TWI818750B - Authentication system and method - Google Patents

Abstract

An authentication device, includes a storage, a communication interface, and a processor. The authentication device is configured to receive an authentication code request from a first user end through a security connection, wherein the authentication code request includes a device phone number which corresponds to the first user end, and the authentication code request is related to an identity authentication service which is applied by the first user end to a service server. The authentication device is further configured to transmit an authentication code to the first user end. The authentication device is further configured to receive an identification data request from the service server, and the identification data request includes an unauthenticated code. The authentication device is further configured to transmit an identification data which corresponds to the device phone number according to the unauthenticated code to the service server.

Description

Verification device and method

The present disclosure relates to a verification device and method, and in particular to a verification device and method of a core network-based Internet Protocol address multimedia subsystem.

In order to protect identity from being stolen, many online services require verification before providing services after confirming the user's identity. The most common method is for users to set a set of accounts and passwords. However, as the number of registered services increases, more and more accounts and passwords need to be remembered, and they are easily cracked.

There is also a verification method called third-party authentication, which can be divided into two main methods. One is to use the account of a credible network service provider (such as Google, Facebook) that the user has logged in to verify, but this method is still You need to use an account and password to log in to third-party online services; the other is to use a mobile phone number for verification. The user verifies their identity by entering a verification code contained in a text message sent to their mobile phone or by other means. However, this This method requires an additional SMS service to send the verification code, and the user needs to manually enter the verification code into the device and send it, which is a complicated procedure.

In view of this, how to implement identity verification technology in a simpler way that is secure and less susceptible to theft is an urgent goal that the industry needs to work hard on.

The disclosure provides a verification device, which includes a storage, a communication interface and a processor. The storage is used to store a plurality of telephone numbers and identification data corresponding to each of the telephone numbers. The communication interface communicates with a first user terminal and a service server, wherein the first user terminal and the communication interface communicate with each other through a secure connection of a core network. The processor is electrically connected to the storage and the communication interface. The verification device is used to perform the following operations: the communication interface receives a verification code request from the first user terminal through the secure connection, wherein the verification code request includes a device phone number corresponding to the first user terminal , and the verification code request is related to an identity verification service applied by the first user terminal at the service server; the processor sends a verification code to the first user terminal through the communication interface; the communication interface is from the The service server receives an identification data request, the identification data request includes a code to be verified; and the processor sends the identification data corresponding to the phone number of the device to the service server based on the code to be verified.

The disclosure also provides a verification method for a verification device, where the verification device includes a storage, a communication interface and a processor. The storage is used to store a plurality of telephone numbers and identification data corresponding to each of the telephone numbers. The communication interface communicates with a first user terminal and a service server, wherein the first user terminal and the communication interface communicate with each other through a secure connection of a core network. The processor is electrically connected to the storage and the communication interface. The verification method includes the following steps: the communication interface receives a verification code request from the first user terminal through the secure connection, wherein the verification code request includes a device phone number corresponding to the first user terminal, and the The verification code request is related to an identity verification service applied by the first user terminal at the service server; the processor sends a verification code to the first user terminal through the communication interface; the communication interface is from the service server Receive an identification data request, the identification data request includes a code to be verified; and the processor sends the identification data corresponding to the phone number of the device to the service server based on the code to be verified.

It is to be understood that both the foregoing general description and the following specific description are exemplary and explanatory only and are intended to provide further explanation of the present disclosure as claimed.

In order to make the description of the present disclosure more detailed and complete, reference may be made to the attached drawings and the various embodiments described below. The same numbers in the drawings represent the same or similar components.

When a user needs to access certain information, log in to an account, or receive online services, he or she often needs to perform identity verification through a terminal device so that the service server that provides information or services can confirm the identity of a user of the terminal device. And further provide services that can be used or data that can be accessed within the authority of the user.

Please refer to FIG. 1 , which is a schematic diagram of the verification device 100 according to the first embodiment of the present disclosure. The verification device 100 includes a communication interface 120, a processor 140 and a storage 160. The communication interface 120 is connected to the first user terminal 200 and the service server 300 through the core network CN. The first user terminal 200 communicates with the service server 300 .

