Method and system for user authentication and devices used in system

Abstract

The invention relates to a method and a system for user authentication and a user terminal, an authentication front-end computer system and an authentication server, wherein the user terminal, the authentication front-end computer system and the authentication server are used in the system for the user authentication. One implementation mode is that the user terminal sends an authentication instruction containing authentication information to the authentication front-end computer system, and then the authentication front-end computer system sends an authentication request containing the authentication information to the specific authentication server. Another implementation mode is that the user terminal sends the authentication request containing the authentication information to the specific authentication server. Based on either of the two implementation modes, after the authentication server receives the authentication request, the authentication server authenticates the user identity according to the authentication information. At last, preferably, the authentication server sends authentication results to the authentication front-end computer system. When a user needs to pay a certain amount of money to an operator, after successful authentication, the authentication server transfers the specific amount of money from a specific payment account of the user to a specific account of the operator.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and system for authenticating user identities. The invention also relates to a user terminal, an authentication server and an authentication front-end computer system used in said method and system. The present invention is based on the Chinese invention patent application with the filing date of November 8, 2011 and the application number of 201110358242.4, the contents of which are incorporated herein by reference. Background technique [0002] With the development of information technology, e-commerce has become more and more popular in people's life. The popularity of e-commerce is inseparable from the authentication of user identity. In the prior art, there are mainly the following two types of applications that need to authenticate user identities, especially for mobile users: electronic payment mechanisms and electronic ticketing (ticket authenticat...

AI Technical Summary

Problems solved by technology

This leads to the monopoly position of card operators and pushes up the charges of card operators; at the same time, for card operators that only operate in certain regions, there will be problems when card holders pay merchants in other regions

[0012] 2. The electronic payment mechanisms of the above a1 and a2 categories rely on the physical card owned by the user to identify the user, which is easy to be stolen and has low security

[0013] 3. The electronic payment mechanism of category a2 above can only be used for payment by physical merchants, and is generally not suitable for payment by online merchants

If the user needs to pay through different electronic payment mechanisms and / or different card operators under the same electronic payment mechanism, he / she needs to carry multiple corresponding physical cards with him / her, causing extreme inconvenience and / or risk of loss

[0015] 5. The above-mentioned electronic payment mechanisms of categories a3, a4 and a5 can only be used for payment of online transactions, and are generally not suitable for physical merchants

And these categories take a long time to operate

[0017] 7. For the above-mentioned electronic payment mechanisms in categories a2, a4 and a6, their operators are generally limited to individual regions, and their global versatility is low

The operation of category b4 takes a long time, is prone to errors, and the password is easy to be stolen by malicious software, etc.

Images