Identity authentication method, authentication server and third-party platform

Abstract

The invention provides an identity authentication method, an authentication server and a third-party platform. The method comprises the steps of receiving an authentication request table sent by the third-party platform, wherein the authentication request table comprises a mobile phone number of a user and an authentication risk value, and the authentication risk value is equal to 1 or 0; judging whether the authentication risk value is equal to 1 or 0; if the authentication risk value is equal to 1, carrying out SIM (Subscriber Identity Module) card authentication; if the authentication risk value is equal to 0, carrying out client authentication; if SIM card authentication or client authentication is passed, sending information that authentication is successful to the third-party platform; and if SIM card authentication or client authentication is not passed, sending information that authentication is failed to the third-party platform. In the technical scheme of the identity authentication method, the authentication server and the third-party platform which are provided by the invention, times of short message communication between an SIM card and the authentication server of an operator can be reduced, so that the condition that due to limitation of processing capacity of a short message gateway of the operator, large-scale authentication cannot be supported can be reduced.

Description

Technical field [0001] The present invention relates to the field of communication technology, in particular to an identity authentication method, an authentication server and a third-party platform. Background technique [0002] Currently, there are mainly three mobile identity authentication technologies. 1) Mobile phone number + password + SMS verification technology, 2) Based on 3GPP GBA technology, 3) Scheme based on operator credentials. Among them, the third mobile identity authentication technology is a SIM card-based identity authentication scheme unique to operators. The specific process of the scheme is: the user enters the mobile phone number on the login page of the third-party platform, and the login page forwards the mobile number To the operator’s authentication server, the authentication server addresses the user and communicates with the card application on the SIM card corresponding to the mobile phone number to verify whether the user logging in with the mobi...

AI Technical Summary

Problems solved by technology

[0003] However, since each user authentication requires SMS communication between the SIM card and the operator's authentication server, when the number of authenticated users increases and the number of authentications increases, the operator's SMS gateway will become the bottleneck of the entire system

For example, assuming that there are 10 million users and 10,000 users who are online at the same time and use authentication services, this service alone requires the operator's SMS gateway to process 10,000 SMS messages per second, and the processing capacity of the operator's SMS gateway is usually 6000 entries / second, thus unable to support such a large-scale authentication

Images