The core network CN is a network communication architecture based on telephone numbers as the basis for addressing. It is used to provide multiple devices in the network architecture to transmit and receive data. Each of these devices corresponds to a telephone number. These devices are based on the These phone numbers are used as the basis for identifying the source of the packet and the recipient of the packet.

In some embodiments of the present disclosure, the core network CN may include fourth generation mobile networks (4G) and/or fifth generation mobile networks (5G). The core network CN includes an Internet Protocol Address Multimedia Subsystem (IP Multimedia Subsystem; IMS) and supports the transmission of Session Initiation Protocol (Session Initiation Protocol; SIP) packets. The core network CN confirms a phone number corresponding to a device based on the Subscriber Identity Module (SIM) included in the device.

It should be noted that when multiple devices communicate with each other through the core network CN, a secure connection will be established between the devices. For example, the devices will establish a secure connection through the Internet Protocol Multimedia based on a user identity module. The subsystem establishes the secure connection. At the same time, the core network CN can also confirm the phone number of the device through the secure connection without forging the source of the packet. In addition, transmitting packets through the fourth generation mobile communication network and/or the fifth generation mobile communication network can ensure that the core network CN has carrier grade communication security.

Among them, when a device in the core network CN transmits a packet, the core network CN will add a phone number of a transmitting device to the header field (for example: From field) in the packet, so that the A recipient device of the packet can identify the source of the packet (ie, the sender device) based on the phone number in the packet. On the other hand, based on a recipient phone number provided by the transmitter device, the core network CN will add the recipient phone number to the header field (such as the To field) in the packet to confirm the packet delivery. object (i.e., the recipient device).

In some embodiments of the present disclosure, the first user terminal 200 is a device operated by a user. The first user terminal 200 may include a smart phone, a tablet computer, a computer host, a vehicle-mounted device and/or other storage devices. Get the communication device of the core network CN. The first user terminal 200 includes a user identity module and a core network communication module, such as a fourth-generation mobile communication network long-term evolution (LTE) module and a fifth-generation mobile communication network long-term evolution (LTE) module. The evolution technology module enables the first user terminal 200 to transmit and receive data to the communication interface 120 of the verification device 100 and/or the service server 300 through the core network CN. The user identity module corresponds to a device phone number, where the device phone number is used to identify and address the first user terminal 200 in the core network CN.

In one embodiment, the verification device 100 establishes a secure connection with the first user terminal 200 through an Internet Protocol address multimedia subsystem, wherein establishing the secure connection includes the following operations: by the first user terminal 200 Based on a user identity module, the secure connection is established through the Internet Protocol address multimedia subsystem and the communication interface 120 of the verification device 100 .

In some embodiments of the present disclosure, the first user terminal 200 may also include other wired and wireless communication interfaces, such as Wi-Fi, Bluetooth, and Ethernet, so that the first user terminal 200 can The service server 300 transmits and receives data.

In some embodiments of the present disclosure, the service server 300 is a network server maintained by an Internet service provider for receiving data and transmitting data and/or services to the user through the network. The service server 300 is further used to store a user information, which may include a user name, email address, mobile phone number and/or other identification information about the user. The user information is used to identify the user so that the service server 300 can provide services and/or information corresponding to the user.

In some embodiments of the present disclosure, the communication interface 120 includes a user identity module and a core network communication module, such as: the fourth generation mobile communication technology long-term evolution technology module and the fifth generation mobile communication technology long-term evolution technology The module enables the communication interface 120 to transmit and receive data to the first user terminal 200 and/or the service server 300 through the core network CN. The user identity module corresponds to a verification phone number, where the verification phone number is used to identify and address the verification device 100 in the core network CN.

In some embodiments of the present disclosure, the communication interface 120 may also include other wired and wireless communication interfaces, such as Wi-Fi, Bluetooth, and Ethernet, so that the communication interface 120 transmits and Receive information.

