Identity authentication method, device and related equipment
The transmission of verification information through the 5G message center solves the problem of unfriendly and low security in SMS verification code operations, and achieves more efficient and secure identity verification.
Patent Information
- Application Number
- CN202110001477.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-01-04
- Publication Date
- 2025-08-05
- Estimated Expiration
- 2041-01-04
AI Technical Summary
In the prior art, the SMS verification code method is not friendly enough in APP login or payment scenarios, it is prone to errors and has low security, and the verification code is easily stolen.
The 5G message center is used to transmit verification information through deep links. Users do not need to remember or enter verification codes, and the server side performs matching verification.
Reduces the chance of verification errors, improves user experience, and improves the security of verification information, reducing the risk of leakage.
Smart Images

Figure CN114765780B_ABST
Abstract
Description
Technical Field
[0001] The embodiments of the present invention relate to the field of identity authentication technology, and in particular to an identity verification method, apparatus, and related equipment. Background Art
[0002] In the mobile internet era, there are numerous types of application software (APPs). To avoid negative consequences from unauthorized operations during app login or payment, APP service providers often require identity authentication before providing services to users. SMS verification codes are one of the most commonly used verification methods in existing technologies. They verify the legitimacy and authenticity of users by sending a random verification code to a user's designated mobile phone.
[0003] However, existing SMS random verification code solutions require users to actively memorize the verification code (usually a six-digit random number) in the SMS and enter it in the app that triggered the SMS verification. This process is not user-friendly and prone to errors. Furthermore, due to the relatively complex environments in which mobile devices operate, explicit verification codes are more likely to be stolen. For example, the verification code may be seen by others during the authentication process, or a pop-up SMS notification may appear while the phone is in the locked state, resulting in a leak. Summary of the Invention
[0004] The embodiments of the present invention provide an identity verification method, apparatus and related equipment to solve the problem that the method of using SMS verification to log in to APP in the prior art is low in security and prone to errors.
[0005] To solve the above problems, the present invention is achieved as follows:
[0006] In the first aspect, an embodiment of the present invention provides an identity verification method, which is executed by a server, and the method includes: receiving a first request for identity authentication sent by a first terminal for logging into an application APP, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; generating first verification information in response to the first request; sending a second request to a 5G message center, wherein the second request carries a second deep link of the first verification information and the phone number; receiving second verification information sent by the first terminal, wherein the second verification information is sent by the 5G message center to the first terminal via a 5G message based on the phone number; verifying the identity of the first terminal based on the matching between the first verification information and the second verification information, and returning the verification result to the first terminal.
[0007] In a second aspect, an embodiment of the present invention provides an identity verification method, which is executed by a first terminal, and the method includes: sending a first request for identity authentication for logging into an application APP to a server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; the server generates first verification information in response to the first request; obtains a third deep link carrying second verification information from a 5G message center or a second terminal; sends the second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on the matching of the second verification information and the first verification information; and receives the verification result fed back by the server.
[0008] In the third aspect, an embodiment of the present invention also provides an identity verification method, which is executed by a 5G message center, and the method includes: receiving a second request sent by a server for pushing a message to a terminal, wherein the second request carries a second deep link and a phone number; the second deep link carries first verification information; and sending a 5G message carrying a third deep link to the terminal corresponding to the phone number, wherein the third deep link carries second verification information.
[0009] In the fourth aspect, an embodiment of the present invention also provides an identity verification device, which includes: a first transceiver and a first processor; wherein, the first transceiver is used to receive a first request for identity authentication sent by a first terminal for logging into an application APP, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; the first processor is used to generate first verification information in response to the first request; the first transceiver is also used to send a second request to the 5G message center, wherein the second request carries a second deep link of the first verification information and the phone number; the first transceiver is also used to receive second verification information sent by the first terminal, wherein the second verification information is sent by the 5G message center to the first terminal through a 5G message based on the phone number; the first processor is also used to verify the identity of the first terminal based on the matching between the first verification information and the second verification information, and return the verification result to the first terminal.
[0010] In the fifth aspect, an embodiment of the present invention also provides an identity verification device, which is executed by a first terminal, and the device includes: a second transceiver and a second processor; wherein the second transceiver is used to send a first request for identity authentication for logging into an application APP to a server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; the server generates first verification information in response to the first request; the second transceiver is also used to obtain a third deep link carrying second verification information from a 5G message center or a second terminal; the second processor is used to send the second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on the matching of the second verification information and the first verification information; the second transceiver is also used to receive the verification result feedback from the server.
