Anti-fraud number reconnection method and device based on SIM card authentication

Abstract

The present invention relates to an anti-fraud number reconnection method and device based on SIM card authentication, the method comprising: instantiating a reconnection card application, generating an identifier, selecting an application instance corresponding to the identifier through a machine-card channel, and judging whether the SIM card has a reconnection function. Obtain preset card application initial information and login key through the machine-card channel, and store the user's identity information in the reconnection card application. Encrypt the reconnection file generated by the identity information and the user number card information through the national secret algorithm SM4, and store it in the file indexes respectively specified by the reconnection card application. When there is no network or shutdown at the user end, receive a reconnection request from a SIM card mobile phone, verify the identity information and the reconnection file, and initiate a number reconnection request to the network information security platform when the verification is correct. Analyze the reason for the suspension of the current number, obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to an anti-fraud number reconnection method and device based on SIM card authentication. Background Art

[0002] The current situation of telecommunications fraud remains complex and severe, and some mobile phone numbers are used to cooperate with foreign criminals to carry out fraud activities. The National Anti-Telecommunications Fraud Law stipulates that telecommunications business operators shall re-verify the real names of abnormal telephone card users involved in fraud and take differentiated and corresponding verification measures according to the risk level. For those who fail to verify or fail the verification in accordance with the regulations, telecommunications business operators may restrict or suspend the functions of the relevant telephone cards. In order to implement the anti-fraud requirements of laws and regulations and relevant departments, the "card disconnection" action will be further promoted. For numbers with abnormal communication behavior and numbers that match the characteristics of fraud, they will be shut down in accordance with the law, and reconnection verification will be carried out in a graded and classified manner. Among them, for numbers with medium and low fraud risks, they will be restored after completing the online real-name verification. Customers can operate according to the instructions of the notification SMS. For numbers with medium and high fraud risks, they must go to the business hall for real-name verification.

[0003] At present, the existing number restoration technology mainly sends the H5 link address for interaction with users to users in the form of text messages. Users complete the identity verification process through H5 to restore the connection. This method relies on the network, and as long as the user's identity verification is passed and they are willing to sign a letter of commitment, the security is relatively low. In addition, the existing number restoration technology completes the relevant authentication verification on the operator's business hall official website, APP or H5, mainly focusing on how to improve the accuracy and efficiency of the verification. For example, by analyzing users who have reached the limit of traffic packages in real time and executing the disconnection and restoration operations, the problem of untimely restoration of users who have reached the limit is solved, and efficiency is improved, but it is more difficult to operate when there is no network or the system is shut down. Summary of the invention

[0004] Based on this, it is necessary to provide an anti-fraud number reconnection method and device based on SIM card authentication that has high security and can reconnect numbers without network or in shutdown state to address the above technical problems.

[0005] The present invention provides an anti-fraud number reconnection method based on SIM card authentication, which is applied to a SIM card, wherein a reconnection card application is installed in the SIM card, and the method comprises:

[0006] Instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has a reconnection function;

[0007] When the SIM card has a reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application;

[0008] The identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application;

[0009] When the user end has no network or is in shutdown state, receive a SIM card mobile phone reconnection request, and respond to the SIM card mobile phone reconnection request to verify the identity information and the reconnection file according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct;

[0010] Respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0011] In one embodiment, the fraud risk level includes a first risk level, a second risk level, and a third risk level, and the first risk level, the second risk level, and the third risk level have different encryption methods;

[0012] The method of encrypting the identity information and the reconnection file generated based on the number card information input by the user by using the national encryption algorithm SM4, and storing the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application, includes:

[0013] When the fraud risk level of the current number is the first risk level, a first character string is generated by using the initial password corresponding to the login key and the card ICCID, and the first character string is hashed using SHA-1 to obtain first data;

[0014] The first number of bytes arranged in the front of the first data are selected as the SM4 algorithm key, and the first number of bytes arranged in the back of the first data are selected as the offset value, and the identity information and the restoration file generated based on the number card information entered by the user are encrypting.

[0015] In one embodiment, the identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application, and also includes:

[0016] When the fraud risk level of the current number is the second risk level, generating a second character string based on the user identity document number and the authentication image data, and performing a hash SHA-1 process on the second character string to obtain second data;

[0017] Select the second number of bytes in the second data as the SM4 algorithm key, combine the initial password and the card ICCID to generate a third character string, and perform SHA-1 hashing on the third character string to obtain third data;

[0018] The second number of bytes arranged at the rear in the third data are selected as the offset value, and the identity information and the restoration file generated based on the number card information input by the user are encrypted.

