CN115603898A - Verification code generation method, verification code generation device, terminal and storage medium - Google Patents

Abstract

The present disclosure relates to a verification code generation method, a verification code generation apparatus, a terminal, and a storage medium. The identifying code generating method is applied to a service platform and comprises the steps of receiving request information which is sent by an application platform and used for identifying code generation, wherein the request information at least comprises an identifying code generating factor and a communication identifier for generating an identifying code SIM; and sending a message containing a generating factor to the SIM card according to the communication identifier, wherein the generating factor is used for enabling the SIM card to generate a first verification code by adopting a verification code generating mode which is known by the SIM card and the service platform together. Compared with the situation that the service platform transmits the generated verification code to the SIM card, the method and the device only need to transmit the generation factor of the verification code. Because the condition that the information is hijacked or leaked exists in the process that the service platform transmits the information to the SIM card, the generation factor in the application can not be directly used for identity verification, and the verification code is directly generated in the SIM card. Therefore, the condition that the verification code is leaked can be effectively reduced, and the authentication safety is improved.

Description

Verification code generation method, verification code generation device, terminal and storage medium

technical field

The present invention relates to the field of information technology, in particular to a method for generating a verification code, a device for generating a verification code, a terminal and a storage medium.

Background technique

With the complexity of network information, personal information leakage is becoming more and more serious. Single static information such as account number and password can no longer guarantee the user's identity verification. Especially in the field of online payment, the verification of identity information is particularly important for secure transactions. Therefore, more and more industry security strategies represented by banks and third-party payment have adopted the "verification code" method. SMS verification code is one of them. The SMS verification code is sent to the terminal by sending the verification code, and then the user enters the received verification code into the login box. When the verification code entered by the user is consistent with the sent verification code, the verification is passed.

Contents of the invention

In view of this, the embodiments of the present disclosure expect to provide a method for generating a verification code, a device for generating a verification code, a terminal, and a storage medium.

The disclosed technical solution is achieved in this way:

In one aspect, the present disclosure provides a verification code generation method.

The method for generating a verification code provided by an embodiment of the present disclosure includes:

receiving request information for verification code generation sent by the application platform, where the request information includes at least a generation factor of the verification code and a communication identification for generating the verification code SIM;

According to the communication identification, send a message containing the generation factor to the SIM card, wherein the generation factor is used for the SIM card to generate a first verification by using a method of generating a verification code that is commonly known to the service platform code.

In some embodiments, the generation factor of the verification code includes at least one of the following:

The transaction ID is used to identify the transaction in which the application platform sends request information to the service platform;

The transaction time is used to record the time when the service platform receives the request information sent by the application platform.

In some embodiments, the request information also includes at least one of the following:

The number of digits of the verification code is used to indicate the number of characters of the verification code;

The first prompt information is used to instruct the service platform to confirm whether PIN code verification is required when the user obtains the first verification code;

The second prompt information is used to instruct the service platform to confirm whether a prompt text needs to be provided for the user to read when the user obtains the first verification code.

In some embodiments, the sending the message containing the generation factor to the SIM card includes:

Based on the ICCID integrated circuit card identification code corresponding to the SIM card, a first key is generated through a determined decentralized algorithm;

generating a first MAC message verification code based on the first key and the message;

Encrypting the message with a first key;

sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to verify the received message Integrity of message verification.

In some embodiments, the method also includes:

receiving the first verification code generated by the SIM card and sent by the application platform;

after receiving the first verification code, generating a second key different from the first key based on the first key;

Encrypting the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

In some embodiments, performing key encryption on the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card includes:

performing key encryption on the generating factor based on the second key to obtain a verification code character chain;

Intercepting characters equal to the number of digits of the verification code at a certain position of the verification code character chain to obtain the second verification code.

In some embodiments, the method also includes:

verifying whether the generated second verification code is the same as the first verification code, and obtaining a verification result;

Feedback the verification result to the application platform.

On the other hand, the present disclosure also provides another method for generating a verification code, which is characterized in that it is applied to a SIM card, and the method includes:

Receive the message containing the generation factor of the verification code sent by the service platform;

Based on the generation factor, the first verification code is generated in a manner of jointly knowing the generation of the verification code with the service platform.

In some embodiments, before receiving the message sent by the service platform and including the generation factor of the verification code, the method includes:

Send to the service platform the communication identification that generates the verification code SIM and the ICCID corresponding to the communication identification; the ICCID is used for the service platform to generate a message for encrypting the message based on the ICCID first key;

After receiving the message sent by the service platform and including the generation factor of the verification code, the method includes:

Based on the ICCID integrated circuit card identification code, a third key is generated through a determined distribution algorithm, wherein the distribution algorithm for generating the third key by the SIM card is the same as the distribution algorithm for generating the first key by the service platform;

Decrypt the message encrypted by the first key based on the third key to obtain the generation factor.

In some embodiments, the generating the first verification code includes:

Based on the third key, generate a fourth key that is different from the third key, wherein the SIM card generates the fourth key in the same way as the service platform generates the second key in the same way;

performing key encryption on the generation factor based on the fourth key to obtain the first verification code.

In some embodiments, the method also includes:

receiving a first MAC message verification code sent by the service platform, the first MAC message verification code is generated by the service platform based on the first key, and is used for the SIM card to complete the message message verification;

Generate a second MAC message verification code based on the third key, wherein the SIM card generates the second MAC message verification code in the same manner as the service platform generates the first MAC message verification code;

Verifying whether the second MAC message verification code is the same as the first MAC message verification code.

In some embodiments, the method also includes:

Verify the PIN code provided by the user;

After the verification of the PIN code is passed, the first verification code is displayed on the display interface of the device where the SIM card is located.

In some embodiments, the method also includes:

After the verification of the PIN code is passed, a prompt text is displayed on the display interface of the device where the SIM card is located, and the prompt text is used to explain the first verification code.

In yet another aspect, the present disclosure also provides a device for generating a verification code, the device comprising:

The first processing unit is configured to receive request information for verification code generation sent by the application platform, where the request information includes at least a generation factor of the verification code and a communication identification for generating the verification code SIM;

The second processing unit is configured to send a message containing the generation factor to the SIM card according to the communication identification, wherein the generation factor is used for the SIM card to be jointly known and verified by the service platform The code generation method generates the first verification code.

In some embodiments, the generation factor of the verification code includes at least one of the following:

The transaction ID is used to identify the transaction in which the application platform sends request information to the service platform;

The transaction time is used to record the time when the service platform receives the request information sent by the application platform.

In some embodiments, the request information also includes at least one of the following:

The number of digits of the verification code is used to indicate the number of characters of the verification code;

The first prompt information is used to instruct the service platform to confirm whether PIN code verification is required when the user obtains the first verification code;

The second prompt information is used to instruct the service platform to confirm whether a prompt text needs to be provided for the user to read when the user obtains the first verification code.

In some embodiments, the second processing unit is specifically used for

Based on the ICCID integrated circuit card identification code corresponding to the SIM card, a first key is generated through a determined decentralized algorithm;

generating a first MAC message verification code based on the first key and the message;

Encrypting the message with a first key;

sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to verify the received message Integrity of message verification.

In some embodiments, the device further includes a third processing unit, configured to receive the first verification code sent by the application platform and generated by the SIM card;

after receiving the first verification code, generating a second key different from the first key based on the first key;

Encrypting the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

In some embodiments, the third processing unit is also used to

performing key encryption on the generating factor based on the second key to obtain a verification code character chain;

Intercepting characters equal to the number of digits of the verification code at a certain position of the verification code character chain to obtain the second verification code.

