A method and system for authorized certification of technology services

Abstract

The application discloses a kind of authorization authentication method and system of science and technology service, and relate to science and technology service transaction field. Including: second server sends credit inquiry request, and obtains the public key sent by second server, the root certificate of second server, machine code acquisition tool and personal certificate making tool;According to the first server machine code containing the root certificate of second server generated by the machine code acquisition tool and personal certificate making tool;According to the random value generated by the first server machine code, and the random value is encrypted using the public key, to generate encrypted data, the encrypted data is sent to third server;Get third server decrypted after decryption random value, compare the decryption random value with random value, when at least two items in decryption random value and random value are same, then complete authorization authentication.

Description

Technical Field

[0001] This invention relates to the field of technology service transactions, and specifically to a method and system for authorizing and certifying technology services. Background Technology

[0002] Some existing websites do not restrict login MAC addresses, which prevents the identity of logged-in users from being identified. When a large influx of anonymous requests occurs, website performance is severely impacted, leading to the consumption of online service resources. Furthermore, in interactions related to technology services, there is insufficient attention paid to the protection of important personal privacy information. Therefore, there is an urgent need to find an authentication method that, with full authorization from participating credit reporting agencies, enables decentralized interaction and protects important personal privacy. Summary of the Invention

[0003] The main technical problem that this invention addresses is that existing technological services easily expose personal privacy information.

[0004] According to the first aspect, one embodiment provides a method for authorizing and authenticating a technology service, comprising:

[0005] Send a credit inquiry request to the second server and obtain the public key sent by the second server, the root certificate of the second server, the machine code acquisition tool, and the personal certificate creation tool;

[0006] The machine code acquisition tool and the personal certificate creation tool are used to generate a first server machine code containing the root certificate of the second server;

[0007] A random value is generated based on the machine code of the first server, and the random value is encrypted using the public key to generate encrypted data, which is then sent to the third server.

[0008] Obtain the decrypted random value from the third server, compare the decrypted random value with the random value, and complete the authorization authentication when at least two of the decrypted random value and the random value are the same.

[0009] In one embodiment, the random value includes at least one of: timestamp, loan request period, loan request amount, contract number, number of concurrent users, and debt information.

[0010] According to the second aspect, one embodiment provides a method for authorizing and authenticating a technology service, comprising:

[0011] Generate the root certificate for the second server based on its MAC address, and generate a public key randomly.

[0012] Obtain the credit inquiry request sent by the first server, and query the credit record of the first server according to the credit inquiry request;

[0013] When the first server's credit record is qualified, the public key, the second server's root certificate, the machine code acquisition tool, and the personal certificate creation tool are sent to the first server.

[0014] In one embodiment, the credit record includes at least one of debt information and overdue information.

[0015] In one embodiment, the step of "when the credit record of the first server is qualified" includes:

[0016] The credit record of the first server is qualified if the first server has no overdue information and the debt information of the first server is within the set threshold range.

[0017] According to a third aspect, one embodiment provides a method for authorizing and authenticating a technology service, comprising:

[0018] The encrypted data sent by the first server is obtained, and the encrypted data is decrypted using the private key of the third server to generate a decryption random value, which is then sent to the first server.

[0019] According to the fourth aspect, one embodiment provides an authorization and authentication system for technology services, including a first server, a second server, and a third server;

[0020] The first server sends a credit inquiry request to the second server;

[0021] The second server generates a root certificate for the second server based on the MAC address of the second server, and randomly generates a public key; the second server queries the credit record of the first server according to the credit query request, and when the credit record of the first server is qualified, the second server sends the public key, the root certificate of the second server, the machine code acquisition tool and the personal certificate creation tool to the first server;

[0022] The first server generates a first server machine code containing the root certificate of the second server based on the machine code acquisition tool and the personal certificate creation tool, and generates a random value based on the first server machine code; the first server encrypts the random value using the public key to generate encrypted data, and sends the encrypted data to the third server;

[0023] The third server uses its private key to decrypt the encrypted data to generate a random decryption value, and then sends the random decryption value to the first server.

