A set-based public authentication method and system
By establishing a set-based public authentication method in the business systems of the telecommunications industry, the problems of time-consuming, labor-intensive, and system complexity caused by the separate authentication methods of multiple business modules are solved, and fast, clear authentication logic and efficient authentication process are achieved.
Patent Information
- Application Number
- CN202210787384.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-07-04
- Publication Date
- 2026-02-06
- Estimated Expiration
- 2042-07-04
AI Technical Summary
In existing technologies, the separate development and verification methods for multiple business modules in the telecommunications industry are time-consuming, labor-intensive, and inconsistent, resulting in complex system implementation and difficulty in maintenance.
A set-based public authentication method is adopted. By determining the authentication method of each business module in the business system and establishing a set of its verification methods, unified authentication of business modules is achieved, including general, comprehensive and mandatory authentication.
It enables rapid matching of existing authentication items and module authentication items, with clear code logic, improving authentication efficiency and ease of maintenance.
Smart Images
Figure CN115473645B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of information verification, and more particularly, to a set-based public authentication method and system. BACKGROUND
[0002] Public authentication is a way of checking user identity in the telecommunications industry, and modules need to be checked before handling business (or during business, verification is required). Common verification methods include service password, random code, ID number, call record authentication, and other verification methods such as broadband address and SIM card.
[0003] Many business modules need to be verified, and multiple business modules need to develop verification methods, which is time-consuming and laborious, and there are various problems such as style prompts and non-uniformity.
[0004] We have summarized the basic authentication methods required by each module for authentication and provided a public authentication function.
[0005] In the prior art, each module is configured with a corresponding authentication group according to opcode number, and when entering a certain module, the existing authentication items of the current user are compared with the authentication group of the current module according to certain rules, and if the matching is passed, the business is automatically accepted.
[0006] The implementation of the existing system coverage authentication requires writing a large amount of logic judgment, which is complex to implement and is not conducive to maintenance and efficiency. SUMMARY
[0007] To solve the above problems, the present application provides a set-based public authentication method, which includes:
[0008] Determine the authentication method of each business module in the plurality of business modules of the business system, and establish a set of authentication methods of each business module;
[0009] After the authentication method issued by any one of the business modules in the business system completes the authentication, a set of authentication methods after the authentication of any one of the business modules is established;
[0010] The set of authentication methods is used to complete the public authentication of the authentication method of the business module.
[0011] Optionally, the public authentication includes general authentication, coverage authentication, and mandatory authentication.
[0012] Optionally, if another business module in the business system sends a verification mode within a preset time after any one of the business modules sends a verification mode to complete verification, it is checked whether the verification mode set of the another business module intersects with the verification mode set, if there is an intersection, the verification mode of the another business module is subjected to an overlay authentication.
[0013] Optionally, the judgment mode of the general authentication is as follows:
[0014] If the authenticated set of any one of the business modules is not empty, the general authentication of any one of the business modules is passed.
[0015] Optionally, the triggering mode of the forced authentication is as follows:
[0016] If the authentication set of any one of the business modules is not empty, the forced authentication of any one of the business modules is triggered.
[0017] Optionally, the judgment mode of the overlay authentication is as follows:
[0018] If the intersection of the verification mode set S of any one of the business modules after verification and the verification mode set A of another business module is not empty, it is determined that the overlay authentication of the another business module is passed.
[0019] If the intersection of the verification mode set S of any one of the business modules after verification and the verification mode set A of another business module is the set A, it is determined that the overlay authentication of the another business module is passed.
[0020] Optionally, it further includes: obtaining the verification mode set of any one of the business modules and the verification mode set of another business module, if the verification mode set of any one of the business modules and the verification mode set of another business module exist an intersection, it is determined that the any one of the business modules and the another business module can be subjected to an overlay authentication.
[0021] Optionally, if there is a special business in the business module, the special business is subjected to a permission setting, and the special business after the permission setting is not subjected to an overlay authentication.
[0022] Optionally, the business module which performs a business for the first time after the business system is run is not subjected to an overlay authentication.
[0023] Optionally, if the verification mode is sent after a preset time, the another business module is not subjected to an overlay authentication.
[0024] The application further provides a public authentication system based on a set, which includes:
[0025] The set determination module determines an authentication mode of each of a plurality of business modules of a business system, and establishes a set of the authentication mode of each of the business modules;
[0026] The subset determination unit establishes a set of authentication modes after verification of any one of the business modules is completed in the business system;
[0027] The verification module completes common authentication of the authentication mode of the business module through the set of authentication modes.
[0028] Optionally, the common authentication includes general authentication, covering authentication and compulsory authentication.