In some embodiments, the third processing unit is further configured to verify whether the generated second verification code is the same as the first verification code, and obtain a verification result;

Feedback the verification result to the application platform.

In another aspect, the present disclosure also provides another device for generating a verification code, which is applied to a SIM card, and the device includes:

The first processing unit is configured to receive a message sent by the service platform that includes the generation factor of the verification code;

The second processing unit is configured to generate the first verification code based on the generation factor in a way that the verification code is commonly known to the service platform.

In some embodiments, the first processing unit is further configured to send to the service platform the communication identification for generating the verification code SIM and the communication with The ICCID corresponding to the communication identifier; the ICCID is used for the service platform to generate a first key for encrypting the message based on the ICCID; and

After receiving the message containing the verification code generation factor sent by the service platform,

Based on the ICCID integrated circuit card identification code, a third key is generated through a determined distribution algorithm, wherein the distribution algorithm for generating the third key by the SIM card is the same as the distribution algorithm for generating the first key by the service platform;

Decrypt the message encrypted by the first key based on the third key to obtain the generation factor.

In some embodiments, the second processing unit is specifically used for

Based on the third key, generate a fourth key that is different from the third key, wherein the SIM card generates the fourth key in the same way as the service platform generates the second key in the same way;

performing key encryption on the generation factor based on the fourth key to obtain the first verification code.

In some embodiments, the first processing unit is also used for

receiving a first MAC message verification code sent by the service platform, the first MAC message verification code is generated by the service platform based on the first key, and is used for the SIM card to complete the message message verification;

Generate a second MAC message verification code based on the third key, wherein the SIM card generates the second MAC message verification code in the same manner as the service platform generates the first MAC message verification code;

Verifying whether the second MAC message verification code is the same as the first MAC message verification code.

In some embodiments, the device further includes a third processing unit for

Verify the PIN code provided by the user;

After the verification of the PIN code is passed, the first verification code is displayed on the display interface of the device where the SIM card is located.

In some embodiments, the third processing unit is also used to

After the verification of the PIN code is passed, a prompt text is displayed on the display interface of the device where the SIM card is located, and the prompt text is used to explain the first verification code.

In yet another aspect, the present disclosure also provides a terminal.

The terminal provided by the embodiment of the present disclosure includes: a processor and a memory for storing a computer program that can run on the processor, wherein, when the processor is used to run the computer program, execute the verification code provided by the above embodiment The steps to generate the method.

In yet another aspect, the present disclosure also provides a computer-readable storage medium.

The computer-readable storage medium provided by the embodiments of the present disclosure has a computer program stored thereon, and is characterized in that, when the computer program is executed by a processor, the steps of the verification code generation method provided by the above-mentioned embodiments are implemented.

The verification code generation method of the embodiment of the present disclosure receives the request information for verification code generation sent by the application platform. The request information includes at least the generation factor of the verification code and the communication identification of the SIM that generates the verification code; according to the communication identification, the sending includes generating The message of the factor is sent to the SIM card, wherein the factor is generated for the SIM card to generate the first verification code in a verification code generation method known jointly with the service platform. In the application, the service platform sends the verification code generation factor to the corresponding SIM card according to the communication identification in the received request information, so that the SIM card can generate the verification code in the SIM card according to the received generation factor. Compared with the traditional service platform that transmits the generated verification code to the SIM card, this application does not need to transmit the generated verification code to the SIM card, but only needs to transmit the generation factor of the verification code. Since information may be hijacked or leaked during the process of the service platform transmitting information to the SIM card, the generation factor in this application will not be directly used for identity verification, and the verification code generation is directly generated in the SIM card. Therefore, the service platform transmission generation factor used in this application and the method for the SIM card to generate a verification code in the SIM card can effectively reduce the leakage of the verification code and improve the security of identity verification.

Description of drawings

Fig. 1 is a flow chart 1 of a method for generating a verification code according to an exemplary embodiment;

Fig. 2 is a second flowchart of a method for generating a verification code according to an exemplary embodiment;

Fig. 3 is a first structural schematic diagram of a verification code generation device according to an exemplary embodiment;

Fig. 4 is a second structural schematic diagram of a verification code generation device according to an exemplary embodiment;

Fig. 5 is a flowchart of verification code verification according to an exemplary embodiment;

Fig. 6 is a schematic structural diagram of a terminal according to an exemplary embodiment.

detailed description

The technical solutions of the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with aspects of the invention as recited in the appended claims.

The SMS verification code is essentially to verify whether the user is the holder of the reserved mobile phone number or email address. The channel through which the verification code is issued to the user includes SMS, email address provided by the user during registration, etc. Among them, mobile phone text messages have become the mainstream channel for issuing verification codes because of their convenience, speed, good compatibility, and real-name mobile phone number system. The SMS verification code service provided now can effectively guarantee payment security and account security. However, the verification code may be hijacked or leaked when the verification code is sent directly. Now it is more and more common to obtain mobile phone verification codes in the middle of information transmission through illegal means, and to commit crimes of theft and fraud through verification codes.

Based on this, the present disclosure provides a verification code generation method. Fig. 1 is a first flow chart of a method for generating a verification code according to an exemplary embodiment. As shown in Figure 1, the verification code generation method includes:

Step 10. Receive the request information for verification code generation sent by the application platform, the request information at least includes the generation factor of the verification code and the communication identification of the SIM that generated the verification code;

Step 11. According to the communication identification, send a message containing the generation factor to the SIM card, wherein the generation factor is used for the SIM card to generate a verification code in a manner common to the service platform. The first verification code.

In this exemplary embodiment, the communication identification is the identification information that the SIM card has that can identify itself; the communication identification and the SIM card may have a one-to-one correspondence, and the communication identification corresponding to the communication identification can be determined according to the determined communication identification. The only SIM card.

In this application, the service platform can determine the corresponding unique SIM card according to the received communication identification, and send a message including the generation factor to the SIM card.

The generation factor may be the basic information used to generate the verification code, which is the basis for generating the verification code. For example, the generation factor may be to generate transaction information related to the transaction according to the transaction that occurs. For example, the transaction ID is used to identify the identification information of the transaction that the application platform sends the request information to the service platform; the transaction time is used to record the time information when the service platform receives the request information sent by the application platform, etc. Wherein, the transaction time is unique in time when the transaction occurs, so the generation factor based on the transaction time is also unique, and the verification code generated by the SIM card has the uniqueness of the current time. In this application, the generating factor may finally be specifically one or more character information, which may contain numbers, letters, special characters, and the like.

In this exemplary embodiment, after the service platform sends the generation factor to the SIM card, the SIM card can directly generate a corresponding verification code in the SIM card according to the received generation factor based on the verification code generation rule.

In this exemplary embodiment, the service platform and the SIM card can pre-agreed on the generation method of the verification code, including the same verification code generation algorithm or rules are preset in the service platform and the SIM card, including both the service platform and the SIM card. Configure the same algorithm or rule for generating verification codes based on a single generation factor, or preset the same algorithm or rule for generating verification codes based on multiple generation factors. For example, an algorithm or rule for generating a verification code based on a transaction ID is preset, or an algorithm or rule for generating a verification code based on two generation factors of a transaction ID and transaction time is preset. The specific generation algorithm or rules can be set according to the needs, such as adding a series of predetermined characters in front of or in the middle of the generation factor, or reversing the order of the characters of the generation factor from the beginning to the end, etc.