[0011] In the sixth aspect, an embodiment of the present invention also provides an identity verification device, which includes: a third transceiver and a third processor, wherein the third transceiver is used to receive a second request sent by the server for pushing a message to the terminal, wherein the second request carries a second deep link and a telephone number; the second deep link carries first verification information; and sending a 5G message carrying a third deep link to the terminal corresponding to the telephone number, wherein the third deep link carries second verification information.
[0012] In the seventh aspect, an embodiment of the present invention also provides a communication device, comprising: a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that the processor is used to read the program in the memory to implement the steps in the method described in the first aspect above; or, the steps in the method described in the second aspect above, or the steps in the method described in the third aspect above.
[0013] In an eighth aspect, an embodiment of the present invention further provides a readable storage medium for storing a program, which, when executed by a processor, implements the steps of the method described in the first aspect, or implements the steps of the method described in the second aspect, or implements the steps of the method described in the third aspect.
[0014] In an embodiment of the present invention, after sending a first request for identity authentication for logging into an application APP, the first terminal will receive verification information generated by the server and sent by the 5G message center. The verification information is carried in a second deep link. Based on the second deep link, the user does not need to remember the verification information and enter the verification information. The user only needs to trigger the second deep link to send the verification information to the server, and the server will verify it. This reduces the probability of verification errors and improves the user experience. In addition, for the terminal, the entire process is unknown to the verification information, which reduces the risk of leakage of verification information and improves the security of verification information, thereby solving the problem of low security and prone to errors in the existing technology of using SMS verification to log in to APP. BRIEF DESCRIPTION OF THE DRAWINGS
[0015] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in describing the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.
[0016] Figure 1 This is the identity verification method process provided by the embodiment of the present invention Figure 1 ;
[0017] Figure 2 This is the identity verification method process provided by the embodiment of the present invention Figure 2 ;
[0018] Figure 3 Schematic diagram of one-click identity authentication provided by an embodiment of the present invention;
[0019] Figure 4 This is the identity verification method process provided by the embodiment of the present invention Figure 3 ;
[0020] Figure 5 is a schematic diagram of an identity authentication system provided by an embodiment of the present invention;
[0021] Figure 6 This is a schematic diagram of verification of a single device provided by the embodiment of the present invention;
[0022] Figure 7 This is a schematic diagram of cross-device verification provided by the present invention;
[0023] Figure 8 This is a schematic diagram of the structure of the identity verification device provided by the embodiment of the present invention. Figure 1 ;
[0024] Figure 9This is a schematic diagram of the structure of the identity verification device provided by the embodiment of the present invention. Figure 2 ;
[0025] Figure 10 This is a schematic diagram of the structure of the identity verification device provided by the embodiment of the present invention. Figure 3 ;
[0026] Figure 11 It is a structural diagram of a communication device provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0027] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.
[0028] The terms "first", "second" etc. in the embodiments of the present invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or equipment comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or that are inherent to these processes, methods, products or equipment. In addition, "and / or" is used in this application to represent at least one of the connected objects, for example A and / or B and / or C, which means comprising 7 situations including single A, single B, single C, and both A and B exist, both B and C exist, both A and C exist, and both A, B and C exist.
[0029] The following describes the identity verification method provided by the embodiment of the present invention.
[0030] See also Figure 1 , Figure 1 This is the process of the identity verification method provided by the embodiment of the present invention Figure 1 . Figure 1 The identity verification method shown may be executed by a server, specifically, the server may be an APP server.
[0031] like Figure 1 As shown, the identity verification method may include the following steps:
[0032] Step 101: Receive a first identity authentication request for logging into an application APP, sent by a first terminal, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP;
[0033] Step 102: Generate first verification information in response to the first request;
[0034] Step 103: Send a second request to the 5G message center, where the second request carries a second deep link and a phone number of the first verification information;
[0035] Step 104: Receive second verification information sent by the first terminal, wherein the second verification information is sent by the 5G message center to the first terminal via a 5G message based on the phone number;
[0036] Step 105: Verify the identity of the first terminal based on whether the first verification information matches the second verification information, and return a verification result to the first terminal.
