HK1220297B - Method for verifying secruity data, system, and a computer-readable storage device - Google Patents

Description

Security data verification method, system and computer-readable storage medium

Technical Field

The present invention relates to a method, system and computer-readable storage medium for verifying secure data, and in particular to a method, system and storage medium for a related program set for a verification server to generate another layer of security verification steps under the original service.

Background Art

When accessing specific services online, such as shopping or transactions, the server typically provides an authentication service, such as a username and password generated through member login. As simple authentication methods no longer meet stringent security requirements, more stringent verification methods have emerged. For example, dynamic password technology uses a device called a token to generate a unique dynamic password each time a user accesses a service. This password is valid only for the current service moment.

Furthermore, with the increasing popularity of mobile devices, there are also known technologies that utilize mobile devices as authentication tokens. Specifically, service providers collaborate with telecom operators. When a user logs into a specific service, the relevant server first obtains the login data and then, in collaboration with the telecom operator (or authentication provider), sends a text message password to the user. The user then enters the text message password to complete the login. This type of service is commonly found in online gaming servers and online banking.

Summary of the Invention

The present invention proposes a secure data verification method, system, and computer-readable storage medium. The main features of the method are that when a user operates a device to obtain a specific network service, a verification server will first verify the user's terminal device and generate transaction data to complete access to the service, allowing the terminal device to securely complete the entire process of obtaining the service.

According to the embodiment described in the specification, the embodiment steps of the security data verification method include an application server obtaining a service request signal transmitted by a terminal, such as a computer host accessing specific website content, and then the application server notifies a verification server to perform identity authentication, that is, sending a start verification signal to the terminal, such as received by the user's mobile device as a push signal. At this time, a software will be started on the terminal, which can perform a verification procedure with the verification server, such as passing the key set when logging into the system service. The verification server verifies the mobile device to confirm that the online device or server is secure.

After verification is completed, the verification server transmits transaction data for accessing the service to the terminal, for example, in an encrypted package. After decryption at the terminal, data in a specific form is formed. In one embodiment, this data will be further converted into verification data submitted to the verification server. After verification, the service can be accessed smoothly.

According to another embodiment, a secure data verification system includes an application server providing services, which accepts service requests from terminals and receives data submitted by the terminals. A verification server providing identity verification receives the application server's request to perform a security check, transmits a signal to initiate verification to the terminal, and performs a verification procedure with the terminal. Upon completion of verification, the system transmits transaction data indicating the completion of the service to the terminal, which, upon verification, can access the service. In yet another embodiment, this transaction data can be used to further verify the security of the terminal or its software.

A program set for executing the aforementioned information data verification method is stored on a computer-readable storage medium, including a program set for executing the secure data verification method on a mobile device. On the mobile device, the program set includes instructions for receiving a signal from a verification server to initiate verification, launching software based on the verification signal, executing a verification program with the verification server, receiving transaction data indicating service completion from the verification server after verification is complete, and generating a form for providing confirmation of the transaction data based on all or part of the transaction data.

In order to further understand the techniques, methods and effects adopted by the present invention to achieve the established objectives, please refer to the following detailed description and drawings of the present invention. It is believed that the objectives, features and characteristics of the present invention can be deeply and specifically understood thereby. However, the attached drawings and appendices are provided for reference and illustration only and are not intended to limit the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of a network architecture embodiment of a security data verification system according to the present invention;

FIG2 is a flow chart of an embodiment of the security data verification method of the present invention executed on a client;

3A, 3B, 3C, and 3D are schematic diagrams illustrating an embodiment of a mobile device executing the security data verification method of the present invention;

FIG4 is a flow chart of an embodiment of the security data verification method of the present invention operating on the server side;

FIG5 is a flow chart of one embodiment of the system operation of the security data verification method of the present invention;

FIG6 is a flow chart of another embodiment of the system operation of the security data verification method of the present invention.

