Source: https://patents.google.com/patent/CN108496382A/en
Timestamp: 2020-07-10 23:21:46
Document Index: 209682924

Matched Legal Cases: ['art 340', 'art 340', 'art 340', 'art 340', 'art 340', 'art\n400']

CN108496382A - Security information transmitting system and method for personal identification - Google Patents
Security information transmitting system and method for personal identification Download PDF
CN108496382A
CN108496382A CN201680078057.0A CN201680078057A CN108496382A CN 108496382 A CN108496382 A CN 108496382A CN 201680078057 A CN201680078057 A CN 201680078057A CN 108496382 A CN108496382 A CN 108496382A
CN201680078057.0A
鱼浚善
洪载佑
宋周翰
科因普拉格株式会社
2016-01-05 Priority to KR10-2016-0000729 priority Critical
2016-01-05 Priority to KR1020160000729A priority patent/KR101637863B1/en
2016-07-11 Application filed by 科因普拉格株式会社 filed Critical 科因普拉格株式会社
2016-07-11 Priority to PCT/KR2016/007468 priority patent/WO2017119564A1/en
2018-09-04 Publication of CN108496382A publication Critical patent/CN108496382A/en
The present invention relates to a kind of security information transmitting systems and method for personal identification, the system and method are based on client public key, it will be from the Verification Number encrypting and transmitting of the server transport for the service that provides a user to the mobile communication terminal of user, to which even if Verification Number is leaked by hacker's behavior, also the not authenticated user for obtaining Verification Number can be prevented identified, wherein the number cannot be decrypted；And with the client public key needed for the Verification Number encryption for that will store and manage in anti-tamper and not private name server block chain keeps server, and by being capable of providing the client public key when needed, prevent to may be to cause client public key to be exposed or distorted by hacker's behavior by managing client public key in private name server in advance.Security information transmitting system for personal identification includes：User terminal (100), for asking the desired service of user；Mobile communication terminal (200), is handled by user, and when receiving encrypted personal identification information, and the encrypted personal identification information received is decrypted and is exported；And request service providing server (300), when service desired from user terminal (100) request user, it will be the personal identification information encryption of real user for asking user, and encrypted personal identification information (being the encryption information for personal identification) is transferred to the mobile communication terminal (200) possessed by the user of request service.The system and method are characterized in that after user checks the personal identification information for being output to mobile communication terminal (200), the personal identification information inputted is transferred to requested service providing server (300) by user terminal (100), and after confirming transmitted personal identification information, requested service providing server (300) realizes control the desired service of requested user is provided service to user terminal (100).
Security information transmitting system and method for personal identification
The present invention relates to for safe transmission user authentication information system and using the system method.More specifically Ground is related to the system for asking the user equipment of the desired service of user：If receiving encrypted user authentication information, user Mobile device encrypted user authentication information is decrypted and exports user authentication information；If user equipment requests take Business, then service providing server is to asking the user authentication information of user authentication to be encrypted, and by encrypted user authentication Information is transferred to mobile device；Wherein, the user equipment transmits aobvious in user confirmation to the service providing server Show the user authentication information on the mobile device later by the user authentication information input by user, and The wherein described service providing server confirms the user authentication information and allows the service being supplied to user equipment.
With the recent development of Internet communication technology, the mobile communication equipment for utilizing such as smart phone is being provided Various functions.
That is, as the data processing technique based on wireless communication rapidly develops, people can not only use voice Communication can also use short message transmission, video calling, electronic memo, amusement, internet connection and video messaging transmission etc. Service.
Recently, mobile device authentication service catches on, logical by using the movement in the various services of mobile device Communication network executes the authentication by offers such as telecommunications company, financial institution server, portal websites.
