, the transaction will be rejected. In step 32, the user data obtained by the authentication server 22 includes the usable amount of the user's telecommunications company account. When the effective amount set by the user is greater than the usable amount, the system returns an error message, and the temporary encoding is not generated. End. If the effective amount set by the user is less than the usable amount, the program proceeds as usual and steps 34, 36, 38 and 40 are performed.

However, the process of the fast mobile payment system on the side of the certification request provider (retailer) and the process of the authentication system are relatively large, and the process of the fast mobile payment system on the side of the certification request provider (retailer) is relatively simple. Figure 4 is zero when making mobile payments The flow chart of the seller's side. The payment process begins at step 66, and then, at step 68, the retailer's verification device 26 (i.e., payment requesting terminal) receives the temporary encoding from the mobile device 20, along with the verification data, to the authentication server 22, wherein the verification data includes the payment request And the payment amount. In step 70, when the authentication server 22 verifies the temporary encoding, in addition to checking the validity of the effective number and the effective time, it is also necessary to check the validity of the effective amount. If one of the number of valid times, the effective time, and the effective amount fails the test, step 78 is performed, the authentication server 22 sends a failure message to the verification device 26 of the retailer, the transaction is aborted, and the process ends at step 82. Conversely, if the validity test is passed, then step 72 is performed, which is the same as step 48 of the authentication system, the operation is the same, the detailed description has been described above, and will not be repeated here. If the authentication request provider is invalid, proceeding to step 80, the authentication server 22 sends a failure message to the retailer's verification device 26, the transaction is aborted, and the process ends at step 82. If the authentication request provider is valid, proceed to step 74. In step 74, the authentication server 22 determines the user's phone number by temporary encoding by means of imaging or the like, and then sends the payment information to the mobile operator's mobile user data server 24, the payment information including the user. Phone number, payment amount, etc. In step 76, the mobile user data server 24 pairs the phone number sent by the authentication server 22 with the stored user data, finds the corresponding user, and verifies other data in the payment information, and finally deducts the corresponding account in the account corresponding to the user. Amount. After the deduction is successful, the mobile user data server 24 sends the confirmation information to the authentication server 22. After receiving the confirmation information, the authentication server 22 updates the user's data, such as the used amount, and finally sends the payment success information to the retailer's verification device. 26, to end the program, step 82. The user uses the mobile payment of the present invention for consumption, and the used account port is the user's mobile phone account account port, and the amount of consumption is directly displayed in the user's mobile phone bill. When it is necessary to increase the available amount of the account, the user can purchase the mobile phone recharge card to recharge anytime and anywhere to increase the flexibility of the payment.

In one embodiment, the mobile payment system provides feedback information to the user after the payment is completed. For example, after the checkout, the retailer's verification device 26 can transmit the feedback information to the user's mobile device 20 through a specific delivery method (such as near field communication), and the feedback information includes Shopping discounts, sweepstakes and personal special treats. The user can store the feedback information in the mobile device 20 to use the offer for the next purchase.

The above description clearly illustrates preferred embodiments of the invention. While the above description has been described with respect to the specific embodiments, it will be apparent to those skilled in the art that the various details and forms of the embodiments can be varied, without departing from the spirit and scope of the invention. Therefore, the present invention should not be considered limited to the embodiments presented herein.

Claims

权禾1 J Request KHP14230046.0

1. An identity authentication method, including the following steps:

(a) transmitting an authentication request by the mobile device, the authentication request including the user's settings;

(b) determining a phone number of the user according to the authentication request;

(c) generating a temporary encoding using the settings and the telephone number;

(d) performing the identity authentication using the temporary encoding.

2. The method of claim 1, wherein the temporary encoding comprises a condition

3. The method of claim 2, wherein the condition parameters comprise:

(a) the number of times of validity, which defines the number of times the temporary code can be used; and

(b) Effective time, which defines the usable time of the temporary code.

4. The method of claim 1 further comprising:

Encrypting the temporary encoding and storing the encrypted temporary encoding to the mobile device for multiple use; thereafter steps (a) - (c) may be omitted, and the encrypted temporary encoding may be used directly Perform the identity authentication.

5. The method of claim 1 further comprising:

Obtaining a unique identifier of the mobile device;

Encrypting the unique identifier together with the temporary encoding to obtain an encrypted encoding, and storing the encrypted encoding to the mobile device for multiple use;

Wherein the encryption code is only usable by the mobile device.

6. The method of claim 1 wherein step (b) uses one of the following methods to determine the telephone number of the user:

(i) obtaining an internet protocol address of the mobile device;

Obtaining a telephone number corresponding to the internet protocol address from a telecommunications carrier;

(ii) reading data of a subscriber identity module in the mobile device;

Determining a phone number of the user based on the data; or

(iii) obtaining the telephone number of the user from the header of the authentication request.

