TWI488480B - Identification system for network service and identification method using for the same - Google Patents

Description

Network service verification system and verification method thereof

The present invention relates to systems and methods for providing network services, and more particularly to authentication systems and verification methods for authenticating network services.

In the past few years, network technology has become more and more popular. The biggest impact is that all kinds of services can be realized by users almost all over the Internet. For example, in the past, when users want to buy an item, they must go to the shopping center to buy it. Now, just use a computer and connect to the website that provides online shopping service, you can shop at any place. convenient.

However, any business services, such as shopping, bank withdrawals, and transfers, are more important than other services because they involve the circulation of money from users. Therefore, how to provide a user-friendly business service through the Internet, but without the use of the network, the user's data is at risk of being stolen by others, that is, the research for the practitioners in the field needs to be studied. The subject.

The main purpose of the present invention is to provide a network service verification system and a verification method thereof, which can perform network service request and network service verification separately through two separate devices, so as not to affect network security. Network service The request is more convenient.

To achieve the above objective, the present invention includes a service providing server, a verification server, and an electronic device and a verification device in the cloud. The verification device registers with the verification server in advance to store verification information related to the verification device in the verification server. When the user uses the electronic device to connect to the service providing server and requests a business service online, the service providing server requests the electronic device to upload the verification information, and the electronic device can obtain the required verification information by the verification device and upload it to the service provider. server. The service providing server transmits the verification information to the verification server, and after confirming that the verification information uploaded by the electronic device is registered, the requested business service is allowed to be executed.

The effect achieved by the present invention over the prior art is that the user is pre-registered with the authentication server using a particular device to use the device as a verification device. In this way, regardless of when, where, and which electronic device the user uses to connect to the network and request to perform a network service, the verified device can be used for security verification. So that the network service can be successfully executed. In other words, with the system and method, as long as the user carries the verified device that has already been registered, the network service can be executed anytime, anywhere, and with any electronic device, and is not because of such convenience. And reduce the security that network services pay most attention to.

Furthermore, the verification device mainly uses the information related to itself to register with the verification server and serves as a verification information required for verification, so the verification information is inseparable from the verification device, so the user only has to carry Carrying the verification device can improve the security through the verification action of the network service.

1‧‧‧Service Serving Server

2‧‧‧Verification server

3‧‧‧Electronic equipment

4‧‧‧Verification equipment

41‧‧‧Central Processing Unit

42‧‧‧Wireless Transmission Module

421‧‧‧WiFi module

422‧‧‧ Near Field Communication Module

423‧‧‧Bluetooth Module

424‧‧‧Infrared module

425‧‧‧Zigbee Module

43‧‧‧ touch screen

44‧‧‧Speakers

45‧‧‧ memory

451‧‧‧Application

46‧‧‧sim card slot

461‧‧‧sim card

47‧‧‧Connector

5‧‧‧Users

6‧‧‧ transmission line

P1‧‧‧Business Service Request Page

S10~S16‧‧‧Steps

S20~S40‧‧‧Steps

The first figure is a system architecture diagram of a first preferred embodiment of the present invention.

The second A diagram is the first action diagram of the network service of the present invention.

The second B diagram is a second action diagram of the network service of the present invention.

The second C diagram is a third action diagram of the network service of the present invention.

The third figure is a registration flow chart of the first preferred embodiment of the present invention.

The fourth figure is a verification flow chart of the first preferred embodiment of the present invention.

Figure 5 is a block diagram of a verification device of a first preferred embodiment of the present invention.

Figure 6A is a system architecture diagram of a second preferred embodiment of the present invention.

Figure 6B is a system architecture diagram of a third preferred embodiment of the present invention.

Figure 6C is a system architecture diagram of a fourth preferred embodiment of the present invention.

DETAILED DESCRIPTION OF THE INVENTION A preferred embodiment of the present invention will be described in detail with reference to the drawings.

Referring first to the first figure, a system architecture diagram of a first preferred embodiment of the present invention is shown. The verification system disclosed in the present invention mainly includes a service providing server 1 and a verification server 2 located in the cloud, and an electronic device 3 and a verification device 4 at the use end. The service providing server 1 is configured to allow the electronic device 3 to log in through a network system to provide at least one type of business service, such as an online banking service or an online shopping service. The user can operate the electronic device 3 to log in to the service providing server 1, and submit a request to the service providing server 1 to execute the above-mentioned business service.

The verification server 2 is connected to the service providing server 1 so that when a user operates the electronic device 3 and requests the service provider 1 for one of the business services, the service providing server 1 The electronic device 3 can be authenticated by the verification server 2, and the service providing server 1 can only execute the business service requested by the electronic device 3 after the verification is passed.