In some embodiments of the present disclosure, the processor 140 is used to perform computing operations. The processor 140 includes a central processing unit (CPU), multiple servers, a distributed processing system, an application specific integrated circuit (ASIC), and/or other suitable processing units.

In some embodiments of the present disclosure, the storage 160 is used to store a plurality of telephone numbers and identification data corresponding to each of the telephone numbers. Each of these phone numbers corresponds to a user's phone number, which is used to determine whether the source of the packet is the user's device; the identification information may include an identification code, ID card number, user name, email address, mobile phone number and/or other identifying information about the user. The storage 160 may include memory, a Universal Serial Bus (USB) disk, a hard disk, an optical disk, a pen drive, and/or other storage media or circuits.

The verification device 100 is used to provide the user identity verification service. It utilizes the characteristics of the core network CN to ensure the correctness of the packet source and establish a secure connection, confirms the phone number of a device corresponding to the first user terminal 200, and Further confirm the user corresponding to the phone number of the device.

In some embodiments of the present disclosure, the user uses the first user terminal 200 to transmit the device phone number and the identification information to the verification device 100 through a verification application; A service application transmits the user information to the service server 300.

Among them, the verification application is used to enable the first user terminal 200 and the verification device 100 to receive and transmit data, and complete the verification operation; the service application is used to enable the first user terminal 200 and the service server 300 to receive and transmit data. Transmitting data may enable the first user terminal 200 to use services provided by the service server 300 . The verification application and the service application can receive and transmit data to each other. In one embodiment, the verification application and the service application transmit data using the WebSocket protocol.

It should be noted that the identification information and the user information are both information corresponding to the user, and the identification information and the user information both include at least one corresponding comparison information, and the comparison information can be an identity card. Font size, phone number, randomly generated unique string, or other information that corresponds to that user and is not duplicated by other users. When the service server 300 receives the identification information, the comparison information is used to provide the service server 300 to compare the user information and map it to the user.

In some embodiments of the present disclosure, the communication interface 120 is used to receive a verification code request from the first user terminal 200 through a secure connection of the core network CN, where the verification code request includes information corresponding to the first user terminal 200 A device phone number, and the verification code request is related to an identity verification service applied by the first user terminal 200 at the service server 300 .

In one embodiment, the communication interface 120 receives the verification code request from the first user terminal 200 through the Internet Protocol address multimedia subsystem of the core network CN.

In one embodiment, the verification code request is sent via a Session Initiation Protocol packet, and a header field corresponding to the Session Initiation Protocol packet contains the device phone number. Specifically, the verification code request includes the device phone number written by the core network CN in the From field of the session initiation protocol packet header, for example: +886987654321.

In one embodiment, when the user operates the first user terminal 200 and logs in to the service provided by the service server 300 through the service application, the first user terminal 200 applies for the identity authentication service from the service server 300 . Furthermore, the service server 300 sends a verification information to the first user terminal 200. The verification code request is generated based on the verification information, wherein the verification information includes the verification phone number corresponding to the verification device.

In some embodiments of the present disclosure, the processor 140 sends a verification code to the first user terminal 200 through the communication interface 120, and the verification code is used as a comparison basis for subsequent verification operations.

In one embodiment, the verification code is a number, a string or other data type. Each time the processor 140 generates the verification code, it generates a verification code that is different from the previously generated verification code, and stores the verification code in the storage 160 with the device phone number corresponding to the user and/or the Identification data are stored in association with each other.

In one embodiment, in order to maintain the timeliness of the verification operation, the processor 140 will delete or mark the verification code as invalid within a certain period of time (for example, five minutes) after generating it, making the verification code invalid and without verification function. .

In one embodiment, the verification code is generated based on the device phone number. For example, the device phone number is used as a seed parameter of a random number function, and the random number function is used to generate a random number as the verification code.

In other embodiments of the present disclosure, before sending the verification code, the processor 140 compares the phone number of the device with the phone numbers stored in the memory 160 to determine whether any of the phone numbers matches the phone number of the device. One of the numbers is the first phone number.

