WO2022040950A1

WO2022040950A1 - Anonymous real-name authentication method

Info

Publication number: WO2022040950A1
Application number: PCT/CN2020/111199
Authority: WO
Inventors: 黄策
Original assignee: 黄策
Priority date: 2020-08-26
Filing date: 2020-08-26
Publication date: 2022-03-03

Abstract

Internet applications have been deeply embedded in all aspects of people's daily life, and real-name authentication is used in many Internet applications. However, currently due to a wide variety of reasons, real-name authentication is merely a formality and does not have the desired effect of real-name authentication. Moreover, there is a large amount of user authentication information in a server of an application service provider having real-name authentication, thereby causing the application service providers to become attack targets for various hackers and criminal activities. Provided is a new real-name authentication method. The method is for indirectly completing, on the basis of real-name authentication information of a network service operator, real-name authentication. The method has the advantages of: 1) the leakage of personal identity information off-line can be effectively blocked, and false real-name authentication completed online after same is stolen by a person can be effectively blocked; and 2) various hacker activities and criminal activities of the theft of personal information in a provider server having real-name authentication information may be totally deterred and prevented.

Description

Anonymous real-name authentication method

technical field

The invention relates to a real-name authentication method.

Background technique

Internet applications have been deeply embedded in all aspects of people's daily life, and real-name authentication is used in many Internet applications. But at present, due to various reasons, many real-name authentications are mere formalities, so that real-name authentication has not achieved its due effect. At the same time, because there are a large number of users' real-name authentication information in the servers of service providers that require real-name authentication, these servers of service providers that require real-name authentication have become targets of various hackers and criminal activities.

The present invention proposes a brand-new real-name authentication method. This method is based on the real-name authentication information of the network service operator, and indirectly completes the real-name authentication. In this anonymous real-name authentication process, the user's real-name information will not be exposed on the network, and the application service provider that needs to be based on real-name authentication is provided. There is no real-name information of the user in the server.

The advantages of this authentication method are: 1) It can effectively block the leakage of offline personal identity information and the false real-name authentication completed online after being stolen. 2) Various hacking activities and criminal activities that steal real-name authentication information from servers that provide services based on real-name authentication can be completely suppressed.

The large-scale commercial use of this authentication method will effectively curb the increasingly rampant hacking and criminal activities of stealing real-name authentication information.

SUMMARY OF THE INVENTION

In order to effectively curb the current increasingly rampant hackers and criminal activities for stealing real-name authentication information, the present invention provides an anonymous real-name authentication method.

The anonymous real-name authentication method of the present invention is realized through the following steps:

1) The user completes the real-name authentication at the network service provider, and obtains the Internet access device and the online real-name authentication code corresponding to the device one-to-one;

2) The user enters the online real-name authentication code on the Internet terminal connected to the Internet access device and obtains the second-level online real-name authentication code from the network service provider. The network service provider establishes the user's real-name authentication code and second-level online real-name authentication code. Authentication code, the MAC code of the user's Internet terminal, the electronic ID of the user's Internet device, the MAC code of all routers from the entrance device to the public network exit, and the authentication routing information fingerprint formed by the public network IP address;

3) The user enters the second-level real-name authentication code on the Internet access device, and submits a real-name authentication request to the server of the service provider that requires real-name authentication;

4) The server of the service provider will then receive the second-level online real-name authentication code, the MAC code of the user's Internet terminal, the electronic ID of the user's Internet device, the MAC code of all routers from the entrance device to the public network exit, and the public network. The network IP address is submitted to the network service provider for authentication routing information fingerprint comparison;

5) The network service provider compares the received authentication routing information fingerprint with the saved authentication routing information fingerprint, and returns the comparison result (Yes or No) to the service provider;

6) The service provider completes anonymous real-name authentication or rejects anonymous service authentication according to the result returned by the network service provider.

In the authentication process, the MAC code of the user's surfing terminal and the electronic ID of the user's surfing device are the fingerprint parameters that the user can select, that is, the user can select one or all of the two parameters as valid parameters or invalid parameters. The validity of the secondary real-name authentication code can be set by the user as: one-time valid, valid for a certain period of time or permanent valid. In the authentication process, the user can also authenticate other Internet terminals owned by the user. The device authentication process is to exchange data with the server through other Internet access terminals that need to be authenticated. In the interaction process, The server collects the MAC codes or other electronic IDs of the other Internet terminals of the user to be authenticated, or implants a specific electronic ID into the terminal. During the entire authentication information exchange process, at least one information exchange occurs in the aforementioned It is carried out in the authentication channel formed in the anonymous authentication process.

The real-name authentication completed through the above steps can achieve the following purposes: 1) The real-name information leaked by users offline cannot be transmitted online, thus avoiding the leakage of offline real-name information and being stolen online. 2) The real-name authentication information will not be leaked during the authentication process. 3) There is no real-name information in the server of the service provider that provides online services based on the real-name authentication information, which can effectively avoid various hackers and criminal activities aimed at stealing the real-name information in the server.

detailed description

Below in conjunction with specific embodiment, the content of the present invention is described in detail:

This embodiment takes the process of someone going to an e-commerce website for real-name authentication as an example.