The verification code generation method of the embodiment of the present disclosure receives the request information for verification code generation sent by the application platform. The request information includes at least the generation factor of the verification code and the communication identification of the SIM that generates the verification code; according to the communication identification, the sending includes generating The message of the factor is sent to the SIM card, wherein the factor is generated for the SIM card to generate the first verification code in a verification code generation method known jointly with the service platform.

In the application, the service platform sends the verification code generation factor to the corresponding SIM card according to the communication identification in the received request information, so that the SIM card can generate the verification code in the SIM card according to the received generation factor. Compared with the traditional service platform that transmits the generated verification code to the SIM card, this application does not need to transmit the generated verification code to the SIM card, but only needs to transmit the generation factor of the verification code. Since information may be hijacked or leaked during the process of the service platform transmitting information to the SIM card, the generation factor in this application will not be directly used for identity verification, and the verification code generation is directly generated in the SIM card. Therefore, the service platform transmission generation factor used in this application and the method for the SIM card to generate a verification code in the SIM card can effectively reduce the leakage of the verification code and improve the security of identity verification.

In some embodiments, the request information also includes at least one of the following:

The number of digits of the verification code is used to indicate the number of characters of the verification code;

The first prompt information is used to instruct the service platform to confirm whether PIN code verification is required when the user obtains the first verification code;

The second prompt information is used to instruct the service platform to confirm whether a prompt text needs to be provided for the user to read when the user obtains the first verification code.

In this exemplary embodiment, when the application platform sends request information for generating a verification code to the service platform, the request information may also carry related information indicating the number of characters of the verification code to be generated; When the display interface of the device where the SIM card is located obtains the first verification code, whether a first prompt message is required for PIN code verification; and a second prompt message indicating whether the user needs to provide a prompt copy when obtaining the first verification code. Wherein the PIN code is the personal identification code of the SIM card, which is a security measure to prevent others from stealing the SIM card. The prompt text includes explanatory information explaining the verification code for users to read.

In this exemplary embodiment, when the request information does not include the digits of the verification code, the service platform and the SIM card may execute the default number of digits of the verification code preset by the system. For example, the system defaults that the number of digits of the verification code is 6 digits. When the service platform does not receive the information indicating the number of digits of the verification code sent by the application platform, it can generate a 6-digit verification code by itself, that is, the application platform accepts 6 characters by default. verification code.

Among them, when the service platform confirms that the request sent by the application platform whether PIN code verification is required when the user obtains the first verification code is yes, and when the display interface of the device where the SIM card is located displays the first verification code, the device where the SIM card is located will display the first verification code according to the SIM The active command built in the card pops up a PIN code verification window for the corresponding PIN code to be input in the verification window for PIN code verification. After the verification is passed, the user can obtain the first verification code. When the wrong number of times entered by the user reaches the preset number of times, the verification of the PIN code is stopped, and the user will not be able to obtain the first verification code at this time. In this way, it can effectively reduce the probability of verification leakage and being stolen by others.

When the service platform confirms that the request sent by the application platform to provide a prompt copy is yes, when the user obtains the first verification code on the display interface of the device where the SIM card is located, the prompt copy can automatically pop up for the user to read. In this way, it is beneficial for the user to understand the related information of the verification code in more detail.

In some embodiments, the sending the message containing the generation factor to the SIM card includes:

Based on the ICCID integrated circuit card identification code corresponding to the SIM card, a first key is generated through a determined decentralized algorithm;

generating a first MAC message verification code based on the first key and the message;

Encrypting the message with a first key;

sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to verify the received message Integrity of message verification.

In this exemplary embodiment, when sending the generation factor to the SIM card, the message containing the generation factor may be encrypted and then sent, so as to improve the security of information transmission. For example, based on the ICCID corresponding to the SIM card, the first key is generated through a determined decentralized algorithm. The message is encrypted based on the first key.

In this exemplary embodiment, the MAC code check of the corresponding transmission message may also be added, so as to further improve the security of message transmission. For example, a first MAC message authentication code is generated based on the first key and the message. sending the first MAC message verification code and the message encrypted by the first key to the SIM card. After the SIM card obtains the message and the first MAC message verification code, it can generate a second MAC message verification code correspondingly, and check whether the generated second MAC message verification code is the same as the first MAC message verification code to determine the received message Whether it has been modified by the interception string halfway.

Wherein, the method for generating the first MAC message authentication code based on the first key and the message includes: based on the first key and the message, calculate the first MAC message authentication code. When the SIM card generates the second MAC message verification code, it is in the same manner as the service platform generates the first MAC message verification code.

In some embodiments, the method also includes:

receiving the first verification code generated by the SIM card and sent by the application platform;

After receiving the first verification code, based on the first key, generate a second key different from the first key;

Encrypting the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

In this exemplary embodiment, after the first verification code is generated in the SIM card for the user to obtain, it is input to the verification window of the application platform. At this time, the application platform will send the first verification code input by the user to the service platform for service The platform verifies the verification code to confirm whether the first verification code obtained by the application platform is a verification code generated based on the generation factor sent by the service platform to the SIM card, so as to realize the identity verification of the corresponding user.

The method for the service platform to verify the first verification code is: based on the same generation factor, the second verification code is generated on the service platform in the same way as the verification code generated by the SIM card, so as to verify whether the first verification code is sent to the user based on the service platform. The generation factor of the SIM card is generated. When the second verification code is the same as the first verification code, it can be determined that the generation factor has not been altered by the stolen string. When the second verification code is different from the first verification code, it can be determined that the generation factor has been stolen and altered, and at this time the verification of the first verification code input by the user to the application platform fails.

The process of generating the second verification code based on the generation factor on the service platform is: based on the first key, a second key different from the first key is generated; The generated first verification code corresponds to the second verification code. The second key may be a session key. The session key is a one-time symmetric key used for encryption in the session, which is random and one-time, and can further improve the security of verification code generation. When generating the second key, the second key can be obtained by encrypting the first key.

In some embodiments, performing key encryption on the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card includes:

performing key encryption on the generating factor based on the second key to obtain a verification code character chain;

Intercepting characters equal to the number of digits of the verification code at a certain position of the verification code character chain to obtain the second verification code.

In this exemplary embodiment, the verification code that the application platform needs to input may be a character string with one or more fixed-character digits. However, in the SIM card, the generation factor encrypted by the second key may be a character string whose character length exceeds the number of digits of the verification code. At this time, a character equal to the number of digits of the verification code can be intercepted at a predetermined position according to the service platform and the SIM card. The string is used as the verification code, so that the first verification code equal to the number of verification code digits is generated on the service platform, and the second verification code with the number of verification code digits is obtained on the SIM card.

When the character length of the character chain of the verification code obtained by encrypting the generation factor with the second key is less than the number of digits of the verification code, according to the default setting of the system, pre-set characters can be automatically added to the end of the obtained verification code character chain to obtain A string equal to the number of digits of the verification code. Specifically, the number of characters in the obtained verification code character chain is less than the number of characters in the verification code, and how many characters are selected from the beginning to the end of the preset characters to supplement the verification code character chain. For example, the number of digits of the verification code is 6 digits, the character chain of the verification code obtained by encrypting the generation factor with the second key is qwer, and the pre-set character for supplement is asdf, then the pre-set character as can be used to supplement at this time The second verification code qweras is obtained after the verification code character chain qwer.

