WO2018113437A1

WO2018113437A1 - Authentication device-based electronic identity card authentication service system

Info

Publication number: WO2018113437A1
Application number: PCT/CN2017/110161
Authority: WO
Inventors: 李志忠; 衣龙腾; 张朝东; 张华�
Original assignee: 杨宪国; 孙卫平
Priority date: 2016-12-21
Filing date: 2017-11-09
Publication date: 2018-06-28
Also published as: TW201824052A; CN106790070A; CN106790070B

Abstract

Provided by the present application is an authentication device-based electronic IDentity (eID) authentication service system, the authentication service system comprising: an authentication device which is arranged in a mobile terminal and is used for authenticating a mobile user identity; an eID information management device which is arranged in the mobile terminal and which generates downloading request information for requesting to download a user eID on the basis of information of the authentication device and information of the user, and which sends the downloading request information and writes a received eID into the authentication device; and an eID authorization and verification server which issues the eID to the eID information management device when the downloading request information is verified successfully. According to the present application, an authentication device and an eID may be effectively bound, so that a user may realize an eID authentication service without depending on an extra carrier, thereby facilitating authentication enhancement and eID popularization.

Description

Electronic ID card authentication service system based on authentication device

Technical field

The present application relates to the field of communications technologies, and in particular, to an electronic ID card authentication service system based on an authentication device.

Background technique

While computers and the Internet provide powerful service functions for people, security issues are becoming increasingly prominent. In order to solve this problem, when users register on the real-name website, they are passively required to provide personal information such as mobile phone number, ID number, home address, etc., but this method will have real-name website reselling user privacy, server being hacked and privacy leaked. And other issues.

In response to the above problems, an electronic ID card (eID, electronic IDentity) was proposed. It is a form of alienation of the resident ID card on the network. It is called the citizen network electronic identity. The eID is the authoritative electronic information on the network to remotely prove the true identity of the individual. The document was issued by the Ministry of Public Security Citizen Network Identification System. The use of eID in China has not yet been popularized. The first country in the world to use eID is Belgium. At the beginning of 2010, more than 85% of the country's residents have eIDs, and its laws stipulate that citizens must have eIDs. Full coverage is achieved. Subsequently, Italy, Germany, the United States, Mexico, Russia and other countries from the national strategy, laws and regulations, etc., the relevant security departments led the construction of eID management system, and vigorously promote the widespread use of eID. China's eID system relies on the National Citizenship Information Database of the Ministry of Public Security covering 1.3 billion people, and generates a unique set of network identifiers and digital certificates to ensure the authenticity and uniqueness of the user's identity, while not including any personal identity privacy. information.

It should be noted that the above description of the technical background is only for the purpose of facilitating a clear and complete description of the technical solutions of the present application, and is convenient for understanding by those skilled in the art. The above technical solutions are not considered to be well known to those skilled in the art simply because these aspects are set forth in the background section of this application.

Summary of the invention

The inventor of the present application found that the existing eID system mainly uses a U disk like a terminal carrier to implement the object. Separate and verify the validity of the user's identity through real-time network update. This restricts the promotion and use of eID in some programs. Firstly, it is not convenient to carry the eID system with U disk as the terminal carrier. Secondly, with the rapid development of the information society, more and more users choose to use mobile phones and tablets. Such portable mobile terminals for online office, online shopping, etc., these mobile terminals do not have a USB interface or only a few USB interfaces. Faced with the above problems, the eID card was originally designed to be applied to a financial IC card containing a security chip, but it is still not possible to obtain a convenient application on the mobile terminal.

In order to solve the problems of the prior art, the network user, especially the mobile network user, is improved in the convenience and security of the identity authentication level, and promotes the popularization and application of the eID. The application proposes an authentication device based on the mobile terminal. On the one hand, the eID authentication service system enables the user to implement the eID authentication service without relying on additional carriers. On the other hand, the authentication device of the mobile terminal is effectively bound to the eID, which is beneficial to the authentication enhancement and the popularity of the eID.