[0019] In one embodiment, the identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application, and also includes:

[0020] When the fraud risk level of the current number is the third risk level, synthesizing a fourth character string based on the user identity document number, the authentication image data and the timestamp, and performing a hash SHA-1 process on the fourth character string to obtain fourth data;

[0021] Select the second number of bytes in the fourth data as the SM4 algorithm key, combine the initial password and the card ICCID to generate a fifth character string, and perform SHA-1 hashing on the fifth character string to obtain fifth data;

[0022] The second number of bytes arranged at the rear in the fifth data are selected as the offset value, and the identity information and the restoration file generated based on the number card information input by the user are encrypted.

[0023] In one of the embodiments, when the user terminal has no network or is in shutdown state, receiving a SIM card mobile phone reconnection request, and verifying the identity information and the reconnection file according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct, including:

[0024] When the user end has no network or is in shutdown state, the reconnection request of the SIM card mobile phone is received through the reconnection card application, and the stored identity information and the reconnection commitment signed by the user are obtained in response to the reconnection request of the SIM card mobile phone;

[0025] The identity information and the reconnection commitment are verified through the reconnection card application, and when the verification is correct, the reconnection application information is transmitted to the reconnection management platform through NFC, so as to call the reconnection management platform to analyze the suspension reason of the current number;

[0026] Among them, the reasons for suspending the current number include real-name registration reasons, arrears or package expiration reasons, and number fraud reasons.

[0027] In one embodiment, responding to the number reconnection request and analyzing the suspension reason of the current number to obtain the fraud risk level of the current number, and using different authentication information to reconnect the number according to the fraud risk level of the current number, includes:

[0028] When the reason for suspension of the current number is the real-name system reason, a number reconnection request is directly sent to the network security platform through the reconnection card application, and the network security platform responds to the number reconnection request and completes the reconnection process;

[0029] When the suspension reason of the current number is due to the arrears or expiration of the package, payment or package renewal reminder information is sent to the user terminal through the Futong Card application.

[0030] In one embodiment, responding to the number reconnection request and analyzing the suspension reason of the current number to obtain the fraud risk level of the current number, and using different authentication information to reconnect the number according to the fraud risk level of the current number, further includes:

[0031] When the reason for the suspension of the current number is that the number is fraudulent, the fraud risk level of the current number is obtained, and it is determined whether the fraud risk level of the current number meets the risk level reconnection requirements set in the stored identity information and the reconnection file; if so,

[0032] A number reconnection request is sent to the network security platform through the reconnection card application, and the network security platform responds to the number reconnection request and completes the reconnection process.

[0033] The present invention also provides an anti-fraud number reconnection device based on SIM card authentication, the device comprising:

[0034] A reconnection function determination module, used to instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has a reconnection function;

[0035] An initialization module, used for obtaining preset card application initial information and login key through the machine-card channel when the SIM card has a reconnection function, and storing the user's identity information in the reconnection card application;

[0036] An algorithm encryption module, used to encrypt the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and store the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application;

[0037] A reconnection request module is used to receive a SIM card mobile phone reconnection request when the user end has no network or is in shutdown state, and verify the identity information and the reconnection file according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct;

[0038] The fraudulent number reconnection module is used to respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0039] The present invention also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, it implements any of the above-mentioned anti-fraud number reconnection methods based on SIM card authentication.

[0040] The present invention also provides a computer storage medium storing a computer program, wherein when the computer program is executed by a processor, the anti-fraud number reconnection method based on SIM card authentication as described above is implemented.

[0041] The above-mentioned anti-fraud number reconnection method and device based on SIM card authentication instantiates the reconnection card application to generate an identifier that uniquely identifies the application instance, and selects the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has a reconnection function. When the SIM card has a reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application. Subsequently, the identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national secret algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application. Afterwards, when there is no network or shutdown state at the user end, a SIM card mobile phone reconnection request is received, and the identity information and reconnection file are verified according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct. Finally, in response to the number reconnection request and analyzing the suspension reason of the current number, the fraud risk level of the current number is obtained, and different authentication information is used for number reconnection according to the fraud risk level of the current number. This method uses the identity information and reconnection files stored in the reconnection card application to interact with the reconnection application through the SIM card's machine-card interaction channel when the SIM card is out of network or shut down, thereby completing the identity information and reconnection file verification and completing the reconnection process. In addition, for the reconnection of fraudulent numbers, this method encrypts and decrypts numbers of different fraudulent levels with different algorithms, which improves the security and practicality of reconnecting fraudulent numbers to a certain extent. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 A flow chart of the anti-fraud number reconnection method based on SIM card authentication provided by the present invention;