In this embodiment, the electronic device 3 can be, for example, at least one of a smart mobile device, a tablet computer, a notebook computer, and a personal computer. The user can operate the electronic device 3 and connect through a browser. The line is provided to the service provider server 1 to make a request for the business service online. Furthermore, in another embodiment, an application (not shown) provided by the service providing server 1 can be installed in the electronic device 3. After the application is executed, the application can be automatically connected to the service. Server 1, and opening a service service request page provided by the service provider 1 (for example, the business service request page P1 shown in FIG. 2A), so that the user selects the business service to be requested, and inputs Relevant information, such as the amount of money to be transferred, or items to be purchased.

The verification device 4 is mainly one of at least one of a smart mobile device, a tablet computer, a notebook computer, and a personal computer, and is not limited thereto. The main technical feature of the present invention is that the verification device 4 has previously registered the authentication server 2, and therefore, when the service providing server 1 needs to verify the electronic device 3, the electronic device 3 is slaved. After the verification device 4 obtains a verification information and uploads the verification information to the service providing server 1, the service providing server 1 further passes the verification information to the verification server 2 for verification.

In this embodiment, the verification device 4 can mainly regard a fixed device serial number (device serial number) defined when it is manufactured as the verification information. and Moreover, when the registration process is performed, the verification information (ie, the device serial number) can be used as a registration data and stored in the verification server 2 to complete the registration process. In this way, when the electronic device 3 requests the service provider 1 for the business service, the service providing server 1 requests the electronic device 3 to upload the verification information that can be verified. At this time, the electronic device 3 can be connected to the verification device 4 to obtain the verification information used by the verification device 4 for registration, and upload it to the service providing server 1. Then, the service providing server 1 transmits the received verification information to the verification server 2, and the verification server 4 can compare the verification information with one or more sets of registration materials stored therein to confirm the issue. Whether the verification device 4 of the verification information has been registered. If the verification device 4 has been registered, it is informed that the service providing server 1 can allow the execution of the business service requested by the electronic device 3.

The main object of the present invention is to allow a user to register with the authentication server 2 as a verification device 4 by using a specific electronic device such as a smart phone or a tablet computer in advance. In this way, no matter when, where, and what device the user uses to connect to the network system to request to perform a network business service, the verification device 4 can be used for verification, thereby providing the most convenient way. The safest way to verify. With the system and method of the present invention, the user only needs to carry the verification device 4 with him or her, and at the time of verification, the user only needs to bring the verification device 4 close to the electronic device 3 to transmit the verification information to the electronic device in a wired or wireless manner. Device 3 can be verified, and the user can even enter any text or digital password manually, which is quite convenient.

Please refer to FIG. 2A to FIG. 2C at the same time, which are respectively the first action diagram to the third action diagram of the network service of the present invention. First, as shown in Figure A, the user (such as the second C map The user 5) can operate the electronic device 3 (for example, a notebook computer in the figure) to connect to the service providing server 1 through a browser or an application, and open the business service request page. P1. In this embodiment, the service providing server 1 is exemplified by an online banking server that can provide a network transfer service for convenience of description. After the user 5 selects a network transfer service, a transfer account and a transfer amount can be input into the business service request page P1, and after the OK button is pressed, the service provider server 1 is requested to execute the service. Requested network transfer service.

Then, as shown in FIG. 2B, before the service providing server 1 executes the network transfer service, the service request page P1 is requested to request the user 5 to obtain the verification information through the verification device 4. In this embodiment, after the electronic device 3 has not obtained the verification information by the verification device 4, and the service providing server 1 has not received the verification information by the electronic device 3, the network transfer service will not be executed. .

Finally, as shown in FIG. C, when the user 5 approaches the verification device 4 to the electronic device 3 and transmits the verification information to the electronic device 3 in a wired or wireless manner, the electronic device 3 can directly The verification information is uploaded and verified by the verification server 2. In this embodiment, the electronic device 3 and the verification device 4 are connected in a wireless manner to transmit the verification information. However, the verification device 4 may also transmit the verification information through a wired manner, which is not limited. As shown in FIG. C, when the service providing server 1 receives the verification information, it is verified by the verification server 2, and the message "in verification" is displayed through the business service request page P1. Moreover, after the verification is successful, the service providing server 1 can permit the execution of the business service requested by the user 5 through the electronic device 3, which is the network transfer service in this embodiment.