According to an aspect of the embodiments of the present application, an electronic ID card authentication service system based on an authentication device is provided, and the authentication service system includes:

An authentication device, which is disposed on the mobile terminal and configured to perform mobile user identity authentication;

The electronic identity card information management device generates download request information requesting to download the electronic ID card of the user based on the information of the authentication device and the information of the user, and transmits the download request information, and the electronic device to be received Writing an identity card to the authentication device;

And an electronic ID card authorization and verification server that delivers the electronic identity card to the electronic identity card information management device if the verification of the download request information is successful.

According to another aspect of the embodiments of the present application, the authentication device includes:

a storage unit for storing the written electronic ID card;

a communication unit for communicating with the electronic identity card information management device;

An encryption and decryption module for encrypting and decrypting transmitted data.

According to another aspect of the embodiments of the present application, the electronic ID card authorization and verification server associates the electronic identification card with the authentication device in a case where the verification of the download request information is successful. And sending the electronic ID card to the electronic ID card information management device, where the electronic ID card information management device writes the received electronic ID card to the authentication device.

According to another aspect of the embodiments of the present application, the electronic identity card information management apparatus further manages the electronic identity card in the authentication device, where the managing includes deleting the electronic identity card, Freeze, or thaw.

According to another aspect of the embodiments of the present application, the electronic identity card information management apparatus reads the information in the case where the information of the user and/or the signature password of the authentication device input by the user is successfully verified. The electronic identity card in the authentication device, and the read electronic identification card and the cancellation request information, the freeze request information or the thawing request information are sent to the electronic ID card authorization and verification server;

The electronic ID card authorization and verification server performs processing to cancel the association relationship between the electronic identity card and the authentication device, and stops the association based on the logout request information, the freeze request information, or the defrosting request information. The network operation related to the electronic identity card uses, or restores, the network operation associated with the electronic identity card, and feeds back the result of the processing to the electronic identity card information management device.

According to another aspect of the embodiments of the present application, in the case that the electronic ID card authorization and verification server performs processing to cancel the association relationship between the electronic identity card and the authentication device, the electronic identity card information The management device sends a logout command to the authentication device, and the authentication device deletes the electronic identity card according to the logout command.

According to another aspect of the embodiments of the present application, the authentication service system further includes:

An electronic identification card information third party application device that sends a read request to read the electronic identity card in the authentication device, and receives the electronic identity card authorization and verification server to the electronic identity card The certification result of the certification.

According to another aspect of the embodiments of the present application, the electronic identity card information management apparatus reads the authentication according to the read request, if the verification of the signature password of the authentication device is successful. The electronic ID card in the device generates an authentication request according to the identification information of the third-party application device of the electronic ID card information included in the read request, and the electronic ID card, and sends the authentication request;

The electronic ID card authorization and verification server authenticates the electronic ID card in the authentication request, and sends an electronic ID card application authorization code to the electronic ID card information management device if the authentication is successful;

The electronic identity card information management device sends the received electronic identity card application authorization code to the electronic identity card information third party application device.

According to another aspect of the embodiments of the present application, the electronic identity card information third party application device saves and/or sends the electronic identity card application authorization code to a third party application server for saving.

According to another aspect of the embodiments of the present application, the electronic identity card information management device Sending an ID card application authorization code and an electronic ID card in the authentication device to the electronic ID card authorization and verification server, and requesting the electronic ID card authorization and verification server to apply an authorization code based on the electronic ID card The electronic identity card verifies the authenticity of the user.

According to another aspect of the embodiments of the present application, when the business operation of the third party application device of the electronic identity card information needs to verify the identity of the user, the third party application device of the electronic identity card information is based on the electronic identity card information. Generating the first identity verification request by the identifier information of the three-party application device, the electronic identity card application authorization code, and the user information, and sending the first identity verification request to the electronic identity card information management device to request identity verification ;

The electronic identity card information management device receives the first identity verification request of the third party application device of the electronic identity card information, communicates with the authentication device, and acquires electronic identity card information and/or information in the authentication device. a signature value for signing the first identity verification request, and according to the identification information in the first identity verification request, the electronic identity card application authorization code, and the user information, and the electronic identity card Generating a second identity verification request by using the information and/or the signature value for signing the first identity verification request, and sending the second identity verification request to the electronic identity card authorization and verification server to request identity verification;

Receiving, by the electronic ID card authorization and verification server, the second identity verification request sent by the electronic identity card information management device, verifying the identity information of the user, and returning the identity verification result to the electronic identity card information management device;

The electronic identity card information management device returns the received identity verification result to the electronic identity card information third party application device;

The electronic identity card information third party application device agrees or rejects the service operation requested by the user according to the received identity verification result.

