TWI837960B - System and method for automatic locational service delivery based on mobile identification and authentication and computer-readable medium thereof - Google Patents

Abstract

A system and a method for automatic locational service delivery based on mobile identification and authentication and a computer-readable medium are provided, wherein a first user can authenticate the identity of a second user holding a mobile communication device through an authentication device and an authentication server in the cloud at the venue of an event, and send the services related to the event to the second user after the authentication passes. The present disclosure transmits the authentication data of the authentication device through the near-end communication connection between the mobile communication device and the authentication device, as well as the mobile network connection of the mobile communication device itself or the Internet connection of the authentication device itself, to the authentication server in the cloud so that the second user can finish his/her identity authentication and obtain locational services based on the time and the venue of the event quickly and precisely.

Description

Field service automatic delivery system, method and computer-readable medium based on mobile identification verification

The present invention relates to a field service automatic delivery technology, and in particular to a field service automatic delivery system, method and computer-readable medium based on mobile identification and verification.

When participants of general meetings, exhibitions, banquets and other activities check in, the organizer usually needs to verify the identity of the participants first, and then provide the participants with information related to the event. In a known technology, when participants check in, near-end communication technology is used to assist the organizer in locating the location of the participants, and at the same time, identification information is transmitted to confirm the identity of the participants, and then determine whether the participants have completed the check-in. However, this process does not have a sufficiently secure and reliable identity authentication mechanism.

In addition, after the participants register, relevant information needs to be sent to the participants. In a known technology, a two-dimensional barcode is provided for the participants to scan and download, or the organizer notifies the event information by email for the participants to download by themselves. However, these technologies are not convenient and there is still room for improvement.

To solve the above problems, the present invention provides a field service automatic delivery system based on mobile identification verification, including: a primary verification device, deployed at a first location, for receiving a verified request data generated by a user's mobile communication device, and verifying the signature of the verified request data, so that after the signature is verified, the primary verification request data is generated according to the verified request data, and the primary verification request data is transmitted; a primary verification server, for receiving the primary verification request data, and determining whether the user has passed the identity verification according to the primary verification request data; and a field service subsystem, for generating a service data package after the user has passed the identity verification, so that the mobile communication device can display a service index screen generated by the service data package, wherein the service index screen includes at least one or more service links to provide services to the user.

The present invention also provides a method for automatically delivering field services based on mobile identification verification, including: receiving verified request data generated by a user's mobile communication device; verifying the signature of the verified request data; generating main verification request data based on the verified request data after the signature is verified; determining whether the user has passed the identity verification based on the main verification request data; and generating a service data package after the user has passed the identity verification, so that the mobile communication device can display a service index screen generated by the service data package, wherein the service index screen includes at least one or more service links to provide services to the user.

The present invention also provides a computer-readable medium for use in a terminal device, a computer and/or a server, which stores instructions for executing the above-mentioned field service automatic delivery method.

Based on the above technical content, the event organizer of the present invention can verify the identity of the event participants holding mobile communication devices at the event venue through the main verification device and the main verification server, and after the verification is passed, send the event-related services to the participants.

10: Main test device

11: Computation module

12: Near-end communication module

13: Security element

14: Positioning module

15: Power supply module

16: Network module

20: Mobile communication devices

21: Near-end communication module

22: Applications

30: Main verification server

31: Security module

32: Event database

33: User database

34: Main test device database

35:Token module

40: Field service subsystem

41: Service provider database

42: Service database

43:Event organizer database

44:Activity operation database

45: Expand list generation module

46: Screen generation module

100: Field service automatic delivery system

300: Automatic delivery method for field services

301~310: Steps

600: Check-in screen

601: Sensor check-in button

610: First sensor prompt screen

611: First Sensing State

612:Sensor cancel button

620: Second sensor prompt screen

621: Second Sensing State

630: Service index screen

631: First service link

632: Second service link

633: Third service link

634: Fourth service link

Figure 1 is a schematic block diagram of a field service automatic delivery system based on mobile identification verification according to an embodiment of the present invention.