In the authentication service of mobile device, when the user for possessing mobile device asks payment, validation of information, registration or letter Breath change is required for when being authenticated on website, and Verification Number (authentication number) is transferred to use The mobile device of the pre-registered telephone number in family, and the Verification Number that user is received by website input is come certification.It moves Dynamic device authentication service is broadly divided into two kinds of authentication modes, one is certification is possessed, wherein only telephone number is needed to recognize to receive Demonstrate,prove number：Telephone number is inputted, Verification Number is asked, Verification Number is then transferred to the mobile device with telephone number, Another kind is to need telephone number and the ownership certification of SSN：Input telephone number and SSN, by reference to telephone number and SSN is authenticated using the database of telecommunications company, and then Verification Number is transferred to the mobile device with telephone number.
However, there are problems for conventional mobile device authentication service, because the user of unauthorized may be in the clothes from website Verification Number, this entail dangers to financial service are obtained by mobile communications network when business device is transmitted to the mobile device of user.
Drawn patent document：
The patent document 1 of reference：In the Korean Patent Registration No.10-0344114 of registration on June 28th, 2002.
Present invention aim to address all above problems.
It is a further object to provide a kind of system and method for safe transmission user authentication information, this is System and method utilize the Verification Number of the public key encryption of user by the mobile device transmission from service providing server to user, In the case of preventing encrypted Verification Number from being revealed due to hacker's behavior, unauthorized user encrypted is recognized using what cannot be decrypted It demonstrate,proves number and identifies the Verification Number.
According to an aspect of the invention, there is provided a kind of system for safe transmission user authentication information, including：Please Seek the user equipment of the desired service of user；The mobile device of the user, if receiving encrypted user authentication information, The encrypted user authentication information is decrypted and exports the user authentication information；And service providing server, if described It services, then the user authentication information for asking user authentication is encrypted, and will be encrypted described in user equipment requests User authentication information is transferred to the mobile device；Wherein, the user equipment is transmitted to the service providing server in institute Stating user confirms the user authentication information of display on the mobile device later by the user input by user Authentication information, and wherein, the service providing server confirms the user authentication information, and allows to carry the service Supply the user equipment.
The service providing server includes：Database portion, the database portion have the electricity for storing the mobile device Talk about the customer information database of number；User authentication information generator；Crypto engine；With message sending part, wherein the movement Equipment includes decryption engine and memory, and the memory stores the private key of the user, wherein the service providing server Indicate that (i) described user authentication information generator generates the user authentication information, (ii) described crypto engine is by using institute The public key for stating user is encrypted the user authentication information to obtain encrypted user authentication information, and (iii) message hair Send portion by reference to the telephone number that is stored in the customer information database by the encrypted user authentication information It is transferred to the mobile device, and wherein, the mobile device indicates the decryption engine by using being stored in described deposit The private key in reservoir decrypts the encrypted user authentication information to obtain the user authentication information.
The customer information database stores the subscriber identity information of the user for identification, wherein the system is also Including：Key server and block chain node, wherein the key server includes：(I) database portion has key data Library, the transaction id of a pair of (i) subscriber identity information of the key data library storage and (ii) for registration, the friendship for registration Easy ID is used as utilizing the key assignments of Transaction Information of the search of the public key in the customer information database for registration；And (II) transaction processing engine, wherein if receiving the Transaction Information for encrypting currency payment, block chain node is by testing It demonstrate,proves and authorizes encryption currency payment for encrypting the Transaction Information of currency payment, will be used by reference to the result of the authorisation process It is stored in block chain in the Transaction Information of the encryption currency payment, and is used for described in registration in the block chain The Transaction Information of registration, wherein if serviced described in the user equipment requests, the service providing server is from the visitor Family information database obtains the subscriber identity information and the subscriber identity information is transferred to the key server, In, the key server by reference to the subscriber identity information transmitted retrieved from the keyword database described in be used for The transaction id of registration, and the transaction id for registration is transferred to the block chain node, wherein the block chain node The Transaction Information for registration is retrieved from the block chain by reference to the transaction id for registration transmitted, and will The Transaction Information for registration is transferred to the key server, and wherein, the key server indicates its transaction Processing engine obtains the public key from the Transaction Information for registration transmitted and the public key is transferred to the service Server is provided.
