Authentication method and authentication system based on cloud platform decoding and shared server

Abstract

The invention relates to the technical field of communication security, in particular to an authentication method and an authentication system based on cloud platform decoding and a shared server. Comprising the steps that a CRM background initiates an identity authentication information reading request; the authentication plug-in requests authentication from the real-name cloud platform, and the platform sends the authentication token to the authentication plug-in if the authentication succeeds; if the authentication fails, the platform sends failure information to the authentication plug-in; after receiving the authentication success information, the authentication plug-in requests a decoding service, obtains SAM connection, establishes a decoding channel, and completes identity card identification through multiple interactions; after the decoding succeeds, the decoding service sends identity card information to the authentication plug-in; after receiving the identity card encryption information, the authentication plug-in returns the identity card encryption information to the CRM foreground; the CRM foreground calls back the CRM background to decrypt the identity card information and pushes the information to the CRM foreground; and the CRM foreground disconnects the reader connection to complete one-time identity card reading. According to the invention, the decoding efficiency and high security can be effectively ensured.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to an authentication method, an authentication system and a shared server based on cloud platform decoding. Background Art

[0002] The cloud platform decoding authentication server is an authentication solution based on cloud technology, which aims to provide efficient and secure identity authentication services. This server uses cloud computing resources to ensure the authenticity and security of user identities through advanced decoding technology and authentication protocols. It usually combines multiple authentication methods, such as account password authentication, mobile phone verification code authentication, real-name authentication, etc., to provide multi-level security protection.

[0003] Traditional identity authentication technology does not perform identity authentication during the client platform hardware startup phase, which may result in unauthorized client platforms accessing the network, posing potential security threats. In addition, traditional ID card authentication technology has low authentication efficiency, which brings users a poor authentication experience.

[0004] Based on the above problems, there is an urgent need for an authentication method and device that can effectively ensure decoding efficiency and high security. Summary of the invention

[0005] In view of the low efficiency and security of the current identity authentication system, the present invention provides an authentication method, an authentication system and a shared server based on cloud platform decoding to solve the above problems.

[0006] To achieve the above object, the present invention is implemented through the following technical solutions: The present application embodiment discloses an authentication method based on cloud platform decoding, including: S001: CRM backend initiates a request to read identity authentication information; S002: The authentication plug-in requests authentication from the real-name cloud platform. If the authentication is successful, the platform sends the authentication token to the authentication plug-in. If the authentication fails, the platform sends the failure information to the authentication plug-in. S003: After receiving the authentication success information, the authentication plug-in requests the decoding service, obtains the SAM connection, establishes the decoding channel, and completes the ID card recognition through multiple interactions; S004: After successful decoding, the decoding service sends the ID card information to the authentication plug-in; S005: After receiving the encrypted ID card information, the authentication plug-in returns it to the CRM front desk; the CRM front desk calls back the CRM back end to decrypt the ID card information and push it to the CRM front desk; S006: The CRM front desk disconnects the reader and completes an ID card reading.

[0007] Preferably, the S001 specifically includes: the CRM front desk sends a request to connect to the ID card reader, connects the authentication plug-in to the ID card reader, and initiates a request to read the identity authentication information.

[0008] Further preferably, the S003 further includes: if the authentication fails or the decoding process fails, the authentication plug-in will return a failure message.

[0009] Further preferably, the identity authentication information in S004 is encrypted according to the agreed method between the cloud platform and the CRM; and the identity card information is stored in an anonymized manner on the platform side and associated with the previous CRM business information.

[0010] Further preferably, the authentication plug-in and the ID card reader perform information interaction; the information interaction between the authentication plug-in and the ID card reader includes a first information interaction process, a second information interaction process and a third information interaction process, and the first information interaction process includes: S101: The reader encrypts a 24-byte random number using the manufacturer's initial key to generate ciphertext. S102: The reader generates a CMD response packet, and the content of the response data field is 24 bytes of ciphertext.

[0011] Further preferably, the second information interaction process includes: S201: 24-byte random number XOR reader hardware serial number generated by CMD inside the reader; S202: The reader encrypts the XOR result of the previous step using the manufacturer's initialization key to generate a session key; S203: The reader generates a CMD response packet and responds to the data content.

[0012] Further preferably, the third information interaction process includes: S301: The reader uses the session key generated by the CMD to decrypt the CMD data field ciphertext and generate a plaintext second-generation ID request; S302: The reader sends a plain text second-generation ID request to the second-generation ID; S303: The reader uses the session key to encrypt the second-generation ID card response content and generate the second-generation ID card response ciphertext; S304: The reader generates a CMD response packet, and the content of the response data field is the second-generation ID card response ciphertext.

[0013] Further preferably, during the reading and writing process of the second-generation ID card, the server sends CMD requests continuously until the reading and writing is completed.

[0014] An authentication system, applied to any of the authentication methods described above, characterized in that it comprises: CRM system: includes CRM front-end and CRM back-end, used to send requests, send identity information and receive encrypted ID card information; Authentication plug-in: Request authentication from the real-name cloud platform, and carry CRM business information when requesting authentication; ID card reader: used to interact with the authentication plug-in to obtain ID card information; Cloud platform authentication server: used to centrally authenticate ID card information in the cloud; Cloud platform decoding server: used to decode ID card information centrally in the cloud.

