Account security management architecture and method applied to artificial intelligent service
By introducing a regulatory system of physical cards and fair units in AI services, two-factor authentication is realized, and the identity authentication and permission management problems in AI service account security management is solved, which improves account security and reduces the risk of misappropriation.
Patent Information
- Application Number
- CN202411320979.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-20
- Publication Date
- 2025-01-07
AI Technical Summary
The account security management system of existing AI services has improper identity authentication and permission management, which makes the account prone to hacking and difficult to clarify the actual operator, which may cause legal disputes and financial losses.
Adopt an account security management architecture including AI management systems, physical cards and supervision systems. Through internal code verification of physical cards and supervision by fair units, two-factor authentication is carried out to approve user login to ensure account security.
It improves the account security of the AI management system, prevents hacker intrusion and theft, reduces the risk of AI services being stolen, and ensures fair identity authentication and permission management.
Smart Images
Figure CN119272251A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to an account security management architecture and method, and more particularly to an account security management architecture and method applied to artificial intelligence services. Background Art
[0002] With the development of artificial intelligence (AI) technology, many AI technologies have been introduced into many services. Users can run these AI services on the Internet with their mobile phones or computers. However, the more convenient AI services are often accompanied by higher security risks. Therefore, user authentication and recognition become more important.
[0003] In order to maintain the account security of these AI services, the AI server will establish an AI management system to manage AI service information and user permissions. In order to identify the user's identity, when the user logs in to the AI management system, the AI management system usually requires the user to enter a login account and password. The AI management system identifies the user's identity based on the login account and password entered by the user to approve the user's login.
[0004] The login account and password of the user account are usually stored in the AI management system and the computer or mobile phone used by the user. In recent years, hackers have become increasingly rampant. Once hackers invade the AI management system or the computer or mobile phone used by the user, the login account and password of the user account will be easily stolen, which will lead to improper use of AI services by hackers or malicious third parties, resulting in financial losses to users or leakage of important information.
[0005] In addition, the current AI service account security management is supervised by the AI management system built by the AI service provider, and the internal staff of the AI management system have the management authority of the user account. If the internal control of the AI management system is not rigorous, the internal staff of the AI management system can easily obtain the login account and password of the user account through the management authority, and directly log in to the AI management system in the name of the user to misuse the user's AI service. After that, it is difficult to clarify who is the actual operator of the AI service. Therefore, the identity authentication and login permission of the AI service user are the sole responsibility of the AI service provider, and there may be situations where people make misconduct, which may cause legal disputes. Summary of the invention
[0006] An object of the present invention is to provide an account security management framework for use in artificial intelligence services, which includes an artificial intelligence (AI) management system, a physical card, a supervision system, and a communication device. The AI management system provides at least one AI service and includes a management database, which registers the identity of at least one user and the login account and password of at least one user account. The physical card is held by a user of the communication device and is issued by a fair unit. The physical card stores an internal code. The supervision system is established by the fair unit and includes a supervision database, which registers the identity of at least one physical card holder and the internal code corresponding to each physical card holder. When a user wants to log in to the AI management system, he / she enters the login account and password of the user account on the AI management system through the communication device; the AI management system identifies the identity of a current user based on the login account and password of the user account entered by the communication device, sends an instruction message for verifying the physical card to the communication device and sends an instruction message for verifying the identity of the current user to the supervision system; after receiving the instruction message for verifying the physical card, the communication device reads the inner code in the physical card with a card reader and sends the inner code to the supervision system; after receiving the instruction message for verifying the identity of the current user and the inner code, the supervision system checks the identity of the current user based on the received instructions. The internal code searches for the identity of the corresponding physical card holder from the regulatory database, and compares the identity of the physical card holder with the identity of the current user to see if they are consistent; if the regulatory system compares the identity of the physical card holder with the identity of the current user to see if they are consistent, a notification signal approving the current user's login is sent to the artificial intelligence management system to approve the current user's communication device to log into the AI intelligent management system; conversely, if the regulatory system compares the identity of the physical card holder with the identity of the current user to see if they are inconsistent, a notification signal prohibiting the current user from logging in is sent to the AI management system to prohibit the current user's communication device from logging into the AI management system.