The mobile device includes that key generates engine, wherein the mobile device indicates that its key generates engine and generates The public key and the private key, the private key is stored in the memory, and the public key is transferred to the service and is carried For server, wherein the private key and the subscriber identity information are transferred to the key and taken by the service providing server Business device, wherein the key server (i) receives the private key and user identity letter from the service providing server Breath, (ii) indicate its transaction processing engine (ii-1) generate include public key the Transaction Information and described for registering For the transaction id of registration, the transaction id for registration is used as the key assignments of the search Transaction Information for registration, (ii-2) Transaction Information for registration is transferred to the block chain node, and (ii-3) in the key data The transaction id for registration and the subscriber identity information are stored in library, and wherein, the block chain node will be passed The defeated Transaction Information for registration is stored in the block chain.
According to another aspect of the present invention, a method of it being used for safe transmission user authentication information, including：Step S100, user equipment are connected to service providing server and transmit service request to ask the desired service of user；Step S110, If the user equipment receives the service request, the service providing server, which determines, asks the described of the service Whether user provides the public key of the user before the service request；Step S120, if institute has been provided in the user Public key is stated, then the service providing server indicates that its user authentication information generator creates the user authentication information；Step S130, the service providing server indicate that its crypto engine is encrypted by using the public key to the user authentication information Obtain encrypted user authentication information；Step S140, the service providing server indicate its message sending part by reference to depositing Encrypted user authentication information is transferred to mobile device by the telephone number for storing up the user in customer information database； Step S150, mobile device indicate that its decryption engine will be encrypted by using the private key of the user stored in memory The user authentication information decrypt and obtain the user authentication information, and export the user authentication information；Step S160, After the user equipment confirms the display user authentication information on the mobile device, the user equipment is to institute Service providing server transmission is stated to be carried by the user authentication information input by user and step S170, the service Confirm the user authentication information for server, and allows the service being supplied to the user equipment.
If determining that the user does not provide the public key in step S110, the method further includes：Step S111, institute Service providing server is stated by reference to the telephone number being stored in the customer information database, will be used to generate institute The generation request for stating public key and the private key is transferred to the mobile device；Step S112, the mobile device instruction key life The public key and the private key are generated at engine, the private key is stored in the memory, and the public key is transferred to The service providing server；Step S113, the service providing server is by the private key and about the user of the user Identity information is transferred to the key server；Step S114, the key server (i) connect from the service providing server The private key and the subscriber identity information are received, (ii) indicates that its transaction processing engine generates the use that (ii-1) includes the public key It is used for the transaction id of registration in the Transaction Information of registration and (ii-2), the transaction id for registration to be used as searching for the use In the key assignments of the Transaction Information of registration；The Transaction Information for registration is transferred to by step S115, the key server Block chain node, and the transaction id for registration and the subscriber identity information are stored in keyword database；And And wherein, the Transaction Information for registration transmitted is stored in block chain by the block chain node.
After step sloo, the public key is transferred to the service providing server in the following manner：Step S131, if serviced described in the user equipment requests, the service providing server is obtained from the customer information database It takes the subscriber identity information about the user for asking the service and the subscriber identity information is transferred to cipher key service Device, step S132, the key server are examined by reference to the subscriber identity information transmitted from the keyword database Transaction id of the rope for registration, and the transaction id for registration is transferred to block chain node, step S133, the block Chain node retrieves the Transaction Information for registration by reference to the transaction id for registration transmitted from block chain, and will The Transaction Information for registration is transferred to the key server；And step S134, the key server indicate it Transaction processing engine obtains the public key from the Transaction Information for registration transmitted and is transferred to the public key described Service providing server.
The present invention has the following effects that：By will utilize user public key encryption Verification Number from service providing server It is transferred to the mobile device of user, is prevented in the case where encrypted Verification Number is leaked due to hacker's behavior, unauthorized is used Family identifies the Verification Number using the encryption Verification Number that cannot be decrypted.
The present invention has another effect：By will be used for Verification Number encryption needed for public key be stored in anti-counterfeiting and In the block chain distorted rather than in private name server, the user in the case where public key is retained in private name server is prevented Public key since hacker's behavior is leaked or is distorted, and only just provide public key when needed.