[0015] A shared server is applied to the authentication method as described in any one of the above, characterized in that it includes: a CPU, dual 10 Gigabit optical fiber interfaces, front and rear ventilation and heat dissipation devices, a Bluetooth device, a USB device, an OTG device and an NFC device.

[0016] Technical effects: The cloud platform decoding authentication method, authentication system and shared server provided in this application can ensure the security of identity card authentication by encrypting and transmitting identity card data over the network. The authentication method provided in this application has a high decryption rate and can complete decryption within 3 seconds. It can also perform centralized decoding in the cloud, which can improve the efficiency of identity card authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 This is a flowchart of the authentication method based on cloud platform decoding for this application; Figure 2 This is a flow chart of the first information interaction process of this application; Figure 3 This is a flow chart of the second information interaction process of this application; Figure 4 This is a flowchart of the third information interaction process of this application; Figure 5 This is the certification flow chart for this application; Figure 6 This is the flow chart of the interaction between the authentication plug-in and the ID card reader for this application; Figure 7 This is the system architecture diagram of this application platform. DETAILED DESCRIPTION

[0019] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0020] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0021] See also Figure 1-Figure 7 , such as the original ID card authentication system, which does not perform identity authentication during the client platform hardware startup phase, may cause unauthorized client platforms to access the network, bringing potential security threats, and the traditional ID card authentication technology has low authentication efficiency, which brings users a poor authentication experience. Based on the above problems, the embodiment of the present application discloses an authentication method based on cloud platform decoding, including: S001: CRM backend initiates a request to read identity authentication information; S002: The authentication plug-in requests authentication from the real-name cloud platform. If the authentication is successful, the platform sends the authentication token to the authentication plug-in. If the authentication fails, the platform sends the failure information to the authentication plug-in. S003: After receiving the authentication success information, the authentication plug-in requests the decoding service, obtains the SAM connection, establishes the decoding channel, and completes the ID card recognition through multiple interactions; S004: After successful decoding, the decoding service sends the ID card information to the authentication plug-in; S005: After receiving the encrypted ID card information, the authentication plug-in returns it to the CRM front desk; the CRM front desk calls back the CRM back end to decrypt the ID card information and push it to the CRM front desk; S006: The CRM front desk disconnects the reader and completes an ID card reading.

[0022] It is worth mentioning that the above solution adopts centralized decryption instead of dynamic data resource allocation. The real-name cloud service platform and the authentication client are connected via the public network or intranet. All data are transmitted after encryption. It supports the access of various types of document reading devices such as Bluetooth, USB, OTG, NFC, etc., and batch document reading and authenticity verification. The equipment has management and statistical analysis capabilities such as access authorization management. The authentication client and decoding service adopt TCP or UDP protocol, and the authentication client and security authentication service adopt TCP or UDP protocol. The decryption module is expandable and dynamically configured according to the concurrency demand; it can realize the recognition of multiple documents, including identity cards, Hong Kong, Macao and Taiwan Resident Residence Permits, and Foreigners’ Permanent Residence Permits.

[0023] The S001 specifically includes: the CRM front desk sends a request to connect to the ID card reader, connects the authentication plug-in with the ID card reader, and initiates a request to read the identity authentication information.

[0024] The S003 also includes: if the authentication fails or the decoding process fails, the authentication plug-in will return a failure message.

[0025] The identity authentication information in S004 is encrypted according to the agreement between the cloud platform and CRM; and the identity card information is stored in an anonymized manner on the platform side and associated with the previous CRM business information.

[0026] It also includes information interaction between the authentication plug-in and the ID card reader; the information interaction between the authentication plug-in and the ID card reader includes a first information interaction process, a second information interaction process and a third information interaction process, such as Figure 6 As shown in the figure, it should be noted that CMD(X) represents a transmission frame with a command code of X.

[0027] The first information interaction process includes: S101: The reader encrypts a 24-byte random number using the manufacturer's initial key to generate ciphertext. S102: The reader generates a CMD response packet, and the content of the response data field is 24 bytes of ciphertext.

[0028] Further preferably, the second information interaction process includes: S201: 24-byte random number XOR reader hardware serial number generated by CMD inside the reader; S202: The reader encrypts the XOR result of the previous step using the manufacturer's initialization key to generate a session key; S203: The reader generates a CMD response packet and responds to the data content.

[0029] Further preferably, the third information interaction process includes: S301: The reader uses the session key generated by the CMD to decrypt the CMD data field ciphertext and generate a plaintext second-generation ID request; S302: The reader sends a plain text second-generation ID request to the second-generation ID; S303: The reader uses the session key to encrypt the second-generation ID card response content and generate the second-generation ID card response ciphertext; S304: The reader generates a CMD response packet, and the content of the response data field is the second-generation ID card response ciphertext.

[0030] Further preferably, during the reading and writing process of the second-generation ID card, the server sends CMD requests continuously until the reading and writing is completed.