[0044] Figure 2 A schematic diagram of the architecture of a reconnection card application of an anti-fraud number reconnection method based on SIM card authentication in a specific embodiment of the present invention;

[0045] Figure 3 A schematic diagram of the structure of a reconnection card application file of an anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0046] Figure 4A schematic diagram of the primary risk number authentication and encryption process of the anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0047] Figure 5 A schematic diagram of the secondary risk number authentication and encryption process of the anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0048] Figure 6 A schematic diagram of the three-level risk number authentication and encryption process of the anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0049] Figure 7 A schematic diagram of the reconnection application issuing process of the anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0050] Figure 8 A schematic diagram of the reconnection process of the anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0051] Fig. 9 A schematic diagram of an anti-fraud number risk level analysis architecture of an anti-fraud number reconnection method based on SIM card authentication in a specific embodiment provided by the present invention;

[0052] Fig.10 A schematic diagram of the structure of the anti-fraud number reconnection device based on SIM card authentication provided by the present invention;

[0053] Fig.11 This is a diagram of the internal structure of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0055] Combine the following Figures 1 to 11 The present invention describes an anti-fraud number reconnection method and device based on SIM card authentication.

[0056] like Figure 1 As shown, in one embodiment, a method for reconnecting an anti-fraud number based on SIM card authentication includes the following steps:

[0057] Step S110, instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function.

[0058] Specifically, in the process of instantiating the reconnection card application, an identifier that uniquely identifies the reconnection application instance is generated, so that when determining whether the SIM card has the reconnection function, the application instance corresponding to the identifier is selected through the machine-card channel. If the corresponding application instance has the reconnection function, the corresponding SIM card has the reconnection function.

[0059] Step S120, when the SIM card has a reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application.

[0060] Step S130, encrypt the identity information and the reconnection file generated based on the number card information input by the user through the national encryption algorithm SM4, and store the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application.

[0061] In some embodiments, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention encrypts the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and stores the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application, specifically including the following steps:

[0062] It should be noted that the fraud risk level includes a first risk level, a second risk level and a third risk level, and the first risk level, the second risk level and the third risk level have different encryption methods.

[0063] Step S131, when the fraud risk level of the current number is the first risk level, a first character string is generated using the initial password corresponding to the login key and the card ICCID, and the first character string is hashed SHA-1 to obtain first data.

[0064] Step S132, select the first number of bytes arranged in the front of the first data as the SM4 algorithm key, and select the first number of bytes arranged in the back of the first data as the offset value, and encrypt the identity information and the restoration file generated based on the number card information entered by the user.

[0065] In some embodiments, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention encrypts the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and stores the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application, and specifically includes the following steps:

[0066] Step S133, when the fraud risk level of the current number is the second risk level, a second character string is generated based on the user's identity document number and the authentication image data, and the second character string is hashed SHA-1 to obtain second data.

[0067] Step S134, select the second number of bytes in the second data as the SM4 algorithm key, and generate a third character string in combination with the initial password and the card ICCID, and perform hash SHA-1 processing on the third character string to obtain the third data.

[0068] Step S135, select the second number of bytes in the third data as the offset value, and encrypt the identity information and the restoration file generated based on the number card information input by the user.

[0069] In some embodiments, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention encrypts the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and stores the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application, and specifically includes the following steps:

[0070] Step S136, when the fraud risk level of the current number is the third risk level, a fourth character string is synthesized based on the user ID number, the authentication image data and the timestamp, and the fourth character string is hashed SHA-1 to obtain fourth data.

[0071] Step S137, select the second number of bytes in the fourth data as the SM4 algorithm key, combine the initial password and the card ICCID to generate a fifth character string, perform hash SHA-1 processing on the fifth character string, and obtain fifth data.

[0072] Step S138, select the second number of bytes in the fifth data as the offset value, and encrypt the identity information and the restoration file generated based on the number card information input by the user.

[0073] Step S140, when there is no network or the user end is in shutdown state, a SIM card mobile phone reconnection request is received, and in response to the SIM card mobile phone reconnection request, the identity information and the reconnection file are verified according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct.

[0074] In some embodiments, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention receives a SIM card mobile phone reconnection request when the user end has no network or is in shutdown state, and verifies the identity information and the reconnection file according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct, specifically including the following steps:

[0075] Step S141, when the user end has no network or is in shutdown state, a SIM card mobile phone reconnection request is received through the reconnection card application, and the stored identity information and the reconnection commitment signed by the user are obtained in response to the SIM card mobile phone reconnection request.

[0076] Step S142, verify the identity information and the reconnection commitment letter through the reconnection card application, and transmit the reconnection application information to the reconnection management platform through NFC when the verification is correct, so as to call the reconnection management platform to analyze the suspension reason of the current number.