[Description of Reference Numerals]

Network 10 Application Server 101

Verification server 103 First terminal device 105

Second terminal device 107

Mobile device 31 startup information 301

Identity Authentication Graphics 303 Software 305

Conduct verification process 307 Application form 309

Terminal device 51 Application server 53

Verification server 55 request service 501

Notification verification 503 Push information 505

Verification program 507 Transmit transaction data 509

Send verification data 511 Notify verification completion 513

Access to service 515 is allowed

First terminal device 61 Second terminal device 62

Application Server 63 Authentication Server 65

Request service 601 Notification verification 603

Push information 605 Exchange verification data 607

Transmit transaction data 609 Transmit verification data 611

Notify verification completion 613 Allow access to service 615

Steps S201 to S219: Client process of security data verification method

Steps S401 to S415: Server-side process of security data verification method

DETAILED DESCRIPTION

Figure 1 is a schematic diagram of one embodiment of the network architecture of the security data verification system of the present invention. As shown in Figure 1, there are multiple devices connected through a network 10, including an application server 101 that provides services, which can accept a service request generated from a terminal (such as the second terminal device 107 in this example) and receive data submitted by this terminal, such as data required to complete a transaction, such as user account, password, membership information, credit data, transaction list, etc.

For example, application server 101 is a network server with security requirements, such as a shopping platform, game console, or online banking. When a user connects to the network service provided by application server 101 through a computer device represented by second terminal device 107, when application server 101 receives a service request, it notifies another verification server 103, which provides identity verification. The terminal device accessing application server 101 does not exclude the possibility of accessing the application server 101 through a mobile device, such as first terminal device 105.

When the authentication server 103 receives a notification from the application server 101 requesting authentication for a specific service connection, it also receives information related to the service, such as user data, account data, and/or hardware information for the service being accessed. This allows it to perform security checks, including sending a signal to initiate authentication to a specific terminal device, such as a first terminal device 105, such as a mobile device. According to an embodiment, this authentication initiation signal can be broadcast via a network push notification. Upon receiving the notification, the corresponding first terminal device 105 initiates software, such as a mobile application (APP) installed on the mobile device, based on the authentication initiation signal. This software then submits information, such as a form, for the service to be accessed on the application server 101.

At this time, when the user operates this software, in one embodiment, the software will require the user to authenticate their identity, including using a password, identity authentication graphics, or biometric recognition technology such as fingerprints and faces, or verifying the hardware information of the software at the same time to perform security verification. Only after completion will the software be successfully launched.

After the software is activated, instructions within the software will cause the first terminal device 105 to connect to the authentication server 103 and perform an authentication procedure with the authentication server 103. This authentication procedure ensures that both the server-side and terminal-side software connections have been pre-registered and agreed upon, thereby preventing security issues such as improper use and the implantation of Trojans. Authentication methods include exchanging authentication data between the two parties, such as a confirmation code or key generated through hardware information; or the first terminal device transmits a key set when logging into the system service, and the authentication server authenticates the mobile device, ensuring the security of both the server and the terminal device. After completing this authentication step, the authentication server 103 transmits transaction data indicating the completion of the service to the first terminal device 105. After the user confirms the transaction details, the authentication server 103 notifies the application server 101 that the user is allowed to access the service.

The accompanying drawings show a first terminal device 105 (e.g., a mobile device) and a second terminal device 107 (e.g., a general computer system). In one embodiment, a user can first connect to the application server 101 using the second terminal device 107 to access a specific service, then use the first terminal device 105 as an identity verification device. The first terminal device 105 then undergoes an authentication process with the authentication server 103. Upon successful authentication, the first terminal device 105 retrieves transaction data from the authentication server 103, which can then create a form or data for accessing the service in the software on the first terminal device 105. After the user confirms the details, the second terminal device 107 can successfully access the service.

It is worth mentioning that when the first terminal device 105 confirms transaction data through software, the same software or another software can be used to read an identity recognition device that uses a short-range wireless communication protocol. Only after completing identity verification can the transaction data be confirmed and notified to the verification server 103. The identity recognition device, such as an identity verification card or other form of identification device, contains the identity verification data that has been pre-registered by the software in the terminal device. It includes circuits and antennas that comply with a specific short-range wireless communication protocol and can exchange data with terminal devices that have circuits related to the compliant short-range wireless communication protocol, thereby preventing unauthorized use of the first terminal device 103.

Short-range wireless communication protocols such as Near Field Communication (NFC) allow users to take out their identification devices and perform contactless data exchange with the first terminal device 105 when confirming transaction data. After the software confirms the identification data, the information confirming the transaction data can be transmitted to the verification server 103.