[0037] Through the above steps 101 to 105, after sending the first request for identity authentication for logging into the application APP, the first terminal will receive the verification information generated by the server and sent by the 5G message center. The verification information is carried in the second deep link. Based on the second deep link, the user does not need to remember the verification information and enter the verification information. It only needs to trigger the second deep link to send the verification information to the server, and the server will verify it. It can be seen that the probability of verification errors is reduced and the user experience is also improved. In addition, for the terminal, the entire process is unknown to the verification information, which reduces the risk of leakage of verification information and improves the security of verification information, thereby solving the problem of low security and prone to errors in the existing technology of using SMS verification to log in to APP.
[0038] It should be noted that the first terminal and the second terminal in the embodiments of the present application may be a mobile phone, a tablet personal computer, a laptop computer, a personal digital assistant (PDA), a mobile internet device (MID), a wearable device, or a vehicle-mounted device, etc. The network-side device may be a base station, an access and mobility management function (AMF), a relay, an access point, or other network elements, etc.
[0039] It should be noted that the definition parameters and descriptions of the deep link Deeplink involved in the embodiments of the present application are specifically shown in Table 1.
[0040]
[0041] Table 1
[0042] In an optional implementation manner of the embodiment of the present application, the method of generating the first verification information in response to the first request involved in step 102 in the embodiment of the present application may further include:
[0043] Step 11: In response to the first request, generate first verification information including a random code and time information, wherein the time information is used to indicate the validity period of the random code;
[0044] Step 12: Use the random code and time information as query parameters in the second deep link.
[0045] As shown in Table 1, the random code can be written into the code in the query parameter query, and the time information can be written into the expire in the query parameter query. Therefore, the second deep link carrying the first verification information is sent to the 5G message center.
[0046] In an embodiment of the present application, the method of sending the second request to the 5G message center involved in step 103 may further include: sending the second request to the 5G message center via Message as a Platform (MaaP).
[0047] Based on this, the server can submit the second deep link and phone number to Mapp as a chatbot, and then Maap sends the second request to the 5G message center.
[0048] In another optional implementation of the embodiment of the present application, the method of verifying the identity of the first terminal based on the matching between the first verification information and the second verification information involved in step 105 and returning the verification result to the first terminal may further include:
[0049] Step 21, judging whether the random code in the second verification information is valid according to the time information in the second verification information;
[0050] Step 22: If the random code in the second verification information is valid, determine whether the random code in the second verification information matches the random code in the first verification information;
[0051] Step 23: If the second verification information matches the random code in the first verification information, a verification success message is returned to the first terminal;
[0052] Step 24: If the random code in the second verification information does not match the random code in the first verification information, a verification failure message is returned to the first terminal.
[0053] As can be seen from steps 21 to 24 above, during the verification process, the server first needs to determine whether the random code has expired. If so, verification has failed and a new random code must be issued. If not, the server then needs to determine whether the received random code is consistent with the locally stored random code. If they are consistent, verification is successful; if not, verification fails. During this verification process, since the first terminal submits the random code to the server based on deep linking, the user is unaware of the random code during this submission process, thereby improving the security of the verification process.
[0054] See also Figure 2 , Figure 2 This is the process of the identity verification method provided by the embodiment of the present invention Figure 2 . Figure 2 The identity verification method shown can be executed by the first terminal.
[0055] like Figure 2 As shown, the identity verification method may include the following steps:
[0056] Step 201: Send a first request for identity authentication for logging into an application APP to a server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; the server generates first verification information in response to the first request;
[0057] Step 202: Obtain a third deep link carrying second verification information from the 5G message center or the second terminal;
[0058] Step 203: Sending the second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on a match between the second verification information and the first verification information;
[0059] Step 204: Receive the verification result fed back by the server.
[0060] Through the above steps 201 to 204, after the first terminal initiates the first request to the server, it will obtain a third deep link carrying the second verification information from the 5G message center or the second terminal, and then send the second verification information to the server based on the third deep link, and then the server will verify it.
[0061] In an optional implementation manner of an embodiment of the present application, when the telephone number is the telephone number of the first terminal, that is, the user logs in to the APP through the telephone number of the first terminal, therefore, obtaining the third deep link from the 5G message center involved in the above step 202 includes: receiving a 5G message sent by the 5G message center based on the telephone number, wherein the 5G message carries the third deep link.
[0062] In specific application scenarios, such as Figure 3 As shown, after the first terminal receives the third deep link, it can display corresponding information in the notification bar of the terminal based on the third deep link, in which the second verification information can be automatically sent to the server through "one-click authentication".