[0077] Among them, the reasons for suspension of the current number include real-name system reasons, arrears or package expiration reasons, and number fraud reasons.

[0078] Step S150, responding to the number reconnection request and analyzing the suspension reason of the current number to obtain the fraud risk level of the current number, and using different authentication information to reconnect the number according to the fraud risk level of the current number.

[0079] In some embodiments, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention responds to the number reconnection request and analyzes the suspension reason of the current number to obtain the fraud risk level of the current number, and uses different authentication information to reconnect the number according to the fraud risk level of the current number, specifically including the following steps:

[0080] Step S151, when the suspension reason of the current number is due to number fraud, the fraud risk level of the current number is obtained, and it is determined whether the fraud risk level of the current number meets the risk level reconnection requirement set in the stored identity information and the reconnection file.

[0081] Step S152, sending a number reconnection request to the network information security platform through the reconnection card application, and the network information security platform responds to the number reconnection request and completes the reconnection process.

[0082] Specifically, when the judgment result in step S151 is that the fraud risk level of the current number meets the stored identity information and the risk level reconnection requirements set in the reconnection file, a number reconnection request is sent to the network security platform through the reconnection card application. The network security platform responds to the number reconnection request and completes the reconnection process.

[0083] The above-mentioned anti-fraud number reconnection method based on SIM card authentication instantiates the reconnection card application to generate an identifier that uniquely identifies the application instance, and selects the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has a reconnection function. When the SIM card has a reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application. Subsequently, the identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national secret algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application. Afterwards, when there is no network or shutdown state at the user end, a SIM card mobile phone reconnection request is received, and the identity information and reconnection file are verified according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct. Finally, in response to the number reconnection request and analyzing the suspension reason of the current number, the fraud risk level of the current number is obtained, and different authentication information is used for number reconnection according to the fraud risk level of the current number. This method uses the identity information and reconnection files stored in the reconnection card application to interact with the reconnection application through the SIM card's machine-card interaction channel when the SIM card is out of network or shut down, thereby completing the identity information and reconnection file verification and completing the reconnection process. In addition, for the reconnection of fraudulent numbers, this method encrypts and decrypts numbers of different fraudulent levels with different algorithms, which improves the security and practicality of reconnecting fraudulent numbers to a certain extent.

[0084] In a specific embodiment, the anti-fraud number reconnection method based on SIM card authentication provided by the present invention is mainly implemented by a SIM card reconnection application. The structure of the SIM card reconnection application is as follows: Figure 2 As shown in Figure 1, its main functions include status judgment, data encryption and decryption, user information storage, and restoration commitment file storage. Figure 3 As shown, the storage file structure is that a re-pass card application ADF is set up under the main security domain MF, in which EF1 stores user information, EF2 stores a signed commitment letter, EF3 stores user ID number, DF1 stores portrait information, and EF3 and DF1 use encrypted storage.

[0085] In this embodiment, the reconnection card application is first installed in the SIM card, the application instantiation is completed, and the application instance unique identifier AID is generated. After the terminal side is turned on, the reconnection card application instance AID is selected through the machine-card channel to determine whether the SIM card supports the reconnection function. The user sets the initial information of the card application through the machine-card channel on the terminal side, and sets a 6-digit number as the initial login password to serve as the identity verification information for subsequent use of the card application. Subsequently, the user fills in the user's identity information (name, ID card information) on the terminal side, and stores it in the reconnection card application through the machine-card channel, and uses the national secret algorithm SM4 to encrypt the data and store it in the card application specified file index. The user fills in the number card information on the terminal side, and generates a reconnection commitment letter file, which is stored in the card application through the machine-card channel, and uses the national secret algorithm SM4 to encrypt the data and store it in the card application specified file index.

[0086] See also Figures 4 to 6 As shown, during the machine-card interaction process, the type of user authentication information to be collected is determined according to the risk authentication level that the user can pass when the number is reconnected in the future, which is selected by the user, and different encryption processes are adopted accordingly. Among them, during the first-level risk number authentication encryption process, the input 6-digit number + card ICCID is used to synthesize a 26-digit string, and the data is hashed SHA-1. The first 16 bytes of the result data are taken as the SM4 algorithm key, and the last 16 bytes are taken as the offset value. The input user identity information and user reconnection commitment information are encrypted and stored in the corresponding card application file. During the second-level risk number authentication encryption process, the last 8 digits of the ID card + the first 18 digits of the live authentication photo are used to synthesize a 26-digit string, and the data is hashed SHA-1. The last 16 bytes of the result data are taken as the SM4 algorithm key. The input 6-digit number + card ICCID is synthesized into a 26-digit string, and the data is hashed SHA-1. The last 16 bytes of the result are used as the offset value. The input user identity information and user reconnection commitment information are encrypted and stored in the corresponding card application file. During the third-level risk number authentication and encryption process, the last 8 digits of the ID card + the 14 digits of the liveness authentication photo + the first 4 digits of the current time t mod s are synthesized into a 26-bit string, and the data is hashed with SHA-1. The last 16 bytes of the result data are taken as the SM4 algorithm key. The input 6 digits + the card ICCID are synthesized into a 26-bit string, and the data is hashed with SHA-1. The last 16 bytes of the result are used as the offset value. The input user identity information and user reconnection commitment information are encrypted and stored in the corresponding card application file.