Please refer to the third figure for the registration flowchart of the first preferred embodiment of the present invention. . To perform verification of the network service by the system and method of the present invention, the user 5 must pre-set the verification device 4 and have the authentication device 4 have the authority to verify the business service. First, an application (such as the application 451 shown in the fifth figure) is installed in the verification device 4, and the application 451 is started (step S10). Then, the verification device 4 can be automatically connected to the verification server 2 by the execution of the application 451 (step S12), and at the same time, the verification device 4 automatically obtains the registration to be used by the execution of the application 451. The verification information (step S14), that is, the device serial number of the verification device 4. In this embodiment, the step S12 and the step S14 are not performed in the sequential relationship. The application 451 may first connect to the verification server 2, and then retrieve the device serial number of the verification device 4, and vice versa. However, it cannot be limited.

After the step S12 and the step S14 are performed, the verification device 4 can perform a registration operation to the verification server 2 by using the verification information (step S16), and the verification information is used as the registration data, and is stored in the verification information. The verification server 2 is used to facilitate the verification of the electronic device 3 when requesting execution of the business service.

It is worth mentioning that when the verification device 4 performs the registration process, the user 5 can further set which verification service information allows the verification of the specific business service request (step S18). For example, the user 5 can set The verification information of the verification device 4 can be used to verify the request of the network transfer service, but is not allowed to verify the request for the online shopping service. In this way, when the user 5 operates the electronic device 3 and requests a network transfer service on the line, the verification device 4 can be directly used for verification. However, if the user 5 requests an online shopping service online, if the verification device 4 still performs verification, the verification information provided by the verification device 4 will be verified to be failed, and then the service providing server 1 Unable to execute the user's proposed The request for the online shopping service.

Through the above technical means, the user 5 can check the diversified network commerce services, for example, the plurality of verification devices 4 can be registered, and each verification device 4 is respectively corresponding to a different type of business service request. However, the above description is only a preferred embodiment of the present invention and should not be limited thereto.

Referring to the fourth figure, a verification flow chart of the first preferred embodiment of the present invention is shown. When the user 5 wants to request a business service online, the electronic device 3 needs to be operated first to connect to the service providing server 1 through a browser or an application (step S20). Next, on the service providing server 1, it is requested to execute at least one of a plurality of business services that the service providing server 1 can provide (step S22). More specifically, after the electronic device 3 logs in, the service providing server 1 provides the business service request page P1 and displays it on the screen of the electronic device 3, so that the user 5 can operate the electronic device 3, and On the business service request page P1, select the business service to be requested, and input relevant materials.

Then, before the execution of the business service, the service providing server 1 requests the electronic device 3 to perform verification first (step S24), and more specifically, the service providing server 1 requests the page through the business service request page P1. The electronic device 3 uploads the verification information. Next, the user 5 can bring the verification device 4 close to the electronic device 3, so that the electronic device 3 can obtain the verification information from the verification device 4 by wired or wireless connection (step S26).

After the electronic device 3 obtains the verification information, the verification information is uploaded to the service providing server 1 (step S28), and then the service providing server 1 transmits the uploaded verification information to the verification server 2 ( Step S30), and then the verification server 2 to verify. In this way, as long as the verification server 2 verifies the verification, the service providing server 1 can allow the execution of the business service requested by the electronic device 3.

In this embodiment, the verification server 2 mainly determines whether the verification device 4 that issued the verification information has been registered through the verification information (step S32), and more specifically, the verification server 2 mainly The verification information is compared with one or more sets of the registration data stored therein. If one of the registration materials is the same as the verification information, the verification device 4 has been registered; otherwise, if the verification information cannot be One of the registration materials is aligned, indicating that the verification device 4 has not been registered.

If the verification server 2 determines that the verification device 4 has not been registered, it will reply a verification failure message to the service providing server 1 (step S34), so that the service providing server 1 will refuse to execute the The business service requested by the electronic device 3. If the verification server 2 compares and confirms that the verification device 4 has been registered, the verification server 2 can reply a verification success message to the service providing server 1.

In another embodiment, if the verification server 2 confirms that the verification device 4 has been registered, the verification server 2 may further determine whether the verification information is allowed to verify the business service requested by the electronic device 3. (Step S36), that is, whether the category of the business service requested by the electronic device 3 belongs to the verification range of the verification device 4. If the verification server 2 determines that the verification information is not allowed to be used to verify the request for the business service, the step S34 is executed to reply the verification failure message to the service providing server 1. On the other hand, if the verification server confirms that the verification information is allowed to verify the request for the business service, the verification success message may be replied to the service providing server 1 (step S38). Further, the service providing server 1 can allow the execution of the business service requested by the electronic device 3 (step S40).