The whole process is described as follows:

Step 1: A person goes to the mobile company's business office to apply for online account opening. After the staff of the mobile business office completes the verification of the ID card and the account holder's personal ID according to the national regulations, he will give him the online device and the real-name authentication code, and put the ID card. The information, the MAC code of the Internet device, and the Internet real-name authentication code are registered and then transferred to the secondary Internet authentication code generation server in the background.

Step 2: Someone at home on the Internet terminal connected to the Internet device, enters the Internet real-name authentication code, and applies for the secondary Internet access authentication code to the mobile secondary Internet access authentication code generation server. In this process, a person can set one or all of the MAC code of the Internet terminal or the electronic ID of the Internet terminal to be valid parameters in the authentication routing information fingerprint, and can also set the secondary Internet authentication code for this application. It is valid for a single time or for a certain period of time or permanently. The mobile secondary Internet access authentication code generation server transmits the generated secondary Internet access authentication code to someone, and transmits the corresponding generated authentication routing information fingerprint to the authentication routing information fingerprint query server.

Step 3: A person's home is connected to the Internet terminal of the Internet device, logs in to an e-commerce website, enters the second-level Internet access authentication code, and submits an authentication application to the website. The website sends the received secondary Internet access authentication code, extracted routing information, the MAC code and electronic ID of the Internet terminal to the mobile authentication routing information fingerprint query server to apply for authentication.

Step 4: The authentication routing information fingerprint query server compares the received authentication routing information fingerprint with the stored authentication routing information fingerprint, and returns the comparison result (Yes or No) to an e-commerce website.

Step 5: An e-commerce website completes the current authentication service or rejects the current authentication service according to the returned result.

Step 6: Someone proceeds with device authentication for both phones in the home. A person uses these two mobile phones to interact with an e-commerce website. During the interaction, an e-commerce website reads the MAC codes and electronic IDs of the two mobile phones, and implants the electronic IDs automatically generated by the website respectively. Enter both phones to complete device authentication for someone's two phones.

In this way, someone can use the two mobile phones to conduct corresponding consumption, transfer, and cash withdrawal on the e-commerce website. When one of the two mobile phones is lost, someone or someone's family can immediately use the mobile phone that they have not lost to prohibit the payment right of the other mobile phone, so as to prevent the thief from using it. Consumption, transfer and other behaviors of the stolen mobile phone on the e-commerce website.

Notice:

1) In step 6, the device authentication of a person's two mobile phones at home is carried out under the condition that anonymous real-name authentication has been completed.

2) During the device authentication process of the two mobile phones, the data exchange between the mobile phones and an e-commerce website is completed at least once on the authentication channel that has been established during the first 5 steps.

Claims

The anonymous real-name authentication method is characterized in that: the anonymous real-name authentication is completed according to the following steps: 1) the user completes the real-name authentication at the network service provider, and obtains an online access device and an online real-name authentication code corresponding to the device one-to-one. 2) The user enters the online real-name authentication code on the Internet terminal connected to the Internet access device end to obtain the second-level online real-name authentication code, and the network service provider establishes the user's real-name authentication code, second-level online real-name authentication code, user The authentication routing information fingerprint composed of the MAC code of the Internet terminal, the electronic ID of the user's Internet device, the MAC code of all router devices from the entrance device to the public network exit, and the public network IP address; 3) When the user is connected to the Internet entrance On the Internet terminal behind the device, enter the second-level online real-name authentication code, and submit a real-name authentication request to the server of the service provider that requires real-name authentication; 4) The server of the service provider will receive the second-level online real-name authentication code, the user's online authentication The MAC code of the terminal, the electronic ID of the user's Internet access device, the MAC code of all router devices from the entrance device to the public network exit, and the public network IP address are submitted to the network service provider for authentication and routing information fingerprint comparison; 5) The network service provider Compare the received authentication routing information fingerprint with the saved authentication routing information fingerprint, and return the comparison result (Yes or No) to the service provider; 6) The service provider completes the anonymous authentication according to the result returned by the network service provider. Real-name authentication or reject anonymous service authentication.
The anonymous real-name authentication method according to claim 1, characterized in that: the MAC code of the Internet terminal and the electronic ID of the user's Internet device in the authentication routing information fingerprint are user-selectable fingerprint parameters, that is, the user Either or both of the two parameters can be selected to be valid or invalid.
Anonymous real-name authentication method according to claim 1, is characterized in that: the timeliness of described second-level real-name authentication code can be set by user as: single effective, effective in a certain period of time, permanently effective.
The anonymous real-name authentication method according to any one of claims 1-3, characterized in that: in the authentication process, the user can also perform device authentication on other Internet terminals owned by the user, and the device authentication It is to exchange data with the server through other Internet terminals that need to be authenticated. During the interaction process, the server collects the MAC code or other electronic ID of the Internet terminal that needs to be authenticated or implants a specific electronic ID into the terminal. In the entire exchange process of device authentication information, at least one information exchange is performed in the authentication channel formed in the aforementioned anonymous authentication process.