[0007] To achieve the above-mentioned purpose, the present invention provides an account security management architecture applied to artificial intelligence services, including: an artificial intelligence management system, which provides at least one artificial intelligence service and includes a management database, in which the identity of at least one user and the login account and password of at least one user account are registered; a physical card, which is held by a user and issued by a fair unit, wherein the physical card stores an internal code; a supervision system, which is established by the fair unit, and the network-connected artificial intelligence management system includes a supervision database, in which the supervision database registers the identity of at least one physical card holder and the internal code corresponding to each physical card holder; a communication device, a network-connected artificial intelligence management system and a supervision system; and a card reader, which is an internal component of a communication device or an external device connected to the communication device; wherein, when the user wants to log in to the artificial intelligence management system, the user enters the login account and password of the user account on the artificial intelligence management system through the communication device; the artificial intelligence management system receives the user's login account and password according to the login account of the user account entered by the communication device The present invention relates to a method for identifying a current user by using a physical card number and a password, sending an instruction message for verifying the physical card to the communication device and sending an instruction message for verifying the identity of the current user to the supervision system; after receiving the instruction message for verifying the physical card, the communication device uses a card reader to read the inner code in the physical card and sends the inner code to the supervision system; after receiving the instruction message for verifying the identity of the current user and the inner code, the supervision system searches for the identity of the corresponding physical card holder from the supervision database according to the received inner code, and compares the identity of the physical card holder with the identity of the current user to see if they are consistent; if the supervision system compares the identity of the physical card holder with the identity of the current user to see if they are consistent, it sends a notification signal for approving the login of the current user to the artificial intelligence management system, so as to approve the communication device of the current user to log in to the artificial intelligence management system; on the contrary, if the supervision system compares the identity of the physical card holder with the identity of the current user to see if they are inconsistent, it sends a notification signal for prohibiting the login of the current user to the artificial intelligence management system, so as to prohibit the communication device of the current user from logging in to the artificial intelligence management system.
[0008] In one embodiment of the present invention, when the artificial intelligence management system receives a notification signal for approving the current user's login, it sends an instruction message including a verification code to the communication device; after the communication device receives the instruction message including the verification code, the current user enters the verification code on the communication device and transmits the verification code to the artificial intelligence management system; the artificial intelligence management system approves the login of the current user's communication device only after receiving the verification code returned by the communication device.
[0009] In an embodiment of the present invention, the verification code is a time-limited one-time password.
[0010] In one embodiment of the present invention, the physical card stores the inner code via a chip, an RFID tag, a near-field communication tag or a magnetic stripe, and the card reader obtains the inner code by reading the chip, RFID tag, near-field communication tag or magnetic stripe of the physical card.
[0011] In one embodiment of the present invention, the impartial unit is a Chinese government agency or an impartial and independent third-party unit.
[0012] The present invention further provides an account security management architecture applied to artificial intelligence services, comprising: an artificial intelligence management system, providing at least one artificial intelligence service, and comprising a management database, wherein the management database registers the identity of at least one user and the login account and password of at least one user account; a physical card, held by a user and issued by a fair unit, wherein the physical card stores an internal code; a supervision system, established by the fair unit, a network-connected artificial intelligence management system, comprising a supervision database, wherein the supervision database registers the identity of at least one physical card holder and the internal code corresponding to each physical card holder; a communication device, a network-connected artificial intelligence management system and a supervision system; and a card reader, which is an internal component of a communication device or an external device connected to the communication device; wherein, when the user wants to log in to the artificial intelligence management system, the user enters the login account and password of the user account on the artificial intelligence management system through the communication device; the artificial intelligence management system receives the card according to the communication device. The system identifies the identity of a current user by inputting the login account and password of the user account, and sends an instruction message for verifying the physical card to the communication device; after receiving the instruction message for verifying the physical card, the communication device reads the internal code in the physical card with a card reader, and sends the internal code to the supervision system; the supervision system searches the corresponding identity of the physical card holder from the supervision database according to the received internal code, and sends a notification message with the identity of the physical card holder to the artificial intelligence management system; after receiving the notification message with the identity of the physical card holder, the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user to see if they are consistent; if the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user and finds that they are consistent, the communication device of the current user is approved to log in to the artificial intelligence management system; otherwise, if the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user and finds that they are inconsistent, the communication device of the current user is prohibited from logging in to the artificial intelligence management system.
[0013] In one embodiment of the present invention, when the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user, it sends an instruction message including a verification code to the communication device; after the communication device receives the instruction message including the verification code, the current user enters the verification code on the communication device and transmits the verification code to the artificial intelligence management system; the artificial intelligence management system approves the login of the communication device of the current user only after receiving the verification code returned by the communication device.