[0029] Optionally, if another business module of the business system issues an authentication mode within a preset time after the authentication mode issued by any one of the business modules is completed, it is checked whether the set of authentication modes of the another business module intersects with the set of authentication modes, and if there is an intersection, the authentication mode of the another business module is subjected to covering authentication.
[0030] Optionally, the determination mode of the general authentication is as follows:
[0031] If the authenticated set of any one of the business modules is not empty, the general authentication of any one of the business modules is passed.
[0032] Optionally, the triggering mode of the compulsory authentication is as follows:
[0033] If the authentication set of any one of the business modules is not empty, the compulsory authentication of any one of the business modules is triggered.
[0034] Optionally, the determination mode of the covering authentication is as follows:
[0035] If the intersection of the set S of authentication modes after verification of any one of the business modules is completed and the set A of authentication modes of another business module is not empty, it is determined that the covering authentication of the another business module is passed.
[0036] If the intersection of the set S of authentication modes after verification of any one of the business modules is completed and the set A of authentication modes of another business module is the set A, it is determined that the covering authentication of the another business module is passed.
[0037] Optionally, the authentication module is further configured to: acquire the set of authentication modes of any one of the business modules and the set of authentication modes of another business module, and if there is an intersection between the set of authentication modes of any one of the business modules and the set of authentication modes of another business module, it is determined that the any one of the business modules and the another business module can be subjected to covering authentication.
[0038] Optionally, if there is a special service in the service module, the special service is set with authority, and the special service set with authority is not subjected to the covering authentication.
[0039] Optionally, the service module that performs the service for the first time after the service system is run is not subjected to the covering authentication.
[0040] Optionally, if the verification mode is sent after the preset time, another service module is not subjected to the covering authentication.
[0041] The present application can more quickly determine the fast matching of the existing authentication item and the module authentication item, and the code logic is more clear. BRIEF DESCRIPTION OF DRAWINGS
[0042] Figure 1 is a flow chart of the method of the present application;
[0043] Figure 2 is a collection diagram of the authentication item and the module authentication item of the method embodiment of the present application;
[0044] Figure 3 is a structure diagram of the system of the present application. DETAILED DESCRIPTION
[0045] Reference will now be made to the drawings to describe the exemplary embodiments of the present application in detail. The present application can be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and fully convey the scope of the application to those skilled in the art. The terminology used in the description of the exemplary embodiments presented herein is not intended to be limiting. Identical elements are denoted by the same reference numerals throughout the drawings.
[0046] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.
[0047] The present application proposes a set-based public authentication method, comprising:
[0048] determining the authentication mode of each service module of a plurality of service modules of a service system, and establishing a set of the verification mode of each service module;
[0049] after the verification mode sent by any one of the service modules in the service system is completed, establishing a set of the verification mode after the verification of any one of the service modules is completed;
[0050] This invention proposes a set-based public authentication method, such as... Figure 1 As shown, it includes:
[0051] Determine the authentication method for each business module in the multiple business modules of the business system, and establish a set of authentication methods for each business module;
[0052] After any verification method issued by any business module in the business system completes the verification, a set of verification methods after the verification of any business module is completed is established.
[0053] By using a set of verification methods, public authentication is achieved for the verification methods of business modules.
[0054] Public certification includes: general certification, comprehensive certification, and mandatory certification.
[0055] If another business module in the business system issues a verification method within a preset time after the verification method issued by any other business module has completed verification, check whether the set of verification methods of the other business module intersects with the set of verification methods. If so, perform coverage authentication on the verification methods of the other business module.
[0056] The determination method for general certification is as follows:
[0057] If the authenticated set of any business module is not empty, then the general authentication of any business module is passed.
[0058] The mandatory authentication is triggered in the following ways:
[0059] If the authentication set of any business module is not empty, then any business module will be triggered to perform forced authentication.
[0060] The method for determining coverage authentication is as follows:
[0061] If the intersection of the set of verification methods S after the verification of any business module is completed and the set of verification methods A of another business module is not empty, then the coverage verification of the other business module is determined to be passed.
[0062] If the intersection of the set S of verification methods after the verification of any business module is completed and the set A of verification methods of another business module is set A, then the coverage verification of the other business module is determined to be passed.
[0063] Wherein, the collection of the authentication mode of any one business module in the business system and the collection of the authentication mode of another business module are obtained, and if the collection of the authentication mode of any one business module and the collection of the authentication mode of another business module exist intersection, it is determined that the any one business module and the another business module can perform the covering authentication.
[0064] Wherein, if there is a special business in the business module, the permission of the special business is set, and the special business after setting the permission does not perform the covering authentication.
[0065] Wherein, the business module which performs the business for the first time after the business system runs does not perform the covering authentication.
