An application access control system and method

Abstract

The invention relates to mobile communication technology, in particular to an application access control technology when accessing an information application system through a mobile access network. An application access control system, including a mobile access subsystem and an information technology application subsystem, and also includes a proxy server, wherein: the mobile access subsystem requests a mobile user to access the information technology application subsystem through a mobile terminal The access request is forwarded to the proxy server; the proxy server obtains the voice information of the mobile terminal requesting to access the information technology application subsystem through the mobile access subsystem, and performs Voice authentication is performed on the voice information, and an authentication result is returned to the information technology application subsystem; the information technology application subsystem controls application access of the mobile terminal according to the authentication result. The proxy server further correspondingly stores the characteristic information, time and operation information of the authenticated mobile user.

Description

technical field [0001] The invention relates to mobile communication technology, in particular to an application access control technology when accessing an information application system through a mobile access network. Background technique [0002] With the in-depth integration of IT technology and mobile communication technology, various application systems that implement specific functions in the enterprise IT environment, such as office automation (OA, Office Automation) system, customer relationship management (CRM, Customer Relation Management) system, enterprise resource Planning (ERP, Enterprise Resource Planning) system, etc., its operating environment extends to the mobile communication system. In this case, there are problems in security authentication and operation non-repudiation in existing mobile communication systems. In the existing mobile communication system, the terminal equipment is mainly a mobile terminal, generally called a mobile phone, which has t...

AI Technical Summary

Problems solved by technology

[0004] At present, many operations in e-commerce need to take anti-repudiation measures, such as adopting certain measures to make it impossible for leaders to deny their review actions after reviewing official documents

The operation anti-repudiation measures of the existing e-commerce system rely on PCs, adopt digital signatures and other methods, and the operation anti-repudiation is not strong

Biometric authentication methods such as iris and fingerprint cannot be applied to mobile communication systems due to special biometric information that cannot be transmitted.

Moreover, mobile phones have the characteristics of being easy to claim and lose, which also puts forward higher requirements for the operation anti-repudiation measures and electronic forensics operations between mobile terminals and information technology application systems, and there are also certain difficulties.

Images