[0014] The present invention further provides an account security management method applied to artificial intelligence services. The account security management method is used in an account security management framework. The account security management framework includes an artificial intelligence management system that provides at least one artificial intelligence service, a supervision system established by an impartial unit, and a communication device controlled by a user. The account security management method includes: connecting a network between the communication device, the artificial intelligence management system, and the supervision system; requiring the supervision system to issue a physical card with an internal code to a user and register the identity of at least one physical card holder; requiring the user to enter a login account and password of a user account on the artificial intelligence management system through the communication device when logging into the artificial intelligence management system; requiring the artificial intelligence management system to identify the identity of a current user based on the login account and password of the user account entered by the communication device; requiring the artificial intelligence management system to The management system sends an instruction message for verifying the physical card to the communication device and sends an instruction message for verifying the identity of the current user to the supervision system; requires the user to read the inner code in the physical card with a card reader and send the inner code to the supervision system after receiving the instruction message for verifying the physical card through the communication device; requires the supervision system to identify the identity of the physical card holder according to the inner code received from the communication device; requires the supervision system to send a notification signal for approving the login of the current user to the artificial intelligence management system when the identity of the physical card holder is consistent with the identity of the current user, so as to approve the communication device of the current user to log in to the artificial intelligence management system; or requires the supervision system to send a notification signal for prohibiting the login of the current user to the artificial intelligence management system when the identity of the physical card holder is inconsistent with the identity of the current user, so as to prohibit the communication device of the current user from logging in to the artificial intelligence management system.
[0015] In one embodiment of the present invention, after the artificial intelligence management system receives the notification signal for approving the current user's login, it also includes: requiring the artificial intelligence management system to send an instruction message including a verification code to the communication device; requiring the current user to enter the verification code and send the verification code to the artificial intelligence management system after the communication device receives the instruction message including the verification code; and requiring the artificial intelligence management system to approve the current user's communication device to log in to the artificial intelligence management system only after receiving the verification code returned by the communication device.
[0016] The present invention further provides an account security management method applied to artificial intelligence services. The account security management method is used in an account security management framework. The account security management framework includes an artificial intelligence management system that provides at least one artificial intelligence service, a supervision system established by a fair unit, and a communication device controlled by a user. The account security management method includes: connecting a network between the communication device, the artificial intelligence management system, and the supervision system; requiring the supervision system to issue a physical card with an internal code to a user and register the identity of at least one physical card holder; requiring the user to enter a login account and password of a user account on the artificial intelligence management system through the communication device when logging into the artificial intelligence management system; requiring the artificial intelligence management system to identify the identity of a current user based on the login account and password of the user account entered by the communication device; requiring the artificial intelligence management system to send a verification physical card to the user ... The invention provides a method for transmitting a physical card to a communication device through a card reader; requiring the user to read the inner code in the physical card with a card reader and send the inner code to the supervision system after receiving the instruction message for verifying the physical card through the communication device; requiring the supervision system to identify the identity of the physical card holder according to the inner code received from the communication device; requiring the supervision system to send a notification message with the identity of the physical card holder to the artificial intelligence management system; requiring the artificial intelligence management system to compare the identity of the physical card holder with the identity of the current user after receiving the notification message with the identity of the physical card holder; requiring the artificial intelligence management system to approve the communication device of the current user to log in to the artificial intelligence management system when the identity of the physical card holder is consistent with the identity of the current user; or requiring the artificial intelligence management system to prohibit the communication device of the current user from logging in to the artificial intelligence management system when the identity of the physical card holder is inconsistent with the identity of the current user.
[0017] In one embodiment of the present invention, after the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user, it also includes: requiring the artificial intelligence management system to send an instruction message including a verification code to the communication device; requiring the current user to enter the verification code and transmit the verification code to the artificial intelligence management system after the communication device receives the instruction message including the verification code; and requiring the artificial intelligence management system to approve the communication device of the current user to log in to the artificial intelligence management system only after receiving the verification code returned by the communication device.
[0018] The advantages of the account security management mechanism of the present invention are: (1) When a user wants to log in to the AI management system, in addition to entering the correct login account and password of the user account, he must also pass the identity verification of the physical card holder. Through double identity verification, the account security of the AI management system is improved; (2) By adding the identity verification of the physical card holder as a permission condition for logging into the AI management system, even if the login account and password of the user account are stolen due to hacking of the AI management system or the communication device, the network hacker or malicious third party cannot directly log in to the AI management system through the login account and password of the user account, thereby ensuring the account security of the AI management system; (3) The AI management system only provides AI services, and the user's permission to log in to the AI management system is transferred from the original AI management system to a fair and independent regulatory system to reduce the probability of the user's AI service being stolen. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] Figure 1 A schematic diagram of an embodiment of an account security management architecture applied to an artificial intelligence service according to the present invention; Figure 2 A flowchart of an embodiment of an account security management method applied to an artificial intelligence service according to the present invention; Figure 3 A flowchart of another embodiment of the account security management method applied to artificial intelligence services according to the present invention; Figure 4 A schematic diagram of another embodiment of an account security management architecture applied to an artificial intelligence service according to the present invention; Figure 5 A flowchart of another embodiment of the account security management method applied to artificial intelligence services according to the present invention; Figure 6 It is a flow chart of another embodiment of the account security management method applied to artificial intelligence services of the present invention.