The beneficial effects of the present application are: according to the embodiment of the present application, the authentication device can be effectively bound to the electronic ID card, whereby the user can implement the EID authentication service without relying on the additional carrier, which is beneficial to the authentication enhancement and The popularity of eID.

Specific embodiments of the present application are disclosed in detail with reference to the following description and accompanying drawings, in which <RTIgt; It should be understood that the embodiments of the present application are not limited in scope. The embodiments of the present application include many variations, modifications, and equivalents within the scope of the appended claims.

Features described and/or illustrated with respect to one embodiment may be used in one or more other embodiments in the same or similar manner, in combination with, or in place of, features in other embodiments. .

It should be emphasized that the term "comprising" or "comprises" or "comprising" or "comprising" or "comprising" or "comprising" or "comprises"

DRAWINGS

The drawings are included to provide a further understanding of the embodiments of the present application, and are intended to illustrate the embodiments of the present application Obviously, the drawings in the following description are only some of the embodiments of the present application, and those skilled in the art can obtain other drawings according to the drawings without any inventive labor. In the drawing:

1 is a schematic diagram of an authentication service system according to Embodiment 1 of the present application;

2 is a schematic diagram of writing an EID to an authentication device according to Embodiment 1 of the present application;

3 is a schematic diagram of deregistering an EID in an authentication apparatus according to Embodiment 1 of the present application;

4 is a schematic diagram of a process in which a third-party application apparatus of an electronic ID card information of Embodiment 1 of the present application transmits a read request and receives an authentication result;

5 is a schematic diagram of a process for verifying an electronic identity card information third-party application device according to Embodiment 1 of the present application;

FIG. 6 is a schematic diagram of a process of applying an application identifier of a third-party application for eID use in the application of the first embodiment of the present application, and setting it in the third-party application device of the electronic ID card information.

detailed description

The foregoing and other features of the present application will be apparent from the description, The specific embodiments of the present application are specifically disclosed in the specification and the drawings, which illustrate a part of the embodiments in which the principles of the present application may be employed, it being understood that the present application is not limited to the described embodiments, but instead The application includes all modifications, variations and equivalents falling within the scope of the appended claims.

In this application, the authentication device may be disposed on the mobile terminal, and the authentication device may be a Subscriber Identity Module (SIM) card, a chip attached to the customer identification module card, such as a SIM film card, or The customer identification module card has equivalent functions integrated into the mobile terminal such as eSIM Card or the like; the function of the authentication device can be implemented by software running on the authentication device, for example, the software can be a chip operation system (COS). However, the present embodiment is not limited thereto, and the function of the authentication device may be implemented by hardware or by hardware and software. For specific implementation, reference may be made to the prior art.

In the present application, the electronic identity card information management device may be implemented by software. For example, the electronic identity card information management device may be a software development kit (SDK). However, the embodiment is not limited thereto, and the electronic identity card information is The management device can also be implemented by hardware, or can be implemented by hardware and software. The specific implementation manner can refer to the prior art.

In the present application, the electronic identity card information management device may be disposed in the mobile terminal. For example, the electronic identity card information management device may be provided separately from the authentication device or may be disposed in the authentication device.

In the present application, the electronic ID card information management device may be disposed outside the mobile terminal, for example, may be disposed in a issuing device of a SIM card, or a terminal device of a bank or the like, and the terminal device may be, for example, an electronic device. ID card writing card authentication device.

In the present application, the third party application device of the electronic ID card information may be implemented by software. For example, the third party application device of the electronic ID card information may be an application (Application, APP). However, the embodiment is not limited thereto. The third-party application device of the electronic ID card information may also be implemented by hardware, or may be implemented by hardware and software. The specific implementation manner may refer to the prior art.

In the present application, the electronic identity card authorization and authentication server can also be implemented by software and/or hardware.