[0063] In another optional implementation of an embodiment of the present application, when the telephone number is the telephone number of the second terminal, obtaining the third deep link from the second terminal involved in the above step 202 may further include: scanning the coded information generated by the second terminal, wherein the coded information is generated by the second terminal after receiving the 5G message sent by the 5G message center based on the telephone number, and the 5G message carries the third deep link; the coded information includes the third deep link.
[0064] like Figure 3 As shown, a QR code can be displayed to the first terminal by clicking "Show QR code" in the notification bar of the second terminal. The first terminal can scan the QR code to obtain the third deep link. A corresponding message can then be displayed in the notification bar of the first terminal, and the second verification information can be submitted to the server through "one-click authentication" for verification by the server.
[0065] Through the above-mentioned embodiments of the present application, it can be seen that when the terminal currently logging into the APP is inconsistent with the phone number used for login, the deep link is notified to the login terminal via the QR code, and there is no need to remember or enter a random code. In other words, regardless of whether the terminal currently logging into the APP is consistent with the phone number used for login, login can be achieved through deep linking, without the user having to remember or enter a random code.
[0066] See also Figure 4 , Figure 4 This is a flow chart of the identity verification method provided by the embodiment of the present invention. Figure 3 . Figure 4 The identity verification method shown can be performed by the 5G message center.
[0067] like Figure 4 As shown, the identity verification method may include the following steps:
[0068] Step 401: Receive a second request sent by the server for pushing a message to the terminal, wherein the second request carries a second deep link and a phone number; the second deep link carries the first verification information;
[0069] Step 402: Send a 5G message carrying a third deep link to the terminal corresponding to the phone number, where the third deep link carries second verification information.
[0070] It can be seen that the deep link can be sent to the corresponding terminal based on the phone number through the 5G message center.
[0071] The various optional implementations introduced in the embodiments of the present invention may be implemented in combination with each other or individually if they do not conflict with each other, and the embodiments of the present invention do not limit this.
[0072] For ease of understanding, the present application will be explained below in conjunction with the specific implementation methods of the present application. Figure 5 The verification process in this specific implementation is as follows: when a user uses mobile terminal A and the APP used needs to authenticate the mobile phone number, the user uses the API interface provided by the APP server to initiate a verification code application request and uploads a Deeplink that the APP can identify at the same time. At the same time, the APP server generates a random verification code and, on the premise of having applied for access to the operator's MaaP platform, initiates a message delivery request to the MaaP platform as an authenticated Chatbot carrying a random verification code. The 5G message center generates a 5G message that complies with the operator's enterprise standards and carries recommended operations based on the received number and verification code. Currently, 5G messages are implemented based on protocols such as SIP.
[0073] If the user's device has completed SIP registration, a Deeplink URI containing a verification code can be sent to the user's phone via 5G messaging. A Deeplink is a resource descriptor URI in the format of [scheme]: / / [host]:[port] / [path]?[query], which can be used to call a specific page of a specific application on the mobile terminal.
[0074] That is to say, when the terminal receives a Deeplink URI that meets the APP definition, it can call up the relevant APP and complete the data transmission by clicking the suggested operation button. The Deeplink URI in the embodiment of the present application may be: "rcs: / / cmcc / auth?code=123456&expire=1599272486", which contains the two most important parameters: the code in the Query parameter represents a random verification code, and the expire represents the expiration timestamp. When developing the APP, it is registered according to the format defined by the above Deeplink for receiving and parsing parameters.
[0075] When requesting a verification code, the app will inform the app server of the URI format in the following JSON format. This allows the server to assemble the final Deeplink URI based on the JSON description when generating a random code, and then pass this URI to the 5G Message Center for final delivery to the user's mobile device.
[0076] If the device where the user intends to verify the number is the same as the device where the APP is located, Figure 6 As shown, the verification method steps include:
[0077] Step 601: The UE completes Session Initiation Protocol (SIP) registration with the 5G Message Center (5G MC).
[0078] Step 602: The UE applies for verification to the APP server and sends a Deeplink.
[0079] Step 603: The APP server generates a random code and an expiration time, where the random code and the expiration time are query parameters in the deep link;
[0080] Step 604: Submit a deep link to Maap via chatbot;
[0081] Step 605: Maap applies to 5G MC for message push to the terminal;
[0082] Step 606: The 5G MC sends a 5G message to the terminal.
