SIM card-based machine card verification anti-fraud method and system

Abstract

The invention relates to the technical field of anti-fraud, and particularly discloses a machine card verification anti-fraud method and system based on an SIM (Subscriber Identity Module) card, which can be used for collecting terminal equipment, SIM card number information and user information through a triggering mechanism of the SIM card, and can be used for achieving the anti-fraud effect through the prompt of a popup window and the calling of a browser. Therefore, the user information, the card number information of the SIM card and the equipment information of the terminal equipment are closely associated, verification of the card number information, the user information and the terminal equipment is completed, and when the information is inconsistent, shutdown processing is carried out in time, the SIM card is prevented from being embezzled and falsely used, traceability is achieved, safety is guaranteed, and fraud is avoided.

Description

Technical Field

[0001] The present invention relates to the field of anti-fraud technology, and in particular to a SIM card-based machine card verification anti-fraud method and system. Background Art

[0002] At present, the problem of telecommunications network fraud is becoming more and more serious. Fraudsters use various means such as telephones to commit fraud, such as illegally stealing and purchasing other people's SIM cards for fraud. Basic telecommunications companies are the key force in combating telecommunications network fraud. The SIM cards they manage are trusted devices for users. However, the current SIM card will not perform any security detection operations when the terminal device is replaced or plugged in. This results in the SIM card being unable to protect its security in the first place after it is stolen by others, and the security of the SIM card is relatively low. Summary of the invention

[0003] The present invention is intended to provide a SIM card-based machine card verification anti-fraud method and system to solve the deficiencies in the prior art. The technical problem to be solved by the present invention is achieved through the following technical solutions.

[0004] The present invention provides a SIM card-based machine card verification anti-fraud method, which is applied to a SIM card, wherein the SIM card is installed on a terminal device, and the method comprises: Obtaining the first trigger event, wherein the first trigger event includes the first insertion of a SIM card into a terminal device, the first removal of a SIM card from a terminal device, the first power-on activation of a SIM card on a terminal device, and the first restart of a terminal device; Automatically identify the device information of the terminal device and determine whether it is the first time to identify it; If it is the first identification, the user's first identity information is obtained, and associated and bound with the device information and the user's first identity information to generate associated information, and the associated information is sent to the machine card trusted platform; Acquire a secondary trigger event, collect user information and terminal information of the terminal device, and send the user information and terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; The verification result is received, and a normal use instruction or a shutdown processing instruction is executed according to the verification result.

[0005] In an optional implementation manner, after the step of obtaining the first trigger event, the method further includes: Presetting an initial key containing preset bytes; Based on the national secret algorithm, the initial key of the first preset byte in the preset bytes is taken as the data encryption key; The SMS data is encrypted using the national secret algorithm based on the data encryption key.

[0006] In an optional implementation, the associated information includes the user's initial identity information, the user's facial information, device information, SIM card number information, and an identification number corresponding to the SIM card number information.

[0007] In an optional implementation, the machine-card trusted platform queries the corresponding identification number according to the SIM card number information in the association information; Generate a card writing instruction according to the identification number; Encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of a data SMS; The SIM card triggers an active command according to the data SMS, runs the active command on the terminal device in a pop-up screen, and launches a browser on the terminal device to open a verification window.

[0008] In an optional implementation manner, if it is the first identification, the step of obtaining user information and associating and binding it with device information and user information to generate associated information includes: Obtain the user's first identity information and SIM card number information, and determine whether the user's first identity information and SIM card number information correspond; If the user's first identity information and SIM card number information correspond, a browser is launched on the terminal device, and face verification is performed based on a liveness detection method, and a face verification result is generated; The device information, the user's first identity information, the SIM card number information and the face verification result are associated and bound to generate associated information.

[0009] In an optional implementation manner, the machine-card trusted platform verifies according to the associated information and generates a verification result, including: The device-card trusted platform user obtains the user's first identity information, user face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information in the associated information; Determine whether the user's first identity information, user face information, device information, SIM card number information, and the identification number corresponding to the SIM card number information correspond to the user information and terminal information; If they correspond, a verification result of successful verification is generated; If they do not correspond, a verification result indicating verification failure is generated.