In the present application, the authentication device and the electronic ID card information management device can exchange data through various communication methods, such as Bluetooth communication, Near Field Communication (NFC), and utilization transmission. Protocol Data Unit (TPDU) communication, etc., may also be a unique protocol communication method between the authentication device and the electronic ID card information management device; electronic identity card information third party application device and electronic ID card The information management device can communicate through the internal communication interface; the electronic ID card information third party application device and the electronic ID card information management device can communicate with the electronic ID card authorization and verification server via the communication module of the mobile terminal, the communication This can be done via a wired network or a wireless network.

In the present application, the mobile terminal may be a portable electronic device such as a feature phone, a smartphone or a tablet.

Example 1

Embodiment 1 of the present application provides an electronic ID card authentication service system based on an authentication device. 1 is a schematic diagram of the authentication service system. As shown in FIG. 1, the authentication service system 100 includes an authentication device 101, an electronic identity card information management device 102, and an electronic ID card authorization and verification server 103.

The authentication device 101 is disposed in the mobile terminal 200 and configured to perform mobile user identity authentication; the electronic identity card information management device 102 generates an electronic identity card (EID) requesting to download the user based on the information of the authentication device 101 and the information of the user. Downloading the request information and transmitting the download request information, and writing the received electronic identification card (EID) to the authentication device 101; in the case where the verification of the download request information is successful, the electronic ID card authorization and verification server 103 The electronic identity card information management device 102 delivers the electronic identity card (EID).

According to the embodiment of the present application, the authentication device can be effectively bound with an electronic ID card (EID), whereby the user can implement the EID authentication service without relying on an additional carrier, which is advantageous for authentication enhancement and popularity of the eID.

In this embodiment, the authentication device 101 may include:

a storage unit for storing the written electronic ID card;

FIG. 2 is a schematic diagram of writing an EID to an authentication device according to the embodiment. As shown in FIG. 2, the process of writing an EID to the authentication device 101 includes:

The electronic identity card information management device 102 in the mobile terminal 200 acquires information of the user, wherein the information of the user may include fingerprint information, face information, and/or physical identity card information. The manner in which the electronic ID card information management device 102 acquires the information of the user includes: a) the user scans the fingerprint using the mobile terminal 200, and the electronic ID card information management device 102 acquires the fingerprint information of the user; b) the user uses the mobile terminal 200 to perform face recognition. The electronic identity card information management device 102 acquires the facial information of the user; c) the user identifies the physical identity card using the mobile terminal 200, and the electronic identity card information management device 102 acquires the physical identity card information of the user. Further, the information of the user may not be limited to the information listed above, and the manner in which the electronic ID card information management device 102 acquires the information of the user may not be limited to the above-described modes.

The electronic identity card information management device 102 in the mobile terminal 200 communicates with the authentication device 101 to obtain information of the authentication device 101. The information of the authentication device may be, for example, an integrated circuit card identity (ICCID). And other information.

3 The electronic identity card information management device 102 in the mobile terminal 200 is used according to the information of the authentication device 101. The information of the user generates download request information, and sends the download request information to the electronic ID card authorization and verification server 103 to apply for downloading the electronic ID card.

4 The electronic ID card authorization and verification server 103 receives the download request information, and verifies the information of the mobile terminal 200, the authentication device, and the user's information, and returns the verification result. For example, if the verification is successful, the authentication is performed. The device information is associated with the electronic ID card, and the eID is sent to the mobile terminal 200. The electronic ID information management device 102 in the mobile terminal 200 writes the eID to the authentication device 101. If the verification fails, an error message is returned. Mobile terminal 200.

In this embodiment, the electronic ID card information management device 102 can also manage an electronic identification card (EID) in the authentication device 101, and the management includes deregistering, freezing, or unfreezing the electronic identification card (EID). deal with.

FIG. 3 is a schematic diagram of deregistering an EID in an authentication apparatus according to the embodiment. As shown in FIG. 3, the process of deregistering the EID in the authentication apparatus 101 includes:

The electronic identity card information management device 102 performs local authentication on the user's information. For example, the electronic identity card information management device 102 performs control such that the user's fingerprint information, face information, physical identity card information, and the like are verified in the mobile terminal 200. In addition, the signature password of the authentication device input by the user may be verified; if the local authentication is successful, the eID in the authentication device 101 is read and sent to the electronic ID card authorization and verification together with the cancellation request information. Server 103;

2 The electronic ID card authorization and verification server 103 performs a logout operation according to the received eID and the logout request information, that is, cancels the association information of the eID and the authentication device, and returns the logout operation result to the electronic ID card information management device 102 of the terminal 200. The result of the logout operation indicates that the logout operation succeeds or fails;

3 When the return result is successful, the electronic ID card information management device 102 issues a logout command to the authentication device 101, and the authentication device 101 deletes the eID and returns the deletion result to the electronic ID card information management device 102.