Description by the preferred embodiment provided below in conjunction with attached drawing, above and other objects of the present invention and feature To be apparent from it is understandable, wherein：
Fig. 1 is the block diagram for showing the system according to the present invention for safe transmission user authentication information；
Fig. 2 is the mobile device shown in the configuration of the system according to the present invention for safe transmission user authentication information Block diagram；
Fig. 3 is to show that the service in the configuration of the system according to the present invention for safe transmission user authentication information provides The block diagram of server；
Fig. 4 is the cipher key service shown in the configuration of the system according to the present invention for safe transmission user authentication information The block diagram of device；
Fig. 5 to Fig. 7 is flow chart, shows user in the system according to the present invention for safe transmission user authentication information The encryption of authentication information and transmission process.
It is fully described in detail under the present invention below by reference to the attached drawing of configuration and effect about embodiment The embodiment in face.
As illustrated, the system of the safe transmission according to the present invention for user authentication information may include user equipment 100, mobile device 200, service providing server 300, key server 400 and block chain node 500.
First, user equipment 100 can be set using the user for logging on to the service providing server 300 being described below Standby request service (for example, payment services, information inquiry service among the various services transmitted by service providing server 300, Purchase service etc.) equipment, and can be connect with service providing server 300 by the network including internet.
Mobile device 200 can be owned by user, and if disappearing from the service providing server 300 being described below Breath sending part 340 receives encrypted user authentication information, then mobile device 200 can be decrypted and export the encrypted user The equipment of authentication information, and mobile device 200 can be connected by the network including telecommunication network with service providing server 300 It connects.Here, the network including telecommunication network may include at least one of WiFi, wireless lan network and WCDMA networks.
The mobile device 200 for executing this function may include：Key generate engine 230, generate user public key and The private key of user；Memory 220 is stored in key and generates the private key generated at engine 230；Decryption engine 210；And control Portion 240, control key generate engine 230, memory 220 and decryption engine 210.
Here, key generates the service providing server 300 that engine 230 and decryption engine 210 can be to be described below The form of the mobile proprietary application (app) provided is mounted in mobile device 200.
If key generates engine 230 and decryption engine 210 and is installed in mobile device 200, control unit 240 can be with Instruction key, which generates the generation public key of engine 230 and private key, the control unit 240 of wherein mobile device 200, can allow public key and private Key is generated when network disconnects, to prevent key that may be leaked.
Hereafter, private key can be stored in memory 220 by control unit 240, and can be transferred to public key and hereafter will The service providing server 300 of description.
Later, the public key that slave mobile device 200 is transmitted can be stored in database portion 310 by service providing server 300 Customer information database 311 in.
Meanwhile when public key is stored in customer information database 311, it may be leaked due to hacker's behavior or puppet It makes.
In order to prevent this situation, the present invention can store in block chain rather than in private name server for encrypting Public key needed for Verification Number, and the service function of public key can be provided when any need.For this purpose, can need close Key server 400 and block chain node 500.
First, if slave mobile device 200 receives public key, the service providing server 300 that is described below can be with The subscriber identity information about user, and the subscriber identity information that can will be retrieved are retrieved from customer information database 311 It is transferred to key server 400 with private key.Here, the public key received is not stored in customer information database 311.
Key server 400 may include the database portion 410 and transaction processing engines for having keyword database 411 420。
If receiving private key and subscriber identity information from service providing server 300, key server 400 can refer to Show that its transaction processing engine 420 generates：(i) include Transaction Information for registering the public key received, and (ii) for noting The transaction id of volume is used as key assignments of the search for the Transaction Information of registration.
Later, transaction processing engine 420 can by for the Transaction Information of registration be transferred to block chain node 500 so as to It registers, and can will be stored in keyword database 411 for the transaction id of registration and subscriber identity information in block chain.
Block chain node 500 can be the equipment of composition encryption currency network, be executed by verifying and recording transaction Encrypt moneytary operations, such as the transaction of bit coin.