Figure 2 shows a schematic operation screen displayed by a mobile communication device of an embodiment of the present invention.

Figure 3 is a schematic flow chart of a method for automatic delivery of field services based on mobile identification and verification according to an embodiment of the present invention.

FIG1 is a schematic block diagram of a field service automatic delivery system 100 based on mobile identification and verification according to an embodiment of the present invention.

The field service automatic delivery system 100 includes a main verification device 10, a main verification server 30 and a field service subsystem 40, wherein the main verification device 10 is a terminal device dedicated to collecting mobile communication device information for identity identification and verification of participants of activities such as conferences, exhibitions, banquets or cultural performances, such as a check-in machine, and is deployed at the check-in point of the activity. The main verification server 30 and the field service subsystem 40 are both cloud servers or server clusters of the Internet. The main verification server 30 is connected to the main verification device 10 and the field service subsystem 40 in communication.

In addition, the mobile communication device 20 of the activity participant can communicate with the main verification device 10 and the main verification server 30. The mobile communication device 20 is a mobile device that can generally access the Internet and perform near-end communication connection, such as a smart phone, a tablet computer or a laptop. The mobile communication device 20 includes a near-end communication module 21 and an application 22, wherein the application 22 can be an application designed specifically for participating in the activity, or at least an application that includes the functions required for participating in the activity.

The main test device 10 includes a computing module 11, a near-end communication module 12, a security element 13, a positioning module 14, a power supply module 15, and a network module 16.

In one embodiment, the computing module 11 is used to control the operation of the main verification device 10 and calculate and process data. The near-end communication module 12 is electrically connected to the computing module 11 and is used to exchange data with the mobile communication device 20 when verifying the verification request data. The near-end communication module 12 of the main verification device 10 and the near-end communication module 21 of the mobile communication device 20 can perform near-end communication connection, such as Near Field Communication (NFC) protocol, Bluetooth communication protocol, Wireless High Fidelity (Wi-Fi) communication protocol, or Ultra-Wideband (UWB) communication protocol connection to transmit data to each other.

In addition, the network module 16 is electrically connected to the computing module 11, and is used to connect to the main verification server 30 in a wired or wireless form, and transmit data to the main verification server 30. The security element 13 is electrically connected to the computing module 11, and is used to store preloaded keys, process the decryption verification signature operation of the verification request data, and generate the encryption signature operation of the main verification request data. The positioning module 14 is electrically connected to the computing module 11, and is used to receive the positioning signal of the Global Positioning System (GPS) to provide the positioning information of the main verification device 10 in the main verification request data.

Furthermore, the power supply module 15 is used to supply power to the main test device 10 and all its internal modules and components. It includes a rechargeable battery and a power switch disposed on the outer shell of the main test device 10. The power supply module 15 can be connected to an external wired power supply.

The authentication server 30 includes a security module 31, an event database 32, a user database 33, a authentication device database 34, and a token module 35.

In one embodiment, the token module 35 is used to generate and verify the token of the participant. The user database 33 is used to record the identification information of the participant, the identification information of the mobile communication device 20, the communication key, and the token generated by the token module 35. The master verification device database 34 is used to record the identification information of the master verification device 10, the preloaded key, the deployment location information of the master verification device 10, the deployment configuration information, or other data required for services related to the master verification device 10.

In addition, the security module 31 is used for decryption and verification signature calculation of the master verification request data. The event database 32 is used to record the master verification timestamp, the identification information of the master verification device 10, the identification information of the mobile communication device 20, the verified timestamp, the location information of the master verification device 10, the location information of the mobile communication device 20, and the identity verification results of the participants.

The venue service subsystem 40 includes a service provider database 41, a service database 42, an event organizer database 43, an event operation database 44, an expansion list generation module 45, and a screen generation module 46.