Next, please refer to the fifth figure, which is a block diagram of a verification device according to a first preferred embodiment of the present invention. As shown in the figure, the verification device 4 in this embodiment can be, for example, a smart phone, and can include, for example, a central processing unit 41, at least one wireless transmission module 42, a touch screen 43, and a speaker 44. The memory unit 45, the sim card slot 46, and the at least one port 47, wherein the central processing unit 41 is electrically connected to the at least one wireless transmission module 42, the touch screen 43, the speaker 44, and the memory 45. The sim card slot 46 and the at least one port 47 are configured to process various digital signals in the verification device 4.

In this embodiment, the at least one wireless transmission module 42 can be, for example, a WiFi module 421, a near field communication (NFC) module 422, a Bluetooth module 423, an infrared module 424, and a Zigbee. Module 425, etc., but is not limited. As long as the verification device 4 and the electronic device 3 respectively have at least one of the wireless transmission modules 42 described above, a corresponding wireless connection can be established, such as a WiFi connection, an NFC connection, a Bluetooth connection, an infrared connection, or a Zigbee connection. Wait. In this way, the verification device 4 can transmit the verification information to the electronic device 3 through the above transmission mode when the verification is needed. However, the above description is only a preferred embodiment of the present invention and should not be limited thereto.

The application 451 is stored in the memory 45, and as described above, the verification device 4 can automatically perform the following actions through execution of the application 451: 1. The verification extracted inside the verification device 4 Information, that is, the device serial number; 2, automatically connected to the verification server 2 for registration operation; and 3. automatically establishing a connection with the electronic device 3 to transmit the verification information to the electronic device 3.

In this embodiment, the verification information may be, for example, the device serial number of the verification device 4, and in another embodiment, the verification information may further include the installation of the verification device 4. The serial number and at least one additional material associated with the verification device 4. For example, if the verification device 4 is provided with the Bluetooth module 423, the additional data may be a Media Access Control Address (MAC Address) used by the Bluetooth module 423. . If the verification device 4 is provided with the touch screen 43 , the additional data may be detected by the user 5 through the touch screen 43 . If the verification device 4 is provided with the sim card slot 46 and the sim card 461 is inserted into the sim card slot 46, the additional data may be the number of the sim card 461 (ie, the verification device 4 The phone number used). That is, in the above registration process, the verification device 4 can obtain the device serial number and the additional data through the execution of the application 451 to register, and in the verification program, the application 451 The same execution program is used to obtain the device serial number and the additional data to form the verification information and transmit the verification information to the electronic device 3.

It is worth mentioning that if the verification device 4 is provided with the speaker 44, the application 451 can also convert the digital verification information into an analogy by a digital to analogy conversion (ADC) program. The sound signal is sent out to the outside world. The electronic device 3 can receive the sound signal through the microphone thereon, and restore the sound signal to the verification information through an analogy digital conversion (DAC) to upload the servo to the service. Device 1. Furthermore, if the verification device 4 is provided with the connection port 47, for example, a universal serial bus (USB) port, the verification device 4 and the electronic device 3 can pass through an external transmission line ( For example, the transmission line 6) shown in FIG. 6B establishes a wired connection for transmitting the verification information. However, the above descriptions are only preferred embodiments of the present invention, but are not limited thereto.

As described above, the verification device 4 can transmit the verification information to the electronic device 3 in various ways, that is, as long as the user 5 operates the electronic device 3, the verification device 4 is allowed to be away from the electronic device 3. Within a certain range, the verification device 4 can be successfully verified. More specifically, the electronic device 3 and the corresponding application in the verification device 4 are respectively executed, and the connection is automatically established according to one of the foregoing transmission modes to transmit the verification information, but not limited.

Continuing to refer to the sixth to sixth sixth embodiments, respectively, are system architecture diagrams of the second preferred embodiment to the fourth preferred embodiment of the present invention. First, as shown in FIG. 6A, the user 5 can operate a desktop computer as the electronic device 3 to connect to the service providing server 1, and use a smart phone as the verification. The device 4 performs a verification action, and the verification device 4 is wirelessly connected to the electronic device 3 to transmit the verification information.

Then, as shown in FIG. 6B, the user 5 can also operate a smart phone as the electronic device 3, connect to the service providing server 1, and use a notebook computer as the verification. Device 4. The verification device 4 and the electronic device 3 can be physically connected through the transmission line 6 to transmit the verification information. As shown in FIG. C, the user 5 can also operate a notebook computer as the electronic device 3, connect to the service providing server 1, and use a tablet computer as the verification device. 4. The verification information is transmitted to the electronic device 3 via a wireless connection. However, regardless of which electronic device is used by the user 5 as the verification device 4, the verification device 4 is required to have an original factory-set device serial number, and the verification servo is provided in advance before using the system and method of the present invention. Device 2 is registered.

