CN113132317B - Identity authentication method, system and device - Google Patents

Abstract

The invention discloses an identity authentication method, system and device, and belongs to the technical field of internet. The identity authentication method comprises the following steps: receiving a request data packet sent by a terminal; based on the request data packet, acquiring a prestored mobile phone number and storing the prestored mobile phone number in the local; receiving an authentication request sent by a service server, wherein the authentication request carries a mobile phone number to be authenticated input by a user at a terminal; performing identity authentication on the authentication request, verifying whether the mobile phone number to be authenticated is consistent with the prestored mobile phone number, and obtaining an authentication result that the identity authentication is passed or not; and returning a verification result to the service server. In the invention, in order to provide the security of identity authentication, whether the mobile phone number to be authenticated input by the user is consistent with the prestored mobile phone number is checked to obtain the authentication result that the identity authentication is passed or failed.

Description

An identity authentication method, system and device

technical field

The present invention relates to the technical field of the Internet, in particular to an identity authentication method, system and device.

Background technique

With the continuous development of science and technology, mobile terminals such as mobile phones and tablet computers are becoming more and more popular, and many services can be obtained after logging in on the mobile terminals.

When a user logs in on a mobile terminal, his identity usually needs to be verified. However, the current authentication method has the problem of low security.

Contents of the invention

In order to solve the problem of disclosing the security of the identity verification method, the present invention provides an identity verification method, system and device.

In a first aspect, the present invention provides an identity verification method, comprising:

Receive the request packet sent by the terminal;

Based on the request data packet, obtain a pre-stored mobile phone number and store it locally;

receiving the verification request sent by the service server, the verification request carrying the mobile phone number to be verified input by the user in the terminal;

Perform identity verification on the verification request, check whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, and obtain a verification result whether the identity verification is passed or not;

Return the verification result to the service server.

In the above identity verification method, when the verification request sent by the service server is received, the verification request carries the mobile phone number to be verified input by the user in the terminal, including:

Receive the ciphertext of the mobile phone number to be verified encrypted and sent by the private key of the business server;

Using the public key to decrypt the ciphertext of the mobile phone number to be verified to obtain the mobile phone number to be verified.

The above identity verification method, after obtaining the pre-stored mobile phone number based on the request packet and storing it locally, and before receiving the verification request sent by the service server, further includes:

receiving a token acquisition request sent by the terminal;

Generate a token associated with the pre-stored mobile phone number based on the token acquisition request;

storing the token locally as a pre-stored token, and returning the token to the terminal as a token to be verified by the terminal;

In the verification request sent by the receiving service server, the verification request also carries a token to be verified from the terminal;

In said authenticating said verification request, further comprising:

When the token to be verified is consistent with the pre-stored token, enter the step of verifying whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number.

The above identity verification method, after receiving the token acquisition request sent by the terminal, and before generating a token associated with the pre-stored mobile phone number based on the token acquisition request, further includes:

Verify the source of the HTTP page address of the token acquisition request, determine whether the token acquisition request is associated with the pre-stored mobile phone number, and if so, proceed to the next step.

The above-mentioned identity verification method, based on the request data packet, obtains the pre-stored mobile phone number and stores it locally, including:

Obtain the identity in the request packet;

According to the identification, query and obtain the corresponding mobile phone number, which is stored locally as a pre-stored mobile phone number.

In a second aspect, the present invention provides an identity verification method, comprising:

Send a request packet to the authentication server;

receiving the status code returned by the authentication server;

When the status code is a successful request status code, an interface prompting the user to input a mobile phone number is displayed;

Receive the mobile phone number entered by the user as the mobile phone number to be verified;

Send the mobile phone number to be verified to the authentication server via the service server for identity verification;

Receive and display the returned verification result, the verification result including whether the identity verification of the mobile phone number to be verified passes or fails.

In a third aspect, the present invention provides an identity verification method, comprising:

receiving the mobile phone number to be verified sent by the terminal, the mobile phone number to be verified is input by the user at the terminal;

Sending a verification request to the authentication server, the verification request carrying the mobile phone number to be verified;

Receiving a verification result returned by the verification server, the verification result including whether the identity verification of the mobile phone number to be verified passes or fails.