In one embodiment, the service provider database 41 is used to record the service provider's identification information, name, contact person, and contact information. The service database 42 is used to record service identification information, service owner identification information, service operation status, service type, and service communication data.

In addition, the event organizer database 43 is used to record the identification information, name, contact person and contact information of the event organizer. The event operation database 44 is used to record the event serial number, event effective time period, event name, identification information of the event organizer, main verification device identification information list, and default service list.

Furthermore, the extended list generation module 45 is used to expand the default service list into a complete service list. The screen generation module 46 is used to generate a service index screen according to the service data package.

The computing module 11, near-end communication modules 12 and 21, security element 13, positioning module 14, power supply module 15 and network module 16 mentioned above can all be software, hardware or firmware; the security module 31, token module 35, expansion list generation module 45 and screen generation module 46 can all be software, hardware or firmware. If it is hardware, it can be a processing unit, processor, computer or server with data processing and computing capabilities; if it is software or firmware, it can include instructions that can be executed by the processing unit, processor, computer or server.

In one embodiment, before participating in the event, participants of the event must use the application 22 on their mobile communication device 20 to connect to the main authentication server 30 to complete the registration and installation process. In detail, the participant operates the application 22 to transmit the participant's identification information and the identification information of the mobile communication device 20 to the main authentication server 30 via the Internet. The main authentication server 30 records at least the participant's identification information, the identification information of the mobile communication device 20, the communication key, and the participant's personal information in the user database 33. After successful registration, the main verification server 30 returns the participant's communication key, encrypted personal information (the participant's personal information can be provided by the mobile communication device 20 or another cloud device), or other data related to the participant to the application 22 of the mobile communication device 20 for storage.

The administrator of the field service subsystem 40 can add the providers of various services that participants will use when participating in the event to the service provider database 41 of the field service subsystem 40, and add these services to the service database 42 of the field service subsystem 40. The URL of the network entry of each service and the parameters available for calling the URL are defined in the format of Extensible Markup Language (XML) or JavaScript Object Notation (JSON), and further integrated into the service data package of the services. After the mobile communication device 20 of the participant obtains the service data package, its application 22 can generate a service link pointing to the URL of each service according to the service data package, and provide it to the participant for operation and use during the event after checking in for the event.

The event organizer must leave data in the event organizer database 43 of the venue service subsystem 40. In addition, before the event begins, the organizer adds an event record to the event operation database 44 of the venue service subsystem 40, and specifically fills in the information and settings of this event, as well as the services and data of these services that the participants of this event can use after checking in. For example, these services may include wine and snack services, and the data of the wine and snack services may include a menu of various wines, drinks and snacks for participants to choose from. These services may also include taxi services, and the data of the taxi services may include the waiting location arranged by the organizer, as well as a variety of car models and rates for participants to choose from. If the event is an international event, such services may include translator services, and the information on the translator services may include photos and profiles of the translators. If the event is a multi-day event, such services may include supporting hotel services, and the information on the hotel services may include hotel descriptions.

The organizer deploys the main test device 10 at the registration point of the venue where the event is held, and during deployment, the deployment-related information of the main test device 10, including the identification information of the main test device 10, deployment location information (e.g., the geographic location of the main test device 10 after deployment), deployment configuration information (e.g., whether the network module 16 is enabled), and other related information (e.g., the organizer's promotional materials and contact information, etc.), is recorded in the main test device database 34 of the main test server 30. If the deployment site can provide power, the power can be directly provided to the main test device 10 for operation, and its power supply module 15 can be charged.