In response to the device phone number not matching the first phone number, that is, the phone numbers stored in the storage 160 do not include the first phone number that matches the device phone number, the communication interface 120 sends a verification failure message to the first phone number. User terminal 200. When the first phone number that is the same as the phone number of the device is not stored in the storage 160, the verification fails, so the communication interface 120 sends the verification failure message to the first user terminal 200 and ends the verification operation.

On the other hand, in response to the device phone number matching the first phone number, the processor 140 generates the verification code corresponding to the first phone number. Since the verification device 100 confirms that the user corresponding to the first user terminal 200 is the same as the user corresponding to the phone number, the verification code is generated, and the verification code is used as a comparison basis for subsequent verification operations.

In some embodiments of the present disclosure, the storage 160 is further used to store a service information, and the verification code request further includes a request service, and the verification device further performs the following operations to generate the verification code. The operation of the processor 140 to compare the phone number of the device further includes comparing whether the requested service matches the service data in the storage; and the operation of the processor 140 to generate the verification code further includes responding to the device phone number matching. The processor 140 generates the verification code only when the first phone number and the requested service match the service information.

It should be noted that the service information and the requested service are strings, numbers and/or other information used to identify the service server 300 corresponding to the service server 300 . The service information is used to record the service server 300 that the verification device 100 supports and provides verification services. In other words, if it is not another server that the verification device 100 supports and provides verification services, the verification device 100 will not provide verification services.

Therefore, the verification code request further includes the requested service, and when the processor 140 compares whether the device phone number matches the phone number in the storage 160, it also compares whether the requested service matches the phone number in the storage 160. Service information, and when both conditions are met, the processor 140 generates the verification code.

In one embodiment, the service information may include the Internet address of the service server 300, a phone number, and/or other information used to address the service server 300.

In some embodiments of the present disclosure, the communication interface 120 is used to transmit the verification code to the first user terminal 200. In one embodiment, the communication interface 120 transmits the verification code to the first user terminal 200 through the core network CN.

In some embodiments of the present disclosure, the communication interface 120 receives an identification data request from the service server 300, and the identification data request includes a code to be verified. Among them, the communication interface 120 can receive the code to be verified from the service server 300 through the core network CN and/or other communication means.

In some embodiments of the present disclosure, after receiving the verification code, the first user terminal 200 transmits the verification code to the service server 300 . In one embodiment, the first user terminal 200 receives the verification code from the communication interface 120 through the verification application, provides the verification code to the service application, and then sends the verification code to the service through the service application. Server 300.

In one embodiment, the code to be verified is generated by the service server 300 based on the verification code received from the first user terminal 200 . Specifically, after receiving the verification code, the service server 300 sends the verification code to the verification device 100 as the code to be verified.

In some embodiments of the present disclosure, after receiving the identification data request, the processor 140 sends the identification data corresponding to the phone number of the device to the service server 300 based on the code to be verified.

In other embodiments of the present disclosure, the processor 140 compares whether the code to be verified matches the verification code. Specifically, the processor 140 compares whether the code to be verified is the same as the verification code.

In some embodiments of the present disclosure, in response to the code to be verified not matching the verification code, the communication interface 120 sends a verification failure message to the first user terminal 200 . When the storage 160 does not store the verification code that is the same as the code to be verified, the verification fails, so the communication interface 120 sends the verification failure message to the first user terminal 200 and ends the verification operation.

In some embodiments of the present disclosure, in response to the code to be verified matching the verification code, the processor 140 sends the identification data to the service server 300 through the communication interface 120, where the identification data corresponds to the first phone number. If the code to be verified is the same as the verification code, the verification device 100 confirms that the code to be verified sent by the service server 300 is the verification code provided by the user, so the verification is successful, and the communication interface 120 sends the verification code corresponding to the user. The identification information is sent to the service server 300 to complete the verification operation.