In another embodiment, the roles of the first terminal device 105 and the second terminal device 107 can be performed on a single device, rather than using separate devices. However, within this single device, the software must still be activated in response to a signal from the verification server 103, and after verification is completed, data indicating that the service has been completed must be received. The transaction details submitted to the application server 101 for accessing the service must then be confirmed, and the specific service can be successfully accessed.

FIG2 is a flow chart showing an embodiment of the security data verification method of the present invention executed on a client.

Initially, as in step S201, a user connects to an application server using a terminal device and accesses a service website, such as a shopping website, online banking, or gaming console, which has financial and business needs. To perform a specific transaction, the user (e.g., a member of a specific service) clicks on a link within the website and enters transaction information, such as user account number, password, membership information, credit information, order information, and purchase items. The application server then notifies the authentication server to verify the user's identity.

When the authentication server receives the identity verification notification, it generates a push message based on the user information (including the terminal device information) provided by the application server. At this time, as shown in step S203, the terminal device receives the push message. The embodiment shows that the device accessing the service and performing the identity verification are the same or different.

The above step S203 shows that the verification server generates a signal to start the software and transmits it (e.g., pushes it) to the terminal device. The terminal device will automatically start the relevant software according to the signal, but will first verify the user's identity after starting, as shown in step S205. After the verification is completed, the software is started, as shown in step S207.

According to one embodiment, before the system is operational, a user installs software that implements the security verification method of the present invention on a terminal device, such as a mobile application (APP) on a mobile device. Upon first executing the software, the user is required to log in to the associated service server, such as the verification server in this example. A confirmation code is generated, which can be tied to hardware information, such as the International Mobile Equipment Identity (IMEI) number, a unique identifier for each mobile device. Therefore, the logged-in software requires the confirmation code to start. Because of the hardware binding, the software will not start correctly if attempted on another terminal device. This ensures that the software has been pre-registered and has not been tampered with.

After the software is started (step S209), it automatically connects to the verification server. The software then undergoes the aforementioned verification process to verify the software and the verification server, ensuring the legitimacy of both parties and the security of the connection (step S211). Upon completion of the verification process, the terminal device can securely receive transaction data from the verification server. The terminal device then generates a reply message to the verification server, and the verification server continues to transmit the transaction data, completing the aforementioned service (step S213).

During step S213, the authentication server generates an encrypted packet according to a pre-agreed method, ensuring information security. The terminal then decrypts the packet data and applies a service template to the data, creating a multi-field form or table for accessing a specific service on the application server. This form data, then in step S217, matches the transaction data originally entered to access the specific service, allowing the user to verify the transaction details.

In this step, according to a specific embodiment, when a user wishes to operate a terminal device to confirm transaction data through software, the same or another software can be used to read an identification device (such as a card or any type of transceiver) that uses a short-range wireless communication protocol. Identity verification is completed based on pre-registered identification information, and only then can the transaction data be confirmed and the information transmitted to the verification server. Adding this security verification step to this embodiment can enhance the security of the process of the present invention. Short-range wireless communication protocols such as near-field communication technology (NFC) are examples.

In another specific embodiment, the system may also perform another verification step after this step, such as applying a specific algorithm to the form or table, or extracting partial data from the decrypted data, to generate verification data, which is then sent to the verification server for final confirmation. The verification server then performs a corresponding algorithm based on all or part of the transaction data, comparing the verification data sent by the terminal device (which may be sent in the form of an encrypted string). Upon confirmation, the application server is notified that the selected service has been successfully accessed, such as a transaction has been completed, as in step S219.

For example, the authentication process between the authentication server and the terminal can use pre-registered data as the basis for authentication. Specifically, the terminal's hardware identification information can be used as security authentication information. For example, the terminal can transmit the mobile device's IMEI information and user information, or perform a specific calculation to generate authentication information from this basic information. This ensures that the device being authenticated by the terminal is a pre-registered device, thus ensuring security.

Similarly, under various security considerations, the terminal device in this example can be implemented by the same or different devices at different stages, such as using a computer host to connect to the application server and then using another mobile device to perform identity authentication and complete a form to obtain a specific service.

The software screens running on the terminal device can be referred to in FIG. 3A , 3B, 3C, and 3D , which are schematic diagrams showing the mobile device executing the security data verification method of the present invention.