When an event participant arrives at the venue of the event, he/she can check in by bringing his/her mobile communication device 20 close to the main experience device 10. The application 22 of the mobile communication device 20 will try to sense the main experience device 10 through the near-end communication module 21 using a near-field communication protocol such as NFC. If the main verification device 10 can be sensed, the application 22 instructs the proximal communication module 21 to establish a proximal communication connection with the proximal communication module 12 of the main verification device 10, and the application 22 combines the encrypted personal data of the participant, the verified timestamp (i.e. the participant's check-in time), and the location information of the mobile communication device 20, and signs the above combined data with the communication key to generate the verified request data, and then transmits the verified request data to the main verification device 10 through the proximal communication module 21. After the main verification device 10 receives the verified request data with the proximal communication module 12, it verifies the signature of the verified request data through the preloaded key stored in the computing module 11 and the security element 13. The communication key and the preload key are both derived keys of the same key, so the communication key and the preload key can verify each other's signatures. After the signature verification of the verified request data is passed, the computing module 11 combines the encrypted personal data of the participant, the verified timestamp, the location information of the mobile communication device 20, the main verification timestamp, and the location information of the main verification device 10 generated by the positioning module 14, and then signs it with the preload key stored in the security element 13 to generate the main verification request data.

In one embodiment, there are two ways to save the preloaded key. The first is to write the preloaded key into the storage space of the security element 13 before the main verification device 10 is deployed. The second is to use a secure access module (SAM) to store the preloaded key, and the SAM storing the preloaded key is installed into the security element 13 before or during the deployment of the main verification device 10.

The preloaded key in the main verification device 10 of this embodiment can be updated after deployment. If a replaceable SAM is used, the update can be completed by replacing the SAM. Without adjusting the hardware configuration of the main verification device 10, a new preloaded key can also be written through software to update the preloaded key. Among them, the operation instruction for writing the new preloaded key should at least include a signature, and the legitimacy of the instruction signature must be verified with the existing preloaded key.

The algorithm used for the above-mentioned signature and verification may be, for example, the RSA (Rivest-Shamir-Adleman) algorithm or the Elliptic Curve Digital Signature Algorithm (ECDSA), and its hash function may adopt the Secure Hash Algorithm 1 (SHA-1) or the Secure Hash Algorithm 256 (SHA-256), etc. The specific form of the key is determined by the selection of the above-mentioned algorithm, but algorithms with the same or similar functions can be implemented.

Then, if the network module 16 of the master verification device 10 is enabled and the venue of the event has a network connection environment, the master verification device 10 can transmit the master verification request data to the master verification server 30 through the network module 16. If the network module 16 of the master verification device 10 is not enabled, the master verification device 10 can transmit the master verification request data back to the proximal communication module 21 of the mobile communication device 20 through the proximal communication module 12, and then forwarded to the master verification server 30 by the application 22 of the mobile communication device 20. After receiving the master verification request data generated by the master verification device 10, the master verification server 30 verifies the signature of the master verification request data with the security module 31 through the pre-loaded key stored in the master verification device database 34 in advance.

If the signature of the verification request data fails to pass the verification, the verification server 30 determines that the participant has failed the identity verification. If the signature of the verification request data passes the verification, the verification server 30 can perform the following checks: compare the error value between the verified timestamp in the verification request data and the time when the verification server 30 receives the verification request data to see if it is within the error tolerance range, compare the positioning error between the positioning information of the mobile communication device 20 in the verification request data and the positioning information of the verification device 10 to see if it is within the error tolerance range, and compare the positioning error between the positioning information of the verification device 10 in the verification request data and the deployment positioning information of the verification device 10 in the verification device database 34 to see if it is within the error tolerance range.

If the error value or positioning error distance of each of the above checks is within the error tolerance range, the main verification server 30 determines that the participant has passed the identity verification. If the error value or positioning error distance of any of the above checks exceeds the error tolerance range, the main verification server 30 determines that the participant has not passed the identity verification.

After identity verification, the main verification server 30 writes the identification information of the mobile communication device 20, the identification information of the main verification device 10, the main verification request data, and the result of this identity verification into the event database 32.

