Identity Authentication via Bank-Verified Number Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity authentication methods for online payments in countries without a central unified ID system or with frequent mobile number changes are costly, insecure, and have low payment success rates, particularly due to the use of 3DS verification which involves multiple intermediaries and is vulnerable to fraud.
Innovation Solution
A direct connection between a data authentication platform and a third-party organization bypasses the 3DS system, using a bank's credible authentication channels to authenticate users and securely transfer registration numbers and secret tokens for binding, reducing intermediaries and costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SMS verification code is sent to binding phone number, then identity authentication is achieved, but leakage of phone number information occurs
Solution Approach 1:
The patent introduces an intermediary mechanism where the verification code is sent to the binding phone number rather than directly exposing the phone number itself. The server acts as an intermediary that verifies identity through the code without requiring the user to disclose their phone number to third parties, thus protecting information while maintaining authentication reliability
Solution Approach 2:
Instead of transmitting the actual phone number information, the system uses a copy or representation in the form of a verification code sent to the binding number. The code serves as a proxy that proves ownership of the number without revealing the number itself, preventing information leakage while achieving authentication
2Measurement precision
If user information is collected for verification, then authentication accuracy is improved, but user experience deteriorates due to multiple operations required
Solution Approach 1:
The patent merges the identity verification process with the existing binding operation. Instead of requiring separate information collection and verification steps, the system combines these into a single flow where the verification code is sent to the already-bound phone number, reducing the number of operations users must perform while maintaining authentication accuracy
Solution Approach 2:
The system performs preliminary binding of the phone number before the verification step. By establishing the binding relationship in advance, the subsequent verification process becomes simpler and requires fewer user operations, as the code is automatically sent to the pre-bound number rather than requiring manual information submission
3Reliability
If traditional SMS verification is used, then identity authentication is achieved, but privacy security deteriorates due to phone number exposure
Solution Approach 1:
The verification code serves as an intermediary that mediates between the authentication need and privacy protection. The code is sent to the binding phone number as an intermediary step that proves identity without exposing the actual phone number to external systems, thus eliminating privacy security risks while maintaining authentication reliability
Solution Approach 2:
The patent extracts the phone number information from the authentication process itself. Instead of requiring the phone number to be submitted and processed directly, the system extracts this sensitive information and replaces it with a verification code sent to the pre-bound number, removing the harmful exposure of personal information while preserving authentication functionality
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed are an identity authentication, number saving and sending, and number binding method, apparatus and device. The identity authentication method comprises: receiving a user identity authentication request sent by a data authentication platform client, wherein the user identity authentication request comprises user authentication information and user identification information, and a data authentication platform server pre-stores the user authentication information and a registration number and a password, which correspond to the user identification information; acquiring, according to the user identification information, the user authentication information pre-stored in the data authentication platform server; matching the user authentication information in the acquired user identity authentication request with the acquired user authentication information pre-stored in the data authentication platform server; when the matching is successful, receiving a result, sent by the data authentication platform client, of confirming the acquisition of the registration number by a user; according to the received confirmation result, acquiring the registration number and the corresponding password of the user; and sending the acquired registration number and corresponding password of the user to a third-party mechanism server.