In some embodiments of the present disclosure, after receiving the identification data, the service server 300 can compare the user information in the service server 300 according to the identification data to determine the usage corresponding to the first user terminal 200. identity of the person and provide corresponding information and/or services.

According to the above first embodiment, the verification device 100 can provide an identity verification service. Using the core network CN, the verification device 100 can confirm the phone number of the terminal device 200 and further confirm the identity of the user.

The second embodiment of the present disclosure is a verification method 400, the flow chart of which is depicted in Figure 2. The verification method 400 includes steps S402 to S428. The verification method 400 is applicable to a verification device (for example: the verification device 100 of the first embodiment), a first user terminal (for example: the first user terminal 200 of the first embodiment) and a service server (for example: Service server 300 of the first embodiment). The verification device includes a communication interface, a processor and a storage. The memory stores a telephone number and identification data corresponding to the telephone number. The communication interface is connected to a first user terminal through a core network communication.

In step S402, the first user terminal transmits a verification code request to the verification device through the core network according to the verification phone number, wherein the verification code request includes the device phone number corresponding to the first user terminal.

Next, in step S404, the verification device receives the verification code request and confirms the first user terminal according to the device phone number included in the verification code request.

Then, in step S406, the verification device compares the phone number of the device with the phone numbers stored in the memory to determine whether one of the phone numbers has a first phone number that matches the phone number of the device.

In response to the device phone number not matching the first phone number, that is, the phone numbers stored in the storage do not include the first phone number that matches the device phone number, the verification fails, and the verification device executes step S426, Send a verification failure message to the first user terminal and end the verification operation. Further, the first user terminal executes step S428 to receive the verification failure message.

On the other hand, in response to the device phone number matching the first phone number, that is, the device phone number is the same as the first phone number, the verification device executes step S408 to generate and transmit the verification code corresponding to the first phone number. to the first user terminal. Since the verification device confirms that the user corresponding to the first user terminal is the same as the user corresponding to the first phone number, the verification code is generated, and the verification code is used as a comparison basis for subsequent verification operations.

Afterwards, in step S418, the verification device receives a code to be verified from the service server. Wherein, the verification device can receive the code to be verified from the service server through the core network and/or other communication means.

In some embodiments of the present disclosure, after the first user terminal receives the verification code in step S410, the first user terminal further executes step S412 to transmit the verification code to the service server.

In one embodiment, the code to be verified in step S418 is generated based on the verification code after the service server executes S414 and receives the verification code. Specifically, after the service server receives the verification code, the service server executes step S416 and sends the verification code to the verification device as the code to be verified.

After step S418, the verification device further executes step S420 to compare whether the code to be verified matches the verification code. Specifically, the verification device compares whether the code to be verified is the same as the verification code.

Further, in response to the code to be verified not matching the verification code, the verification device executes step S426 and sends a verification failure message to the first user terminal. When the verification device does not store the verification code that is the same as the code to be verified, the verification fails, so the verification device sends the verification failure message to the first user terminal and ends the verification operation.

On the other hand, in response to the code to be verified matching the verification code, the verification device executes step S422 to send the identification data to the service server, where the identification data corresponds to the first phone number. If the code to be verified is the same as the verification code, the verification device confirms that the code to be verified sent by the service server is the verification code provided by the user, so the verification is successful, and the communication interface sends a message corresponding to the user Send the identification information to the service server to complete the verification operation.

In some embodiments of the present disclosure, the service server executes step S424. After receiving the identification data, it can compare the user information in the service server according to the identification data to determine the location of the first user terminal. the identity of the user and provide corresponding information and/or services.

According to the above second embodiment, the verification method 400 can provide an identity verification service. Using the core network, the verification device can confirm the phone number of the terminal device and further confirm the identity of the user.

Please refer to Figure 3, which is a schematic diagram of the verification device 100 according to the third embodiment of the present disclosure.