Here, briefly explaining bit coin.Bit coin was manufactured by middle acute hearing (SatoshiNakamoto) in 2009 A kind of digital cash that can be paid in kind, and with division center is gone, the center do not issued and Managed Currency is set It is standby.On the contrary, the transaction of bit coin is handled by the block chain network for being based on reciprocity (that is, P2P) network and public key encryption.
With this mode of payment, the advantages of bit coin be can to merchandise in no credit card needed for information it is (all Such as card number, the term of validity and CCV numbers) in the case of carry out payment and expense it is cheap.In addition, bit coin is stored in as electricity In the digital wallet of subfile, and unique address, i.e. public address are assigned to the digital wallet, and bit coin transaction base It is handled in the address.
In order to use the bit coin with this transaction feature, first, bit coin user can log in bit coin exchange (such as www.coinplug.com), and manufacture digital wallet and it is then loaded with KWR (i.e. won).
Hereafter, bit coin user can send out in confirming exchange after the current exchange rate of bit coin including bit The purchase order of the quantity and unit price of coin.If there is the sales order to match with purchase order, then merchandises and buy To bit coin, and bit coin user can use bit coin to pay product.
Such block chain node 500 may include the server managed by bit coin exchange, and can also include The server or terminal that mine machine operates are dug by bit coin, or can be used in user's end of the internet communication of bit coin payment End, such as PC or smart phone.
For this purpose, each block chain node 500 may include digital wallet, and if receive digital wallet according to The Transaction Information that typical bit coin payment creates, then block chain node 500, which can be verified, received is used for bit coin branch The Transaction Information paid authorizes bit coin to pay, and then can record transaction for the Transaction Information of bit coin payment and by the friendship Easy information is broadcast to specified block chain node 500.
That is, for bit coin payment Transaction Information broadcast by protocol definition, and if for bit coin payment Transaction Information generates, then the initial transaction information paid for bit coin is broadcast to eight by a node in block chain node Specified node, each for then receiving eight specified nodes of information are broadcast to other eight fingers again in the form of pyramid Determine node, and when information is transferred to bit coin all block chain nodes 500 required for payment, completes broadcast.
Therefore, include the above-mentioned Transaction Information registered for public key and the Transaction Information that pays for bit coin it is arbitrary Transaction Information cannot be all tampered, because they are stored in the block chain by being formed more than 100,000 block chain nodes 500 In.
In addition, the block chain of block chain node 500 may include the personal information paid for bit coin and transaction letter Breath, and is described as follows, this by explain include public key (the required public key of certification user when use requested service) use It can also be stored in as personal information the reason in block chain in the Transaction Information of registration.
If the transaction letter for the payment of bit coin of the subsidiary OP_RETURN information (that is, operation code RETURN) of transmission Breath, then each block chain node 500 Transaction Information as personal information rather than is indicated that the information of bit coin payment is broadcasted, And OP_RETURN information is included in and is played in the encryption for the authentication information of user authentication for the Transaction Information of registration Main function.
Here, if block chain node 500 authorize bit coin payment when in the Transaction Information paid for bit coin Detect OP_RETURN information, then block chain node 500 can send notice, the information quilt with OP_RETURN in the notice For indicating arbitrary data rather than for the Transaction Information of bit coin payment.
Service providing server 300 can be such equipment：If user equipment 100 transmits service request, to asking It asks the user authentication information of user authentication to be encrypted, and encrypted user authentication information is transferred to the mobile device of user 200。
Here, user must be the member for logging on to service providing server 300 to ask to service.
For this purpose, the individual of the member ID and password used when if user is by user equipment 100 and including logging in Log-on message and the telephone number of mobile device 200 are connected to service providing server 300, then service providing server 300 can store log-on message into customer information database 311, thus user be allowed to be arrived using member ID and password login Service providing server 300.
For this purpose, service providing server 300 may include：Database portion 310 has the mobile device of storage user The customer information database 311 of telephone number；User authentication information generator 320；Crypto engine 330；And message sending part 340。
By these processing, service providing server 300 can indicate its user authentication information generator 320 to create use Family authentication information, the user authentication information are random value.Here, user authentication information include number, character, symbol or they Any other combination.
