User Authentication and Authorization System

Abstract

A user identity verification and authorization system comprises a smart card, a client device, a system server and a creation module. The smart card stores key information which could be read and written repeatedly; the client device has a reader which is used to read the key information in the smart card; after reading the key information from the smart card, the client device transfers the key information to a verification module in the system server; the system server also comprises a database storing user information corresponding to the key information; when verifying that the received key information corresponds to the user information stored in the database of the system server, the verification module allows the client device to use services provided by a multiuser accessible device; the creation module is used for generating new key information and corresponding user information for next verification. The invention can reduce the possibility that personal information is leaked by mistake or intentionally.

Description

technical field [0001] The invention relates to a user identity verification and authorization system, in particular to a system for performing user identity verification and authorization on multi-user access equipment, so as to prevent unauthorized users from accessing system resources such as remote computers and telephones. Background technique [0002] General multi-user accessible equipment, such as shared remote computer equipment or telephone equipment, has the function of giving different access rights to different users when accessing the equipment, and in order to ensure the security of data in the equipment, when the user accesses multiple When a user can access a device, a multi-user accessible device usually has a user authentication program to confirm the identity of the visitor and the access authority. [0003] Existing technologies such as Figure 6 As shown, the multi-user accessible device has a client device and a system server, wherein the client device...

AI Technical Summary

Problems solved by technology

[0004] The disadvantage of the existing method is that user information may be stolen and leaked by a third party. If the personal identification code is entered through a computer keyboard or telephone, the user may negligently disclose his personal identification code and cause information leakage; In the case of mobile phones, if the SIM card is lost, the third party who gets the SIM card can steal user information by repeatedly trying to enter the PIN, so there is room for improvement

Images