[0020] Description of Reference Numerals 100: Account Security Management Architecture 101: Account Security Management Architecture 10: Artificial Intelligence Management System 11: First processor 12: Management Modules 121: Artificial Intelligence Management Program 1211: Instructions for verifying the physical card 1212: Instructions for verifying the identity of the current user 1213: Verification code 1214: Instructions for entering the verification code 13: Manage database 131: Data required for AI services 132: User's identity 133: User account login ID and password 14: First communication interface 20: Regulatory system 21: Second processor 22: Supervision Module 221: Procedures for monitoring the identity of users of artificial intelligence services 2211: Notification signal for approving the current user's login 2212: Notification signal that prohibits the current user from logging in 2213: Notification message with the identity of the physical card holder 23: Regulatory Database 231: Identity of the physical card holder 232: Internal code 24: Second communication interface 30: Communication device 31: Third processor 32: Input module 33: Data storage 34: Third communication interface 40: Card reader 50: Physical card. DETAILED DESCRIPTION
[0021] See also Figure 1 , is a schematic diagram of an embodiment of an account security management architecture applied to artificial intelligence services according to the present invention. Figure 1 As shown, the account security management architecture 100 includes an artificial intelligence (AI) management system 10 , a monitoring system 20 , a communication device 30 , a card reader 40 and a physical card 50 .
[0022] The AI management system 10 is a network server built by an AI service provider, which provides at least one AI service, for example, financial transactions, digital asset transactions, online shopping, automated manufacturing or other application services that introduce AI technology. The AI management system 10 includes a first processor 11, a management module 12, a management database 13 and a first communication interface 14. The first processor 11 is connected to the management module 12, the management database 13 and the first communication interface 14. The management module 12 is a memory element storing an AI management program 121, such as a non-volatile memory or a read-only memory, and the AI management program 121 can be a software or a firmware. In the present invention, the AI management system 10 can execute the AI management program 121 of the management module 12 through the first processor 11 to manage AI service information, identify or verify the identity of the AI service user or set the use rights of the AI service user. The management database 13 stores the data 131 required for at least one AI service and registers the identity of at least one user (such as the user's name, gender, phone number, Email, etc.) 132 and the login account and password 133 of the account. In the present invention, the login ID and password 133 of the user account can be text, numbers, a combination of text and numbers, or a physiological feature (such as a fingerprint, face, or pupil image).
[0023] The monitoring system 20 is a network server built by an impartial unit to monitor the identity of AI service users. The impartial unit is a Chinese government agency or a third-party unit with impartiality and independence (such as a foundation approved by the Chinese government and related to the supervision of information security). The monitoring system 20 includes a second processor 21, a monitoring module 22, a monitoring database 23 and a second communication interface 24. The second processor 21 is connected to the monitoring module 22, the monitoring database 23 and the second communication interface 24. The monitoring system 20 is connected to the first communication interface 14 of the AI management system 10 through the second communication interface 24 to perform information transmission between the AI management system 10 and the monitoring system 20. The monitoring module 22 is a memory element storing a program 221 for monitoring the identity of artificial intelligence service users. The program 221 for monitoring the identity of AI service users can be a software or a firmware. In the present invention, the monitoring system 20 can execute the program 221 for monitoring the identity of AI service users in the monitoring module 22 through the second processor 21 to monitor the identity of users of the AI management system 10.
[0024] In addition, in order to achieve the purpose of supervising the identity of AI service users, the impartial unit of the present invention can issue a physical card 50 for identifying the user's identity to each user of the AI management system 10. The physical card 50 includes an inner code 232. The inner code 232 is a unique code. The physical card 50 can store the inner code 232 through a chip, an RFID tag, a near field communication (NFC) tag, or a magnetic stripe. Here, the supervision database 23 of the supervision system 20 registers the identity of at least one physical card holder (such as the name, gender, phone number, email, etc. of the physical card holder) 231 and the inner code 232 corresponding to each physical card holder.
