End-to-end verification method and system for telecommunication service unauthorized access prevention

Abstract

The invention discloses an end-to-end verification method and system for telecommunication service unauthorized access prevention, and relates to the field of telecommunication services. The method comprises the steps: when a salesman opens a preset module, triggering a public authentication verification interface; calling a corresponding verification service from multiple types of verification services contained in the public authentication verification interface for verification; generating a token of the user through the unified authentication service according to a preset authentication rule; and verifying the validity of the token of the user after submitting a telecommunication service handling order. According to the invention, the end-to-end security of sensitive information access, sensitive service scenes and complex service handling of users in the telecommunication industry can be improved, and user information acquisition and illegal service handling caused by unauthorizedaccess of the users are avoided; through an end-to-end token authentication mechanism, the problem of business personnel and user-level authentication capability is solved, and the user experience, security control and operation analysis control level are improved on the premise of not sacrificing the basic business capability.

Description

Technical field [0001] The invention relates to the field of telecommunication services, and in particular to an end-to-end verification method and system for preventing unauthorized access to telecommunication services. Background technique [0002] At present, the main mode of the business support system of telecom operators is to log in to the system through business personnel to handle business, and the user self-service mode to handle business, especially through WEB-level pages for user information query, data selection and entry, page cascade, business processing, Data landing and other interactive processes are becoming more and more complex. At the same time, new security challenges are presented by the core system through the PAAS layer capability opening, the decoupling of central service capabilities, the decoupling of data to business personnel, and the end-to-end authorization authentication of users from the service, especially in Security issues such as unknowingl...

AI Technical Summary

Problems solved by technology

[0002] At present, the main mode of the business support system of telecom operators is to handle business through business personnel logging into the system, and user self-service mode to handle business, especially through WEB-level pages for user information query, data selection and entry, page cascading, business processing, The interaction process such as data landing is becoming more and more complicated. At the same time, along with the core system's capability opening through the PAAS layer, the decoupling of central service capabilities, data decoupling to business personnel, and user self-service end-to-end authorization access, new security challenges are presented, especially in Security issues such as unauthorized access to user information, unauthorized ordering, and information leakage by users in the telecommunications industry frequently occur

[0003] However, traditional methods such as WEB interceptors, session authority authentication, and capability layer verification only solve point-to-point security control issues at a certain level, and cannot solve the problem of unauthorized access from the end-to-end perspective of the entire business process

Images