In the present embodiment, the process of freezing or thawing the EID in the authentication device 101 is similar to the process of deregistering. For example, the process of freezing or thawing the EID in the authentication device 101 may include:

1 The electronic ID card information management device 102 reads the electronic identification card (EID) in the authentication device 101 in the case where the local authentication of the information of the user and/or the signature password of the authentication device input by the user is successful, And the read electronic identification card (EID) and the freeze request information or the thawing request information is sent to the electronic ID card authorization and verification server 103;

2 electronic ID card authorization and verification server 103 based on the freeze request information or the defrosting request letter Processing to stop network operation use associated with the electronic identity card (EID), or to resume network operation use associated with the electronic identity card (EID), and to feed back the electronic identity card information management device 102 The result of processing success or failure.

In this embodiment, the electronic ID card information management device 102 may also be disposed outside the mobile terminal 200, for example, may be disposed in a issuing device of a SIM card, or a terminal device of a bank or the like, such as a terminal device, for example. It can be a card authentication device for an electronic ID card. Thereby, the user can perform an operation of writing the eID to the authentication device on the terminal other than the mobile terminal 200, and authenticate, logout, and freeze the eID in the authentication device 101 on the terminal other than the mobile terminal 200. , thawing and other treatments.

In this embodiment, as shown in FIG. 1, the authentication service system 100 may further include an electronic identity card information third party application device 104, wherein the electronic identity card information third party application device 104 may send a request to the authentication device 101. The electronic identification card (EID) performs a read request for reading, and receives an authentication result of the electronic ID card authorization and verification server 103 authenticating the electronic identity card (EID).

4 is a schematic diagram of a flow of the electronic ID card information third party application device 104 transmitting a read request and receiving the authentication result. As shown in FIG. 4, the process for the third party application device 104 to send a read request and receive the authentication result may include:

1 The electronic ID card information in the mobile terminal 200 The third party application device 104 (APP) issues a read request for reading the eID to the electronic ID card information management device 102, and the read request includes the electronic ID card information. The third party application device 104 Relevant information, such as identification information of the third party application device 104 of the electronic ID card information;

2 The electronic ID card information management device 102 locally verifies the user's information and/or the signature password of the authentication device by the mobile terminal 200, and reads the eID in the authentication device 101 if the local authentication is successful;

3 generating authentication request information according to the read eID and the identification information of the third party application device 104 of the electronic ID card information, the authentication request information is sent to the electronic ID card authorization and verification server 103;

The electronic ID card authorization and verification server 103 gives the authentication result according to the authentication request information, and returns the authentication result to the electronic ID card information management device 102 of the mobile terminal 200. For example, if the authentication succeeds, the authentication result includes the eID application authorization. If the authentication fails, the authentication result includes information that the authentication fails;

The electronic ID card information management device 102 sends the received authentication result to the electronic ID card information third party application device 104, where the authentication result includes the EID application authorization code or the authentication failure information;

6 If the electronic ID card information third party application device 104 receives the authentication failure information, the user is denied If the electronic ID card information third party application device 104 receives the result of the authentication success and the eID application authorization code, the eID application authorization code is locally saved and/or sent to the electronic ID card information third party application server 104a for storage.

In this embodiment, the electronic ID card authorization and verification server 103 can also verify the electronic identity card information third party application device (APP) 104, and only the qualified electronic identity card information third party application device (APP) 104 The read request to read the EID in the request authentication device is valid, thereby preventing the illegal electronic ID information from being read by the third party application device (APP), thereby improving security.

For example, the electronic identity card information third party application device (APP) 104 may send the identification information of the electronic identity card information third party application device (APP) and the electronic identity card (EID) application authorization code to the electronic identity card authorization and verification server. 103. The electronic ID card authorization and verification server verifies the related information and the electronic identification card (EID) application authorization code. When the verification is passed, the electronic identification information is sent by the third party application device (APP). effective.