[0024] The first server obtains the decrypted random value, compares the decrypted random value with the random value, and completes the authorization authentication when at least two of the decrypted random value and the random value are the same.

[0025] In one embodiment, the random value includes at least one of: timestamp, loan request period, loan request amount, contract number, number of concurrent users, and debt information.

[0026] In one embodiment, the step of "when the credit record of the first server is qualified" includes:

[0027] The credit record includes at least one of debt information and overdue information; when the first server has no overdue information and the debt information of the first server is within the set threshold range, the credit record of the first server is qualified.

[0028] According to a fifth aspect, one embodiment provides a computer-readable storage medium storing a program that can be executed by a processor to implement the method as described above.

[0029] According to the above embodiments, a method and system for authorizing and authenticating a technology service, as well as a computer-readable storage medium, are disclosed. A first server sends a credit inquiry request to a second server and obtains the public key, root certificate, machine code acquisition tool, and personal certificate creation tool sent by the second server. Then, based on the machine code acquisition tool and the personal certificate creation tool, a first server machine code containing the root certificate of the second server is generated. Next, a random value is generated based on the first server machine code, and the random value is encrypted using the public key to generate encrypted data, which is then sent to a third server. Finally, the decrypted random value obtained from the third server is obtained, and the decrypted random value is compared with the random value. Authorization and authentication are completed when at least two items are identical between the decrypted random value and the random value. This application, by generating a first server machine code containing the root certificate of the second server using the obtained root certificate, machine code acquisition tool, and personal certificate creation tool, can ensure the legality of transactions and the protection of important personal privacy. It also ensures that pirated software cannot be used normally, thus guaranteeing the performance and stability of the credit reporting system. Attached Figure Description

[0030] Figure 1 An authorization and authentication method flow for technology services in one embodiment Figure 1 ;

[0031] Figure 2 An authorization and authentication method flow for technology services in one embodiment Figure 2 ;

[0032] Figure 3 An authorization and authentication method path for technology services in one embodiment Figure 3 ;

[0033] Figure 4 This is a schematic diagram of an authorization and authentication system for technology services in one embodiment. Detailed Implementation

[0034] The present invention will now be described in further detail with reference to the accompanying drawings and specific embodiments. Similar elements in different embodiments are referred to by associated similar element reference numerals. In the following embodiments, many details are described to facilitate a better understanding of the present application. However, those skilled in the art will readily recognize that some features may be omitted in different situations, or may be replaced by other elements, materials, or methods. In some cases, certain operations related to the present application are not shown or described in the specification. This is to avoid obscuring the core parts of the present application with excessive description. For those skilled in the art, detailed description of these related operations is not necessary; they can fully understand the related operations based on the description in the specification and general technical knowledge in the art.

[0035] Furthermore, the features, operations, or characteristics described in the specification can be combined in any suitable manner to form various embodiments. At the same time, the steps or actions in the method description can be rearranged or adjusted in a manner obvious to those skilled in the art. Therefore, the various orders in the specification and drawings are only for the clear description of a particular embodiment and do not imply a necessary order, unless otherwise stated that a particular order must be followed.

[0036] The serial numbers assigned to components in this document, such as "first" and "second," are used only to distinguish the described objects and have no sequential or technical meaning. The terms "connection" and "linkage" used in this application, unless otherwise specified, include both direct and indirect connections (linkages).

[0037] Please refer to Figure 1 The authorization and authentication method for a technology service provided in this application, when executed by a first server, includes the following steps:

[0038] Step S110: Send a credit inquiry request to the second server and obtain the public key sent by the second server, the root certificate of the second server, the machine code acquisition tool, and the personal certificate creation tool.

[0039] In some embodiments, the server of technology service requester A sends a credit inquiry request to the shared personal information platform developed under the leadership of credit reporting agency B; that is, the first server sends a credit inquiry request to the second server. The first server is the server of technology service requester A, and the second server is the server of the shared personal information platform developed under the leadership of credit reporting agency B.