The method according to claim 1, wherein the step (d) comprises: selecting a specific delivery mode to send the temporary encoding to the verification device;

The verification device transmits the verification data and the temporary code to an authentication server; the authentication server checks whether the verification data and the temporary encoding are valid, and performs the following steps:

(i) if both the verification data and the temporary code are valid, transmitting verification valid information and the telephone number to the verification device; or

(ii) if both the verification data and the temporary encoding are valid, and the telephone number in the verification data matches the telephone number included in the temporary encoding, transmitting a success message to the verification device; or

(iii) if one or both of the verification data and the temporary code are invalid, or the phone number in the verification data does not match the phone number included in the temporary code, sending a failure message to the location The verification device; and the verification device completes the identity authentication according to the received verification valid information and the phone number or the success information or the failure information.

8. The method of claim 7, wherein the specific delivery method comprises:

Bar code

Microwave; and

Sound waves.

9. The method of claim 1 further comprising:

A plurality of different said temporary codes are generated in accordance with the needs of the user to perform the identity authentication in different scenarios.

10. An identity authentication system, including:

(a) a mobile device, configured to transmit an authentication request, where the authentication request includes a user setting;

(b) an authentication server to receive the authentication request and determine according to the authentication request a telephone number of the user, the authentication server generating a temporary encoding using the setting and the telephone number and transmitting the temporary encoding to the mobile device;

(C) verification device;

And wherein the mobile device sends the temporary encoding to the verification device by using a specific delivery manner to perform the identity authentication.

The system according to claim 10, wherein the temporary encoding includes a condition parameter to limit the identity authentication, and the condition parameter includes:

(b) Effective time, which defines the usable time of the temporary code.

12. The system of claim 10, wherein the temporary encoding is encrypted and stored in a memory of the mobile device for multiple use and the identity authentication is performed quickly.

13. The system of claim 10, further comprising a telecommunications carrier's mobile subscriber data server to accept an inquiry from the authentication server and return the subscriber's telephone number to the authentication server.

14. The system according to claim 10, wherein the verification means transmits the verification data and the temporary code to the authentication server, and the authentication server checks whether the verification data and the temporary code are valid , and perform the following steps:

(iii) if one or both of the verification data and the temporary code are invalid, or the phone number in the verification data does not match the phone number included in the temporary code, sending a failure message to the location Said verification device; The verification device completes the identity authentication according to the received verification valid information and the phone number or the success information or the failure information.

15. The system of claim 10, wherein the particular delivery method comprises:

Bar code

Microwave; and

Sound waves.

16. A method of fast mobile payment, comprising:

(c) acquiring user data corresponding to the phone number and establishing the identity of the user;

(d) generating a temporary encoding using the settings and the telephone number;

(e) performing the fast mobile payment using the temporary encoding.

17. The method of claim 16, wherein the temporary encoding comprises a condition parameter to limit the fast mobile payment.

18. The method of claim 16, wherein the condition parameters comprise:

(a) the number of times of validity, which defines the number of times the temporary code can be used;

(b) a valid time, which defines the usable time of the temporary code; and

(c) A valid amount, which defines the usable amount of the provisional code.

19. The method of claim 16 further comprising:

Encrypting the temporary encoding and storing the encrypted temporary encoding to the mobile device for multiple use; thereafter, steps (a) - (d) may be omitted, and the encrypted temporary encoding may be directly used. Express mobile payment.

20. The method of claim 16 further comprising:

Obtaining a unique identifier of the mobile device;

Encrypting the unique identifier together with the temporary encoding to obtain an encrypted encoding, and storing the encrypted encoding to the mobile device for multiple uses; Wherein the encryption code is only usable by the mobile device.

21. The method of claim 16, wherein step (e) comprises:

Selecting a specific delivery mode to send the temporary encoding to the verification device;

(i) if both the verification data and the temporary code are valid, sending the payment information to the mobile operator's mobile subscriber data server to deduct the corresponding amount in the corresponding account of the user; or

(ii) if one or both of the verification data and the temporary code are invalid, cancel the transaction and send a failure message to the verification device.

22. The method of claim 16, wherein the specific delivery method comprises:

Bar code

Microwave; and

Sound waves.

23. A fast mobile payment system, comprising:

(a) a mobile device to transmit an authentication request, the authentication request including a user's setting;

(b) an authentication server, configured to receive the authentication request and determine a phone number of the user according to the authentication request, and obtain user data corresponding to the phone number and establish an identity of the user, the authentication server using the Setting and the phone number to generate a temporary code and transmitting the temporary code to the mobile device;

(c) verification device;

The mobile device sends the temporary encoding to the verification device by a specific delivery method to perform the fast mobile payment.