5 is a schematic diagram of a process for verifying an electronic ID card information third-party application device according to the embodiment. As shown in FIG. 5, the process for verifying the third-party application device of the electronic ID card information may include:

Step 501, the electronic ID card information third-party application device 104 eID application authorization code and the eID information in the authentication device 101 is submitted to the electronic identity card authorization and verification server 103;

Step 502: The electronic ID card authorization and verification server 103 verifies the information submitted in step 501 and generates a verification result.

Step 503, the electronic ID card authorization and verification server 103 returns the verification result to the electronic identity card information third party application device (APP) 104.

In this embodiment, the identification information of the third-party application device (APP) 104 of the electronic ID card information may be sent by the electronic ID card authorization and verification server 103, and the third-party application device (APP) is formed in the electronic identity card information. ) is set in the electronic identity card information third party application device (APP).

FIG. 6 is a schematic diagram of a process of setting the identification information of the third party application device (APP) 104 of the electronic identity card information in the third party application device of the electronic identity card information. As shown in FIG. 6, the process may include:

Step 601: The manufacturer of the third-party application device of the electronic ID card information submits an eID use application to the electronic ID card authorization and verification server 103 and submits related information of the third-party application device of the electronic ID card information, wherein the manufacturer may be, for example, an APP. Manufacturer

Step 602: The electronic ID card authorization and verification server 103 reviews the eID use application, and the verification is passed. If it continues, otherwise the process is terminated;

Step 603: The electronic ID card authorization and verification server 103 generates identification information according to the related information of the third-party application device of the electronic ID card information and grants the identification information to the manufacturer;

Step 604: The manufacturer sets the application identification information, the eID calling interface, and the like to the third party application device of the electronic ID card information.

Since the identification information of the third-party application device of the electronic ID card information is issued to the manufacturer by the electronic ID card authorization and verification server, the credibility of the identification information of the third-party application device of the electronic ID card information for the eID application can be improved, and Easy to manage.

According to the embodiment of the present application, the authentication device can be effectively bound to the electronic ID card (EID), whereby the user can implement the EID authentication service without relying on the additional carrier, which is beneficial to the authentication enhancement and the popularity of the eID; Further, by managing the EID in the authentication device, the convenience of using the EID is improved, and by authenticating the electronic identity card information third-party application device, the security of the EID use can be improved.

In this embodiment, when the third-party application device 104 of the electronic ID card needs to authenticate the user due to the business process, the identifier information of the third-party application device of the electronic ID card information and the authorization code of the electronic ID card may be used to perform the pairing. User authentication.

For example, the process of authentication can be as follows:

When the business operation of the third party application device of the electronic identity card information needs to verify the identity of the user, the third party application device of the electronic identity card information according to the identification information of the third party application device of the electronic identity card information, the electronic The ID application authorization code and the user information generate a first identity verification request, and send the first identity verification request to the electronic identity card information management device to request identity verification, where the user information may be the fingerprint information of the user. , facial information, physical identity card information and/or passwords entered by the user;

Receiving, by the electronic ID card authorization and verification server, the second identity verification request sent by the electronic identity card information management device, verifying the identity information of the user, and returning the identity verification result to the electronic identity Certificate information management device;

The above device of the present application may be implemented by hardware or by hardware combined with software. The present application relates to a computer readable program that, when executed by a logic component, enables the logic component to implement the apparatus or components described above, or to implement the various methods described above Or steps. The application also relates to a storage medium for storing the above program, such as a hard disk, a magnetic disk, an optical disk, a DVD, a flash memory, or the like.

The present invention has been described in connection with the specific embodiments thereof, but it is to be understood that the description is intended to be illustrative and not restrictive. Various modifications and alterations of the present application are possible in light of the spirit and scope of the invention, which are also within the scope of the present application.