[0066] Wherein, if the authentication mode is sent after the preset time, the another business module does not perform the covering authentication.
[0067] The collection A of the authentication mode of any one business module (A module) in the business system and the collection B of the authentication mode of another business module (B module) are obtained, and if the collection of the authentication mode of any one business module and the collection of the authentication mode of another business module exist intersection S, as shown in Figure 2 , it is determined that the any one business module and the another business module can perform the covering authentication.
[0068] The public authentication related rules used in the application are as follows:
[0069] Module A, B, C, E, F, the authentication mode a, b, c, a+b, a or b available in the module;
[0070] Therefore, before the operation of the A module, the authentication of the mode a is required. For example, for the handling of 1100 stop and restart machine, the authentication of the identity card or the random code is required to perform the operation. The user or the customer needs to complete the related authentication before the business, which is called the general authentication.
[0071] When a user handles the A business, the authentication of the mode a is required, and after the authentication of the mode a is passed, the user enters the A module to handle the business. The user has the authentication mode which is valid within the effective time (for example, 30 min, the authentication mode of the random code is issued; or the authentication information of the identity card is valid for this login;). The E business is handled, and at this time, according to the authentication information within the effective time, it is determined that the user does not have to recheck this time, and has the permission to enter the module to operate, and directly enters the module to operate. When the business is handled, the authentication mode of the user or the customer which is authenticated within the effective time covers the authentication mode required to enter the module this time, and the user can directly enter the module to handle the business, which is called the covering authentication.
[0072] When a user applies for service A, they need to undergo verification a. After successful verification a, they can enter module A to process the service. Within the valid timeframe of the verified method (e.g., 30 minutes, for verification using a randomly generated code), the user can apply for service F. Service F differs from service E; the module operation is more sensitive, requiring the user to authenticate every time they enter the module. In this case, the user must choose either verification method a or b and successfully authenticate before they can process the service. This mandatory authentication of user or customer information before processing any service is called mandatory authentication.
[0073] This invention also proposes a set-based public authentication system 200, such as... Figure 2 As shown, it includes:
[0074] The set determination module 201 determines the authentication method of each business module among multiple business modules of the business system, and establishes a set of authentication methods for each business module;
[0075] Subset determination unit 202, after any verification method issued by any business module in the business system completes the verification, establishes a set of verification methods after the verification of any business module has been completed.
[0076] Verification module 203 performs public authentication on the verification methods of business modules through a set of verification methods.
[0077] Public certification includes: general certification, comprehensive certification, and mandatory certification.
[0078] If another business module in the business system issues a verification method within a preset time after the verification method issued by any other business module has completed verification, check whether the set of verification methods of the other business module intersects with the set of verification methods. If so, perform coverage authentication on the verification methods of the other business module.
[0079] The determination method for general certification is as follows:
[0080] If the authenticated set of any business module is not empty, then the general authentication of any business module is passed.
[0081] The mandatory authentication is triggered in the following ways:
[0082] If the authentication set of any business module is not empty, then any business module will be triggered to perform forced authentication.
[0083] The method for determining coverage authentication is as follows:
[0084] If the intersection of the verification mode set S of any one business module after verification and the verification mode set A of another business module is not empty, it is determined that the coverage verification of another business module is passed.
[0085] If the intersection of the verification mode set S of any one business module after verification and the verification mode set A of another business module is the set A, it is determined that the coverage verification of another business module is passed.
[0086] The authentication module 203 is further configured to: acquire the verification mode set of any one business module and the verification mode set of another business module in the business system, and if the verification mode set of any one business module and the verification mode set of another business module have an intersection, it is determined that the any one business module and another business module can perform coverage authentication.
[0087] If there is a special business in the business module, the special business is subjected to permission setting, and the special business after permission setting does not perform coverage authentication.
[0088] The business module that performs business handling for the first time after the business system runs does not perform coverage authentication.
[0089] If the verification mode is sent after a preset time, another business module does not perform coverage authentication.
[0090] The present application can more quickly determine the fast matching of existing authentication items and module authentication items, and the code logic is more clear.
[0091] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can adopt a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program codes. The solutions in the embodiments of the present application can be implemented in various computer languages, such as object-oriented programming language Java and interpreted scripting language JavaScript.
[0092] The embodiments of methods, devices (systems), and computer program products of the application can be described in reference to flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products according to embodiments of the application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products. Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products
[0093] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products. Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products
[0094] These computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products. Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products Figure 1 The flowchart illustrations and / or block diagrams of the flowchart and / or block diagrams of the methods, devices (systems), and computer program products
[0095] While the preferred embodiments of the application have been described, additional variations and modifications can be made to the embodiments by those of skill in the art once they have the benefit of the present disclosure. Therefore, the appended claims are intended to encompass within their scope all possible variations and modifications of the preferred embodiments of the application. The foregoing description details certain embodiments of the application. It will be apparent, however, that the application can be practiced otherwise than as specifically described. Thus, the present application should not be limited by the above described embodiments, but only by the claims that follow.