[0031] An authentication system, applied to any of the authentication methods described above, characterized in that it comprises: CRM system: includes CRM front-end and CRM back-end, used to send requests, send identity information and receive encrypted ID card information; Authentication plug-in: Request authentication from the real-name cloud platform, and carry CRM business information when requesting authentication; ID card reader: used to interact with the authentication plug-in to obtain ID card information; Cloud platform authentication server: used to centrally authenticate ID card information in the cloud; Cloud platform decoding server: used to decode ID card information centrally in the cloud.

[0032] A shared server is applied to the authentication method as described in any one of the above, characterized in that it includes: a CPU, dual 10 Gigabit optical fiber interfaces, front and rear ventilation and heat dissipation devices, a Bluetooth device, a USB device, an OTG device and an NFC device.

[0033] Unless otherwise specified, the device components involved in the above embodiments are all conventional device components, and the connection methods and control methods involved are all conventional connection methods and control methods unless otherwise specified.

[0034] The present invention has been described in detail above in conjunction with the embodiments. However, those skilled in the art will appreciate that, without departing from the spirit of the present invention, the specific parameters in the above embodiments may be changed to form a plurality of specific embodiments, which are all within the common variation range of the present invention and will not be described in detail herein.

Claims

1. An authentication method based on cloud platform decoding, characterized in that: include: S001: CRM backend initiates a request to read identity authentication information; S002: The authentication plug-in requests authentication from the real-name cloud platform. If the authentication is successful, the platform sends the authentication token to the authentication plug-in. If authentication fails, the platform sends the failure information to the authentication plug-in; S003: After receiving the authentication success information, the authentication plug-in requests the decoding service, obtains the SAM connection, establishes the decoding channel, and completes the ID card recognition through multiple interactions; S004: After successful decoding, the decoding service sends the ID card information to the authentication plug-in; S005: After receiving the encrypted ID card information, the authentication plug-in returns it to the CRM front desk; The CRM front desk calls back the CRM back end to decrypt the ID card information and push it to the CRM front end; S006: The CRM front desk disconnects the reader and completes an ID card reading.

2. According to the cloud platform decoding-based authentication method of claim 1, it is characterized in that: The S001 specifically includes: the CRM front desk sends a request to connect to the ID card reader, connects the authentication plug-in with the ID card reader, and initiates a request to read the identity authentication information.

3. The authentication method based on cloud platform decoding according to claim 1, characterized in that: The S003 also includes: if the authentication fails or the decoding process fails, the authentication plug-in will return a failure message.

4. The authentication method based on cloud platform decoding according to claim 1, characterized in that: The identity authentication information in S004 is encrypted according to the agreement between the cloud platform and CRM; and the identity card information is stored in an anonymized manner on the platform side and associated with the previous CRM business information.

5. The authentication method based on cloud platform decoding according to claim 1, characterized in that: The authentication plug-in and the ID card reader also perform information interaction; the information interaction between the authentication plug-in and the ID card reader includes a first information interaction process, a second information interaction process and a third information interaction process, and the first information interaction process includes: S101: The reader encrypts a 24-byte random number using the manufacturer's initial key to generate ciphertext. S102: The reader generates a CMD response packet, and the content of the response data field is 24 bytes of ciphertext.

6. The authentication method based on cloud platform decoding according to claim 5, characterized in that: The second information interaction process includes: S201: 24-byte random number XOR reader hardware serial number generated by CMD inside the reader; S202: The reader encrypts the XOR result of the previous step using the manufacturer's initialization key to generate a session key; S203: The reader generates a CMD response packet and responds to the data content.

7. The authentication method based on cloud platform decoding according to claim 5, characterized in that: The third information interaction process includes: S301: The reader uses the session key generated by the CMD to decrypt the CMD data field ciphertext and generate a plaintext second-generation ID request; S302: The reader sends a plain text second-generation ID request to the second-generation ID; S303: The reader uses the session key to encrypt the second-generation ID card response content and generate the second-generation ID card response ciphertext; S304: The reader generates a CMD response packet, and the content of the response data field is the second-generation ID card response ciphertext.

8. The authentication method based on cloud platform decoding according to claim 7, characterized in that: During the reading and writing process of the second-generation ID card, the server sends CMD requests continuously until the reading and writing is completed.

9. An authentication system, applied to the authentication method according to any one of claims 1 to 8, characterized in that: include: CRM system: includes CRM front-end and CRM back-end, used to send requests, send identity information and receive encrypted ID card information; Authentication plug-in: Request authentication from the real-name cloud platform, and carry CRM business information when requesting authentication; ID card reader: used to interact with the authentication plug-in to obtain ID card information; Cloud platform authentication server: used to centrally authenticate ID card information in the cloud; Cloud platform decoding server: used to decode ID card information centrally in the cloud.

10. A shared server, applied to the authentication method according to any one of claims 1 to 8, characterized in that: include: CPU, dual 10G fiber optic interfaces, front and rear ventilation and cooling devices, Bluetooth devices, USB devices, OTG devices, and NFC devices.

Images