In a fourth aspect, the present invention provides an identity verification system, including a memory and a processor;

The memory stores a pre-stored mobile phone number;

The processor is configured to receive the request packet sent by the terminal, based on the request packet, obtain the mobile phone number of the terminal, and receive the verification request sent by the service server, perform identity verification on the verification request, and check Check whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, and obtain the verification result of whether the identity verification is passed or not.

In a fifth aspect, the present invention provides a device, including: a memory, a processor, and a computer program stored on the memory and operable on the processor, when the computer program is executed by the processor, the following is implemented: The steps of any one of the methods described above.

In a sixth aspect, the present invention provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of any one of the above methods are implemented.

In the present invention, in order to provide the security of identity verification, first obtain the pre-stored mobile phone number based on the request data packet, and then receive the verification request from the service server. The verification request carries the mobile phone number to be verified input by the user at the terminal, and then Perform identity verification, verify whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, and obtain the verification result of whether the identity verification is passed or not. If the verification result is passed, the terminal that receives the user's input of the mobile phone number to be verified can perform a business connection with the service server.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention, and constitute a part of the present invention. The schematic embodiments of the present invention and their descriptions are used to explain the present invention, and do not constitute improper limitations to the present invention. In the attached picture:

Fig. 1 is a flow chart of the present invention implementing an identity verification method;

Fig. 2 is the flow chart of the present invention implementing two identity verification methods;

Fig. 3 is a flow chart of implementing three identity verification methods in the present invention.

Detailed ways

In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with specific embodiments of the present invention and corresponding drawings. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Embodiment one

Fig. 1 is a flowchart of an identity verification method in an exemplary embodiment of the present invention, and the identity verification method includes the following steps:

S1020: Receive a request packet sent by the terminal. The data packet is an HTTP request data packet, and the structure in the data packet includes a request line, a message header and a message body. The request line includes request type, request resource path, version and type of protocol.

S1040: Based on the request data packet, obtain the pre-stored mobile phone number and store it locally. The pre-stored mobile phone number stored locally is used for number verification during identity verification.

S1080: Receive the verification request sent by the service server, where the verification request carries the mobile phone number to be verified input by the user in the terminal. The verification request may be an identity verification request of an interactive web application of HTML5 technology. The terminal has a window for the user to input a mobile phone number. After receiving the mobile phone number input by the user, the number is sent to the service server as the mobile phone number to be verified. After obtaining the mobile phone number to be verified, the service server sends a verification request to the authentication server.

S1100: Perform identity verification on the verification request, verify whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, and obtain a verification result of passing or failing the identity verification. In identity verification, if the mobile phone number to be verified is consistent with the pre-stored mobile phone number obtained in S1040, the identity verification is passed, indicating that the terminal receiving the mobile phone number to be verified input by the user can perform business connections with the service server; otherwise, if it fails, it cannot Make business connections. Certainly, in some special embodiments, if the mobile phone number to be verified is consistent with the pre-stored mobile phone number obtained in S1040, the identity verification fails; and vice versa.

S1120: Return the verification result to the service server. After receiving the verification result of whether the mobile phone number to be verified has passed the identity verification, the business server may decide whether to establish a service connection with the terminal receiving the mobile phone number to be verified input by the user.

In the embodiment of the present invention, the pre-stored mobile phone number is first obtained based on the request data packet, and then the verification request from the service server is received. Whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, and the verification result of identity verification passed or failed is obtained. In addition, during the verification process, the user only needs to enter the mobile phone number to judge whether the user has passed the identity verification, and there is no need to receive and fill in the SMS verification code. For the user, identity verification takes less time.

Among them, S1040 includes S1041 and S1042:

S1041: Obtain the identity in the request data packet. The identity can be obtained according to the request line in the request packet. The identity can be a temporary identity, such as TEID (Tunnle End point indertifiler, tunnel endpoint identifier), or other temporary identity, which will not be described here.