[0010] The present invention provides a SIM card-based machine card verification anti-fraud system, the system comprising: The module for obtaining the first trigger event is used to obtain the first trigger event, wherein the first trigger event includes the event of inserting the SIM card into the terminal device for the first time, the event of removing the SIM card from the terminal device for the first time, the event of activating the SIM card on the terminal device for the first time, and the event of restarting the terminal device for the first time; Automatic identification module, used to automatically identify the device information of the terminal device and determine whether it is the first identification; An information acquisition module is used to acquire the user's first identity information if it is the first identification, associate and bind it with the device information and the user's first identity information, generate association information, and send the association information to the machine card trusted platform; A secondary trigger event acquisition module is used to acquire a secondary trigger event, collect user information and terminal information of the terminal device, and send the user information and terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; The receiving module is used to receive the verification result and execute the normal use instruction or the shutdown processing instruction according to the verification result.

[0011] In an optional embodiment, it also includes: A preset module, used for presetting an initial key containing preset bytes; A selection module is used to take the initial key of the first preset position byte in the preset bytes as the data encryption key based on the national secret algorithm; The encryption module is used to encrypt SMS data using the national secret algorithm based on the data encryption key.

[0012] In an optional implementation, the associated information includes the user's initial identity information, the user's facial information, device information, SIM card number information, and an identification number corresponding to the SIM card number information.

[0013] In an optional implementation, the machine-card trusted platform is used to query the corresponding identification number according to the SIM card number information in the association information; It is also used to generate a card writing instruction based on the identification number; It is also used to encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of data SMS; The SIM card is used to trigger an active command according to a data SMS, run the active command on the terminal device in a pop-up screen, and launch a browser on the terminal device to open a verification window.

[0014] The embodiments of the present invention include the following advantages: The SIM card-based machine-card verification anti-fraud method and system provided in the embodiment of the present invention can complete the collection of terminal equipment, SIM card number information, and user information through the trigger mechanism of the SIM card, and through pop-up prompts and browser calls, the user information, SIM card number information, and device information of the terminal equipment are closely associated to complete the verification of the card number information, user information, and terminal equipment. When the information is inconsistent, the machine is shut down in time to prevent the theft and impersonation of the SIM card, and the source can be traced to ensure safety and prevent fraud. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 It is a flow chart of steps of an embodiment of a SIM card-based machine card verification anti-fraud method of the present invention; Figure 2 It is a structural schematic diagram of an embodiment of a SIM card-based machine card verification anti-fraud system of the present invention. DETAILED DESCRIPTION

[0016] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0017] See also Figure 1 , Figure 2 The present invention provides a SIM card-based machine card verification anti-fraud method, which is applied to a SIM card, wherein the SIM card is installed on a terminal device, and the method comprises: S1. Obtaining the first triggering event, wherein the triggering event includes the first insertion of a SIM card into a terminal device, the first removal of a SIM card from a terminal device, the first power-on activation of a SIM card on a terminal device, and the first restart of a terminal device; S2. Automatically identify the device information of the terminal device and determine whether it is the first identification; S3. If it is the first identification, the user information is obtained and associated with the device information and the user information to generate associated information, and the associated information is sent to the machine card trusted platform; S4, obtaining a secondary trigger event, collecting user information and terminal information of the terminal device, and sending the user information and terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; S5. Receive the verification result, and execute a normal use instruction or a shutdown processing instruction according to the verification result.

[0018] In the above step S1, the SIM card will be pre-installed with an anti-fraud card application, which is developed based on the GP (GlobalPlatform, International Standards Organization) specification and can be registered to the terminal phone through the terminal device startup time, and then the first trigger event can be obtained. When the first trigger event occurs, the anti-fraud card application automatically executes, that is, the SIM card automatically executes steps S2-S5. In addition, the anti-fraud card application has the following functions: pop-up screen / call browser, terminal device information reading / verification, data encryption storage, user information recording, and data encryption transmission.

[0019] In the above step S2, in response to the first triggering event, when the user restarts the terminal device, starts the device for the first time, or inserts or removes the SIM card, the SIM card automatically identifies the device information of the terminal device, namely, the IMEI (International Mobile Equipment Identity) information and records it, and verifies whether it is the first time.

[0020] In the above step S3, if it is the first identification, a pop-up screen can be pulled up to remind the user, and the browser can be pulled up to obtain the SIM card number information and the user's first identity information filled in by the user, and the card number information and the user's first identity information are verified. The card number information here refers to the mobile phone number and the corresponding identification number. After the verification is completed, the user's facial information is collected and verified, and the user's facial information, SIM card number information, user's first identity information and device information are associated and bound. If it is not the first identification, it means that the device information and user information have been associated and bound, and the associated information has been generated. At this time, a pop-up screen is pulled up to remind the user that it is not the first identification, and the user information is collected again through the browser, and the collected user information is verified. If the user information is inconsistent with the device information and the card number information, it is collected again or replaced, that is, the user's facial information, SIM card number information, user's first identity information and device information are collected again or replaced, and associated and bound.