It should be noted that the verification device 100 shown in Figure 3 is the same as the verification device 100 shown in Figure 1; the communication interface 120 shown in Figure 3 is the same as the communication interface 120 shown in Figure 1 ; The processor 140 shown in Figure 3 is the same as the processor 140 shown in Figure 1 ; the memory 160 shown in Figure 3 is the same as the memory 160 shown in Figure 1 ; Figure 3 The core network CN shown in FIG. 1 is the same as the core network CN shown in FIG. 1; the service server 300 shown in FIG. 3 is the same as the service server 300 shown in FIG. 1. For the sake of simplicity, the following description will focus on the differences between the third embodiment and the first embodiment.

As shown in FIG. 3 , the first user terminal 220 is further connected to the second user terminal 240 based on an authentication connection communication, and the second user terminal 240 applies for the identity verification service from the service server 300 . Specifically, the authentication connection between the first user terminal 220 and the second user terminal 240 can be implemented through Bluetooth, Wi-Fi, Ethernet and/or other communication methods.

The first user terminal 220 is a device operated by a user. The first user terminal 220 may include a smartphone, a tablet, a computer host, a vehicle-mounted device, and/or other communication devices that can access the core network CN. . The first user terminal 220 includes a user identity module and a core network communication module, such as a fourth-generation mobile communication network long-term evolution technology module and a fifth-generation mobile communication network long-term evolution technology module, so as to enable The first user terminal 220 transmits and receives data to the communication interface 120 of the verification device 100 through the core network CN. The user identity module corresponds to a device phone number, where the device phone number is used to identify and address the first user terminal 220 in the core network CN.

In some embodiments of the present disclosure, the first user terminal 220 is used to send a verification code request to the communication interface 120 through the core network CN, where the verification code request includes a device phone number corresponding to the first user terminal 220; And the first user terminal 220 is used to receive a verification code from the communication interface 120.

The second user terminal 240 is another device operated by a user. The second user terminal 240 may include a smartphone, a tablet computer, a computer host, a vehicle-mounted device, and/or other communication devices. In some embodiments of the present disclosure, the second user terminal 240 communicates with the service server 300 and is used to receive the verification information from the service server 300 .

In one embodiment, the first user terminal 220 is a smart phone, the second user terminal 240 is a computer device, and the first user terminal 220 and the second user terminal 240 communicate through Bluetooth low power consumption (Bluetooth low power consumption). Low Energy; BLE) technology communication connection, in which the first user terminal 220 acts as a GATT (Generic Attribute Profile) server to perform Bluetooth advertising (advertisement), and the second user terminal 240 acts as a GATT client to transmit data. .

In some embodiments of the present disclosure, the user can operate the second user terminal 240 to receive data sent by the service server 300. When identity verification needs to be performed to the service server 300, the service server 300 sends verification information to the second user terminal 240, where the verification information includes the verification phone number corresponding to the verification device.

Further, the second user terminal 240 sends the verification information to the first user terminal 220, and the first user terminal 220 sends the verification code request to the communication interface 120 according to the verification phone number.

In some embodiments of the present disclosure, the first user terminal 220 is used to receive a verification code from the communication interface 120 and further transmit the verification code to the second user terminal 240. The second user terminal 240 receives the verification code. Then, the verification code is sent to the service server 300.

According to the above third embodiment, the verification device 100 can provide an identity verification service. Using the core network CN, the verification device 100 can confirm the phone number of the first user terminal 220 and further confirm the identity of the user. Different from the first embodiment, the user uses the second user terminal 240 to receive and transmit data to the service server 300 and obtain services; and uses the first user terminal 220 to receive and transmit data to the verification device 100, and further Complete verification. In this way, when the user wants to use the second user terminal 240 to obtain data or services from the service server 300, the user can complete the verification through the first user terminal 220 that can access the core network CN.

The fourth embodiment of the present disclosure is a verification method 500, the flow chart of which is depicted in Figure 4. The verification method 500 includes steps S502 to S532. The verification method 500 is applicable to a verification device (for example: the verification device 100 of the third embodiment), a first user terminal (for example: the first user terminal 220 of the third embodiment), a second user terminal ( For example: the second user terminal 240 of the third embodiment) and a service server (for example: the service server 300 of the third embodiment). The verification device includes a communication interface, a processor and a storage. The storage stores a plurality of telephone numbers and identification data corresponding to one of the telephone numbers. The communication interface is connected to a first user terminal through a core network communication. The first user terminal includes a first user terminal and a second user terminal.