S1042: According to the identification, query and obtain the corresponding mobile phone number, and store it locally as a pre-stored mobile phone number. Based on the above identification, from the pre-stored correspondence between the identification and the mobile phone number, query to obtain the corresponding mobile phone number, that is, obtain the mobile phone number of the terminal sending the request data packet as the pre-stored mobile phone number.

Specifically, the execution subject in S1041 and S1042 may be a gateway. Certainly, before S1020, the gateway obtains the sessions of each networked mobile phone, and each session stores a corresponding TEID and a corresponding mobile phone number. So that in S1040, based on the request data packet, the TEID in the data packet can be obtained, and then the gateway searches for a matching mobile phone number according to the TEID in the data packet. After the gateway obtains the mobile phone number, it sends it to the authentication server.

After S1040, S1050 is further included: return a status code to the terminal, and when the pre-stored mobile phone number is obtained, the status code is a success status code. Specifically, what the authentication server returns to the terminal is a response data packet, and the response data packet includes a status code. The structure of the response packet includes the status line, message header and message body. The status line includes a status code, which is a number, and different numbers represent different meanings. Since the pre-stored mobile phone number is obtained in S1040, obviously, the status code returned in S1050 is a successful status code, and the next step can be entered; otherwise, the identity verification fails, and the identity verification process can be exited.

In receiving the verification request sent by the service server, it is not only possible to verify whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, but also to verify the token. Therefore, between S1040 and S1080, steps S1062, S1064 and S1066 are also included.

S1062: Receive a token acquisition request sent by the terminal. When the terminal receives the successful return code, it can send a token acquisition request to the authentication server, and the token can be a token token.

S1064: Generate a token associated with the pre-stored mobile phone number based on the token acquisition request. Generate a token associated with a pre-stored mobile phone number based on the token acquisition request.

S1066: Store the token locally as a pre-stored token, and return the token to the terminal as a token to be verified by the terminal. The token is stored locally as a pre-stored token for subsequent verification of the token to be verified. At the same time, return the token to the terminal.

Correspondingly, in S1080, the verification request also carries the token to be verified from the terminal. In S1100, it includes: when the token to be verified is consistent with the pre-stored token, enter the step of verifying whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number; otherwise, the identity verification fails and the identity verification process can be exited. In other words, in the embodiment of the present invention, when performing identity verification, not only is it checked whether the mobile phone number to be verified is consistent with the pre-stored mobile phone number, but before that, it is also checked whether the token to be verified is consistent with the pre-stored token. When both the account number and the token to be verified pass the verification, the verification result of identity verification is obtained.

Between the above S1062 and S1064, S1063 may also be included: Verify the source of the HTTP page address of the token acquisition request, determine whether the token acquisition request is associated with the pre-stored mobile phone number, and if so, proceed to the next step.

In step S1080, in order to improve security, the mobile phone number to be verified is received as ciphertext, specifically, the ciphertext of the mobile phone number to be verified is received encrypted and sent by the private key of the service server, and then the mobile phone number to be verified is decrypted using the public key Number ciphertext to get the phone number to be verified. If the ciphertext can be decrypted with the public key, it indicates that the signature verification has passed, and the received ciphertext of the mobile phone number to be verified has not been tampered with. Of course, as another implementation, what is received may not be the encrypted ciphertext of the mobile phone number to be verified, but the plaintext of the mobile phone number to be verified. Naturally, there is no need to decrypt it.

In addition, in the embodiment of the present invention, after receiving the verification request sent by the service server (S1080), and before performing identity verification on the verification request (S1100), it may also include: verifying the IP address of the service server, verifying the IP address After passing the verification, proceed to the next step; otherwise, exit the identity verification process.

In the embodiment of the present invention, it may also include: the authentication server performs identity verification on the received information sent by the terminal or the information sent by the service server, and enters the next step after the identity verification is passed; otherwise, exits the identity verification process.

In addition, the interface data transmission between the authentication server, the terminal and the business server, all transmit data in the form of https encryption.

In the embodiment of the present invention, except that the execution subject mentioned in S1041 and S1042 is the gateway, the execution subject of other steps may be the authentication server. Of course, the gateway can be integrated on the authentication server, or can be set separately from the authentication server.