[0087] Combination Figure 7As shown, during the process of issuing the reconnection application, the user selects the risk authentication level that he wants to meet when the network is unobstructed, and applies for the SIM card reconnection application. Subsequently, the installation status of the SIM card reconnection application is queried. If it is not installed, the application is deleted, the security domain is deleted, and then the SIM card reconnection application is installed. After the SIM card reconnection application is successfully installed, the identity information of the application is stored in the reconnection management platform. The platform generates a personalized instruction corresponding to the identity information and writes it into the SIM card reconnection application to complete the personalization process. If the SIM card reconnection application is installed, the personalization status is queried. If it is personalized, the process ends. If it is not personalized, the application information is also stored in the reconnection management platform to complete the personalization process. When the personalization process is completed, the issuance of the SIM card reconnection application ends.

[0088] See also Figure 8 As shown, when the user is out of service and has no network, he applies for SIM card mobile phone reconnection. The stored identity information and reconnection commitment are obtained through the SIM card reconnection application. The user signs the reconnection commitment, and the SIM card reconnection application verifies the identity information and reconnection commitment. If the verification is correct, the application status is stored. The SIM card reconnection application exchanges information with the reconnection management platform through NFC to transmit information related to the reconnection application. The reconnection management platform analyzes the reason for the number suspension. If it is due to the real-name system, a mobile phone number reconnection request is initiated to the network security platform to complete the reconnection process. If the number is suspended due to arrears or expiration of the package, the user is prompted to pay or renew the package. If the number is suspended due to a fraud risk number, the risk level is obtained. If the identity authentication + commitment meets the reconnection requirements of the risk level, a mobile phone number reconnection request is initiated to the network security platform to complete the reconnection process.

[0089] Combination Fig. 9 As shown, in the process of anti-fraud number risk level determination, the risk level determination of the fraud risk number in the reconnection device is mainly divided into a data acquisition module, a data analysis module and a level determination module. Among them, the data acquisition module is used to collect voice call logs, SMS logs, location information logs, Internet access logs, public security blacklist databases, etc. in the past year for ETL data processing. The data analysis module is used to divide the data behavior into three categories according to the risk probability of fraud incidents, and set abnormal behavior determination thresholds respectively. After the number triggers the abnormal behavior threshold, it corresponds to different weighted values, and the third category> the second category> the first category.

[0090] In this embodiment, the number anomaly analysis includes the following analysis content: the blacklist database analysis content comes from the number database where the Ministry of Public Security and other departments have clearly identified fraudulent behavior. The voice outbound call data analysis process is mainly based on whether there are high-frequency outbound calls in a short period of time, calls to unknown calls, whether it is marked as a fraud number by the user, and sensitive words (transfer, remittance, personal information) in the call content. The SMS sending data analysis is whether there are high-frequency SMS sending in a short period of time, whether the sent content involves sensitive words, unsafe links, etc. The voice answering data analysis is mainly based on whether there are high-frequency calls in a short period of time, answering unknown calls, and sensitive words (transfer, remittance, personal information) in the call content. The SMS receiving data analysis mainly analyzes whether there are high-frequency spam SMS in a short period of time. The location information log mainly analyzes the overseas time, the overseas high-risk area time, whether the location information is frequently switched, etc. The Internet access log mainly analyzes the risk website access, abnormal Internet access time, whether there are frequent abnormal access requests, etc. Therefore, the level determination module is used to set thresholds according to the above-mentioned various abnormal behaviors, determine the risk level of the number, and divide the number risk value into three categories.

[0091] It should be noted that the third-level risk numbers are the numbers that have been sealed by the Ministry of Public Security and other agencies for clearly causing fraud. The second-level risk numbers are the numbers that trigger the second-level abnormal behavior and exceed the set threshold, and are associated with other behaviors for weighted calculation, and the risk value is >1 to determine the abnormality. The first-level risk numbers are the numbers that trigger the second-level abnormal behavior but the risk value of the weighted calculation of other behaviors is <1, or only trigger the third-level abnormal behavior and exceed the set threshold, which are high-risk numbers.