It should be noted that step S506 shown in Figure 4 is the same as step S406 shown in Figure 2; step S520 shown in Figure 4 is the same as step S416 shown in Figure 2; Figure 4 Step S522 shown in Figure 2 is the same as step S418 shown in Figure 2; Step S524 shown in Figure 4 is the same as step S420 shown in Figure 2; Step S526 shown in Figure 4 is the same as step S420 shown in Figure 2. Step S422 shown in Figure 2 is the same; step S528 shown in Figure 4 is the same as step S424 shown in Figure 2 . For the sake of simplicity, the following description will focus on the differences between the fourth embodiment and the second embodiment.

In step S502, the first user terminal transmits a verification code request to the verification device through a core network based on a verification phone number, wherein the verification code request includes a device phone number corresponding to a first user terminal.

In step S508, the verification device generates and sends the verification code to the first user terminal. Since the verification device confirms that the user corresponding to the first user terminal is the same as the user corresponding to the first phone number, the verification code is generated, and the verification code is used as a comparison basis for subsequent verification operations.

In step S522, the verification device receives a code to be verified from the service server. Wherein, the verification device can receive the code to be verified from the service server through the core network and/or other communication means.

In some embodiments of the present disclosure, after the first user terminal receives the verification code in step S510, the first user terminal further executes step S512 to transmit the verification code to the second user terminal.

Afterwards, after the second user terminal receives the verification code in step S514, the second user terminal further executes step S516 to transmit the verification code to the service server, and the service server receives the verification code in step S518. the verification code.

On the other hand, in response to the verification device comparing the phone numbers in the storage in step S506 and not including a first phone number that matches the phone number of the device in the verification code request, the verification device executes step S530, A verification failure message is sent to the first user terminal. Correspondingly, the first user terminal receives the verification failure message in step S532.

According to the above fourth embodiment, the verification method 500 can provide an identity verification service. Using the core network, the verification device can confirm the phone number of the terminal device and further confirm the identity of the user. What is different from the second embodiment is that the user uses the second user terminal to receive and transmit data to the service server and obtain services; and uses the first user terminal to receive and transmit data to the verification device, and further Complete verification. In this way, when the user wants to use the second user terminal to obtain information or services from the service server, the user can complete the verification through the first user terminal that can access the core network.

It can be seen from the description of each of the above embodiments that the verification device and method described in the present disclosure provide an identity verification technology that is secure and difficult to be stolen. In addition, in the third and fourth embodiments, a user can operate a second user terminal to access data and services, and a first user terminal is used to complete the verification technology.

Although several embodiments are described in detail above as examples, the verification device and method proposed in the present disclosure can also be implemented in other systems, hardware, software, storage media, or combinations thereof. Therefore, the protection scope of the present disclosure should not be limited to the specific implementation manners described in the embodiments of the present disclosure, but shall be determined by the appended patent application scope.

It will be obvious to a person of ordinary skill in the art to which this disclosure belongs that various modifications and changes can be made in the structure of the present disclosure without departing from the scope or spirit of the present disclosure. In view of the foregoing, the protection scope of the present disclosure also covers modifications and changes within the scope of the appended patent applications.

100: Verification device

120: Communication interface

140: Processor

160:Storage

200: First user terminal

300:Service server

CN: Core Network

400:Verification method

S402~S428: steps

220: First user terminal

240: Second user terminal

500:Verification method

S502~S532: steps

In order to make the above and other objects, features, advantages and embodiments of the present disclosure more obvious and understandable, the accompanying drawings are described as follows: Figure 1 is a schematic diagram of a verification device according to the first embodiment of the present disclosure; Figure 2 is a flow chart of the verification method of the second embodiment of the present disclosure; Figure 3 is a schematic diagram of a verification device according to the third embodiment of the present disclosure; and Figure 4 is a flow chart of a verification method according to the fourth embodiment of the present disclosure.