If the participant passes the identity verification, the token module 35 will generate a token for the participant and write the token into the token field of the record to which the participant belongs in the user database 33 of the main verification server 30. In addition, the main verification server 30 transmits the relevant information of the main verification device 10 and the mobile communication device 20 (including the token) to the field service subsystem 40, so that the field service subsystem 40 can generate a service data package or a service index screen (details will be described later) to be sent to the mobile communication device 20 based on the information. If the participant fails to pass the identity verification, the main verification server 30 will not perform subsequent processing.

FIG. 2 shows a schematic operation screen of the application 22 in the mobile communication device 20 of the present embodiment displayed on the screen of the mobile communication device 20.

First, a check-in screen 600 is provided to the participants. When checking in, the participants can press the sensing check-in button 601 in the check-in screen 600, and the application 22 will immediately switch to displaying the first sensing prompt screen 610, and start sensing the main testing device 10, and display the first sensing state 611, such as indicating that sensing is in progress, to prompt the participants, and display a sensing cancel button 612 at the same time. The participants can press the sensing cancel button 612 to cancel the sensing, that is, cancel the check-in.

As described above, if the application 22 can sense the main verification device 10, the verification request data will be transmitted to the main verification device 10. If the network module 16 of the main verification device 10 is not enabled, the main verification device 10 will transmit the main verification request data to the mobile communication device 20 after verifying the verification request data, so that the main verification request data will be transmitted to the main verification server 30 through the mobile communication device 20. If the network module 16 of the main verification device 10 is enabled and the venue of the event has a network connection environment, the main verification device 10 will directly transmit the main verification request data to the main verification server 30 through the network module 16 after verifying the verification request data, and send a corresponding notification to the mobile communication device 20.

As mentioned above, when the mobile communication device 20 receives the master verification request data or the notification, it is informed that the participant's registration has been successful. Alternatively, if the mobile communication device 20 does not receive the master verification request data or the notification after a preset period of time, or receives a notification from the master verification device 10 that the verification request data has failed to be verified, it is informed that the participant's registration has failed. After knowing the registration result, the application 22 switches to display the second sensing prompt screen 620, wherein the second sensing status 621 shows whether the sensing registration result is successful or failed. If it is successful, the application 22 can send a request to generate a service data package to the field service subsystem 40 through the master verification server 30.

After receiving the request, the field service subsystem 40 confirms the identity verification result of the participant by the main verification server 30. If the main verification server 30 determines that the participant has not passed the identity verification, the field service subsystem 40 directly rejects the request. If the main verification server 30 determines that the participant has passed the identity verification, the field service subsystem 40 generates the aforementioned complete service list through the extended list generation module 45, and further integrates the complete service list into a service data package.

Some of the services in the complete service list are preset by the event organizer in the service database 42 of the field service subsystem 40 before the event, and the other part is screened and generated by the extended list generation module 45. In detail, after the participant passes the identity verification, the field service subsystem 40 obtains the preset service list corresponding to the identification information of the main verification device 10 in the event operation database 44 according to the identification information of the main verification device 10. In addition, the extended list generation module 45 receives parameters such as the current time, the user's rating of the service provider, the distance between the service provider and the event venue, and/or the current busyness of the service provider, and filters the services recorded in the service database 42 according to the above parameters, and sorts the services that pass the screening to generate an extended service list. The extended service list includes the services that pass the above screening and sorting. Then, the extended list generation module 45 merges the extended service list with the default service list into the aforementioned complete service list.

Next, the field service subsystem 40 extracts the service communication data of each service from the service database 42 (such as the URL of each service and the parameters available for calling the URL) according to the identification information of each service in the complete service list, and obtains the activity serial number, activity effective time range, activity name, and activity organizer identification information corresponding to the main verification device 10 from the activity operation database 44 according to the identification information of the main verification device 10, together with the token of the participant, to form a service data package.