[0092] In this embodiment, the re-authentication requirements corresponding to numbers of different risk levels are shown in Table 1:

[0093] Table 1

[0094]

[0095] The anti-fraud number reconnection device based on SIM card authentication provided by the present invention is described below. The anti-fraud number reconnection device based on SIM card authentication described below and the anti-fraud number reconnection method based on SIM card authentication described above can be referred to each other.

[0096] like Fig.10 As shown, in one embodiment, an anti-fraud number reconnection device based on SIM card authentication includes a reconnection function determination module 1010, an initialization module 1020, an algorithm encryption module 1030, a reconnection request module 1040 and a fraud number reconnection module 1050.

[0097] The reconnection function determination module 1010 is used to instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function.

[0098] The initialization module 1020 is used to obtain preset card application initial information and login key through the machine-card channel when the SIM card has the reconnection function, and store the user's identity information in the reconnection card application.

[0099] The algorithm encryption module 1030 is used to encrypt the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and store the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application.

[0100] The reconnection request module 1040 is used to receive a SIM card mobile phone reconnection request when the user end has no network or is in shutdown state, and in response to the SIM card mobile phone reconnection request, verify the identity information and reconnection file according to the file index, so as to initiate a number reconnection request to the network security platform when the verification is correct.

[0101] The fraudulent number reconnection module 1050 is used to respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0102] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention has fraud risk levels including a first risk level, a second risk level and a third risk level, and the first risk level, the second risk level and the third risk level have different encryption methods.

[0103] The algorithm encryption module 1030 is specifically used for:

[0104] When the fraud risk level of the current number is the first risk level, a first character string is generated using the initial password corresponding to the login key and the card ICCID, and the first character string is hashed by SHA-1 to obtain first data.

[0105] The first number of bytes arranged in front of the first data are selected as the SM4 algorithm key, and the first number of bytes arranged in the back of the first data are selected as the offset value, and the identity information and the restoration file generated based on the number card information entered by the user are encrypted.

[0106] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention, the algorithm encryption module 1030 is specifically used for:

[0107] When the fraud risk level of the current number is the second risk level, a second character string is generated based on the user's identity document number and the authentication image data, and the second character string is hashed using SHA-1 to obtain second data.

[0108] The second number of bytes in the second data are selected as the SM4 algorithm key, and the third character string is generated by combining the initial password and the card ICCID. The third character string is hashed by SHA-1 to obtain the third data.

[0109] The second number of bytes arranged in the third data are selected as the offset value, and the identity information and the restoration file generated based on the number card information input by the user are encrypted.

[0110] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention, the algorithm encryption module 1030 is specifically used for:

[0111] When the fraud risk level of the current number is the third risk level, a fourth character string is synthesized based on the user's identity document number, the authentication image data and the timestamp, and the fourth character string is hashed by SHA-1 to obtain fourth data.

[0112] The second number of bytes in the fourth data are selected as the SM4 algorithm key, and the fifth character string is generated by combining the initial password and the card ICCID. The fifth character string is hashed by SHA-1 to obtain the fifth data.

[0113] The second number of bytes arranged in the fifth data are selected as the offset value, and the identity information and the restoration file generated based on the number card information input by the user are encrypted.

[0114] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention, the reconnection request module 1040 is specifically used for:

[0115] When the user has no network or is shut down, the reconnection request of the SIM card phone is received through the reconnection card application, and the stored identity information and the reconnection commitment signed by the user are obtained in response to the reconnection request of the SIM card phone.

[0116] The identity information and the reconnection commitment letter are verified through the reconnection card application, and when the verification is correct, the reconnection application information is transmitted to the reconnection management platform through NFC, so as to call the reconnection management platform to analyze the reasons for suspension of the current number.

[0117] Among them, the reasons for suspension of the current number include real-name system reasons, arrears or package expiration reasons, and number fraud reasons.

[0118] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention, the fraud number reconnection module 1050 is specifically used for:

[0119] When the current number is suspended due to real-name registration, a number reconnection request is sent directly to the network information security platform through the reconnection card application. The network information security platform responds to the number reconnection request and completes the reconnection process.

[0120] When the current number is suspended due to arrears or package expiration, payment or package renewal reminder information is sent to the user terminal through the Futong Card application.