[0083] Step 607: Click the deep link in the 5G message to jump to the APP;
[0084] Step 608: The terminal submits a random code to the APP server;
[0085] Step 609: The server returns the verification result.
[0086] Based on steps 601 to 609 above, a Deeplink recognizable by the app is uploaded through app customization. Users can click the suggested action button to access the Deeplink URI carried in the message, complete the jump and submit verification, and connect to subsequent logic without having to remember or enter a random code.
[0087] In the case that the device where the verification number is located is inconsistent with the device where the APP is located, the verification process is implemented in the forty miles of this application using a QR code as a medium for information sharing between terminals, such as Figure 7 As shown, the verification process includes the following steps:
[0088] Step 701: UE B completes Session Initiation Protocol registration with the 5G Message Center (5G MC).
[0089] Step 702: UE A applies for verification to the APP server and sends a Deeplink.
[0090] Step 703: The APP server generates a random code and an expiration time, where the random code and the expiration time are query parameters in the deep link.
[0091] Step 704: Submit deep link to Maap via chatbot;
[0092] Step 705: Maap applies to 5G MC for message push to the terminal;
[0093] Step 706: 5G MC sends a 5G message to UE B.
[0094] Step 707: UE B generates a QR code.
[0095] Step 708: UE A scans the QR code.
[0096] Step 709: UE A obtains the QR code information;
[0097] Step 710: Submit the random code to the APP server;
[0098] Step 711: The APP server returns the verification result.
[0099] Through steps 701 to 711 above, if the authentication initiating device and the verification code receiving device are inconsistent, cross-device authentication is completed based on the QR code generated by the Deeplink URI. The SIP protocol adds JSON describing the QR code display capability, relying on device-side capabilities (such as RCSSDK) to generate a QR code from a specified link. Users can complete verification and jump by scanning the QR code containing the Deeplink, eliminating the need to remember or enter a random code.
[0100] See also Figure 8 , Figure 8 The structure of the identity verification device provided by the embodiment of the present invention is Figure 1 The device is used on the server side, such as Figure 8 As shown, the identity verification device 800 includes: a first transceiver 82 and a first processor 84; wherein,
[0101] The first transceiver 82 is configured to receive a first identity authentication request for logging into an application APP, sent by a first terminal, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP;
[0102] The first processor 84 is configured to generate first verification information in response to the first request;
[0103] The first transceiver 82 is further configured to send a second request to the 5G message center, wherein the second request carries a second deep link and a phone number of the first verification information;
[0104] The first transceiver 82 is further configured to receive second verification information sent by the first terminal, wherein the second verification information is sent to the first terminal by the 5G message center via a 5G message based on the phone number;
[0105] The first processor 84 is further configured to verify the identity of the first terminal based on a match between the first verification information and the second verification information, and return a verification result to the first terminal.
[0106] Optionally, the first processor 84 in the embodiment of the present application is further used to generate first verification information including a random code and time information in response to the first request, wherein the time information is used to indicate the validity period of the random code; and use the random code and time information as query parameters in the second deep link.
[0107] Optionally, the first processor 84 in the embodiment of the present application is further configured to determine whether the random code in the second verification information is valid based on the time information in the second verification information; and if the random code in the second verification information is valid, determine whether the random codes in the second verification information match those in the first verification information;
[0108] The first transceiver 82 is further configured to return a verification success message to the first terminal if the second verification information matches the random code in the first verification information; and return a verification failure message to the first terminal if the second verification information does not match the random code in the first verification information.
[0109] Optionally, the first transceiver 82 is further used to send a second request to the 5G message center via the message platform MaaP.
[0110] It should be noted that the identity verification device 800 can realize the embodiment of the present invention. Figure 1 The various processes of the method embodiment and the achievement of the same beneficial effects are not described again here to avoid repetition.
[0111] The above is an explanation of the present application from the server side. The following is an explanation of the present application from the first terminal side.
[0112] See also Figure 9 , Figure 9 The structure of the identity verification device provided by the embodiment of the present invention is Figure 2 The device is applied to the first terminal side, such as Figure 9 As shown, the identity verification device 900 includes: a second transceiver 92 and a second processor 94; wherein,
[0113] The second transceiver 92 is configured to send a first request for identity authentication for logging into the application APP to the server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; and the server generates first verification information in response to the first request;
[0114] The second transceiver 92 is further configured to obtain a third deep link carrying the second verification information from the 5G message center or the second terminal;
[0115] a second processor 94 configured to send second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on a match between the second verification information and the first verification information;
[0116] The second transceiver 92 is further configured to receive the verification result fed back by the server.