[0021] In the above steps S4 and S5, after the first trigger, it is possible to monitor in real time whether any trigger event in the first trigger event is triggered again, so as to obtain the secondary trigger event, and collect the user information and the terminal information of the terminal device. The terminal information includes the device information in the above steps, and also includes the SIM card number information and the identification number corresponding to the SIM card number information. The user information and the terminal information are sent to the machine-card trusted platform. The machine-card trusted platform verifies the user information according to the associated information. The machine-card trusted platform has the capabilities of the First Research Institute of the Ministry of Public Security and the real-name card capabilities of the operator, and can judge the authenticity of the associated information, that is, it can verify whether the user information, the card number signal, and the device information are consistent. If they are consistent, the verification result is generated as successful, and the SIM card executes the normal use instruction. If there is an inconsistency, the SIM card executes the shutdown processing instruction. The user can perform the re-operation operation in the offline business hall, that is, the operation of restoring the communication function of the SIM card is performed in the offline business hall.

[0022] In this way, through the trigger mechanism of the SIM card, the terminal device, SIM card number information, and user information can be collected, and the card number information verification and user information verification can be completed through pop-up prompts and browser calls, so as to closely associate the user information, SIM card number information, and terminal device information. Through this series of security measures, it is possible to effectively prevent SIM card theft, malicious leasing, etc.

[0023] In one embodiment, after the step S1 of acquiring the trigger event, the method further includes: S11, presetting an initial key including preset bytes; S12, taking the initial key of the first preset byte in the preset bytes as the data encryption key based on the national secret algorithm; S13. Encrypt the SMS data using the national secret algorithm according to the data encryption key.

[0024] As described in the above steps S11-S13, the SIM card is preset with an initial key containing 22 bytes. The national secret algorithm SM3 is used to calculate the first 16 bytes as the data encryption key, and the data message content is encrypted by SM4. The machine-card trusted platform is consistent with the SIM card, and is also preset with an initial key containing 22 bytes. The national secret algorithm SM3 is used to calculate the first 16 bytes as the data encryption key, and the data message content is encrypted by SM4, so that encrypted data transmission can be carried out between the two to ensure data security.

[0025] In one embodiment, the associated information includes the user's first identity information, user face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information, wherein the first identity information includes the user's name, ID card number, and a face photo based on liveness detection, and the identification number corresponding to the SIM card number information is ICCID (Integrate circuit card identity).

[0026] In one embodiment, when the machine-card trusted platform verifies according to the associated information, the machine-card trusted platform queries the corresponding identification number according to the SIM card number information in the associated information; Generate a card writing instruction according to the identification number; Encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of a data SMS; The SIM card triggers an active command according to the data SMS, runs the active command on the terminal device in a pop-up screen, and launches a browser on the terminal device to open a verification window.

[0027] As mentioned above, the machine-card trusted platform can query the ICCID through the mobile phone number, then encrypt and encapsulate the card writing instruction and send a data SMS to trigger the active command in the SIM card application, run the active command on the terminal device in a pop-up screen, and open the terminal browser. The verified URL (Uniform Resource Locator) address is entered into the browser to start the entire verification process.

[0028] In one embodiment, if it is the first identification, the user information is obtained and associated with the device information and the user information to generate the associated information step S3, including: S31, obtaining the user's first identity information and SIM card number information, and determining whether the user's first identity information and the SIM card number information correspond; S32. If the user's first identity information and the SIM card number information correspond, a browser is launched on the terminal device, and face verification is performed based on a liveness detection method, and a face verification result is generated; S33: associate and bind the device information, the user's first identity information, the SIM card number information and the face verification result to generate associated information.

[0029] As described in the above steps S31-S33, the user can fill in the last 4 digits of the mobile phone number and the name information in the browser to verify the person and the card, determine the consistency of the person and the number, and then pull the face verification based on liveness detection through H5 (HTML5, the fifth generation hypertext markup language) to complete the real person verification. In the face recognition application, liveness detection can verify whether the user is a real live person through combined actions such as blinking, opening the mouth, shaking the head, and nodding, using face key point positioning and face tracking technologies. It can effectively resist common attack methods such as photos, videos, face replacement, masks, occlusion, 3D animation, and screen reshoots, thereby helping users identify fraudulent behavior and protect the interests of users, and ultimately realize the verification and association of device information, user's first identity information, SIM card number information, and face verification results.