The service data packet is returned to the application 22 through the main verification server 30. The application 22 parses the service data packet, generates corresponding service links one by one according to the service communication data of each service in the service data packet, and generates and displays the service index screen 630 accordingly. Alternatively, the screen generation module 46 of the field service subsystem 40 can also directly parse the service data packet to generate the service index screen 630, and then send the service index screen 630 back to the application 22 for display by the application 22.

Any service index screen 630 generated by the screen generation module 46 of the above-mentioned application 22 and the field service subsystem 40 is finally displayed on the screen of the mobile communication device 20. Taking FIG. 2 as an example, there are four records in the complete service list in the service data package, and the corresponding four service links in the service index screen 630 are the first service link 631, the second service link 632, the third service link 633 and the fourth service link 634. Each service link can be in the form of text or icon, and includes information such as the URL of the corresponding service and the parameters available for calling the URL. When a participant clicks on any service link, he can connect to the URL of the service corresponding to the service link to quickly transfer to the website providing the service and use the service. In addition, the service index screen 630 may further include the serial number, name, effective time period, and organizer identification information of this event, and display it together with the service link for participants to click, copy, or forward.

As described above, when a participant passes identity verification, the main verification server 30 transmits the participant's token to the field service subsystem 40. The field service subsystem 40 adds the token to the service data package or the service index screen. Therefore, when the application 22 receives the service data package or the service index screen, it also receives the token. When the participant clicks on a network link in the service index screen, the application 22 transmits the token and the identification information of the mobile communication device 20 or the participant to the service website corresponding to the network link. The service website can send a token verification request to the main verification server 30, and the request includes the token and the identification information of the mobile communication device 20 or the participant. After the main verification server 30 receives the request, its token module 35 queries the event database 32 for the participant's identity verification result based on the token and the identification information of the mobile communication device 20 or the participant.

If the identity verification result is passed, and the verified timestamp or main verification timestamp corresponding to the identity verification result is within the preset valid time range, then the result of the token verification is passed, otherwise the result of the token verification is not passed. The token module 35 will return the token verification result to the service website. The service website can provide services only when the token verification result is passed.

In the aforementioned embodiment, the main verification server 30 first verifies the identity of the participant, and then the field service subsystem 40 generates a service data packet. In another embodiment, the above process can be reversed, that is, the field service subsystem 40 first generates a service data packet, and then the main verification server 30 verifies the identity of the participant. In detail, the mobile communication device 20 or the main verification device 10 of the embodiment can be connected to the field service subsystem 40 for communication. The mobile communication device 20 can transmit the main verification request data received from the main verification device 10 to the field service subsystem 40, or the main verification device 10 can directly transmit the main verification request data to the field service subsystem 40. The field service subsystem 40 can generate a service data packet based on the main verification request data.

During the generation process, the field service subsystem 40 will transmit the authentication request data to the authentication server 30 for the authentication server 30 to authenticate the participant. If the authentication server 30 determines that the participant has not passed the authentication, the field service subsystem 40 may terminate the generation of the service data package or reject the request sent by the mobile communication device 20 to obtain the service data package.

The present invention is flexible in implementation and can be integrated with other external services other than the present invention. The application 22 can be integrated into the external service application in the form of a software module.

When checking in, the application 22 of the mobile communication device 20 generates the verification request data and transmits it to the main verification device 10. After verification, the main verification device 10 generates the main verification request data. Then, if the network module 16 of the main verification device 10 is enabled, the main verification device 10 transmits the main verification request data to the main verification server 30 through the network module 16, the external service application and its backend server for identity verification. If the network module 16 is not enabled, the main verification device 10 transmits the main verification request data back to the mobile communication device 20, and the mobile communication device 20 transmits the main verification request data to the main verification server 30 through the external service application and its backend server for identity verification. After the main authentication server 30 performs identity authentication, it will report the authentication result to the external service application and its backend server.