[0040] In some embodiments, the shared personal information platform responds to a credit inquiry request from technology service requester A by querying A's credit record. If A's credit record is satisfactory, the shared personal information platform sends A its public key, a root certificate containing the platform's MAC address, a machine code acquisition tool, and a personal certificate creation tool. In some embodiments, A's credit record primarily includes at least one of its debt information and overdue payment information. The shared personal information platform stores the retrieved credit record information for six months in its database; after six months, the data becomes invalid.

[0041] Step S120: Generate the first server machine code containing the root certificate of the second server based on the machine code acquisition tool and the personal certificate creation tool.

[0042] In some embodiments, when the credit record of technology service requester A is qualified, technology service requester A generates a machine code using a machine code acquisition tool and a personal certificate creation tool obtained from the shared personal information platform. This machine code contains the root certificate of the MAC address of the shared personal information platform. In some embodiments, technology service requester A may use a mobile terminal such as a mobile phone, tablet, or computer. A machine code corresponding to the mobile terminal, i.e., the first server machine code, is generated based on the obtained machine code acquisition tool and personal certificate creation tool. Since each mobile terminal used by technology service requester A corresponds to only one machine code, the generated first server machine code binds the mobile terminal used by technology service requester A to credit.

[0043] Step S130: Generate a random value based on the machine code of the first server, encrypt the random value using the public key to generate encrypted data, and send the encrypted data to the third server.

[0044] In some embodiments, the random value includes at least one of the following: timestamp, loan request period, loan request amount, contract number, number of concurrent users, and debt information.

[0045] In some embodiments, technology service requester A generates a random value based on the machine code of a first server. This random value includes at least one of the following: timestamp, loan request period, loan request amount, contract number, concurrent user count, and debt information. The random value is then encrypted using a public key sent by the shared personal information platform to generate encrypted data. Technology service requester A sends the generated encrypted data to technology service provider C, whose server serves as a third server.

[0046] Step S140: Obtain the decrypted random value from the third server, compare the decrypted random value with the random value, and complete the authorization authentication when at least two of the decrypted random value and the random value are the same.

[0047] In some embodiments, technology service provider C decrypts the encrypted data using its private key, generates a decryption random value, and sends the decryption random value to technology service requester A. If at least two items of the decryption random value and the random value generated by technology service requester A are the same, it proves that technology service requester A is indeed technology service requester A, technology service provider C is indeed technology service provider C, and the authorization authentication is completed through the certification of credit reporting agency B.

[0048] Please refer to Figure 2 The authorization and authentication method for a technology service provided in this application, when executed by a second server, includes the following steps:

[0049] Step S210: Generate the root certificate of the second server based on the MAC address of the second server, and randomly generate a public key.

[0050] In some embodiments, the root certificate for the MAC address (Media Access Control Address, LAN address) of the shared personal information platform developed under the leadership of participating agency B in the credit reporting process is the MAC address of the shared personal information platform, i.e., the MAC address of the second server. The MAC address of the shared personal information platform is unique. Simultaneously, the shared personal information platform also randomly generates a public key and stores it in its database.

[0051] Step S220: Obtain the credit inquiry request sent by the first server, and query the credit record of the first server according to the credit inquiry request.

[0052] In some embodiments, a shared personal information platform developed under the leadership of participating credit reporting agency B receives a credit inquiry request sent by technology service requester A, and queries A's credit record based on the request. In some embodiments, querying A's credit record mainly involves querying at least one of A's debt information and overdue payment information.

[0053] Step S230: When the credit record of the first server is qualified, send the public key, the root certificate of the second server, the machine code acquisition tool, and the personal certificate creation tool to the first server.