In some embodiments, the method also includes:

verifying whether the generated second verification code is the same as the first verification code, and obtaining a verification result;

Feedback the verification result to the application platform.

In this exemplary embodiment, when the second verification code is the same as the first verification code, it can be determined that the generation factor has not been altered by the stolen string. When the second verification code is different from the first verification code, it can be determined that the generation factor has been stolen and altered, and at this time the verification of the first verification code input by the user to the application platform fails.

On the other hand, the present disclosure also provides another verification code generation method. Fig. 2 is a second flowchart of a method for generating a verification code according to an exemplary embodiment. As shown in Figure 2, the method, applied to a SIM card, includes:

Receive the message containing the generation factor of the verification code sent by the service platform;

Based on the generation factor, the first verification code is generated in a manner of jointly knowing the generation of the verification code with the service platform.

In this exemplary embodiment, the generation factor may be basic information for generating the verification code, which is the basis for generating the verification code. For example, the generation factor may be to generate transaction information related to the transaction according to the transaction that occurs. For example, the transaction ID is used to identify the identification information of the transaction that the application platform sends the request information to the service platform; the transaction time is used to record the time information when the service platform receives the request information sent by the application platform, etc. Wherein, the transaction time is unique in time when the transaction occurs, so the generation factor based on the transaction time is also unique, and the verification code generated by the SIM card has the uniqueness of the current time. In this application, the generating factor may finally be specifically a character information, which may contain numbers, letters, and special characters.

In this exemplary embodiment, after the service platform sends the generation factor to the SIM card, the SIM card can directly generate a corresponding verification code in the SIM card according to the received generation factor based on the verification code generation rule.

The verification code generation method of the embodiment of the present disclosure receives the generation factor sent by the service platform, and generates the first verification code based on the generation factor in the SIM card by using a common knowledge of the verification code generation method with the service platform. Compared with the traditional service platform that will generate a verification code on the service platform and then transmit the generated verification code to the SIM card, this application does not require the service platform to transmit the generated verification code to the SIM card, but only needs to transmit the verification code The generation factor of . Since information may be hijacked or leaked during the process of the service platform transmitting information to the SIM card, the generation factor in this application will not be directly used for identity verification, and the verification code generation is directly generated in the SIM card. Therefore, the method of receiving the generation factor transmitted by the service platform in this application and generating the verification code in the SIM card can effectively reduce the leakage of the verification code and improve the security of identity verification.

In this exemplary embodiment, the first verification code is a verification code input on the application platform for identity information verification during account login. After the SIM card generates the first verification code, it can be obtained by the user and input on the application platform. At the same time, in order to check whether the generation factor for generating the first verification code has been hijacked or leaked, after generating the first verification code, the SIM card sends the generated first verification code to the service platform for the service platform to pass the generated first verification code. The second verification code verifies whether the second verification code is the same as the first verification code generated by the SIM. When the second verification code is the same as the first verification code, it can be determined that the generation factor has not been altered by the stolen string. When the second verification code is different from the first verification code, it can be determined that the generation factor has been stolen and modified. At this time, when the first verification code is input into the application platform for verification, the verification will fail.

In some embodiments, before receiving the message sent by the service platform and including the generation factor of the verification code, the method includes:

Send to the service platform the communication identification that generates the verification code SIM and the ICCID corresponding to the communication identification; the ICCID is used for the service platform to generate a message for encrypting the message based on the ICCID first key;

After receiving the message sent by the service platform and including the generation factor of the verification code, the method includes:

Based on the ICCID integrated circuit card identification code, a third key is generated through a determined distribution algorithm, wherein the distribution algorithm for generating the third key by the SIM card is the same as the distribution algorithm for generating the first key by the service platform;

Decrypt the message encrypted by the first key based on the third key to obtain the generation factor.

In this exemplary embodiment, when the SIM card is powered on, the device where the SIM card is located will drive the SIM card to report the communication identifier and ICCID to the service platform, so that the service platform can determine the SIM card according to the communication identifier and send a message to the SIM card. The ICCID is used for the service platform to generate the first key. After receiving the encrypted message, the SIM card will generate the third key through the same distributed algorithm as the service platform according to the same key generation method, and decrypt the encrypted message to obtain the generation factor.

In some embodiments, the generating the first verification code includes:

Based on the third key, generate a fourth key that is different from the third key, wherein the SIM card generates the fourth key in the same way as the service platform generates the second key in the same way;

performing key encryption on the generation factor based on the fourth key to obtain the first verification code.

In this exemplary embodiment, the manner in which the SIM card generates the fourth key is the same as the manner in which the service platform generates the second key. The fourth key generated by the SIM card may also be the same session key as that of the service platform. Encrypt the generating factor with the fourth key to obtain the verification code character chain. Intercept characters equal to the number of digits of the verification code at the same position in the verification code character chain as the intercepted string when the service platform generates the second verification code to obtain the first verification code, so as to ensure that the generated first verification code is consistent with the second verification code sex.

In some embodiments, the method also includes:

receiving a first MAC message verification code sent by the service platform, the first MAC message verification code is generated by the service platform based on the first key, and is used for the SIM card to complete the message message verification;

Generate a second MAC message verification code based on the third key, wherein the SIM card generates the second MAC message verification code in the same manner as the service platform generates the first MAC message verification code;

Verifying whether the second MAC message verification code is the same as the first MAC message verification code.

In this exemplary embodiment, when MAC code verification is added to the message sent by the service platform, the SIM card will generate a corresponding MAC code for MAC code verification. For example, the service platform generates a first MAC message verification code. After receiving the first MAC message verification code sent by the service platform, the SIM card uses the same calculation method as the service platform to generate the first MAC message verification code based on the third key and message to obtain the second MAC message verification code to verify the second MAC message verification code. Whether the MAC message authentication code is the same as the first MAC message authentication code. When the second MAC message verification code is the same as the first MAC message verification code, it means that the message is complete and has not been altered by the hijacking string. When the verification code of the second MAC message is different from the verification code of the first MAC message, it means that the message has been hijacked and modified, and the message is now invalid. When the second MAC message verification code is the same as the first MAC message verification code, the message is decrypted to obtain a generation factor to generate the first verification code. The integrity of the message is verified by the message verification code, which is conducive to improving the security of verification code generation and identity verification.

In some embodiments, the method also includes:

Verify the PIN code provided by the user;

After the verification of the PIN code is passed, the first verification code is displayed on the display interface of the device where the SIM card is located.

In this exemplary embodiment, the PIN code is the personal identification code of the SIM card, which is a security measure to prevent others from stealing the SIM card. When the user obtains the first verification code on the display interface of the device where the SIM card is located, the device where the SIM card is located will pop up a PIN code verification window according to the built-in active command of the SIM card, for the user to enter the corresponding PIN code in the PIN code verification window for verification. verify. After the verification is passed, the user can obtain the first verification code. When the wrong number of times entered by the user reaches the preset number of times, the verification of the PIN code is stopped, and the user will not be able to obtain the first verification code at this time. In this way, it can effectively reduce the probability of verification leakage and being stolen by others.

In some embodiments, the method also includes:

After the verification of the PIN code is passed, a prompt text is displayed on the display interface of the device where the SIM card is located, and the prompt text is used to explain the first verification code.