In addition, the external service application and its backend server can also send a request to generate a service data packet to the field service subsystem 40, and the field service subsystem 40 can transmit the generated service data packet to the external service application and its backend server for subsequent processing.

FIG3 is a schematic flow chart of a method 300 for automatic delivery of field services based on mobile identification verification according to an embodiment of the present invention. The method 300 for automatic delivery of field services can be executed by the automatic delivery system 100 for field services and the mobile communication device 20 of the activity participant.

In step 301, the activity participant uses the mobile communication device 20 to connect to the main verification server 30 to complete the registration and installation process.

In step 302, the participant checks in with the mobile communication device 20, so the mobile communication device 20 generates verification request data and transmits the verification request data to the main verification device 10.

In step 303, the main verification device 10 verifies the verified request data, generates the main verification request data after the verification is passed, and transmits the main verification request data to the main verification server 30.

In step 304, the authentication server 30 performs identity authentication of the participant based on the authentication request data.

In step 305, the application 22 of the mobile communication device 20 sends a request to generate a service data packet.

In step 306, if the participant passes the identity verification, the field service subsystem 40 responds to the request and generates a complete service list.

In step 307, the field service subsystem 40 generates a service data package based on the complete service list.

In step 308, the application 22 or the field service subsystem 40 parses the service data packet to generate a service index screen.

In step 309, the application 22 displays a service index screen on the screen of the mobile communication device 20.

In step 310, the activity participant clicks a service link in the service index screen. The service website pointed to by the service link requests token verification from the main verification server 30, and provides services to the participant after the verification is passed.

The technical details of each step of the field service automatic delivery method 300 have been described in detail in the previous embodiments, so they will not be repeated here.

The present invention also provides a computer-readable medium, such as a memory, a floppy disk, a hard disk or an optical disk. The computer-readable medium can be applied to a terminal device, a computer and/or a server, and stores instructions to execute the above-mentioned field service automatic delivery method 300. For example, the computer-readable medium can be applied to the main verification device 10, the main verification server 30 and the field service subsystem 40 of the field service automatic delivery system 100 to cooperate with the mobile communication device 20 to execute the field service automatic delivery method 300.

The present invention has the following technical features:

The first is that the participant's mobile communication device generates a verification request data containing a timestamp, and after signing it with the communication key distributed by the master verification server, it is sent to the master verification device provided on site by the event organizer. The master verification device then uses the verification request data, plus relevant data such as time and location information, to generate the master verification request data, and after signing the master verification request data with its pre-loaded key, it is sent to the master verification server. The master verification server can confirm the identity of the participant by verifying the signature of the master verification request data.

Secondly, the present invention designs a field service subsystem to manage the main verification device and generate a service list related to the activity that is exclusive to the participants, and automatically distributes it to the participants’ mobile communication devices for use after they complete the check-in and identity verification.

Third, the power supply module built into the main test device of the present invention supports rechargeable batteries, so that it does not need to rely on external power supply when deployed.

In addition, the present invention has the following features:

The first is that the legitimacy of the participants' registration process can be guaranteed by the above-mentioned first technical feature. Therefore, participants only need to use a simple near-end communication connection operation of a mobile communication device to quickly complete the identity identification and registration process. Compared with the previous use of human eyes to check and confirm the list and manually issue event identification cards, the present invention digitizes the entire process, which can greatly save the time cost of registration and data issuance, and can also save considerable manpower for the event organizer.

Secondly, the field service subsystem designed by the second technical feature above will automatically deliver field services to the participants' mobile communication devices. Therefore, after checking in, participants no longer need to manually log in to the online event platform, and can access the personalized data related to the event on their mobile communication devices. The service list provided by the present invention also forms a local service provision platform, integrating local service providers, event organizers, and many foreign participants on the same platform, making the circulation of service information and the promotion of online and offline business activities faster and more convenient.