Embodiment two

Fig. 2 is a flow chart of an identity authentication method in an exemplary embodiment of the present invention, and the specific process is as follows.

S2020: Send a request packet to the authentication server. The data packet is an HTTP request data packet, and the structure in the data packet includes a request line, a message header and a message body. The request line includes request type, request resource path, version and type of protocol.

S2040: Receive the status code returned by the authentication server. Specifically, what the authentication server returns to the terminal is a response data packet, and the response data packet includes a status code. The structure of the response packet includes the status line, message header and message body. The status line includes the status code, the status code is a number, and different numbers represent different meanings

S2060: When the status code is the request success status code, display an interface prompting the user to input a mobile phone number. When the status code is a successful status code, you can enter the next step, that is, display a window on the terminal prompting the user to enter the mobile phone number, and the user enters the login mobile phone number in this window, that is, the mobile phone number to be verified.

S2080: Send the mobile phone number to be verified to the authentication server via the service server for identity verification. After the mobile phone number to be verified is sent to the service server, the service server sends it to the authentication server for identity verification.

S2100: Receive a returned verification result, where the verification result includes whether the identity verification of the mobile phone number to be verified passes or fails.

In S2100, it may further include: displaying a verification result. The verification result is displayed on the display interface of the terminal, so that the user can know the identity verification result to choose the next operation, and the terminal can also jump to different pages according to the verification result.

Between S2040 and S2060, it also includes S2052, S2054 and S2056.

S2052: Send a token acquisition request to the authentication server;

S2056: Receive the token returned by the authentication server as the token to be verified by the terminal.

In step S2080, it also includes: sending the token to be verified to the authentication server via the service server for identity verification, and verifying the mobile phone number to be verified after the token to be verified is consistent with the pre-stored token in the authentication server.

In the embodiment of the present invention, its execution subject may be a terminal.

Embodiment Three

FIG. 3 is a flowchart of an identity authentication method in an exemplary embodiment of the present invention. The execution subject in Embodiment 3 of the present invention may be a service server, and the specific process is as follows.

S3020: Receive the mobile phone number to be verified sent by the terminal, and the mobile phone number to be verified is input by the user in the terminal. The mobile phone number to be verified is the mobile phone number to be verified after receiving the mobile phone number input by the user on the terminal.

S3040: Send a verification request to the authentication server, where the verification request carries the mobile phone number to be verified. Based on the mobile phone number to be verified above, a verification request is generated and sent to the authentication server.

S3060: Receive a verification result returned by the authentication server, and the verification result includes whether the identity verification of the mobile phone number to be verified passes or fails. After being verified by the authentication server, the verification result is received.

Wherein, in S3040, the mobile phone number to be verified is encrypted by the service server in a ciphertext state and then sent to the authentication server.

In S3020, further comprising: receiving the token to be verified sent by the terminal. Correspondingly, in S3040, the verification request sent to the authentication server carries the token to be verified.

In the embodiment of the present invention, the identity verification method further includes S3080: sending the verification result to the terminal. If the verification result is passed, the verification result may be displayed and a page may be redirected; if the verification result is failed, the verification result may also be displayed.

Embodiment Four

Embodiments of the present invention provide an identity verification system, a device, and a computer-readable storage medium.

An embodiment of the present invention provides an identity verification system, including a memory and a processor. The memory stores the pre-stored mobile phone number. The processor is used to receive the request data packet sent by the terminal, obtain the mobile phone number of the terminal based on the request data packet, and receive the verification request sent by the service server, perform identity verification on the verification request, and verify the mobile phone number to be verified and the pre-stored mobile phone number The numbers are consistent, and the verification result of whether the identity verification is passed or failed is obtained.

The identity verification system provided by the embodiment of the present invention can also execute the method performed by the image recognition system in FIGS. 1-3 , and realize the functions of the identity verification system shown in the embodiments shown in FIGS. 1-3 , which will not be repeated here.

A device provided by an embodiment of the present invention includes: a memory, a processor, and a computer program stored on the memory and operable on the processor. When the computer program is executed by the processor, the above identity verification method is implemented. A step of.