In this exemplary embodiment, the prompt text includes explanatory information explaining the verification code for the user to read. The explanatory information at least includes information explaining the purpose of the first verification code. When the user obtains the first verification code on the display interface of the device where the SIM card is located, the prompt copy can automatically pop up for the user to read. In this way, it is beneficial for the user to understand the related information of the verification code in more detail.

In yet another aspect, the present disclosure also provides a device for generating a verification code. Fig. 3 is a first structural schematic diagram of a verification code generation device according to an exemplary embodiment. As shown in Figure 3, the device includes:

The first processing unit 31 is configured to receive request information for verification code generation sent by the application platform, where the request information includes at least a generation factor of the verification code and a communication identification for generating the verification code SIM;

The second processing unit 32 is configured to send a message containing the generation factor to the SIM card according to the communication identifier, wherein the generation factor is used for the SIM card to be known jointly with the service platform The verification code generation method generates a first verification code.

In this exemplary embodiment, the communication identification is the identification information that the SIM card has that can identify itself; the communication identification and the SIM card have a one-to-one correspondence, and the communication identification corresponding to the communication identification can be determined according to the determined communication identification. Only SIM card.

In this application, the service platform can determine the corresponding unique SIM card according to the received communication identification, and send a message including the generation factor to the SIM card.

The generation factor may be the basic information used to generate the verification code, which is the basis for generating the verification code. For example, the generation factor may be to generate transaction information related to the transaction according to the transaction that occurs. For example, the transaction ID is used to identify the identification information of the transaction that the application platform sends the request information to the service platform; the transaction time is used to record the time information when the service platform receives the request information sent by the application platform, etc. Wherein, the transaction time is unique in time when the transaction occurs, so the generation factor based on the transaction time is also unique, and the verification code generated by the SIM card has the uniqueness of the current time. In this application, the generating factor may finally be specifically a character information, which may contain numbers, letters, and special characters.

In this exemplary embodiment, after the service platform sends the generation factor to the SIM card, the SIM card can directly generate a corresponding verification code in the SIM card according to the received generation factor based on the verification code generation rule.

The verification code generation device in the embodiment of the present disclosure receives the request information sent by the application platform for verification code generation. The request information includes at least the generation factor of the verification code and the communication identification of the SIM that generates the verification code; according to the communication identification, the sending includes generating The message of the factor is sent to the SIM card, wherein the factor is generated for the SIM card to generate the first verification code in a verification code generation method known jointly with the service platform. In the application, the service platform sends the verification code generation factor to the corresponding SIM card according to the communication identification in the received request information, so that the SIM card can generate the verification code in the SIM card according to the received generation factor. Compared with the traditional service platform that will generate a verification code on the service platform and then transmit the generated verification code to the SIM card, this application does not need to transmit the generated verification code to the SIM card, only the generation of the verification code needs to be transmitted factor. Since information may be hijacked or leaked during the process of the service platform transmitting information to the SIM card, the generation factor in this application will not be directly used for identity verification, and the verification code generation is directly generated in the SIM card. Therefore, the service platform transmission generation factor used in this application and the method for the SIM card to generate a verification code in the SIM card can effectively reduce the leakage of the verification code and improve the security of identity verification.

In this exemplary embodiment, the service platform and the SIM card can pre-agreed on the generation method of the verification code, including the same verification code generation algorithm or rules are preset in the service platform and the SIM card, including both the service platform and the SIM card. Configure the same algorithm or rule for generating verification codes based on a single generation factor, or preset the same algorithm or rule for generating verification codes based on multiple generation factors. For example, an algorithm or rule for generating a verification code based on a transaction ID is preset, or an algorithm or rule for generating a verification code based on two generation factors of a transaction ID and transaction time is preset. The specific generation algorithm or rules can be set according to the needs, such as adding a series of predetermined characters in front of or in the middle of the generation factor, or reversing the order of the characters of the generation factor from the beginning to the end, etc.

In some embodiments, the request information also includes at least one of the following:

The number of digits of the verification code is used to indicate the number of characters of the verification code;

The first prompt information is used to instruct the service platform to confirm whether PIN code verification is required when the user obtains the first verification code;

The second prompt information is used to instruct the service platform to confirm whether a prompt text needs to be provided for the user to read when the user obtains the first verification code.

In this exemplary embodiment, when the application platform sends request information for generating a verification code to the service platform, the request information may also carry related information indicating the number of characters of the verification code to be generated; When the display interface of the device where the SIM card is located obtains the first verification code, whether a first prompt message is required for PIN code verification; and a second prompt message indicating whether the user needs to provide a prompt copy when obtaining the first verification code. Wherein the PIN code is the personal identification code of the SIM card, which is a security measure to prevent others from stealing the SIM card. The prompt text includes explanatory information explaining the verification code for users to read.

Wherein, when the service platform confirms that the request sent by the application platform whether PIN code verification is required when the user acquires the first verification code is yes, when the user obtains the first verification code on the display interface of the device where the SIM card is located, the device where the SIM card is located will According to the built-in active command of the SIM card, a PIN code verification window pops up for the user to enter the corresponding PIN code in the PIN code verification window for verification. After the verification is passed, the user can obtain the first verification code. When the wrong number of times entered by the user reaches the preset number of times, the verification of the PIN code is stopped, and the user will not be able to obtain the first verification code at this time. In this way, it can effectively reduce the probability of verification leakage and being stolen by others.

When the service platform confirms that the request sent by the application platform to provide a prompt copy is yes, when the user obtains the first verification code on the display interface of the device where the SIM card is located, the prompt copy can automatically pop up for the user to read. In this way, it is beneficial for the user to understand the related information of the verification code in more detail.

In some embodiments, the second processing unit is specifically used for

Based on the ICCID integrated circuit card identification code corresponding to the SIM card, a first key is generated through a determined decentralized algorithm;

generating a first MAC message verification code based on the first key and the message;

Encrypting the message with a first key;

sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to verify the received message Integrity of message verification.

In this exemplary embodiment, when sending the generation factor to the SIM card, the message containing the generation factor may be encrypted and then sent, so as to improve the security of information transmission. For example, based on the ICCID corresponding to the SIM card, the first key is generated through a determined decentralized algorithm. The message is encrypted based on the first key.

In this exemplary embodiment, the MAC code check of the corresponding transmission message may also be added, so as to further improve the security of message transmission. For example, a first MAC message authentication code is generated based on the first key and the message. sending the first MAC message verification code and the message encrypted by the first key to the SIM card. After the SIM card obtains the message and the first MAC message verification code, it can generate a second MAC message verification code correspondingly, and check whether the generated second MAC message verification code is the same as the first MAC message verification code to determine the received message Whether it has been modified by the interception string halfway.

Wherein, the method for generating the first MAC message authentication code based on the first key and the message includes: based on the first key and the message, calculate the first MAC message authentication code. When the SIM card generates the second MAC message verification code, it is in the same manner as the service platform generates the first MAC message verification code.

In some embodiments, as shown in FIG. 3 , the device further includes a third processing unit 33, configured to receive the first verification code sent by the application platform and generated by the SIM card;

After receiving the first verification code, based on the first key, generate a second key different from the first key;

Encrypting the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

In this exemplary embodiment, after the first verification code is generated in the SIM card for the user to obtain, it is input to the verification window of the application platform. At this time, the application platform will send the first verification code input by the user to the service platform for service The platform verifies the verification code to confirm whether the first verification code obtained by the application platform is a verification code generated based on the generation factor sent by the service platform to the SIM card, so as to realize the identity verification of the corresponding user.