The above description is only a preferred embodiment of the present invention, and thus is not intended to limit the scope of the present invention. The equivalents of the present invention are all included in the scope of the present invention and are combined with Chen Ming.

1‧‧‧Service Serving Server

2‧‧‧Verification server

3‧‧‧Electronic equipment

4‧‧‧Verification equipment

Claims (15)

A network service verification system includes: a service providing server for providing at least one type of business service; and an electronic device connecting the service providing server through a network system to make a request for one of the business services online; a verification server connected to the service providing server to verify the electronic device that makes the request; and a plurality of verification devices respectively using the information related to itself as a verification data, wherein the plurality of verification devices advance to the verification server The registration operation is performed, and the verification information is stored as a registration data in the verification server, wherein the registered verification information is respectively set to allow verification of different types of the business service; When the electronic device makes the request for the business service, the service providing server requests the electronic device to upload the verification information, and the electronic device obtains the verification information by the verification device and uploads the verification information to the service providing server, and the service provides The server transmits the verification information to the verification server for verification, and the server Server certificate validation by the ratio information and the registration information to confirm that the verification of the equipment has been registered, the server allows the service provider to perform the electronic device requests the business services. The verification system of claim 1, wherein the verification information is a device serial number of the verification device. The verification system of claim 2, wherein the verification information includes a device serial number of the verification device and at least one additional material related to the verification device. The verification system of claim 3, wherein the at least one additional material is a MAC address of a Bluetooth module on the verification device, a phone number used by the verification device, and a fingerprint data of a user of the verification device. At least one of them. The verification system of claim 2, wherein the verification device has a memory, the memory stores an application, the verification device executes the application to retrieve the verification information, register the verification server, And transmitting the verification information to the electronic device. The verification system of claim 5, wherein the verification device is at least one of a smart mobile device, a tablet computer, a notebook computer, and a personal computer, and the electronic device is a smart mobile device, a tablet computer, and a notebook type. At least one of a computer and a personal computer. The verification system of claim 6, wherein the verification device has at least one of a Wifi module, a Near Field Communication (NFC) module, a Bluetooth module, an infrared module, and a Zigbee module. One to establish a wireless connection with the electronic device. The verification system of claim 6, wherein the verification device has a port for connecting to an external transmission line, and the verification device establishes a wired connection with the electronic device through the transmission line. An authentication method used by the verification system described in claim 1, comprising: a) the electronic device is connected to the service providing server through a network system; b) requesting execution of the business service on the service providing server; c) the service providing server requests the electronic device to upload the verification information; d) the electronic device obtains the verification information by one of the plurality of verification devices, wherein the plurality of verification devices perform a registration action to the verification server in advance And the verification information of the plurality of verification devices is respectively set to allow for the different categories of the quotient The service is verified, and the plurality of verification devices respectively use the information related to itself as the verification information; e) the electronic device uploads the verification information to the service providing server; f) the service providing server transmits the verification information The server authenticates to the verification server; and g) after the verification server verifies that the verification information is passed, the service providing server allows the business service requested by the electronic device to be executed. The verification method of claim 9, wherein the step g further comprises the following steps: g01) the verification server compares the verification information with the registration data stored therein; g02) in step g01, determining to issue the Whether the verification device of the verification information has been registered; g03) if the verification device is not registered, replying with a verification failure message to the service providing server; and g04) if the verification device has been registered, replying with a verification success message to This service provides a server. The verification method of claim 9, wherein the step g comprises the following steps: g05) the verification server determines whether the verification information is allowed to verify the requested business service; g06) if the verification information is not Allowing verification of the requested business service, replying to the verification failure message to the service providing server; and g07) if the verification information is allowed to verify the requested business service, replying the verification success message to the service Provide a server. The verification method of claim 9, wherein the step a further comprises the following steps: h) the verification device starts an application stored internally; i) the verification device is connected to the verification server through the application; j) the verification device retrieves the verification information through the application; and k) the verification device registers the verification server with the verification information . The verification method of claim 12, wherein the verification information is a device serial number of the verification device. The authentication method according to claim 9, wherein in the step d, the verification device establishes a WiFi connection, a Near Field Communication (NFC) connection, a Bluetooth connection, and the electronic device. One of the infrared connection and the Zigbee connection is wirelessly connected to transmit the verification information to the electronic device. The verification method of claim 9, wherein in the step d, the verification device and the electronic device establish a wired connection through an external transmission line to transmit the verification information to the electronic device.