[0025] The communication device 30 can be a computer, a mobile phone or an electronic device that can access the Internet, which is controlled by the user. The communication device 30 includes a third processor 31, an input module 32, a data storage 33 and a third communication interface 34. The third processor 31 is connected to the input module 32, the data storage 33 and the third communication interface 34. The communication device 30 is connected to the first communication interface 14 of the AI management system 10 and the second communication interface 24 of the monitoring system 20 through the third communication interface 34 to perform information transmission between the AI management system 10, the monitoring system 20 and the communication device 30. The user can log in to the AI management system 10 with the communication device 30 to use the AI service provided by the AI management system 10. The input module 32 can be a keyboard, a touch pad, a touch screen, a fingerprint key, an image capture device or a device that can input text, numbers or patterns. The data storage 33 can store data generated by executing AI services. Alternatively, the data storage 33 may further store a login account and password 133 required for a user to log into a user account of the AI management system 10 .
[0026] The account security management architecture 100 further includes a card reader 40. In one embodiment of the present invention, the card reader 40 may also be an external device, and the communication device 30 is connected to the card reader 40 via a connection port (not shown). Alternatively, in another embodiment of the present invention, the card reader 40 may also be an internal chip of the communication device 30, and the third processor 31 is electrically connected to the card reader 40. In the present invention, the card reader 40 obtains the inner code 232 by reading the chip, RFID tag, near field communication (NFC) tag or magnetic stripe of the physical card 50.
[0027] Continue, see also Figure 1 and Figure 2The specific operation process of an embodiment of the account security management method of the present invention is explained as follows: First, in step S61, when the user wants to log in to the AI management system 10, the communication device 30 is connected to the AI management system 10, and the login account and password 133 of the user account are entered on a connection page (not shown) of the AI management system 10 through the input module 32 of the communication device 30.
[0028] In step S62, the AI management system 10 identifies the identity 132 of the current user from the management database 13 according to the login account and password 133 of the user account entered by the user, and then sends an instruction message 1211 for verifying the physical card 50 to the communication device 30 and sends an instruction message 1212 for verifying the identity 132 of the current user to the supervision system 20.
[0029] In step S63 , after receiving the instruction message 1211 for verifying the physical card 50 , the communication device 30 uses the card reader 40 to read the inner code 232 in the physical card 50 and sends the inner code 232 to the monitoring system 20 .
[0030] In step S64, after receiving the instruction message 1212 for verifying the identity 132 of the current user from the AI management system 10 and the inner code 232 from the communication device 30, the supervision system 20 searches the corresponding physical card holder's identity 231 from the supervision database 23 according to the received inner code 232. In the present invention, the inner code 232 stored in the physical card 50 is a ciphertext inner code of an encryption calculation. When the supervision system 20 receives the inner code 232 from the communication device 30, it must perform a decryption calculation to obtain a plaintext inner code.
[0031] In step S65, the supervisory system 20 compares the identity 231 of the physical card holder with the identity 132 of the current user to see if they are consistent. If the identity 231 of the physical card holder is consistent with the identity 132 of the current user, it means that the current user has passed the identity verification. Then, step S66 is executed, and the supervisory system 20 sends a notification signal 2211 to the AI management system 10 to approve the login of the current user. In step S67, after receiving the notification signal 2211 to approve the login of the current user, the AI management system 10 approves the communication device 30 of the current user to log in to the AI management system 10. On the contrary, if the identity 231 of the physical card holder is inconsistent with the identity 132 of the current user, it means that the current user has not passed the identity verification. Step S68 is executed, and the supervisory system 20 sends a notification signal 2212 to the AI management system 10 to prohibit the login of the current user. In step S69, after receiving the notification signal 2212 to prohibit the login of the current user, the AI management system 10 prohibits the communication device 30 of the current user from logging in to the AI management system 10.
[0032] Or, in another embodiment of the present invention, Figure 1 and Figure 3 As shown, after step S66, steps S70, S71 and S72 are further executed. In step S70, after the AI management system 10 receives the notification signal 2211 of the approval of login issued by the monitoring system 20, it transmits an instruction message 1214 for inputting a verification code 1213 to the communication device 30. In the present invention, the verification code 1213 is a time-limited one-time password, which is obtained by the first processor 11 through the calculation of the one-time password (OTP) algorithm in the artificial intelligence management program 121. In step S71, after receiving the instruction message 1214 for inputting the verification code 1213, the user of the communication device 30 inputs the verification code 1213 through the input module 32 and transmits the verification code 1213 to the AI management system 10. In step S72, after receiving the verification code 1213 transmitted by the communication device 30, the AI management system 10 can approve the communication device 30 of the current user to log in to the AI management system 10.
