CN1980129B - Authority identifying method and system - Google Patents

Abstract

The invention discloses an authentication method, comprising: a user terminal (11) sends a broadband value-added service verification request to a broadband value-added service platform (12); the broadband value-added service platform (12) obtains its corresponding telephone number according to the broadband value-added service verification request number, and obtain the order number by the service provider server (13); before the consumer service, the system obtains the order number and the corresponding telephone number of the broadband value-added service platform (12) according to the broadband value-added service request. The phone record is authenticated; the audio call record includes the calling phone number and the input order number used by the user to make an audio call according to the system designation. The invention also provides an authentication system. According to the present invention, through the double authentication of the broadband account and the audio phone, the security of consumption by using the broadband account is improved.

Description

An authentication method and system

technical field

The present invention relates to an authentication technology, in particular to an authentication method and system. the

Background technique

At present, various broadband operators have developed broadband value-added service consumption platforms one after another. Users can log in to the consumption platform to choose the services they need for consumption with their broadband account number and password. The consumption platform will record the relevant fees on the user's broadband bill. the

In the prior art, there are two authentication modes, one is a non-binding mode, and the other is a binding mode. For the non-binding method, users need to check whether the broadband account and password match each time they consume services. For the binding method, the user only needs to log in the broadband account and password when consuming the service of a certain SP (service provider) for the first time, and authenticate the broadband account and password, and then confirm the connection between the broadband account and the service account. Binding; from the second consumption of the same SP by the user, there is no need to authenticate the consumption of the user, and the SP can directly initiate a deduction request to the operator through the background communication, and provide the user with the selected services. the

In the above prior art, there are many forms of broadband account theft. the

For example, regular broadband accounts and passwords are used in many cases. For example, the account names use the city abbreviation plus the phone number—sz86013388, and the default password is 123456. Account hackers can use these regular broadband account numbers and passwords to log in to the broadband value-added service platform 12 for consumption. In order to solve this problem, the operator limits the consumption of the broadband value-added service platform 12 to the IP that the broadband account is using. Therefore, the thieves simply use these account passwords to dial broadband access services, and then consume. the

As a result, many operators have increased their restrictions. The broadband account is limited to the physical line in the user's home before they can dial in to the broadband access service, or they must verify various information logged in on the broadband when consuming. However, means of account theft emerge in an endless stream, such as after the user's computer has been hit by a Trojan horse, the situation of account theft is still easy to occur. the

Contents of the invention

The object of the present invention is to provide an authentication method and system, which can prevent broadband account consumption from being stolen. the

The invention discloses an authentication method, including:

A, the user terminal 11 sends a broadband value-added service verification request to the broadband value-added service platform 12; B, the broadband value-added service platform 12 obtains its corresponding phone number according to the broadband value-added service verification request, and obtains the order number through the service provider server 13; C 1. Before consuming the service, the system authenticates the audio phone record of the user terminal 11 according to the order number obtained by the broadband value-added service platform (12) and the phone number corresponding to the broadband value-added service verification request; The system specifies the calling phone number to use when making an audio call and the order number entered. the

The broadband value-added service verification request includes a broadband account number and password. the

The step B also includes: the broadband value-added service platform 12 verifies whether the broadband account number and the password match, and if they match, allow the user terminal 11 to further select services; otherwise, perform error handling. the

Described step C further comprises:

C1. The system notifies the user terminal 11 to use the designated phone to make an audio call and enter the order number;

C2. The user terminal 11 sends the order number to the audio platform 15 by dialing the audio phone, and the audio platform 15 records the order number and the calling phone number to form an audio record;

C3. The system performs authentication according to the audio record and the telephone number and order number obtained by the broadband value-added service platform 12 . the

Described step C3 further comprises: the system searches for the order number recorded by the audio platform 15 according to the order number obtained by the broadband value-added service platform 12, if not found, then authentication fails, if found, then continue to compare the order number obtained by the broadband value-added service platform 12 Whether the phone number is consistent with the calling phone number recorded by the audio station, if they match, the authentication will pass, if not, the authentication will fail. the