Claims

An electronic ID card authentication service system based on an authentication device, the authentication service system comprising:

An authentication device, which is disposed on the mobile terminal and configured to perform mobile user identity authentication;

The electronic identity card information management device generates download request information requesting to download the electronic ID card of the user based on the information of the authentication device and the information of the user, and transmits the download request information, and the electronic device to be received Writing an identity card to the authentication device;

And an electronic ID card authorization and verification server that delivers the electronic identity card to the electronic identity card information management device if the verification of the download request information is successful.
The authentication service system according to claim 1, wherein

The authentication device includes:

a storage unit for storing the written electronic ID card;

a communication unit for communicating with the electronic identity card information management device;

An encryption and decryption module for encrypting and decrypting transmitted data.
The authentication service system according to claim 1, wherein

And the electronic ID card authorization and verification server associates the electronic identification card with the authentication device in a case where the verification of the download request information is successful, and sends the electronic identification card to the office The electronic identity card information management device writes the received electronic identity card into the authentication device.
The authentication service system according to claim 3, wherein

The electronic identity card information management apparatus further manages the electronic identity card in the authentication device, and the managing includes deregistering, freezing, or unfreezing the electronic identity card.
The authentication service system according to claim 4, wherein

The electronic ID card information management device reads the electronic ID card in the authentication device when the information of the user and/or the signature password of the authentication device input by the user is successfully verified, and Sending the read electronic ID card and the cancellation request information, the freeze request information or the thawing request information to the electronic ID card authorization and verification server,

The electronic ID card authorization and verification server performs processing to cancel the association relationship between the electronic ID card and the authentication device based on the logout request information, the freeze request information, or the defrosting request information, and stops The network operation associated with the electronic identity card is used, or the network operation associated with the electronic identity card is resumed, and the result of the processing is fed back to the electronic identity card information management device.
The authentication service system according to claim 5, wherein

When the electronic ID card authorization and verification server performs processing to cancel the association relationship between the electronic identity card and the authentication device, the electronic identity card information management device sends a logout command to the authentication device, The authentication device deletes the electronic identity card according to the logout command.
The authentication service system of claim 1 wherein the authentication service system further comprises:

An electronic identification card information third party application device that sends a read request to read the electronic identity card in the authentication device, and receives the electronic identity card authorization and verification server to the electronic identity card The certification result of the certification.
The authentication service system according to claim 7, wherein

The electronic ID card information management device reads the electronic ID card in the authentication device according to the read request, if the verification of the signature password of the authentication device is successful, according to the Reading the identification information of the third-party application device of the electronic ID card information included in the request, and generating the authentication request by the electronic ID card, and transmitting the authentication request,

The electronic ID card authorization and verification server authenticates the electronic ID card in the authentication request, and sends an electronic ID application authorization code to the electronic ID card information management device if the authentication is successful.

The electronic ID card information management device sends the received electronic ID card application authorization code to the third party application device of the electronic ID card information,

The third-party application device of the electronic ID card information saves the electronic ID card application authorization code and saves it to a third-party application server for storage.
The authentication service system according to claim 8, wherein

The electronic ID card information management device sends the electronic ID card application authorization code and the electronic ID card in the authentication device to the electronic ID card authorization and verification server, and requests the electronic ID card authorization and verification The server verifies the authenticity of the user based on the electronic identity card application authorization code and the electronic identity card.
The authentication service system according to claim 9, wherein

When the business operation of the electronic identity card information third party application device needs to verify the identity of the user, the electricity The third identity application device generates a first identity verification request according to the identifier information of the electronic identity card information third party application device, the electronic identity card application authorization code, and user information, and generates the first identity The verification request is sent to the electronic identity card information management device to request identity verification;

The electronic identity card information management device receives the first identity verification request of the third party application device of the electronic identity card information, communicates with the authentication device, and acquires electronic identity card information and/or information in the authentication device. a signature value for signing the first identity verification request, and according to the identification information in the first identity verification request, the electronic identity card application authorization code, and the user information, and the electronic identity card Generating a second identity verification request by using the information and/or the signature value for signing the first identity verification request, and sending the second identity verification request to the electronic identity card authorization and verification server to request identity verification;

Receiving, by the electronic ID card authorization and verification server, the second identity verification request sent by the electronic identity card information management device, verifying the identity information of the user, and returning the identity verification result to the electronic identity card information management device;

The electronic identity card information management device returns the received identity verification result to the electronic identity card information third party application device;

The electronic identity card information third party application device agrees or rejects the service operation requested by the user according to the received identity verification result.