As shown in FIG3A , when a user logs into a specific application server through the mobile device 31 or other computer device to obtain a specific service, the mobile device 31 will then receive activation information 301 sent from an authentication server.

Receiving the startup information 301 will start the specific application software in the mobile device 31. At this time, when the user operates this software, in one embodiment, the software will require the user to authenticate the identity, including using a password, identity authentication graphics, or biometric recognition technology such as fingerprint, face, etc., or other methods of authentication are not excluded. Only after completion of the authentication, the software will be successfully launched.

As shown in FIG3B , the mobile device 31 starts an identity authentication process, wherein the confirmation code can be represented by an identity authentication graphic 303 of the icon. The user will draw a track on the identity authentication graphic 303 according to a pre-set unlocking method, wherein authentication information is generated, and the software is started after authentication.

As shown in FIG3C , the mobile device 31 has started software 305 and automatically connects to the authentication server, while performing an authentication procedure 307 to exchange authentication data with the authentication server, such as exchanging keys and calculating the keys stored in the device as a basis for verifying whether both parties are legitimate devices.

After verification is completed, as shown in Figure 3D, the mobile device 31 then receives transaction data transmitted by the verification server, such as data on completed services, which is automatically applied to a specific template after decryption in the software 305 to form an application form 309 for completing the service. The user can confirm the transaction information contained in the application form 309 based on this. After the user confirms through the interface, the verification server receives this confirmation information and notifies the application server to allow the user to log in to the specific application server to obtain the specific service.

FIG4 then shows a flow chart of an embodiment of the security data verification method of the present invention running on the server side.

The server side includes various services implemented using the same or different service hosts, including the services provided by the aforementioned application server and verification server. Starting in step S401, when the application server receives a service request from a terminal, the application server can obtain the user data of the terminal accessing the service and the submitted transaction data based on the member data or pre-registered data, and then request the verification server to perform a security check based on the information, such as step S403. The main purpose of this check is to verify the identity of the user, especially to confirm the legitimacy of the device and the software in it.

At this time, as shown in step S405, the verification server transmits a startup signal to the designated terminal device according to the information provided by the application server, such as by using network push technology to transmit the startup signal. The software will be started on the terminal device according to this startup signal and the verification process will begin, including as shown in step S407.

During the verification process, software initiated by the terminal in response to a signal from the verification server transmits verification data to the verification server. This data may include a verification code generated based on user information and/or terminal hardware information, which is then compared with data previously registered on the verification server, or with data similarly obtained through calculation. After the verification server completes the verification, it also verifies the validity of the software (step S409) and then transmits transaction data for obtaining the service. In one embodiment, this transaction data may be the transaction data initially entered by the terminal in step S401 to obtain the specific service.

The terminal decrypts the received transaction data and creates a form that is submitted to the server for user verification. After the user confirms the transaction data through software, the terminal calculates all or part of the transaction data to form verification data, which is then sent to the verification server for further verification. The verification server, in step S413, receives the verification data sent by the terminal and uses a corresponding algorithm to calculate a comparison verification data, which can then be used for further verification.

After reconfirmation, the authentication server connects to the application server to indicate that the authentication is complete, and the application server allows the user to access the service, as in step S415.

FIG5 then illustrates an exemplary system operating in accordance with the present invention's secure data verification method. This example generally divides the system into three distinct operating components: a terminal device 51 (implemented as a single or multiple computer devices), an application server 53 providing services, and a verification server 55 for secure verification. It is worth noting that the server described here represents a single service; that is, the application server 53 and verification server 55 can be two services provided by a single host or service system; similarly, they can be different services provided by different service providers within different systems.

According to the implementation method of the security data verification method, the terminal device 51 initially sends a related signal (501) requesting a service to the application server 53. After the application server 53 receives the service request signal, it notifies the verification server 55 to verify the relevant terminal (503), especially to verify the legitimacy of the terminal device 51.

Next, the verification server 55 directly pushes the verification start signal (505) to the terminal device 51. After the terminal device 51 recognizes the verification start signal, it can start the corresponding software according to the signal (505). According to one embodiment, after the terminal device 51 receives the verification start signal (505), the terminal device 51 will perform identity verification on the startup software, such as the method shown in Figure 3B or other methods, to confirm that the startup software is authorized.