[0117] Optionally, when the telephone number is the telephone number of the first terminal, the second transceiver 92 is further used to receive a 5G message sent by the 5G message center based on the telephone number, wherein the 5G message carries a third deep link.
[0118] Optionally, when the telephone number is the telephone number of the second terminal, the second transceiver 92 is also used to scan the coded information generated by the second terminal, wherein the coded information is generated by the second terminal after receiving a 5G message sent by the 5G message center based on the telephone number, and the 5G message carries a third deep link; the coded information includes the third deep link.
[0119] It should be noted that the identity verification device 900 can realize the embodiment of the present invention. Figure 2 The various processes of the method embodiment and the achievement of the same beneficial effects are not described again here to avoid repetition.
[0120] The above is an explanation of the present application from the server side and the first terminal side. The following is an explanation of the present application from the 5G message center.
[0121] See also Figure 10 , Figure 10 The structure of the identity verification device provided by the embodiment of the present invention is Figure 3 The device is applied to the first terminal side, such as Figure 10 As shown, the identity verification device 1000 includes: a third transceiver 102 and a third processor 104; wherein,
[0122] The third transceiver 102 is used to receive a second request sent by the server for pushing a message to the terminal, wherein the second request carries a second deep link and a phone number; the second deep link carries the first verification information; and send a 5G message carrying a third deep link to the terminal corresponding to the phone number, wherein the third deep link carries the second verification information.
[0123] It should be noted that the identity verification device 1000 can implement the embodiment of the present invention. Figure 4 The various processes of the method embodiment and the achievement of the same beneficial effects are not described again here to avoid repetition.
[0124] The embodiment of the present invention also provides a communication device. Figure 11 , the communication device may include a processor 1101, a memory 1102, and a program 11021 stored in the memory 1102 and executable on the processor 1101.
[0125] When the communication device is a terminal, the program 11021 can be executed by the processor 1101 to achieve Figure 1 、 2 Or any steps in the corresponding method embodiment in 4 and achieving the same beneficial effects are not repeated here.
[0126] When the communication device is a network side device, the program 11021 can be executed by the processor 1101 to achieve Figure 1 、 2 Or any steps in the corresponding method embodiment in 4 and achieving the same beneficial effects are not repeated here.
[0127] A person skilled in the art will understand that all or part of the steps of the above-mentioned embodiment method can be completed by hardware related to program instructions, and the program can be stored in a readable medium. The embodiment of the present invention also provides a readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned Figure 3 or Figure 4 Any steps in the corresponding method embodiments can achieve the same technical effects and will not be described again here to avoid repetition.
[0128] The storage medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0129] The above is a preferred implementation of the embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles described in the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.
Claims
1. A method for verifying an identity, executed by a server, characterized in that: The method comprises: Receiving a first identity authentication request for logging into an application APP sent by a first terminal, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; generating first verification information in response to the first request; Sending a second request to the 5G message center, wherein the second request carries a second deep link of the first verification information and the phone number; Receiving second verification information sent by the first terminal, wherein the second verification information is sent by the 5G message center to the first terminal through a 5G message based on the phone number; Verifying the identity of the first terminal based on whether the first verification information matches the second verification information, and returning a verification result to the first terminal; The generating first verification information in response to the first request includes: In response to the first request, generating the first verification information including a random code and time information, wherein the time information is used to indicate the validity period of the random code; The random code and the time information are used as query parameters in the second deep link.
2. The method according to claim 1, characterized in that Verifying the identity of the first terminal based on whether the first verification information matches the second verification information, and returning a verification result to the first terminal includes: Determining whether the random code in the second verification information is valid according to the time information in the second verification information; If the random code in the second verification information is valid, determining whether the random codes in the second verification information match those in the first verification information; If the second verification information matches the random code in the first verification information, returning a verification success message to the first terminal; If the random code in the second verification information does not match that in the first verification information, a verification failure message is returned to the first terminal.
3. The method according to claim 1, characterized in that The sending a second request to the 5G message center includes: The second request is sent to the 5G message center through the message as a platform MaaP.