[0033] The advantages of the account security management mechanism of the present invention are as follows: (1) When a user wants to log in to the AI management system 10, in addition to entering the correct login account and password 133 of the user account, the user must also pass the identity verification of the physical card 40 holder. Through double identity verification, the account security of the AI management system 10 is improved; (2) By adding the identity verification of the physical card 40 holder as a permission condition for logging in to the AI management system 10, even if the login account and password 133 of the user account are stolen due to the AI management system 10 or the communication device 30 being hacked, the network hacker or malicious third party cannot directly log in to the AI management system 10 through the login account and password 133 of the user account, thereby ensuring the account security of the AI management system 10; (3) The AI management system 10 only provides AI services, and the user's permission to log in to the AI management system 10 is transferred from the original AI management system 10 to the fair and independent supervision system 20, so as to reduce the probability of the user's AI service being stolen.
[0034] See also Figure 4 and Figure 5 , are respectively a schematic diagram of another embodiment of an account security management architecture applied to an artificial intelligence service of the present invention and a flowchart of another embodiment of an account security management method applied to an artificial intelligence service of the present invention. The structure of the account security management architecture 101 of this embodiment is the same as the structure of the account security management architecture 100 of the above embodiment, and the difference between the two is that the operation process of account security management is partially different.
[0035] Continue, see also Figure 4 and Figure 5, the specific operation flow of another embodiment of the account security management method of the present invention is explained. First, in step S81, when the user wants to log in to the AI management system 10, the user connects to the AI management system 10 with the communication device 30, and enters the login account and password 133 of the user account on the connection page (not shown) of the AI management system 10 through the input module 32 of the communication device 30.
[0036] In step S82 , the AI management system 10 identifies the current user's identity 132 from the management database 13 according to the login account and password 133 of the user account entered by the user, and then sends an instruction message 1211 of verifying the physical card 50 to the communication device 30 .
[0037] In step S83 , after receiving the instruction message 1211 for verifying the physical card 50 , the communication device 30 uses the card reader 40 to read the inner code 232 in the physical card 50 and sends the inner code 232 to the monitoring system 20 .
[0038] In step S84, after receiving the inner code 232 from the communication device 30, the supervision system 20 searches the supervision database 23 for the corresponding physical card holder's identity 231 according to the received inner code 232. Next, in step S85, the supervision system 20 sends a notification message 2213 with the physical card holder's identity 231 to the AI management system 10.
[0039] In step S86, after receiving the notification message 2213, the AI management system 10 compares the identity 231 of the physical card holder with the identity 132 of the current user to see if they are consistent. If the identity 231 of the physical card holder is consistent with the identity 132 of the current user, step S87 is executed, and the AI management system 10 approves the communication device 30 of the current user to log in to the AI management system 10. On the contrary, if the identity 231 of the physical card holder is inconsistent with the identity 132 of the current user, step S88 is executed, and the AI management system 10 prohibits the communication device 30 of the current user from logging in to the AI management system 10.
[0040] Or, in another embodiment of the present invention, Figure 4 and Figure 6As shown, in step S86, if the AI management system 10 compares the identity 231 of the physical card holder with the identity 132 of the current user, steps S89, S90 and S91 are executed. In step S89, if the identity 231 of the physical card holder is consistent with the identity 132 of the current user, the AI management system 10 further transmits an instruction message 1214 for inputting a verification code 1213 to the communication device 30. In step S90, after receiving the instruction message 1214 for inputting a verification code 1213, the user of the communication device 30 inputs the verification code 1213 through the input module 32 and transmits the verification code 1213 to the AI management system 10. In step S91, after receiving the verification code 1213 transmitted by the communication device 30, the AI management system 10 can approve the communication device 30 of the current user to log in to the AI management system 10.
[0041] The above is only an embodiment of the present invention and is not intended to limit the scope of the present invention. That is, all equivalent changes and modifications to the shape, structure, characteristics and spirit described in the patent application scope of the present invention should be included in the claims of the present invention.