Next, the terminal device 51 and the verification server 55 perform a verification process (507). The main purpose is for the verification server 55 to confirm the security of the connection source, or to exchange verification information (such as exchanging keys) so that the terminal can also verify the secure connection with the verification server 55. After the verification is completed, the verification server 55 transmits the transaction data (509) to the terminal device 55, for example, in an encrypted package. After decryption by the terminal, the user of the terminal device 55 can then use software to confirm the form formed by the transaction data. In one embodiment, the service obtained by the application server 53 is completed at this time. It should be noted that the transaction data transmitted by the verification server 55 can be obtained by the application server 53 when it receives the signal from the terminal device 51 transmitting the service request, and then submitted to the verification server 55.

In another embodiment, after the terminal device 51 receives the transaction data (509) transmitted by the verification server 55, after the user confirms the transaction content, the terminal can use an algorithm (e.g., embedded in the software) to calculate a verification data based on all or part of the data obtained by decrypting the transaction data. The terminal device 51 then transmits the verification data (511) to the verification server 55, and the verification server 55 recalculates the verification data (511) using a corresponding calculation method for re-verification. Therefore, in this embodiment, after verification, the verification server 55 notifies the application server 53 that the verification is complete (513), and the application server 53 allows the terminal device 51 to access the requested service (515).

FIG6 then shows an example process flow in which a user uses a general computer device to access a service and then performs authentication using a mobile device.

This figure shows the entire process. The second terminal device 62 generates a service request to the application server 63 (601). At this time, the user submits transaction data through the second terminal device 62. At this time, the application server 63 notifies the verification server 65 to perform security verification on the terminal (603).

The authentication server 65 pushes information (605) to the first terminal device 61. The first terminal device 61 then starts a software program to exchange authentication data (607) with the authentication server 65. The authentication server 65 then verifies whether the first terminal device 61 is a legitimately authenticated device. Alternatively, the first terminal device 61 can verify the security of its connection with the authentication server 65 through software. In this example, the first terminal device 61 is a different terminal device from the second terminal device 62. Clearly, the present invention allows a terminal device to perform an authentication procedure using a different, pre-arranged device when accessing a service, thereby verifying the service request made by the terminal device.

After the verification process is completed, the verification server 65 transmits the transaction data (609) to the first terminal device 61. This transaction data may be the transaction data initially entered by the second terminal device 62 when accessing the application server 63, such as user information, credit information, service items, order information, etc. After the first terminal device 61 receives this transaction data, it decrypts it and generates a transaction form using a specific template (or not) to be displayed on the first terminal device 61 for the user to confirm the transaction details. After confirming the transaction data, the user can authorize the service.

However, in one embodiment, the system can provide a re-verification mechanism, such as the first terminal device 61 can calculate a verification data (611) based on the transaction data and transmit it to the verification server 65. The verification server 65 can re-verify the verification data using a corresponding algorithm, thereby confirming the security of the connection with the first terminal device 61.

Afterwards, the authentication server 65 notifies the application server 63 that the authentication is complete ( 613 ), and the second terminal device 62 may be allowed to access the requested service ( 615 ).

The invention disclosed in the publication further relates to a computer-readable storage medium, which stores a program set for executing a security data verification method on a mobile device, wherein a processor of the mobile device executes the steps generated by the program set, such as the processes described in the above-mentioned embodiments. The relevant program instructions include an instruction for receiving a signal to start verification from a verification server, an instruction for starting a software based on the signal to start verification, an instruction for performing a verification procedure with the verification server, an instruction for receiving transaction data of a completed service from the verification server after completing the verification, and an instruction for forming a form for providing confirmation transaction data based on all or part of the basic data of the completed service, etc.

In summary, the present invention discloses a secure data verification method and system. In addition to providing a highly secure verification process for accessing specific network services, the method and system can also achieve a password-free verification process through the interaction between the verification server and the terminal device. Furthermore, upon completion of verification on the terminal device, access to specific transaction services can be authorized.

The above description is only a preferred embodiment of the present invention, and does not limit the scope of patent protection of the present invention. Therefore, all equivalent structural changes made by using the description and illustrations of the present invention are also included in the scope of protection of the present invention.