The method for the service platform to verify the first verification code is: based on the same generation factor, the second verification code is generated on the service platform in the same way as the verification code generated by the SIM card, so as to verify whether the first verification code is sent to the user based on the service platform. The generation factor of the SIM card is generated. When the second verification code is the same as the first verification code, it can be determined that the generation factor has not been altered by the stolen string. When the second verification code is different from the first verification code, it can be determined that the generation factor has been stolen and altered, and at this time the verification of the first verification code input by the user to the application platform fails.

The process of generating the second verification code based on the generation factor on the service platform is: based on the first key, a second key different from the first key is generated; The generated first verification code corresponds to the second verification code. The second key may be a session key. The session key is a one-time symmetric key used for encryption in the session, which is random and one-time, and can further improve the security of verification code generation. When generating the second key, the second key can be obtained by encrypting the first key.

In some embodiments, the third processing unit is also used to

performing key encryption on the generating factor based on the second key to obtain a verification code character chain;

Intercepting characters equal to the number of digits of the verification code at a certain position of the verification code character chain to obtain the second verification code.

In this exemplary embodiment, the verification code that the application platform needs to input may be a character string with a certain number of characters. However, in the SIM card, the generation factor encrypted by the second key may be a character string whose character length exceeds the number of digits of the verification code. At this time, a character equal to the number of digits of the verification code can be intercepted at a predetermined position according to the service platform and the SIM card. The string is used as the verification code, so that the first verification code equal to the number of verification code digits is generated on the service platform, and the second verification code with the number of verification code digits is obtained on the SIM card.

In some embodiments, the third processing unit is further configured to verify whether the generated second verification code is the same as the first verification code, and obtain a verification result;

Feedback the verification result to the application platform.

In this exemplary embodiment, when the second verification code is the same as the first verification code, it can be determined that the generation factor has not been altered by the stolen string. When the second verification code is different from the first verification code, it can be determined that the generation factor has been stolen and altered, and at this time the verification of the first verification code input by the user to the application platform fails.

In another aspect, the present disclosure also provides another device for generating a verification code, which is applied to a SIM card. Fig. 4 is a second structural schematic diagram of a device for generating a verification code according to an exemplary embodiment. As shown in Figure 4, the device includes:

The first processing unit 41 is configured to receive a message sent by the service platform that includes the generation factor of the verification code;

The second processing unit 42 is configured to generate the first verification code based on the generation factor in a way that the service platform and the service platform are jointly aware of the generation of the verification code.

In this exemplary embodiment, the generation factor may be basic information for generating the verification code, which is the basis for generating the verification code. For example, the generation factor may be to generate transaction information related to the transaction according to the transaction that occurs. For example, the transaction ID is used to identify the identification information of the transaction that the application platform sends the request information to the service platform; the transaction time is used to record the time information when the service platform receives the request information sent by the application platform, etc. Wherein, the transaction time is unique in time when the transaction occurs, so the generation factor based on the transaction time is also unique, and the verification code generated by the SIM card has the uniqueness of the current time. In this application, the generating factor may finally be specifically a character information, which may include numbers, letters, special characters, and the like.

In this exemplary embodiment, after the service platform sends the generation factor to the SIM card, the SIM card can directly generate a corresponding verification code in the SIM card according to the received generation factor based on the verification code generation rule.

The verification code generation method of the embodiment of the present disclosure receives the generation factor sent by the service platform, and generates the first verification code based on the generation factor in the SIM card by using a common knowledge of the verification code generation method with the service platform. Compared with the traditional service platform that will generate a verification code on the service platform and then transmit the generated verification code to the SIM card, this application does not require the service platform to transmit the generated verification code to the SIM card, but only needs to transmit the verification code The generation factor of . Since information may be hijacked or leaked during the process of the service platform transmitting information to the SIM card, the generation factor in this application will not be directly used for identity verification, and the verification code generation is directly generated in the SIM card. Therefore, the method of receiving the generation factor transmitted by the service platform in this application and generating the verification code in the SIM card can effectively reduce the leakage of the verification code and improve the security of identity verification.

In some embodiments, the first processing unit is further configured to send to the service platform the communication identification for generating the verification code SIM and the communication with The ICCID corresponding to the communication identifier; the ICCID is used for the service platform to generate a first key for encrypting the message based on the ICCID; and

After receiving the message containing the verification code generation factor sent by the service platform,

Based on the ICCID integrated circuit card identification code, a third key is generated through a determined distribution algorithm, wherein the distribution algorithm for generating the third key by the SIM card is the same as the distribution algorithm for generating the first key by the service platform;

Decrypt the message encrypted by the first key based on the third key to obtain the generation factor.

In this exemplary embodiment, when the SIM card is powered on, the device where the SIM card is located will drive the SIM card to report the communication identifier and ICCID to the service platform, so that the service platform can determine the SIM card according to the communication identifier and send a message to the SIM card. The ICCID is used for the service platform to generate the first key. After receiving the encrypted message, the SIM card will generate the third key through the same distributed algorithm as the service platform according to the same key generation method, and decrypt the encrypted message to obtain the generation factor.

In some embodiments, the second processing unit is specifically used for

Based on the third key, generate a fourth key that is different from the third key, wherein the SIM card generates the fourth key in the same way as the service platform generates the second key in the same way;

performing key encryption on the generation factor based on the fourth key to obtain the first verification code.

In this exemplary embodiment, the manner in which the SIM card generates the fourth key is the same as the manner in which the service platform generates the second key. The fourth key generated by the SIM card may also be the same session key as that of the service platform. Encrypt the generating factor with the fourth key to obtain the verification code character chain. Intercept characters equal to the number of digits of the verification code at the same position in the verification code character chain as the intercepted string when the service platform generates the second verification code to obtain the first verification code, so as to ensure that the generated first verification code is consistent with the second verification code sex.

In some embodiments, the first processing unit is also used for

receiving a first MAC message verification code sent by the service platform, the first MAC message verification code is generated by the service platform based on the first key, and is used for the SIM card to complete the message message verification;

Generate a second MAC message verification code based on the third key, wherein the SIM card generates the second MAC message verification code in the same manner as the service platform generates the first MAC message verification code;

Verifying whether the second MAC message verification code is the same as the first MAC message verification code.

In this exemplary embodiment, when MAC code verification is added to the message sent by the service platform, the SIM card will generate a corresponding MAC code for MAC code verification. For example, the service platform generates a first MAC message verification code. After receiving the first MAC message verification code sent by the service platform, the SIM card uses the same calculation method as the service platform to generate the first MAC message verification code based on the third key and message to obtain the second MAC message verification code to verify the second MAC message verification code. Whether the MAC message authentication code is the same as the first MAC message authentication code. When the second MAC message verification code is the same as the first MAC message verification code, it means that the message is complete and has not been altered by the hijacking string. When the verification code of the second MAC message is different from the verification code of the first MAC message, it means that the message has been hijacked and modified, and the message is now invalid. When the second MAC message verification code is the same as the first MAC message verification code, the message is decrypted to obtain a generation factor to generate the first verification code. The integrity of the message is verified by the message verification code, which is conducive to improving the security of verification code generation and identity verification.

In some embodiments, as shown in FIG. 4, the device further includes a third processing unit 43, configured to verify the PIN code provided by the user;

After the verification of the PIN code is passed, the first verification code is displayed on the display interface of the device where the SIM card is located.