Claims
1. An account security management architecture applied to artificial intelligence services, characterized in that: include: An artificial intelligence management system provides at least one artificial intelligence service and includes a management database, wherein the management database registers at least one user's identity and at least one user account's login account and password; A physical card, held by the user and issued by a fair organization, wherein the physical card stores an internal code; A supervision system, established by the impartial unit, connected to the artificial intelligence management system through a network, including a supervision database, wherein the supervision database registers the identity of at least one physical card holder and the internal code corresponding to each physical card holder; A communication device, a network connecting the artificial intelligence management system and the monitoring system; and A card reader is an internal component of a communication device or an external device connected to the communication device; When a user wants to log in to the artificial intelligence management system, he / she enters the login account and password of the user account on the artificial intelligence management system through a communication device; the artificial intelligence management system identifies the identity of a current user according to the login account and password of the user account entered by the communication device, sends an instruction message for verifying the physical card to the communication device and sends an instruction message for verifying the identity of the current user to the supervision system; after the communication device receives the instruction message for verifying the physical card, the card reader reads the inner code in the physical card and sends the inner code to the supervision system; after the supervision system receives the instruction message for verifying the identity of the current user and the inner code, it receives the instruction message for verifying the identity of the current user and the inner code, and sends the inner code to the supervision system according to the received instruction message. The internal code of the physical card holder is searched from the supervision database to find out the identity of the corresponding physical card holder, and the identity of the physical card holder is compared with the identity of the current user to see if they are consistent; if the supervision system finds that the identity of the physical card holder is consistent with the identity of the current user, a notification signal approving the login of the current user is sent to the artificial intelligence management system to approve the communication device of the current user to log in to the artificial intelligence management system; conversely, if the supervision system finds that the identity of the physical card holder is inconsistent with the identity of the current user, a notification signal prohibiting the login of the current user is sent to the artificial intelligence management system to prohibit the communication device of the current user from logging in to the artificial intelligence management system.
2. The account security management architecture according to claim 1, characterized in that: When the artificial intelligence management system receives a notification signal for approving the current user's login, it sends an instruction message including a verification code to the communication device; after the communication device receives the instruction message including the verification code, the current user enters the verification code on the communication device and transmits the verification code to the artificial intelligence management system; the artificial intelligence management system approves the login of the current user's communication device only after receiving the verification code returned by the communication device.
3. The account security management architecture as claimed in claim 2, characterized in that: The verification code is a time-limited one-time password.
4. The account security management architecture according to claim 1, wherein: The physical card stores the inner code via a chip, an RFID tag, a near field communication tag or a magnetic stripe, and the card reader obtains the inner code by reading the chip, the RFID tag, the near field communication tag or the magnetic stripe of the physical card.
5. The account security management architecture according to claim 1, wherein: The impartial unit is a government agency or an impartial and independent third party.
6. An account security management architecture applied to artificial intelligence services, characterized in that: include: An artificial intelligence management system provides at least one artificial intelligence service and includes a management database, wherein the management database registers at least one user's identity and at least one user account's login account and password; A physical card, held by the user and issued by a fair organization, wherein the physical card stores an internal code; A supervision system, established by the impartial unit, connected to the artificial intelligence management system through a network, including a supervision database, wherein the supervision database registers the identity of at least one physical card holder and the internal code corresponding to each physical card holder; A communication device, a network connecting the artificial intelligence management system and the monitoring system; and A card reader is an internal component of the communication device or an external device connected to the communication device; When the user wants to log in to the artificial intelligence management system, the user inputs the login account and password of the user account on the artificial intelligence management system through the communication device; the artificial intelligence management system identifies the identity of the current user according to the login account and password of the user account input by the communication device, and sends an instruction message for verifying the physical card to the communication device; after receiving the instruction message for verifying the physical card, the communication device reads the inner code in the physical card with a card reader, and sends the inner code to the supervision system; the supervision system searches the corresponding physical card holder's identity from the supervision database according to the received inner code, and sends a notification message with the physical card holder's identity to the artificial intelligence management system; after receiving the notification message with the physical card holder's identity, the artificial intelligence management system compares the physical card holder's identity with the current user's identity; if the artificial intelligence management system compares the physical card holder's identity with the current user's identity, the communication device of the current user is approved to log in to the artificial intelligence management system; otherwise, if the artificial intelligence management system compares the physical card holder's identity with the current user's identity, the communication device of the current user is prohibited from logging in to the artificial intelligence management system.
7. The account security management framework according to claim 6, characterized in that: When the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user, it sends an instruction message including a verification code to the communication device; after the communication device receives the instruction message including the verification code, the current user enters the verification code on the communication device and transmits the verification code to the artificial intelligence management system; after the artificial intelligence management system receives the verification code sent back by the communication device, it approves the login of the communication device of the current user.
8. The account security management framework according to claim 7, characterized in that: The verification code is a time-limited one-time password.