Claims (15)

1. A secure data verification method, characterized in that the method comprises: An application server receives a service request signal transmitted by a terminal, wherein the application server obtains the user data of the terminal accessing the service and the submitted transaction data based on the member data or pre-logged data in the service request signal. The application server notifies a verification server to verify the terminal. The verification server sends a signal to initiate verification to the terminal. The verification server obtains transaction data from the service request signal sent by the application server to perform security checks. Upon receiving the activation verification signal, the terminal initiates software to perform a verification process with the verification server; and After verification is completed, the verification server transmits the completed service transaction data to the terminal. The terminal calculates verification data based on all or part of the data in the transaction data, and transmits the verification data to the verification server for re-verification. The terminal then completes the service obtained from the application server. 2. The secure data verification method as described in claim 1, characterized in that, after receiving the start verification signal, the terminal performs identity verification when starting the software to confirm authorization to start the software. 3. The secure data verification method as described in claim 2, wherein the verification server pushes the verification start signal to the terminal via a network. 4. The secure data verification method as described in claim 3, wherein the terminal is a computer system for issuing the service request to the application server and executing the software to complete the verification. 5. The secure data verification method as described in claim 3, wherein the terminal includes a first terminal device for receiving the signal to initiate verification and executing the software, and a second terminal device for transmitting a service request. 6. The secure data verification method as described in claim 4 or 5, characterized in that the verification server transmits the completed service transaction data in an encrypted package, and the terminal decrypts the package to form a form that provides confirmation of the transaction data. 7. The secure data verification method as described in claim 1, characterized in that, after the terminal receives the transaction data, a template is applied to form a form with multiple fields. 8. The secure data verification method as described in claim 1, characterized in that it further includes, when the verification server verifies again, calculating the verification data using a corresponding algorithm, and after verification, notifying the application server to allow the terminal to access the service. 9. The secure data verification method as described in claim 1, wherein the step of the terminal confirming the transaction data through the software further includes using the software to read an identity verification device employing a short-range wireless communication protocol, thereby verifying the identity before confirming the transaction data. 10. A secure data verification system, characterized in that the system comprises: An application server providing services receives a service request and submitted data from a terminal. The application server retrieves the user data for the terminal's service access, as well as the submitted transaction data, based on member data or pre-logged data in the service request signal. An authentication server that provides authentication receives a security check request from the application server. The authentication server obtains transaction data from the signal that the application server receives the service request transmitted by the terminal, transmits a signal to the terminal to start the authentication process, and performs the authentication process with the terminal. After the authentication is completed, it transmits transaction data that the service is completed to the terminal. The terminal accesses an application server via a network to retrieve a service and generates a service request. After receiving the start verification signal from the verification server, it starts software to verify with the verification server. After verification is completed, the terminal receives the transaction data of the completed service from the verification server, confirms the transaction data through the software, and calculates verification data based on all or part of the data in the transaction data. The terminal then transmits the verification data to the verification server for re-verification. 11. The secure data verification system as claimed in claim 10, wherein the terminal includes a first terminal device for receiving the signal to initiate verification and executing the software, and a second terminal device for transmitting a service request. 12. The secure data verification system as described in claim 10, wherein the verification server pushes the verification start signal to the terminal via a network. 13. The secure data verification system as described in claim 10, wherein the verification server transmits the completed service transaction data in an encrypted package, and the terminal decrypts the package to form a form that confirms the transaction data. 14. The secure data verification system as described in claim 10, characterized in that, when the terminal confirms the transaction data through the software, it further includes using the software to read an identity recognition device employing a short-range wireless communication protocol, thereby verifying the identity before confirming the transaction data. 15. A computer-readable storage medium storing an assembly of programs, characterized in that the assembly of programs is executed by a processor of a mobile device to perform a secure data verification method, the resulting steps including: A verification server receives a signal to initiate verification; A software program is launched based on the signal that initiates the verification process. Perform the verification process with the verification server; After verification is completed, a transaction data for service completion is received from the verification server. The transaction data transmitted by the verification server is obtained by an application server when it receives a signal of service request transmitted by the terminal and is submitted to the verification server. The application server obtains the user data of the terminal accessing the service and the submitted transaction data based on the member data or pre-logged data in the service request signal. Based on all or part of the basic information for the completed service, a form is created to provide confirmation of the transaction data; and Verification data is generated based on all or part of the data in the transaction data, and the verification data is transmitted to the verification server for re-verification.