In this exemplary embodiment, the PIN code is the personal identification code of the SIM card, which is a security measure to prevent others from stealing the SIM card. When the user obtains the first verification code on the display interface of the device where the SIM card is located, the device where the SIM card is located will pop up a PIN code verification window according to the built-in active command of the SIM card, for the user to enter the corresponding PIN code in the PIN code verification window for verification. verify. After the verification is passed, the user can obtain the first verification code. When the wrong number of times entered by the user reaches the preset number of times, the verification of the PIN code is stopped, and the user will not be able to obtain the first verification code at this time. In this way, it can effectively reduce the probability of verification leakage and being stolen by others.

In some embodiments, the third processing unit is also used to

After the verification of the PIN code is passed, a prompt text is displayed on the display interface of the device where the SIM card is located, and the prompt text is used to explain the first verification code.

In this exemplary embodiment, the prompt text includes explanatory information explaining the verification code for the user to read. When the user obtains the first verification code on the display interface of the device where the SIM card is located, the prompt copy can automatically pop up for the user to read. In this way, it is beneficial for the user to understand the related information of the verification code in more detail.

Fig. 5 is a flow chart showing verification code verification according to an exemplary embodiment. As shown in Figure 5, including:

Step 1: In the SIM card, a key (the third key) is distributed based on the ICCID, and the generated key is preset in the card;

Step 2: When the SIM card is powered on, a registered terminal network access event occurs;

Step 3: The network access event triggers the SIM card to report the communication identification and ICCID to the service platform;

Step 4: The application platform sends request information and prompt information including the generation factor of the verification code, the generation factor includes the transaction ID, and the prompt information includes the first prompt information and the second prompt information;

Step 5: The service platform generates a key (first key) based on ICCID dispersal; adds transaction time to the generation factor, encrypts the message containing the generation factor with the key (first key) and increases the Mac code verification (first MAC message verification code);

Step 6: The service platform sends the ciphertext message to the SIM card through the SMS channel or the BIP channel;

Step 7: The SIM card checks the MAC (checks the first MAC message verification code through the generated second MAC message verification code), decrypts the message (decrypts through the generated third key), extracts the generation factor, and generates the required verification code;

Step 8: The SIM card prompts the user to enter the PIN password on the display interface of the device using an active command;

Step 9: The user enters the PIN password on the display interface of the device;

Step 10a: If the user enters an incorrect PIN password, and the number of errors exceeds the preset number, the verification fails and the error reason is returned;

Step 11a: return the error reason to the application platform;

Step 10b: If the PIN password entered by the user is correct, the verification is successful;

Step 11b: After the verification is successful, the SIM card uses active commands to pop up a display window to display the verification code and prompt copy;

Step 12: The user reads the verification code in the display window, and fills in the verification code in the business access interface associated with the application platform;

Step 13: The application platform sends the verification code filled in by the user to the service platform;

Step 14: Based on the generation factor, the service platform generates a verification code in the same way as the verification code generated by the SIM card, and verifies the verification code used for filling in;

Step 15: The service platform returns the verification code verification result to the application platform;

Step 16: The application platform processes subsequent business steps according to the result of verification code verification.

The verification code generation method of this application uses the same verification code generation method through negotiation between the SIM card and the SIM service platform, uses the session key, and only transmits the generation factor of the verification code during channel transmission, so that the verification code is always in a safe area, Verify on the SIM security service platform, no verification code interception, no risk of theft;

The application platform can select the user to enter the user PIN password before reading the verification code on the first terminal according to the business needs, and only after the verification of the user's identity is passed can the verification code be read, the user's identity can be confirmed, and the security of the business can be improved;

The application platform requests a verification code with a specified number of digits from the SIM service platform according to different business needs, and the verification code is used flexibly;

The application platform transmits the reminder copy to the SIM service platform according to the business needs, and the SIM service platform transmits the reminder copy to the SIM card, and the SIM card uses an active command pop-up box to display the reminder copy for the user to read;

The SIM card terminal network registration event is used. When the terminal network access event occurs, the SIM card actively reports the SIM card information to the SIM service platform, so that the SIM service platform and the SIM card have the same key dispersion factor (ICCID), protecting the channel transmission. request data;

Use the unique identifier of the SIM card to disperse the key generation, and each SIM card has a unique key;

The same verification code is generated through mutual negotiation between the SIM card service platform and the SIM card, and the verification code is verified on the SIM card service platform, so that the security risk of the verification code in the transmission process is reduced to zero;

Before reading the verification code, the user first checks the user password and verifies the user's identity. Only after the verification is passed can the user read and use the verification code, which greatly reduces the risk of the SIM lost verification code being used by criminals.

In yet another aspect, the present disclosure also provides a terminal.

Fig. 6 is a schematic structural diagram of a terminal according to an exemplary embodiment. As shown in FIG. 6 , the terminal provided by this embodiment of the present disclosure includes: a processor 330 and a memory 320 for storing a computer program that can run on the processor, wherein the processor 330 is used for running the computer program , execute the steps of the method provided in the foregoing embodiments.

In yet another aspect, the present disclosure also provides a computer-readable storage medium.

The computer-readable storage medium provided by the embodiments of the present disclosure has a computer program stored thereon, and is characterized in that, when the computer program is executed by a processor, the steps of the methods provided in the foregoing embodiments are implemented.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. The device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods, such as: multiple units or components can be combined, or May be integrated into another system, or some features may be ignored, or not implemented. In addition, the coupling, or direct coupling, or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be electrical, mechanical or other forms of.

The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed to multiple network units; Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention can be integrated into one processing module, or each unit can be used as a single unit, or two or more units can be integrated into one unit; the above-mentioned integration The unit can be realized in the form of hardware or in the form of hardware plus software functional unit.

In some cases, if any two of the above technical features do not conflict, they can be combined into a new method and technical solution.

In some cases, if any two of the above-mentioned technical features do not conflict, they can be combined into a new equipment technical solution.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the Including the steps of the foregoing method embodiments; and the aforementioned storage medium includes: various storage devices, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk A medium on which program code can be stored.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (28)

1. A verification code generation method is applied to a service platform, and comprises the following steps:

receiving request information which is sent by an application platform and used for generating a verification code, wherein the request information at least comprises a generation factor of the verification code and a communication identifier for generating the verification code SIM;

and sending a message containing the generation factor to the SIM card according to the communication identifier, wherein the generation factor is used for enabling the SIM card to generate a first verification code by adopting a verification code generation mode known by the SIM card and a service platform together.

2. The verification code generation method according to claim 1, wherein the generation factor of the verification code includes at least one of:

the transaction ID identification is used for identifying the transaction of the request information sent by the application platform to the service platform;

and the transaction time is used for recording the time when the service platform receives the request information sent by the application platform.

3. The captcha generation method of claim 1, wherein the request information further comprises at least one of:

a validation code digit for indicating a character digit number of the validation code;

the first prompt message is used for indicating the service platform to determine whether PIN code verification is required when the user acquires the first verification code;

and the second prompt information is used for indicating the service platform to determine whether a prompt document needs to be provided for the user to read when the user acquires the first verification code.

4. The method according to claim 1, wherein the sending the message including the generation factor to the SIM card comprises:

generating a first key through a determined dispersion algorithm based on the ICCID integrated circuit card identification code corresponding to the SIM card;

generating a first MAC message verification code based on the first secret key and the message;

encrypting the message by a first secret key;

and sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to perform message verification on the integrity of the received message.