9. The account security management architecture as claimed in claim 6, characterized in that: The physical card stores the inner code via a chip, an RFID tag, a near field communication tag or a magnetic stripe, and the card reader obtains the inner code by reading the chip, the RFID tag, the near field communication tag or the magnetic stripe of the physical card.
10. The account security management framework according to claim 6, characterized in that: The impartial unit is a government agency or an impartial and independent third party.
11. An account security management method applied to artificial intelligence services, characterized in that: The account security management method is applied in an account security management framework, the account security management framework includes an artificial intelligence management system that provides at least one artificial intelligence service, a supervision system established by a fair unit, and a communication device controlled by a user. The account security management method includes: A network connection is established between the communication device, the artificial intelligence management system and the monitoring system; Requesting the supervisory system to issue a physical card with an internal code to a user and register the identity of at least one physical card holder; Require the user to enter a login account and password of a user account on the artificial intelligence management system through a communication device when logging into the artificial intelligence management system; Requesting the artificial intelligence management system to identify the current user based on the login account and password of the user account input through the communication device; Requesting the artificial intelligence management system to send an instruction message for verifying the physical card to the communication device and to send an instruction message for verifying the identity of the current user to the supervision system; The user is required to use a card reader to read the internal code in the physical card and send the internal code to the monitoring system after receiving the instruction message for verifying the physical card through the communication device; requiring the supervisory system to identify the physical card holder based on the internal code received from the communication device; Requesting the supervisory system to send a notification signal of approving the login of the current user to the artificial intelligence management system when the identity of the physical card holder is matched with the identity of the current user, so as to approve the communication device of the current user to log into the artificial intelligence management system; or The supervisory system is required to send a notification signal prohibiting the current user from logging in to the artificial intelligence management system when the identity of the physical card holder is found to be inconsistent with the identity of the current user, so as to prohibit the communication device of the current user from logging in to the artificial intelligence management system.
12. The account security management method according to claim 11, characterized in that: After the artificial intelligence management system receives the notification signal of approving the current user's login, it also includes: Requesting the artificial intelligence management system to send an instruction message including a verification code to the communication device; requiring the current user to input the verification code after receiving an instruction message containing the verification code on the communication device and transmit the verification code to the artificial intelligence management system; and The artificial intelligence management system is required to receive a verification code sent back by the communication device before approving the communication device of the current user to log into the artificial intelligence management system.
13. The account security management method according to claim 12, characterized in that: The verification code is a time-limited one-time password.
14. An account security management method applied to artificial intelligence services, characterized in that: The account security management method is applied in an account security management framework, the account security management framework includes an artificial intelligence management system providing at least one artificial intelligence service, a supervision system established by a fair unit and a communication device controlled by a user, the account security management method includes: A network connection is established between the communication device, the artificial intelligence management system and the monitoring system; Requesting the supervisory system to issue a physical card with an internal code to a user and register the identity of at least one physical card holder; Require the user to enter the login account and password of the user account on the artificial intelligence management system through a communication device when logging into the artificial intelligence management system; Requesting the artificial intelligence management system to identify the current user based on the login account and password of the user account input through the communication device; Requesting the artificial intelligence management system to send an instruction message for verifying the physical card to the communication device; The user is required to receive an instruction message for verifying the physical card through a communication device, read the internal code in the physical card with a card reader and send the internal code to the monitoring system; requiring the supervisory system to identify the physical card holder based on the internal code received from the communication device; Requesting the supervisory system to send a notification message with the identity of the physical card holder to the artificial intelligence management system; The artificial intelligence management system is required to compare the identity of the physical card holder with the identity of the current user after receiving the notification message with the identity of the physical card holder; requesting the AI management system to approve the communication device of the current user to log into the AI management system when the identity of the physical card holder is matched with the identity of the current user; or The artificial intelligence management system is required to prohibit the current user's communication device from logging into the artificial intelligence management system when the identity of the physical card holder is found to be inconsistent with the identity of the current user.
15. The account security management method according to claim 14, characterized in that: After the artificial intelligence management system compares the identity of the physical card holder with the identity of the current user, it also includes: Requesting the artificial intelligence management system to send an instruction message including a verification code to the communication device; requiring the current user to input the verification code after receiving an instruction message containing the verification code on the communication device and transmit the verification code to the artificial intelligence management system; and The artificial intelligence management system is required to receive a verification code sent back by the communication device before approving the communication device of the current user to log into the artificial intelligence management system.
16. The account security management method according to claim 15, characterized in that: The verification code is a time-limited one-time password.