The third is that there is no need to rely on external power supply as mentioned in the third technical feature, which means that the deployment of the main test device is more flexible, and it is very suitable for providing check-in services in unspecified venues such as exhibitions, meeting rooms and performances.

The above implementation forms are only illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone with common knowledge in this technical field may modify and change the above implementation forms without violating the spirit and scope of the present invention. Therefore, the scope of protection of the present invention should be as listed in the scope of the patent application described below.

10: Main test device

11: Computation module

12: Near-end communication module

13: Security element

14: Positioning module

15: Power supply module

16: Network module

20: Mobile communication devices

21: Near-end communication module

22: Applications

30: Main verification server

31: Security module

32: Event database

33: User database

34: Main test device database

35:Token module

40: Field service subsystem

41: Service provider database

42: Service database

43:Event organizer database

44:Activity operation database

45: Expand list generation module

46: Screen generation module

100: Field service automatic delivery system

Claims (9)

A field service automatic delivery system based on mobile identification verification includes: a primary verification device, deployed at a first location, for receiving a verified request data generated by a user's mobile communication device, verifying the signature of the verified request data, and generating a primary verification request data according to the verified request data after the signature is verified, so as to transmit the primary verification request data; a primary verification server, for receiving the primary verification request data, and determining whether the participant has passed the identity verification according to the primary verification request data; and a field service sub-server. The system is used to generate a service data package after the user passes the identity verification, so that the mobile communication device can display a service index screen generated by the service data package, wherein the service index screen includes at least one service link to provide services to the user; wherein the mobile communication device uses the communication key of the mobile communication device to generate the signature, the main verification device uses the preloaded key of the main verification device to verify the signature, and the communication key and the preloaded key are both derived keys of the same key. The field service automatic delivery system as described in claim 1, wherein the primary verification server is reused to verify the signature of the primary verification request data. The automatic delivery system for field services as described in claim 2, wherein if the signature of the master verification request data passes verification, the master verification server further determines whether the participant has passed the identity verification based on the verified timestamp in the master verification request data, the location information of the mobile communication device, and the location information of the master verification device, and if the signature of the master verification request data fails verification, the master verification server determines that the participant has failed the identity verification. The field service automatic delivery system as described in claim 1, wherein the field service subsystem includes a service database, and the field service subsystem is reused to filter the services recorded in the service database according to multiple parameters, and sort the services that pass the filtering to generate an extended service list. The automatic delivery system for venue services as described in claim 4, wherein the parameters include the current time, the user's rating of the providers of the services, the distance between the providers of the services and the venue where the event is held, and/or the current busyness of the providers of the services. The field service automatic delivery system as described in claim 1, wherein the service index screen is generated by the mobile communication device or the field service subsystem parsing the service data packet. The field service automatic delivery system as described in claim 1, wherein if the main verification server determines that the participant passes the identity verification, the result of the identity verification is recorded, and a token of the participant is generated, and the token is then transmitted to the field service subsystem, so that the field service subsystem adds the token to the service data package or the service index screen, so that when the participant clicks on one of the service links, the mobile communication device transmits the token to the service website pointed to by the service link, and the main verification server is reused to perform token verification according to the token provided by the service website and the result of the identity verification, so as to return the result of the token verification to the service website. A method for automatically delivering field services based on mobile identification verification includes: receiving verified request data generated by a mobile communication device of a user, and using the communication key of the mobile communication device to generate a signature of the verified request data; using a preloaded key to verify the signature of the verified request data; after the signature is verified, generating a primary verification request data according to the verified request data; determining whether the user has passed the identity verification according to the primary verification request data; and after the user has passed the identity verification, generating a service data package for the mobile communication device to display a service index screen generated by the service data package, wherein the service index screen includes at least one service link to provide services to the user; wherein the communication key and the preloaded key are both derived keys of the same key. A computer-readable medium, used in a terminal device, a computer and/or a server, stores instructions for executing the method for automatically delivering field services as described in claim 8.

Images