[0054] In some embodiments, the credit record of the first server is deemed qualified when the first server has no overdue information and its debt information is within a set threshold range. The shared personal information platform queries the credit record of technology service requester A based on the request. If technology service requester A has no overdue information, no debt, or its debt information is within a set threshold range, the shared personal information platform downloads the root certificate of a time-limited second server and sends the root certificate of the second server, a machine code acquisition tool, and a personal creation tool to technology service requester A.

[0055] Please refer to Figure 3 The authorization and authentication method for a technology service provided in this application, when executed by a third-party server, includes the following steps:

[0056] Step S310: Obtain the encrypted data sent by the first server, decrypt the encrypted data using the private key of the third server to generate a decryption random value, and send the decryption random value to the first server.

[0057] In some embodiments, the third server is the server of technology service provider C. Technology service provider C obtains encrypted data sent by technology service requester A and decrypts the encrypted data using its own private key, generating a decryption random value. Technology service provider C displays the decryption random value to technology service requester A. If at least two random values ​​in the decryption random value are the same as those in technology service requester A, it proves that technology service requester A is indeed technology service requester A, technology service provider C is indeed technology service provider C, and the authorization authentication is completed through the certification of credit reporting agency B.

[0058] Please refer to Figure 4 In some embodiments of this application, a technology service authorization and authentication system 400 is also provided, including a first server 410, a second server 420 and a third server 430, which will be described in detail below.

[0059] In some embodiments, the first server 410 is the server of technology service demander A, the second server 420 is the server of the shared personal information platform developed under the leadership of credit reporting agency B, and the third server 430 is the server of technology service provider C.

[0060] In some embodiments, the first server 410 sends a credit inquiry request to the second server 420. That is, technology service requester A sends a credit inquiry request to the shared personal information platform.

[0061] In some embodiments, the second server 420 generates its own root certificate based on its MAC address and randomly generates a public key. The shared personal information platform, developed under the leadership of participating agency B in the credit reporting process, randomly generates the public key and stores it in its database. Simultaneously, the shared personal information platform generates a root certificate containing the MAC address of the second server 420. The root certificate of the second server 420 is thus the root certificate containing its MAC address.

[0062] In some embodiments, the second server 420 queries the credit record of the first server 410 based on the credit inquiry request. When the credit record of the first server 410 is qualified, the second server 420 sends a public key, the root certificate of the second server 420, a machine code acquisition tool, and a personal certificate creation tool to the first server. When the shared personal information platform receives a credit inquiry request from technology service requester A, it queries the credit record of technology service requester A. In some embodiments, the credit record includes at least one of debt information and overdue information. When technology service requester A has no overdue information and its debt information is within a set threshold range, its credit record is qualified. In some embodiments, the shared personal information platform stores the credit record query results of technology service requester A in its database for six months. When the credit record of technology service requester A is qualified, the shared personal information platform automatically sends a public key, a root certificate containing the MAC address of the second server 420, a machine code acquisition tool, and a personal certificate creation tool to technology service requester A.

[0063] In some embodiments, the first server 410 generates a first server 410 machine code containing the root certificate of the second server 420 using a machine code acquisition tool and a personal certificate creation tool, and generates a random value based on the first server 410 machine code. Technology service requester A uses the acquired machine code acquisition tool and personal certificate creation tool to generate a machine code for technology service requester A, which contains the root certificate of the MAC address of the shared personal information platform. In some embodiments, technology service requester A may use a mobile terminal such as a mobile phone, tablet, or computer. The machine code corresponding to the mobile terminal, i.e., the first server machine code, is generated using the acquired machine code acquisition tool and personal certificate creation tool. Since each mobile terminal used by technology service requester A corresponds to only one machine code, the generated first server machine code binds the mobile terminal used by technology service requester A with credit. In some embodiments, the credit binding of the mobile terminal used by technology service requester A can also be achieved by binding the mobile terminal's password (face recognition or fingerprint, etc.) to the mobile terminal's machine code. Technology service requester A generates a random value based on the machine code of the first server 410. In some embodiments, the random value includes at least one of the following: timestamp, requested loan term, requested loan amount, contract number, number of concurrent users, and debt information.