[0121] In this embodiment, the anti-fraud number reconnection device based on SIM card authentication provided by the present invention, the fraud number reconnection module 1050 is specifically used for:

[0122] When the reason for suspension of the current number is that the number is fraudulent, the fraud risk level of the current number is obtained, and it is determined whether the fraud risk level of the current number meets the risk level reconnection requirements set in the stored identity information and the reconnection file. If so,

[0123] A number reconnection request is sent to the network information security platform through the reconnection card application. The network information security platform responds to the number reconnection request and completes the reconnection process.

[0124] Fig.11 The physical structure diagram of an electronic device is shown as an example. The electronic device may be a smart terminal, and its internal structure diagram may be as follows: Fig.11 As shown. The electronic device includes a processor, an internal memory and a network interface connected via a system bus. The processor of the electronic device is used to provide computing and control capabilities. The memory of the electronic device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the electronic device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, an anti-fraud number reconnection method based on SIM card authentication is implemented, and the method includes:

[0125] Instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function;

[0126] When the SIM card has the reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application;

[0127] The identity information and the reconnection file generated based on the number card information input by the user are encrypted using the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application;

[0128] When there is no network or the user is in shutdown state, receive the SIM card mobile phone reconnection request, and respond to the SIM card mobile phone reconnection request to verify the identity information and reconnection file according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct;

[0129] Respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0130] Those skilled in the art will understand that Fig.11 The structure shown in the figure is only a block diagram of a part of the structure related to the scheme of the present invention, and does not constitute a limitation on the electronic device to which the scheme of the present invention is applied. The specific electronic device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0131] On the other hand, the present invention also provides a computer storage medium storing a computer program, which, when executed by a processor, implements an anti-fraud number reconnection method based on SIM card authentication, the method comprising:

[0132] Instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function;

[0133] When the SIM card has the reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application;

[0134] The identity information and the reconnection file generated based on the number card information input by the user are encrypted using the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application;

[0135] When there is no network or the user is in shutdown state, receive the SIM card mobile phone reconnection request, and respond to the SIM card mobile phone reconnection request to verify the identity information and reconnection file according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct;

[0136] Respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0137] In another aspect, a computer program product or a computer program is provided, the computer program product or the computer program comprising computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of an electronic device reads the computer instructions from the computer-readable storage medium, and when the processor executes the computer instructions, an anti-fraud number reconnection method based on SIM card authentication is implemented, the method comprising:

[0138] Instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function;

[0139] When the SIM card has the reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application;

[0140] The identity information and the reconnection file generated based on the number card information input by the user are encrypted using the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application;

[0141] When there is no network or the user is in shutdown state, receive the SIM card mobile phone reconnection request, and respond to the SIM card mobile phone reconnection request to verify the identity information and reconnection file according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct;

[0142] Respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

[0143] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing related hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory.

[0144] By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0145] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0146] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for anti-fraud number reconnection based on SIM card authentication, characterized in that: Applied to a SIM card, in which a reconnection card application is installed, the method comprises: Instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has a reconnection function; When the SIM card has a reconnection function, the preset card application initial information and login key are obtained through the machine-card channel, and the user's identity information is stored in the reconnection card application; The identity information and the reconnection file generated based on the number card information input by the user are encrypted by the national encryption algorithm SM4, and the encrypted identity information and reconnection file are stored in the file indexes respectively specified by the reconnection card application; When the user end has no network or is in shutdown state, receive a SIM card mobile phone reconnection request, and respond to the SIM card mobile phone reconnection request to verify the identity information and the reconnection file according to the file index, so as to initiate a number reconnection request to the network information security platform when the verification is correct; Respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

2. The anti-fraud number reconnection method based on SIM card authentication according to claim 1, characterized in that: The fraud-related risk level includes a first risk level, a second risk level, and a third risk level, and the first risk level, the second risk level, and the third risk level have different encryption methods; The method of encrypting the identity information and the reconnection file generated based on the number card information input by the user by using the national encryption algorithm SM4, and storing the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application, includes: When the fraud risk level of the current number is the first risk level, a first character string is generated by using the initial password corresponding to the login key and the card ICCID, and the first character string is hashed using SHA-1 to obtain first data; The first number of bytes arranged in the front of the first data are selected as the SM4 algorithm key, and the first number of bytes arranged in the back of the first data are selected as the offset value, and the identity information and the restoration file generated based on the number card information entered by the user are encrypting.