The frequency of voice authentication depends on the security policy. the

Before executing step A also execute:

The user terminal 11 selects a service item through the service provider server 13;

The service provider server 13 sends a service order to the broadband value-added service platform 12, and the service order includes an order number;

The broadband value-added service platform 12 notifies the user terminal 11 to input the broadband value-added service verification code. the

The invention also discloses an authentication system, the system includes:

The user terminal 11 is used to send a broadband value-added service verification request to the broadband value-added service platform 12, dial a voice call and send an order number to the voice platform 15;

The broadband value-added service platform 12 is used to receive the broadband value-added service verification request of the user terminal 11 and the order number of the service provider server 13, and obtain the corresponding phone number according to the broadband value-added service verification request;

The service provider server 13 is used to generate a service order, and send the service order to the broadband value-added service platform 12, and the service order includes an order number;

The audio platform 15 is used to receive the audio record of the user terminal 11, and the audio record includes the calling phone number and the order number;

The authentication unit 14 is connected with the audio platform 15 and the broadband value-added service platform 12, and is used for authenticating according to the audio record and the broadband service record, and notifying the user terminal 11 to make an audio call and enter an order number. the

The authentication unit 14 is set in the broadband value-added service platform 12, or set in the service provider server 13, or exists as a separate component. the

Therefore, according to the present invention, through double authentication of the broadband account and the audio phone, the security of consumption with the broadband account is improved. the

Description of drawings

Fig. 1 has shown the system of audio telephone authentication of the present invention;

FIG. 2 shows a flow chart of voice phone authentication of the present invention. the

Detailed ways

In order to make it easier for those skilled in the art to understand and realize the present invention, the embodiments of the present invention are described in conjunction with the accompanying drawings. the

Since most ADSL (Asymmetric Digital Subscriber Line) broadband accounts access the Internet through virtual dial-up through a telephone line, a corresponding telephone number is required when opening a broadband account. This solution adopts the combination of broadband account verification and audio phone verification to ensure the security of broadband accounts and prevent them from being stolen and consumed. the

As shown in Fig. 1, the present invention provides a kind of authentication system, described system comprises: user terminal 11, is used for sending broadband value-added service verification request to broadband value-added service platform 12, dials the voice call and sends to voice platform 15 Order number; Broadband value-added service platform 12 is used to receive the broadband value-added service verification request of user terminal 11 and the order number of service provider server 13, and obtain the corresponding phone number according to the broadband value-added service verification request; Service provider server 13 , for generating a service order, and sending the service order to the broadband value-added service platform 12, the service order includes the order number; the audio platform 15 is used for receiving the audio record of the user terminal 11, and the described audio record includes the calling phone number Number and order number; authentication unit 14, which is connected with audio platform 15 and broadband value-added service platform 12, is used for authenticating according to audio records and broadband service records, and notifies user terminal 11 to dial audio calls and input order numbers. The authentication unit 14 can be set in the broadband value-added service platform 12, or set in the service provider server 13, or exist as a separate component. the

As shown in FIG. 2 , the present invention also provides an authentication method, the basic idea of which is: in the consumer service process, an audio phone verification link is added. This link can be realized by the SP, or by the broadband value-added service platform 12 of the operator. The authentication method for voice phone verification of the present invention will be described in detail below with reference to FIG. 1 . the

Step 1, the user terminal 11 selects a service item through the service provider, the service provider generates a service order, and sends the service order to the broadband value-added service platform 12, and the broadband value-added service platform 12 notifies the user terminal 11 to input the broadband value-added service verification code, the user The terminal 11 sends a broadband value-added service verification request to the broadband value-added service platform 12 . The broadband value-added service verification request includes a broadband account number and a broadband password. Said service order includes an order number. the