[0064] In some embodiments, the first server 410 encrypts the random value using a public key to generate encrypted data, and sends the encrypted data to the third server 430. Technology service requester A encrypts the random value using a public key obtained from the shared personal information platform to generate encrypted data. Technology service requester A then sends the encrypted data to technology service provider C.

[0065] In some embodiments, the third server 430 uses its private key to decrypt the encrypted data to generate a decryption random value, and then sends the decryption random value to the first server 410. After obtaining the encrypted data, the technology service requester C uses its own private key to decrypt the encrypted data to generate a decryption random value. Furthermore, the technology service requester C sends the decryption random value to the technology service requester A.

[0066] In some embodiments, the first server 410 obtains a decrypted random value and compares it with a random value. If at least two of the decrypted random value and the random value are the same, authorization authentication is completed. When technology service requester A obtains the decrypted random value, it compares it with a random value. If at least two of the decrypted random value and the random value are the same, authorization authentication is completed, proving that technology service requester A is indeed technology service requester A, technology service provider C is indeed technology service provider C, and that the authentication is conducted through the credit reporting agency B.

[0067] In some embodiments, technology service provider C uploads the loan records and overdue payment records of technology service requester A to a shared personal information platform. In some embodiments, when technology service requester A repays the loan on time, he / she can apply to technology service provider C to remove the overdue payment record. Once technology service requester A's credit record is repaired and deemed satisfactory, he / she can reapply for loans and other services.

[0068] The authorization and authentication method and system for the technology services provided in this application can also be applied to the authorization deployment and login of security software. In security software login, a root certificate containing the MAC address of the server of the platform developing the security software is first obtained, and the machine code is determined based on this root certificate. Then, the machine code is encrypted using the RSA asymmetric encryption and decryption algorithm to generate an encrypted root certificate. The encrypted root certificate is sent to the hardware machine where the security software is to be deployed and installed. The machine code of the hardware machine is obtained and encrypted according to the encrypted root certificate and authorization information to generate encrypted ciphertext. Then, the authorization software decrypts the encrypted ciphertext through the decryption module. Users can access the security software through the login module, and the number of registered users and concurrent accesses is controlled by the encrypted root certificate.

[0069] The authorization and authentication method and system for technology services provided in this application are applicable to financial scenarios such as technology service transactions. They enable decentralized authorization and decentralized transactions, with participating credit reporting agencies constructing a shared personal information platform. Simultaneously, they complete multi-field verification (including using a 17-digit timestamp generated by the system time when running the shared personal information platform as a verification field) and collect necessary transaction (interaction) information (including debt information) in one go, preventing the leakage of unnecessary information. Furthermore, they combine C / S architecture (LAN architecture) and B / S architecture (WAN architecture), using software to decrypt integers and write limits such as the number of registered users and concurrent logins into the database. Combined with access control interfaces, these limits are controlled to manage the number of concurrent website accesses, ensuring system stability and performance.

[0070] Those skilled in the art will understand that all or part of the functions of the various methods in the above embodiments can be implemented by hardware or by computer programs. When all or part of the functions in the above embodiments are implemented by computer programs, the program can be stored in a computer-readable storage medium, which may include: read-only memory, random access memory, disk, optical disk, hard disk, etc., and the program is executed by a computer to achieve the above functions. For example, the program can be stored in the memory of a device, and when the program in the memory is executed by the processor, all or part of the above functions can be achieved. In addition, when all or part of the functions in the above embodiments are implemented by computer programs, the program can also be stored in a server, another computer, disk, optical disk, flash drive, or external hard drive, etc., and can be downloaded or copied to the memory of a local device, or the system of the local device can be updated. When the program in the memory is executed by the processor, all or part of the functions in the above embodiments can be achieved.

[0071] The above examples illustrate the present invention only to aid in understanding it and are not intended to limit the scope of the invention. Those skilled in the art can make various simple deductions, modifications, or substitutions based on the principles of this invention.