3. The anti-fraud number reconnection method based on SIM card authentication according to claim 2, characterized in that: The method further comprises: encrypting the identity information and the reconnection file generated based on the number card information input by the user by using the national secret algorithm SM4, and storing the encrypted identity information and the reconnection file in the file indexes respectively specified by the reconnection card application; When the fraud risk level of the current number is the second risk level, generating a second character string based on the user identity document number and the authentication image data, and performing a hash SHA-1 process on the second character string to obtain second data; Select the second number of bytes in the second data as the SM4 algorithm key, combine the initial password and the card ICCID to generate a third character string, and perform SHA-1 hashing on the third character string to obtain third data; The second number of bytes arranged at the rear in the third data are selected as the offset value, and the identity information and the reconnection file generated based on the number card information input by the user are encrypted.

4. The anti-fraud number reconnection method based on SIM card authentication according to claim 3, characterized in that: The method further comprises: encrypting the identity information and the reconnection file generated based on the number card information input by the user by using the national secret algorithm SM4, and storing the encrypted identity information and the reconnection file in the file indexes respectively specified by the reconnection card application; When the fraud risk level of the current number is the third risk level, synthesizing a fourth character string based on the user identity document number, the authentication image data and the timestamp, and performing a hash SHA-1 process on the fourth character string to obtain fourth data; Select the second number of bytes in the fourth data as the SM4 algorithm key, combine the initial password and the card ICCID to generate a fifth character string, and perform SHA-1 hashing on the fifth character string to obtain fifth data; The second number of bytes arranged at the rear in the fifth data are selected as the offset value, and the identity information and the restoration file generated based on the number card information input by the user are encrypted.

5. The anti-fraud number reconnection method based on SIM card authentication according to claim 4, characterized in that: When the user terminal has no network or is in shutdown state, receiving a SIM card mobile phone reconnection request, and responding to the SIM card mobile phone reconnection request, verifying the identity information and the reconnection file according to the file index, and initiating a number reconnection request to the network information security platform when the verification is correct, including: When the user end has no network or is in shutdown state, the reconnection request of the SIM card mobile phone is received through the reconnection card application, and the stored identity information and the reconnection commitment signed by the user are obtained in response to the reconnection request of the SIM card mobile phone; The identity information and the reconnection commitment are verified through the reconnection card application, and when the verification is correct, the reconnection application information is transmitted to the reconnection management platform through NFC, so as to call the reconnection management platform to analyze the suspension reason of the current number; Among them, the reasons for suspending the current number include real-name registration reasons, arrears or package expiration reasons, and number fraud reasons.

6. The anti-fraud number reconnection method based on SIM card authentication according to claim 5, characterized in that: The responding to the number reconnection request and analyzing the suspension reason of the current number to obtain the fraud risk level of the current number, and using different authentication information to reconnect the number according to the fraud risk level of the current number, includes: When the reason for suspension of the current number is the real-name system reason, a number reconnection request is directly sent to the network security platform through the reconnection card application, and the network security platform responds to the number reconnection request and completes the reconnection process; When the suspension reason of the current number is due to the arrears or expiration of the package, payment or package renewal reminder information is sent to the user terminal through the Futong Card application.

7. The anti-fraud number reconnection method based on SIM card authentication according to claim 6, characterized in that: The method of responding to the number reconnection request and analyzing the suspension reason of the current number to obtain the fraud risk level of the current number, and reconnecting the number using different authentication information according to the fraud risk level of the current number, further includes: When the reason for the suspension of the current number is that the number is fraudulent, the fraud risk level of the current number is obtained, and it is determined whether the fraud risk level of the current number meets the risk level reconnection requirements set in the stored identity information and the reconnection file; if so, A number reconnection request is sent to the network security platform through the reconnection card application, and the network security platform responds to the number reconnection request and completes the reconnection process. 8.An anti-fraud number reconnection device based on SIM card authentication, characterized in that: The device comprises: The reconnection function determination module is used to instantiate the reconnection card application to generate an identifier that uniquely identifies the application instance, and select the application instance corresponding to the identifier through the machine-card channel to determine whether the SIM card has the reconnection function; An initialization module, used for obtaining preset card application initial information and login key through the machine-card channel when the SIM card has a reconnection function, and storing the user's identity information in the reconnection card application; An algorithm encryption module, used to encrypt the identity information and the reconnection file generated based on the number card information input by the user through the national secret algorithm SM4, and store the encrypted identity information and reconnection file in the file indexes respectively specified by the reconnection card application; A reconnection request module is used to receive a SIM card mobile phone reconnection request when the user end has no network or is in shutdown state, and verify the identity information and the reconnection file according to the file index in response to the SIM card mobile phone reconnection request, so as to initiate a number reconnection request to the network information security platform when the verification is correct; The fraudulent number reconnection module is used to respond to the number reconnection request and analyze the suspension reason of the current number to obtain the fraud risk level of the current number, and use different authentication information to reconnect the number according to the fraud risk level of the current number.

9. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images