[0030] In one embodiment, the machine-card trusted platform verifies according to the associated information and generates a verification result, and controls the normal use or shutdown processing of the SIM card according to the verification result in step S4, including: S41, the device-card trusted platform user obtains the user's first identity information, user face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information in the associated information; S42, determining whether the user's first identity information, user face information, device information, SIM card number information, and the identification number corresponding to the SIM card number information correspond to the user information and terminal information; S43, if it is corresponding, generate a verification result of successful verification; S44. If not corresponding, generate a verification result indicating verification failure.

[0031] As described in the above steps S41-S44, when the user changes the terminal device, restarts the machine, or inserts or removes the card, information verification will be automatically triggered. The information will be verified through the machine-card trusted platform, and subsequent processing will be carried out in a timely manner. When the information is inconsistent, the machine will be shut down in time to prevent the theft and fraudulent use of SIM cards, and the source can be traced to ensure safety and prevent fraud.

[0032] The present invention also provides a SIM card-based machine card verification anti-fraud system, the system comprising: The first trigger event acquisition module 1 is used to acquire the first trigger event, wherein the first trigger event includes the first insertion of a SIM card into a terminal device, the first removal of a SIM card from a terminal device, the first power-on activation of a SIM card on a terminal device, and the first restart of a terminal device; Automatic identification module 2, used to automatically identify the device information of the terminal device and determine whether it is the first identification; The information acquisition module 3 is used to acquire the user's first identity information if it is the first identification, associate and bind it with the device information and the user's first identity information, generate association information, and send the association information to the machine card trusted platform; The secondary trigger event acquisition module 4 is used to acquire the secondary trigger event, collect the user information and the terminal information of the terminal device, and send the user information and the terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; The receiving module 5 is used to receive the verification result and execute the normal use instruction or the shutdown processing instruction according to the verification result.

[0033] In one embodiment, it further includes: A preset module, used for presetting an initial key containing preset bytes; A selection module is used to take the initial key of the first preset position byte in the preset bytes as the data encryption key based on the national secret algorithm; The encryption module is used to encrypt SMS data using the national secret algorithm based on the data encryption key.

[0034] In one embodiment, the associated information includes the user's first identity information, the user's facial information, device information, SIM card number information, and an identification number corresponding to the SIM card number information.

[0035] In one embodiment, the machine-card trusted platform is used to query the corresponding identification number according to the SIM card number information in the association information; It is also used to generate a card writing instruction based on the identification number; It is also used to encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of data SMS; The SIM card is used to trigger an active command according to a data SMS, run the active command on the terminal device in a pop-up screen, and launch a browser on the terminal device to open a verification window.

[0036] It should be pointed out that the modules in the above-mentioned machine card verification and anti-fraud system based on SIM card all correspond to the steps in the machine card verification and anti-fraud method based on SIM card.

[0037] It should be noted that the above detailed descriptions are exemplary and are intended to provide further explanation of the present application. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the art to which the present application belongs.

[0038] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should also be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0039] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein.

[0040] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or inherent to these processes, methods, products, or apparatuses.

[0041] For ease of description, spatially relative terms, such as "above", "above", "on the upper surface of", "above", etc., may be used herein to describe the spatial positional relationship between a device or feature and other devices or features as shown in the figure. It should be understood that spatially relative terms are intended to include different orientations of the device in use or operation in addition to the orientation described in the figure. For example, if the device in the accompanying drawings is inverted, the device described as "above other devices or structures" or "above other devices or structures" will be positioned as "below other devices or structures" or "below other devices or structures". Thus, the exemplary term "above" may include both "above" and "below". The device may also be positioned in other different ways, such as rotated 90 degrees or in other orientations, and the spatially relative descriptions used herein are interpreted accordingly.

[0042] In the above detailed description, reference is made to the accompanying drawings, which form a part of this document. In the accompanying drawings, similar symbols typically identify similar components unless the context indicates otherwise. The illustrated embodiments described in the detailed description, drawings, and claims are not meant to be limiting. Other embodiments may be used, and other changes may be made, without departing from the spirit or scope of the subject matter presented herein.