The embodiment of the present invention also provides a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, each process of the above-mentioned identity verification method embodiment is realized, and the same technology can be achieved. Effect, in order to avoid repetition, will not repeat them here. Wherein, the computer-readable storage medium is, for example, a read-only memory (Read-Only Memory, ROM for short), a random access memory (Random Access Memory, RAM for short), a magnetic disk or an optical disk, and the like.

It should be noted that, in this document, the term "comprising", "comprising" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus comprising that element.

The specific examples described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the present invention. Within the spirit and principles of the present invention, any modifications, equivalent replacements, improvements, etc., shall be included in the protection scope of the present invention.

Claims (8)

1. An identity verification method, comprising:

receiving a request data packet sent by a terminal;

based on the request data packet, acquiring a prestored mobile phone number and storing the prestored mobile phone number in the local;

receiving a token acquisition request sent by the terminal;

generating a token associated with the prestored mobile phone number based on the token acquisition request;

storing the token locally as a pre-stored token, and returning the token to the terminal as a token to be verified of the terminal;

in a verification request sent by a receiving service server, the verification request also carries a token to be verified from the terminal; receiving an authentication request sent by a service server, wherein the authentication request carries a mobile phone number to be authenticated input by a user at a terminal;

when the token to be verified is consistent with the prestored token, the step of verifying whether the mobile phone number to be verified is consistent with the prestored mobile phone number is carried out;

performing identity authentication on the authentication request, and checking whether the mobile phone number to be authenticated is consistent with the prestored mobile phone number to obtain an authentication result of passing or failing the identity authentication;

and returning the verification result to the service server.

2. The identity authentication method according to claim 1, wherein the receiving an authentication request sent by the service server, where the authentication request carries a to-be-authenticated mobile phone number input by the user at the terminal, comprises:

receiving a cipher text of the mobile phone number to be verified, which is encrypted and sent by the service server private key;

and decrypting the cipher text of the mobile phone number to be verified by using the public key to obtain the mobile phone number to be verified.

3. The identity authentication method according to claim 1, wherein after the receiving a token acquisition request sent by the terminal and before generating a token associated with the pre-stored mobile phone number based on the token acquisition request, further comprising:

and verifying the HTTP page address source of the token acquisition request, judging whether the token acquisition request is associated with the prestored mobile phone number, and if so, entering the next step.

4. The identity verification method according to claim 1, wherein the obtaining of the pre-stored mobile phone number and the storing of the pre-stored mobile phone number in the local area based on the request data packet comprises:

acquiring the identity in the request data packet;

and inquiring and acquiring the corresponding mobile phone number according to the identity, and storing the corresponding mobile phone number as a pre-stored mobile phone number in the local.

5. An identity verification method, comprising:

sending a request data packet to an authentication server;

receiving a status code returned by the authentication server;

when the status code is the request success status code, displaying an interface for prompting the user to input the mobile phone number, and taking the mobile phone number input by the user as the mobile phone number to be verified;

sending a token acquisition request to the authentication server;

receiving a token returned by the authentication server, and taking the token as a token to be verified of the terminal;

the token to be verified is sent to the authentication server through the service server for identity verification, and after the token to be verified is consistent with a pre-stored token in the authentication server, the mobile phone number to be verified is verified;

the mobile phone number to be verified is sent to the authentication server through the service server for identity verification;

and receiving and displaying a returned verification result, wherein the verification result comprises that the identity of the mobile phone number to be verified passes or fails.

6. An identity verification system comprising a memory and a processor, implementing the steps of the method of any one of claims 1 to 5;

the memory stores prestored mobile phone numbers;

the processor is used for receiving a request data packet sent by a terminal, acquiring the mobile phone number of the terminal based on the request data packet, receiving a verification request sent by a service server, performing identity verification on the verification request, checking whether the mobile phone number to be verified is consistent with the prestored mobile phone number, and obtaining a verification result that the identity verification passes or fails.

7. An apparatus, comprising: memory, processor and computer program stored on the memory and executable on the processor, which computer program, when executed by the processor, carries out the steps of the method according to any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, which computer program, when being executed by a processor, carries out the steps of the method according to any one of claims 1 to 5.

Images