Claims

1. A method for authorizing and authenticating technology services, characterized in that, The authorization and authentication method for the technology service is applied to the first server, including: Send a credit inquiry request to the second server. Once the credit record is verified, obtain the public key sent by the second server, the root certificate of the second server, the machine code acquisition tool, and the personal certificate creation tool. The machine code acquisition tool and the personal certificate creation tool generate a first server machine code containing the root certificate of the second server; the root certificate of the second server includes the MAC address of the second server, and the first server machine code corresponds one-to-one with the mobile terminal of the first server. A random value is generated based on the machine code of the first server, and the random value is encrypted using the public key to generate encrypted data, which is then sent to the third server. Obtain the decrypted random value from the third server, compare the decrypted random value with the random value, and complete the authorization authentication when at least two of the decrypted random value and the random value are the same.

2. The authorization and authentication method for technology services as described in claim 1, characterized in that, The random value includes at least one of the following: timestamp, loan request period, loan request amount, contract number, number of concurrent users, and debt information.

3. A method for authorizing and authenticating technology services, characterized in that, The authorization and authentication method for the technology service is applied to the second server, including: Generate the root certificate for the second server based on its MAC address, and generate a public key randomly. Obtain the credit inquiry request sent by the first server, and query the credit record of the first server according to the credit inquiry request; When the credit record of the first server is qualified, the public key, the root certificate of the second server, the machine code acquisition tool, and the personal certificate creation tool are sent to the first server. The first server generates a first server machine code containing the root certificate of the second server based on the machine code acquisition tool and the personal certificate creation tool; the first server machine code corresponds one-to-one with the mobile terminal of the first server. The first server generates a random value based on its machine code and encrypts the random value using the public key to generate encrypted data, which is then sent to the third server. The first server obtains the decrypted random value from the third server, compares the decrypted random value with the random value, and completes the authorization authentication when at least two of the decrypted random value and the random value are the same.

4. The authorization and authentication method for technology services as described in claim 3, characterized in that, The credit record includes at least one of debt information and overdue information.

5. The authorization and authentication method for technology services as described in claim 4, characterized in that, When the credit record of the first server is qualified, it includes: The credit record of the first server is qualified if the first server has no overdue information and the debt information of the first server is within the set threshold range.

6. A technology service authorization and authentication system, characterized in that, Including the first server, the second server, and the third server; The first server sends a credit inquiry request to the second server; The second server generates a root certificate for the second server based on the MAC address of the second server, and randomly generates a public key; the second server queries the credit record of the first server according to the credit query request, and when the credit record of the first server is qualified, the second server sends the public key, the root certificate of the second server, the machine code acquisition tool and the personal certificate creation tool to the first server. The first server generates a first server machine code containing the root certificate of the second server based on the machine code acquisition tool and the personal certificate creation tool, and generates a random value based on the first server machine code. The first server machine code corresponds one-to-one with the mobile terminal of the first server. The first server uses the public key to encrypt the random value to generate encrypted data, and sends the encrypted data to the third server. The third server uses its private key to decrypt the encrypted data to generate a random decryption value, and then sends the random decryption value to the first server. The first server obtains the decrypted random value, compares the decrypted random value with the random value, and completes the authorization authentication when at least two of the decrypted random value and the random value are the same.

7. The technology service authorization and authentication system as described in claim 6, characterized in that, The random value includes at least one of the following: timestamp, loan request period, loan request amount, contract number, number of concurrent users, and debt information.

8. The technology service authorization and authentication system as described in claim 6, characterized in that, When the credit record of the first server is qualified, it includes: The credit record includes at least one of debt information and overdue information; when the first server has no overdue information and the debt information of the first server is within the set threshold range, the credit record of the first server is qualified.

9. A computer-readable storage medium, characterized in that, The medium stores a program that can be executed by a processor to implement the method as described in any one of claims 1-5.

Images