Domestic storage information (please note in order of storage institution, date and number) without Overseas storage information (please note in order of storage country, institution, date, and number) without

100: Verification device

120: Communication interface

140: Processor

160:Storage

200: First user terminal

300:Service server

CN: Core Network

Claims (8)

A verification device includes: a storage for storing a plurality of phone numbers and identification data corresponding to each of the phone numbers; a communication interface that communicates with a first user terminal and a service server, wherein the The first user terminal is connected to the communication interface through a secure connection of a core network; and a processor is electrically connected to the storage and the communication interface; wherein, the verification device is used to perform the following operations: The communication interface receives a verification code request from the first user terminal through the secure connection, wherein the verification code request includes a device phone number corresponding to the first user terminal, and the verification code request is consistent with the first user terminal. The user terminal applies for an identity verification service at the service server, and the verification code request is generated based on the verification information sent to the first user terminal by the service server. The verification information includes a corresponding verification device. a verification phone number, the first user terminal is further connected to a second user terminal based on an authentication connection communication, and the second user terminal applies for the identity verification service at the service server; the processor Send a verification code to the first user terminal through the communication interface; the communication interface receives an identification data request from the service server, the identification data request includes a verification code; and the processor based on the verification code, Send the identification data corresponding to the device phone number to the service server. The verification device of claim 1, wherein the code to be verified is generated by the service server based on the verification code received from the first user terminal. The verification device as described in claim 1, wherein the verification device further performs the following operations to generate the verification code: the processor compares the phone number of the device with the phone numbers stored in the memory to determine the phone numbers. whether there is a first phone number that matches the device phone number; and in response to the device phone number matching the first phone number, the processor generates the verification code corresponding to the first phone number. The verification device of claim 3, wherein the storage is further used to store a service data, the verification code request further includes a request service, and the verification device further performs the following operations to generate the verification code: the processor is whether the requested service matches the service data in the storage; and in response to the device phone number matching the first phone number and the requested service matching the service data, the processor generates the verification corresponding to the first phone number code. The verification device as described in claim 1, wherein the verification device The device establishes the secure connection with the first user terminal through an Internet Protocol address multimedia subsystem, wherein establishing the secure connection includes the following operations: by the first user terminal based on a user identity module , establishing the secure connection through the Internet Protocol address multimedia subsystem and the communication interface of the verification device. The verification device of claim 1, wherein the verification code request is transmitted through a session initiation protocol packet, and a header field corresponding to the session initiation protocol packet contains the device phone number. The verification device as described in claim 1, the verification device further performs the following operations: the processor compares whether the code to be verified matches the verification code; and in response to the code to be verified matching the verification code, the processor uses the The communication interface sends the identification data corresponding to the device phone number to the service server. A verification method for a verification device, the verification device includes a storage, a communication interface and a processor, wherein: the storage is used to store a plurality of telephone numbers and identification data corresponding to each of the telephone numbers; The communication interface communicates with a first user terminal and a service server, wherein the first user terminal and the communication interface communicate through one of a core network a secure connection communication connection; and the processor is electrically connected to the storage and the communication interface; wherein the verification method includes the following steps: the communication interface receives a verification code from the first user terminal through the secure connection request, wherein the verification code request includes a device phone number corresponding to the first user terminal, and the verification code request is related to an identity verification service applied by the first user terminal on the service server, wherein the verification code The request is generated based on verification information sent to the first user terminal by the service server. The verification information includes a verification phone number corresponding to the verification device. The first user terminal is further based on an authentication connection communication connection. to a second user terminal, and the second user terminal applies for the identity verification service at the service server; the processor sends a verification code to the first user terminal through the communication interface; the communication interface automatically The service server receives an identification data request, the identification data request includes a code to be verified; and the processor sends the identification data corresponding to the phone number of the device to the service server based on the code to be verified.

Images