4. A method for verifying an identity, executed by a first terminal, characterized in that: The method comprises: Sending a first request for identity authentication for logging into an application APP to a server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; the server generating first verification information in response to the first request; Obtain a third deep link carrying the second verification information from the 5G message center or the second terminal; sending the second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on a match between the second verification information and the first verification information; receiving a verification result fed back by the server; In a case where the telephone number is a telephone number of the second terminal, obtaining the third deep link from the second terminal includes: Scan the coded information generated by the second terminal, wherein the coded information is generated by the second terminal after receiving the 5G message sent by the 5G message center based on the phone number, and the 5G message carries the third deep link; the coded information includes the third deep link, and the conference initiation protocol SIP between the second terminal and the 5G message center includes JSON for describing the QR code display capability.
5. The method according to claim 4, characterized in that When the telephone number is the telephone number of the first terminal, obtaining the third deep link from the 5G message center includes: Receive a 5G message sent by the 5G message center based on the phone number, wherein the 5G message carries the third deep link.
6. A method for identity verification, performed by a 5G message center, characterized in that: The method comprises: Receiving a second request sent by the server for pushing a message to the terminal, wherein the second request carries a second deep link and a phone number; the second deep link carries the first verification information; A 5G message carrying a third deep link is sent to the terminal corresponding to the phone number, wherein the third deep link carries second verification information, and the conference initialization protocol SIP between the second terminal and the 5G message center includes JSON for describing the QR code display capability.
7. An identity verification device, characterized in that: The device comprises: a first transceiver and a first processor; wherein, The first transceiver is configured to receive a first identity authentication request for logging into an application APP, sent by a first terminal, wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; The first processor is configured to generate first verification information in response to the first request; The first transceiver is further configured to send a second request to the 5G message center, wherein the second request carries a second deep link of the first verification information and the phone number; The first transceiver is further configured to receive second verification information sent by the first terminal, wherein the second verification information is sent by the 5G message center to the first terminal via a 5G message based on the phone number; The first processor is further configured to verify the identity of the first terminal based on a match between the first verification information and the second verification information, and return a verification result to the first terminal; The step of, executing, by the first processor, generating, in response to the first request, first verification information, includes: In response to the first request, generating the first verification information including a random code and time information, wherein the time information is used to indicate the validity period of the random code; The random code and the time information are used as query parameters in the second deep link.
8. An identity verification device, executed by a first terminal, characterized in that: The device includes: a second transceiver and a second processor; wherein, The second transceiver is configured to send a first request for identity authentication for logging into an application APP to a server; wherein the first request carries a first deep link recognizable by the APP and a phone number for logging into the APP; and the server generates first verification information in response to the first request; The second transceiver is further configured to obtain a third deep link carrying second verification information from the 5G message center or the second terminal; the second processor being configured to send the second verification information extracted from the third deep link to the server, wherein the server verifies the identity of the first terminal based on a match between the second verification information and the first verification information; The second transceiver is further configured to receive a verification result fed back by the server; The second transceiver is also used to scan the coded information generated by the second terminal, wherein the coded information is generated by the second terminal after receiving the 5G message sent by the 5G message center based on the phone number, and the 5G message carries the third deep link; the coded information includes the third deep link, and the conference initialization protocol SIP between the second terminal and the 5G message center includes JSON for describing the QR code display capability.
9. An identity verification device, characterized in that: The device includes: a third transceiver and a third processor, wherein: The third transceiver is used to receive a second request sent by the server for pushing a message to the terminal, wherein the second request carries a second deep link and a phone number; the second deep link carries first verification information; and send a 5G message carrying a third deep link to the terminal corresponding to the phone number, wherein the third deep link carries the second verification information, and the conference initialization protocol SIP between the second terminal and the 5G message center includes JSON for describing the QR code display capability.
10. A communication device comprising: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; wherein the processor is configured to read the program in the memory to implement the steps of the identity verification method as described in any one of claims 1 to 3; or the steps of the identity verification method as described in any one of claims 4 to 5, or the steps of the identity verification method as described in claim 6.
11. A readable storage medium for storing a program, characterized in that: When the program is executed by a processor, the steps of the identity verification method according to any one of claims 1 to 3 are implemented; Or, the steps in the identity verification method according to any one of claims 4 to 5, or, the steps in the identity verification method according to claim 6.
Citation Information
Patent Citations
Sensitive operation verification method, terminal equipment, server and verification system
CN103825734A
Deep link authentication
CN112154636A