Step 2, the broadband value-added service platform 12 authenticates the broadband value-added service verification request, namely verifying whether the broadband account number and the broadband password match, if they match, then perform step 3, otherwise, perform step 7: error handling, you can report to the user terminal 11 A prompt of "wrong broadband account or password" is sent, or the service for the user terminal 11 is directly refused. the

Step 3, the broadband value-added service platform 12 order number is recorded in the broadband database, and the broadband database is set in the authentication unit 14, and can also be set in the broadband value-added service platform 12 or SP, which records the broadband account number and the corresponding broadband account number phone number, service account and order number of the user in the SP (broadband database in the table below). the

Step 4. At any link before consumption, the authentication unit 14 prompts the user terminal 11 to dial a certain voice phone number with a designated phone (the phone number corresponding to the broadband account), and then input the order number through the voice phone. the

Step 5, the user dials the audio phone with the specified user terminal 11 (the phone corresponding to the broadband account), and inputs the order number; the audio platform 15 records the phone number dialed by the user and the order number entered, and then sends the phone number and the order number For the authentication unit 14, the authentication unit 14 stores the phone number and the order number in, for example, a voice database, or stores the phone number and the order number in a table. the

Step 6, the authentication unit 14 authenticates the audio recording and the broadband recording. The authentication unit 14 queries the two database records to determine whether the audio calling number of the same order number is the same as the corresponding phone number of the broadband account, if they are the same, it is safe, otherwise it is not safe. the

broadband database

broadband account Corresponding phone number service account order number sz136050 075581234567 10001 123001 gzDSL42356 02087654321 12456 123002 132454343 01088881234 89723 123003 AD234656 02189027897 45672 123004

voice database

telephone number order number 075581234567 123001 02088884321 123002 02189027897 123004

As can be seen from the above table: in the broadband database, the access phone corresponding to the broadband account number sz136050 is 075581234567, the order number is 123001, and in the audio database, the phone number that the order number is 123001 is 075581234567, and this phone number is the same as The access phone number corresponding to the broadband number sz136050 is the same, therefore, the broadband account sz136050 can make this consumption.

In the broadband database, the access phone number corresponding to the broadband account gzDSL42356 is 02087654321 and the order number is 123002. In the voice database, the phone number with the order number 123002 is 02088884321. Therefore, since the phone number corresponding to the broadband account is different from that in the voice database phone number is different, the broadband account gzDSL42356 cannot make this purchase. the

In the broadband database, the access phone number corresponding to the broadband account 132454343 is 01088881234, and the order number is 123003. In the audio database, there is no record of the order number 123003. Therefore, the broadband account 132454343 cannot make this purchase. the

In the broadband database, the access phone number corresponding to the broadband account AD234656 is 02189027897, and the order number is 123004. In the audio database, the phone number with the order number 123004 is 02189027897, which is the same as the access phone number corresponding to the broadband number sz136050. Therefore, broadband account AD234656 can make this consumption. the

According to the present invention, the frequency of audio verification depends on different security requirements. the

For broadband users with low security requirements, you can request voice phone verification when using the broadband account for the first time, and do not verify any subsequent consumption of the broadband account; this is because account theft often occurs when the owner of the broadband account does not use broadband Account value-added consumption habit, if the head of the household has the habit of broadband value-added consumption, he may pay more attention to the protection of the account number, so that there will be fewer cases of theft. Therefore, from the perspective of lowering the user threshold, it can also be The voice verification is only required when the broadband account is consumed for the first time. After the verification, the user can be considered as an old user who will protect his account. Therefore, the user can spend at will, and the subsequent consumption no longer requires voice verification for each transaction. the

For broadband users with medium security requirements, it is also possible to use a voice phone to verify once when the broadband account consumes an account of a certain SP for the first time, and not verify the consumption of the same account in the future. This is because when the broadband account A1 is the first time When consuming to service account B1, its security has been verified through voice calls, so when broadband account A1 consumes to service account B1 again, it can be considered safe and there is no need to verify again; but with account A1 to service account B2, It is considered that the security of this transaction has not been verified;

