Identity Verification via Social Network Push Notifications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional verification code systems are vulnerable to extraction by illegal users through word or picture recognition, compromising network security as the verification code and other information are displayed on the same web page.
Innovation Solution
A method involving a computer server that uses a social networking application to verify identity information by forwarding a verification code from a first terminal to a second terminal, allowing interaction only after successful verification, thereby keeping the verification code confidential and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If verification code is displayed on the same web page as other information, then user operation is convenient, but security is compromised due to extraction by illegal users
Solution Approach 1:
The verification code is extracted from the common web page display and placed into a separate push notification message. The server generates the verification code and sends it via push notification to the user's terminal, separating it from the web page content that illegal users might scrape or recognize. This extraction eliminates the security vulnerability while maintaining ease of use through notification delivery.
Solution Approach 2:
A push notification message serves as an intermediary carrier for the verification code. Instead of displaying the code directly on the web page, the system uses the push notification mechanism as a mediator to deliver the code securely to the user's terminal, preventing direct exposure on the web page while ensuring the user receives the code conveniently.
2Object-affected harmful factors
If verification code is sent through push notification, then security is improved by preventing extraction, but system complexity increases
Solution Approach 1:
The push notification system, which is already a standard feature of social networking applications, is leveraged for dual purposes: regular user notifications and secure verification code delivery. This multi-functionality approach avoids building a separate verification code delivery system, thereby minimizing additional system complexity while achieving enhanced security through code extraction from web pages.
Data Source
AI summary
A method of verifying identity information is performed at a computer server using a social networking application. The computer server receives an identity verification request from a first terminal. The first terminal is associated with a first account of the social networking application and the identity verification request includes information of a verification code and a second account of the social networking application. The computer server then forwards information of the verification code to a second terminal associated with the second account of the social networking application. Upon receipt of a response from the second terminal, the computer server establishes a relationship between the first account and the second account after verification of the response from the second terminal using the verification code such that the second terminal can interact with the first terminal through the social networking application.