[0043] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A SIM card-based machine card verification anti-fraud method, applied to a SIM card, wherein the SIM card is installed on a terminal device, and is characterized in that: The method comprises: Obtain the first trigger event, where the first trigger event includes the first insertion of a SIM card into a terminal device, the first removal of a SIM card from a terminal device, the first power-on activation of a SIM card on a terminal device, and the first restart of a terminal device; Automatically identify the device information of the terminal device and determine whether it is the first time to identify it; If it is the first identification, the user's first identity information is obtained, and associated and bound with the device information and the user's first identity information to generate associated information, and the associated information is sent to the machine card trusted platform; Acquire a secondary trigger event, collect user information and terminal information of the terminal device, and send the user information and terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; The verification result is received, and a normal use instruction or a shutdown processing instruction is executed according to the verification result.

2. The SIM card verification and anti-fraud method according to claim 1, characterized in that: After the step of obtaining the first trigger event, the method further includes: Presetting an initial key containing preset bytes; Based on the national secret algorithm, the initial key of the first preset byte in the preset bytes is taken as the data encryption key; The SMS data is encrypted using the national secret algorithm based on the data encryption key.

3. The SIM card verification and anti-fraud method according to claim 1, characterized in that: The associated information includes the user's first identity information, the user's face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information.

4. The SIM card verification and anti-fraud method according to claim 3, characterized in that: The machine-card trusted platform queries the corresponding identification number according to the SIM card number information in the association information; Generate a card writing instruction according to the identification number; Encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of a data SMS; The SIM card triggers an active command according to the data SMS, runs the active command on the terminal device in a pop-up screen, and launches a browser on the terminal device to open a verification window.

5. The SIM card verification and anti-fraud method according to claim 1, characterized in that: If it is the first identification, the user information is obtained and associated with the device information and the user information to generate the associated information, including: Obtain the user's first identity information and SIM card number information, and determine whether the user's first identity information and SIM card number information correspond; If the user's first identity information and SIM card number information correspond, a browser is launched on the terminal device, and face verification is performed based on a liveness detection method, and a face verification result is generated; The device information, the user's first identity information, the SIM card number information and the face verification result are associated and bound to generate associated information.

6. The SIM card verification and anti-fraud method according to claim 1, characterized in that: The step of the machine card trusted platform performing verification according to the associated information and generating a verification result includes: The device-card trusted platform user obtains the user's first identity information, user face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information in the associated information; Determine whether the user's first identity information, user face information, device information, SIM card number information, and the identification number corresponding to the SIM card number information correspond to the user information and terminal information; If they correspond, a verification result of successful verification is generated; If they do not correspond, a verification result indicating verification failure is generated.

7. A SIM card verification and anti-fraud system, characterized in that: The system comprises: The module for obtaining the first trigger event is used to obtain the first trigger event, wherein the first trigger event includes the event of inserting the SIM card into the terminal device for the first time, the event of removing the SIM card from the terminal device for the first time, the event of activating the SIM card on the terminal device for the first time, and the event of restarting the terminal device for the first time; Automatic identification module, used to automatically identify the device information of the terminal device and determine whether it is the first identification; An information acquisition module is used to acquire the user's first identity information if it is the first identification, associate and bind it with the device information and the user's first identity information, generate association information, and send the association information to the machine card trusted platform; A secondary trigger event acquisition module is used to acquire a secondary trigger event, collect user information and terminal information of the terminal device, and send the user information and terminal information to the machine card trusted platform, wherein the machine card trusted platform verifies the user information according to the associated information and generates a verification result; The receiving module is used to receive the verification result and execute the normal use instruction or the shutdown processing instruction according to the verification result.

8. The SIM card verification and anti-fraud system according to claim 7, characterized in that: Also includes: A preset module, used for presetting an initial key containing preset bytes; A selection module is used to take the initial key of the first preset position byte in the preset bytes as the data encryption key based on the national secret algorithm; The encryption module is used to encrypt SMS data using the national secret algorithm based on the data encryption key.

9. The SIM card verification and anti-fraud system according to claim 7, characterized in that: The associated information includes the user's first identity information, the user's face information, device information, SIM card number information, and an identification number corresponding to the SIM card number information.

10. The SIM card verification and anti-fraud system according to claim 9, characterized in that: The machine-card trusted platform is used to query the corresponding identification number according to the SIM card number information in the association information; It is also used to generate a card writing instruction based on the identification number; It is also used to encrypt and encapsulate the card writing instruction and send it to the SIM card in the form of data SMS; The SIM card is used to trigger an active command according to a data SMS, run the active command on the terminal device in a pop-up screen, and launch a browser on the terminal device to open a verification window.

Images