For broadband users with higher security requirements, voice phone verification may also be required for each consumption to ensure the security of each consumption. the

According to the present invention, through the double authentication of the broadband account and the audio phone, the security of consumption by using the broadband account is improved. the

Although the present invention has been described by the embodiments, those of ordinary skill in the art know that, without departing from the spirit and essence of the present invention, the present invention can have many modifications and variations, and the scope of the present invention is defined by the appended rights Requirements to limit. the

Claims (9)

1. a method for authenticating is characterized in that, comprising:

A, user terminal (11) send broadband value-added service checking request to broadband value-added service platform (12);

B, broadband value-added service platform (12) obtain its corresponding telephone number according to broadband value-added service checking request, and obtain order number by service provider server (13);

C, system obtains according to broadband value-added service platform (12) before consumption service order number and the pairing telephone number of broadband value-added service checking request carry out authentication to the voice message phone record of user terminal (11); Described voice message phone record comprises that the user specifies the calling telephone number that uses when dialing voice message phone and the order number of input according to system.

2. method for authenticating according to claim 1 is characterized in that, described broadband value-added service checking request comprises broadband account number and password.

3. method for authenticating according to claim 2 is characterized in that, described step B also comprises: whether broadband value-added service platform (12) checking broadband account number conforms to password, if conform to, then allow user terminal (11) further to select service, otherwise, carry out fault processing.

4. method for authenticating according to claim 1 is characterized in that, described step C further comprises:

C1, notifications user terminal (11) use designated telephone to dial voice message phone and import order number;

C2, user terminal (11) send order number by dialing voice message phone to audio signal platform (15), and audio signal platform (15) record order number and calling telephone number are to form the audio communication record;

C3, system carry out authentication according to the telephone number and the order number of audio communication record and broadband value-added service platform (12) acquisition.

5. method for authenticating according to claim 4, it is characterized in that, described step C3 further comprises: the order number that system obtains according to broadband value-added service platform (12) is searched the order number of audio signal platform (15) record, if do not find, and failed authentication then, if find, whether the telephone number that then continues contrast broadband value-added service platform (12) acquisition conforms to the calling telephone number of audio signal platform record, if conform to, then authentication is passed through, if do not conform to, failed authentication then.

6. method for authenticating according to claim 1 is characterized in that, the frequency of audio communication checking is decided according to security policies.

7. method for authenticating according to claim 1 is characterized in that, also carries out before execution in step A:

User terminal (11) is selected service item by service provider server (13);

Service provider server (13) sends Service Order to broadband value-added service platform (12), and described Service Order comprises order number;

Broadband value-added service platform (12) informing user terminal (11) input broadband value-added service identifying code.

8. a right discriminating system is characterized in that, described system comprises:

User terminal (11) is used for sending broadband value-added service checking request to broadband value-added service platform (12), dials voice message phone and sends order number to audio signal platform (15);

Broadband value-added service platform (12) is used to receive the broadband value-added service checking request of user terminal (11) and the order number of service provider server (13), and obtains the telephone number corresponding with it according to broadband value-added service checking request;

Service provider server (13) is used to produce Service Order, and Service Order is issued broadband value-added service platform (12), and described Service Order comprises order number;

Audio signal platform (15) is used to receive the audio communication record of user terminal (11), and described audio communication record comprises calling telephone number and order number;

Authenticating unit (14), it links to each other with broadband value-added service platform (12) with audio signal platform (15), be used for carrying out authentication according to audio communication record and broadband service record, and informing user terminal (11) is dialed voice message phone and input order number.

9. right discriminating system according to claim 8 is characterized in that, described authenticating unit (14) is arranged in the broadband value-added service platform (12), or is arranged in the service provider server (13), or exists as independent parts.

Images