5. The verification code generation method according to claim 4, further comprising:

receiving the first verification code generated by the SIM card and sent by the application platform;

after receiving the first verification code, generating a second key different from the first key based on the first key;

and carrying out key encryption on the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

6. The method for generating the verification code according to claim 5, wherein the key encrypting the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card comprises:

carrying out key encryption on the generation factor based on a second key to obtain a verification code character chain;

and intercepting the characters with the number equal to the number of the verification codes at the determined position of the verification code character chain to obtain the second verification code.

7. The verification code generation method according to claim 5, further comprising:

verifying whether the generated second verification code is the same as the first verification code to obtain a verification result;

and feeding back the verification result to the application platform.

8. A verification code generation method is applied to a SIM card, and comprises the following steps:

receiving a message which is sent by a service platform and contains a generation factor of a verification code;

and generating a first verification code based on the generation factor in a verification code generation mode commonly known with the service platform.

9. The method of claim 8, wherein before receiving a message sent by a service platform and containing a generation factor of the verification code, the method comprises:

sending a communication identifier for generating the verification code SIM and an ICCID corresponding to the communication identifier to the service platform; the ICCID is used for the service platform to generate a first key for encrypting the message based on the ICCID;

after receiving a message which is sent by the service platform and contains a generation factor of the verification code, the method comprises the following steps:

generating a third key by a determined decentralized algorithm based on the ICCID integrated circuit card identification code, wherein the decentralized algorithm for generating the third key by the SIM card is the same as the decentralized algorithm for generating the first key by the service platform;

and decrypting the message encrypted by the first key based on the third key to obtain the generation factor.

10. The verification code generation method according to claim 9, wherein the generating the first verification code includes:

generating a fourth key different from the third key based on the third key, wherein the SIM card generates the fourth key in the same manner as the service platform generates the second key;

and carrying out key encryption on the generation factor based on the fourth key to obtain the first verification code.

11. The verification code generation method according to claim 9, further comprising:

receiving a first MAC message verification code sent by the service platform, wherein the first MAC message verification code is generated by the service platform based on the first secret key and is used for the SIM card to perform message verification on the integrity of the message;

generating a second MAC message verification code based on the third key, wherein the generation mode of the second MAC message verification code generated by the SIM card is the same as the mode of the first MAC message verification code generated by the service platform;

verifying whether the second MAC message verification code is the same as the first MAC message verification code.

12. The verification code generation method according to claim 8, further comprising:

verifying a PIN provided by a user;

and after the PIN is verified, displaying the first verification code through a display interface of the equipment where the SIM card is located.

13. The verification code generation method according to claim 12, further comprising:

and after the PIN code passes the verification, displaying a prompt document through a display interface of the equipment where the SIM card is located, wherein the prompt document is used for explaining the first verification code.

14. An authentication code generating apparatus, comprising:

the first processing unit is used for receiving request information which is sent by an application platform and used for generating a verification code, wherein the request information at least comprises a generation factor of the verification code and a communication identifier for generating the verification code SIM;

and the second processing unit is used for sending a message containing the generation factor to the SIM card according to the communication identifier, wherein the generation factor is used for enabling the SIM card to generate a first verification code by adopting a verification code generation mode which is known by a service platform together.

15. The verification code generation apparatus according to claim 14, wherein the generation factor of the verification code includes at least one of:

the transaction ID identification is used for identifying the transaction of the request information sent by the application platform to the service platform;

and the transaction time is used for recording the time when the service platform receives the request information sent by the application platform.

16. The captcha generating apparatus of claim 14, wherein the request information further comprises at least one of:

a validation code digit for indicating a character digit number of the validation code;

the first prompt message is used for indicating the service platform to determine whether PIN code verification is required when the user acquires the first verification code;

and the second prompt information is used for indicating the service platform to determine whether a prompt document needs to be provided for the user to read when the user acquires the first verification code.

17. The captcha generation apparatus of claim 14, wherein the second processing unit is specifically configured to

Generating a first key through a determined dispersion algorithm based on the ICCID integrated circuit card identification code corresponding to the SIM card;

generating a first MAC message verification code based on the first secret key and the message;

encrypting the message by a first secret key;

and sending the first MAC message verification code and the message encrypted by the first key to the SIM card, wherein the first MAC message verification code is used for the SIM card to perform message verification on the integrity of the received message.

18. The verification code generation apparatus of claim 17, further comprising a third processing unit configured to receive the first verification code generated by the SIM card and sent by the application platform;

after receiving the first verification code, generating a second key different from the first key based on the first key;

and carrying out key encryption on the generation factor based on the second key to obtain a second verification code corresponding to the first verification code generated by the SIM card.

19. The verification code generation apparatus of claim 18, wherein the third processing unit is further configured to

Carrying out key encryption on the generation factor based on a second key to obtain a verification code character chain;

and intercepting characters equal to the number of the verification codes at the determined position of the verification code character chain to obtain the second verification code.

20. The apparatus according to claim 18, wherein the third processing unit is further configured to verify whether the generated second verification code is the same as the first verification code, so as to obtain a verification result;

and feeding back the verification result to the application platform.

21. An authentication code generation apparatus applied to a SIM card, the apparatus comprising:

the first processing unit is used for receiving a message which is sent by the service platform and contains a generation factor of the verification code;

and the second processing unit is used for generating the first verification code in a verification code generation mode known together with the service platform based on the generation factor.

22. The apparatus of claim 21, wherein the first processing unit is further configured to send a communication identifier for generating the authentication code SIM and an ICCID corresponding to the communication identifier to the service platform before receiving a packet sent by the service platform and containing a generation factor of the authentication code; the ICCID is used for the service platform to generate a first key for encrypting the message based on the ICCID; and

after receiving a message which is sent by the service platform and contains the generation factor of the verification code,

generating a third key by a determined decentralized algorithm based on the ICCID integrated circuit card identification code, wherein the decentralized algorithm for generating the third key by the SIM card is the same as the decentralized algorithm for generating the first key by the service platform;

and decrypting the message encrypted by the first key based on the third key to obtain the generation factor.

23. The captcha generation apparatus of claim 22, wherein the second processing unit is specifically configured to

Generating a fourth key different from the third key based on the third key, wherein the SIM card generates the fourth key in the same way as the service platform generates the second key;

and carrying out key encryption on the generation factor based on the fourth key to obtain the first verification code.

24. The verification code generation apparatus of claim 22, wherein the first processing unit is further configured to generate the verification code

Receiving a first MAC message verification code sent by the service platform, wherein the first MAC message verification code is generated by the service platform based on the first secret key and is used for the SIM card to perform message verification on the integrity of the message;

generating a second MAC message verification code based on the third key, wherein the generation mode of the second MAC message verification code generated by the SIM card is the same as the mode of the first MAC message verification code generated by the service platform;

verifying whether the second MAC message verification code is the same as the first MAC message verification code.

25. The captcha generating apparatus of claim 21, further comprising a third processing unit configured to

Verifying a PIN provided by a user;

and after the PIN is verified, displaying the first verification code through a display interface of the equipment where the SIM card is located.

26. The verification code generation apparatus of claim 25, wherein the third processing unit is further configured to

And after the PIN code passes the verification, displaying a prompt document through a display interface of the equipment where the SIM card is located, wherein the prompt document is used for explaining the first verification code.

27. A terminal, comprising: a processor and a memory for storing a computer program operable on the processor, wherein the processor is operable to perform the steps of the method of claims 1 to 13 when executing the computer program.

28. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method of claims 1 to 13.

Images