Patent ID: 8695072
Filing Date: 2014-04-08
Classification: H04L

Abstract:
1. A user identification method applicable to a network transaction, comprising the following steps of: (1) delivering a certificate packet by a user device to a certificate server via a first network, the certificate packet including a unique serial number of the user device; (2) delivering an inquiry packet by the certificate server to a password server, the inquiry packet including the unique serial number; (3) inquiring a database by the password server about a password and expiration time thereof based on the unique serial number; (4) delivering a reply packet by the password server to the user device via a second network, the reply packet including the password; (5) using the password and the unique serial number by the user device to produce a user terminal identification code; (6) delivering an identification packet by the user device to the certificate server via the first network, the identification packet including the user terminal identification code; and (7) verifying by the certificate server validity of the user terminal identification code and expiration time thereof with the database, and then determining if a user of the user device is admitted to proceed a subsequent transaction; wherein in step (3), when a corresponding password of the unique serial number does not exist or the expiration time is invalid, the following steps are executed: (3.1) producing the password by the password server, and then saving the password and the expiration time thereof corresponding to the unique serial number in the database; and (3-2) using the password and the unique serial number by the password server to produce a service terminal identification code, and then saving the service terminal identification code and the expiration time in the database.