[0096] It will be apparent to those skilled in the art that various modifications and variations can be made to the present application without departing from the spirit or scope of the application. Thus, it is intended that the present application cover the modifications and variations of this application provided they come within the scope of the appended claims and their equivalents.
Claims
1. A set-based common authentication method, the method comprising: determining an authentication manner of each of a plurality of business modules of a business system, and establishing a set of the authentication manner of each of the business modules; after an authentication manner issued by any one of the business modules completes authentication, establishing a set of the authentication manner after authentication completion of any one of the business modules; completing common authentication of the authentication manner of the business module through the set of the authentication manner after authentication completion; the common authentication comprising general authentication, covering authentication and mandatory authentication; if another business module of the business system issues an authentication manner within a preset time after the authentication manner issued by any one of the business modules completes authentication, checking whether there is an intersection between a set of the authentication manner of the another business module and the set of the authentication manner, and if there is, performing covering authentication on the authentication manner of the another business module; a determination manner of the general authentication being as follows: if the authenticated set of any one of the business modules is not empty, the general authentication of any one of the business modules is passed; a triggering manner of the mandatory authentication being as follows: if the authentication set of any one of the business modules is not empty, the mandatory authentication of any one of the business modules is triggered; a determination manner of the covering authentication being as follows: if the intersection between the set S of the authentication manner after authentication completion of any one of the business modules and a set A of the authentication manner of another business module is not empty, it is determined that the covering authentication of the another business module is passed; if the intersection between the set S of the authentication manner after authentication completion of any one of the business modules and the set A of the authentication manner of another business module is the set A, it is determined that the covering authentication of the another business module is passed; obtaining the set of the authentication manner of any one of the business modules and the set of the authentication manner of another business module of the business system, and if there is an intersection between the set of the authentication manner of any one of the business modules and the set of the authentication manner of another business module, it is determined that the covering authentication between any one of the business modules and the another business module can be performed.
2. The method according to claim 1, if there is a special business in the business modules, a permission of the special business is set, and the special business after the permission setting does not perform covering authentication.
3. The method according to claim 1, the business module which performs business for the first time after the business system runs does not perform covering authentication.
4. The method according to claim 1, if an authentication manner is issued after a preset time, the another business module does not perform covering authentication.
5. A set-based common authentication system, the system comprising: a set determination module, determining an authentication manner of each of a plurality of business modules of a business system, and establishing a set of the authentication manner of each of the business modules; a subset determination unit, after an authentication manner issued by any one of the business modules completes authentication, establishing a set of the authentication manner after authentication completion of any one of the business modules; an authentication module, completing common authentication of the authentication manner of the business module through the set of the authentication manner after authentication completion. The public authentication includes general authentication, covering authentication and compulsory authentication; If another business module in the business system issues an authentication mode within a preset time after any one of the business modules completes authentication in the authentication mode, the system checks whether the set of authentication modes of the another business module intersects with the set of authentication modes, and if there is an intersection, the system performs covering authentication on the authentication mode of the another business module; The judgment mode of the general authentication is as follows: If the authenticated set of any one of the business modules is not empty, the general authentication of any one of the business modules is passed; The triggering mode of the compulsory authentication is as follows: If the authentication set of any one of the business modules is not empty, the compulsory authentication of any one of the business modules is triggered; The judgment mode of the covering authentication is as follows: If the intersection of the set S of authentication modes of any one of the business modules after authentication completion and the set A of authentication modes of another business module is not empty, it is determined that the covering authentication of the another business module is passed; If the intersection of the set S of authentication modes of any one of the business modules after authentication completion and the set A of authentication modes of another business module is the set A, it is determined that the covering authentication of the another business module is passed; The authentication module is further configured to acquire the set of authentication modes of any one of the business modules and the set of authentication modes of another business module, and if the set of authentication modes of any one of the business modules and the set of authentication modes of another business module have an intersection, it is determined that covering authentication can be performed between the any one of the business modules and the another business module.
6. The system of claim 5, if there is a special business in the business modules, the system sets the authority of the special business, and the special business after the authority setting does not perform covering authentication.
7. The system of claim 5, the business module that performs business for the first time after the business system runs does not perform covering authentication.
8. The system of claim 5, if an authentication mode is issued after a preset time, another business module does not perform covering authentication.
Citation Information
Patent Citations
Authority authentication method and device based on authentication chain, medium and electronic equipment
CN111010368A