Later, service providing server 300 can indicate that its crypto engine 330 recognizes user by using the public key of user Card information is encrypted to obtain encrypted user authentication information.
Hereafter, service providing server 300 can indicate its message sending part 340 by reference to being stored in customer information number Encrypted user authentication information is transferred to according to the telephone number for the mobile device 200 that the user in library 311 is all or possesses Mobile device 200.
Here, if message sending part 340 is SMS modules, it can be passed in the form of short message (that is, SMS message) Defeated encrypted user authentication information, and if it is the module of PUSH message, it can be sent in the form of PUSH message. Here, if encrypted user authentication information will be sent as PUSH message, mobile device 200 must have push to answer With program (push application).
Meanwhile pushing application program can be to provide answering for the Push Service to user's transmission notice or event notification With program, and may include Google Android PUSH messages client, Apple IOS PUSH messages client, Kakao Talk, Skype and NateOn etc..By these processing, the pushing application program of mobile device 200 can be with service offer service Device 300 establishes TCP/IP (transmission control protocol/Internet Protocol) connections, and can will be connect from service providing server 300 The encrypted user authentication information received is as PUSH message.
Later, mobile device 200 can indicate its decryption engine 210 by using the private key being stored in memory 220 Encrypted user authentication information is decrypted to obtain and export user authentication information, and can allow the user to confirm that institute is defeated The user authentication information gone out.
If user inputs confirmed user authentication information by user equipment 100, user equipment 100 can be by institute The user authentication information of input is transferred to service providing server 300.
Later, transmitted user authentication information can be confirmed in service providing server 300, and can allow to be asked Service be provided to user equipment 100.
Here, in one case, if public key is stored in customer information database 311, service providing server 300 can retrieve public key from customer information database 311, and in another case, if public key is stored in block chain In to prevent it since hacker's behavior is leaked or is forged, then public affairs can be retrieved when any need by following process Key.
That is, if receiving service request from user equipment 100, service providing server 300 can be from visitor Family information database 311 obtains the subscriber identity information about the user of request service and is transmitted to key server 400.
Key server 400 can come to retrieve from keyword database 411 by reference to the subscriber identity information transmitted For the transaction id of registration, and it can will be transferred to block chain node 500 for the transaction id of registration.
Here, can preassign for the transaction id of the registration block chain node 500 to be transmitted arrived.
Later, which can be come by reference to the transaction id for registration transmitted from block chain Transaction Information of the retrieval for registration, and can will be transferred to key server 400 for the Transaction Information of registration.
Key server 400 can indicate its transaction processing engine 420 from the Transaction Information for registration transmitted It obtains public key and the public key is transferred to service providing server 300.
User authentication is encrypted and transmits by using the configured in this way system for safe transmission user authentication information The process of information is as follows.
First, in step S100, user can use the login process of member ID and password by company by user equipment 100 Service providing server 300 is connected to transmit service request.
Here, in step S110, if receiving service request from user equipment 100, service providing server 300 can To determine whether user provides before service request the public key of the user.Here, can be by confirming in customer information number Determine whether to provide public key with the presence or absence of the transaction id of the registration of the public key for user according in library 311.
In step S111, if it is determined that public key is not provided previously, then service providing server 300 can be by reference to depositing The telephone number stored up in customer information database 311 will ask to be transferred to mobile device for generating the generation of public key and private key 200.Here, service providing server 300 can allow include key generate engine 230 and decryption engine 210 movement it is special Application program is transmitted and is mounted in mobile device 200, and request is generated to execute.
Later, in step S112, mobile device 200 can indicate that key generates engine 230 and generates public key and private key, will be private Key is stored in memory 220, and public key is transferred to service providing server 300.
In step S113, private key and subscriber identity information about user can be transferred to by service providing server 300 Key server 400.
In step S114, if receiving private key and subscriber identity information, cipher key service from service providing server 300 Device 400 can indicate its transaction processing engine 420 generate (i) include the public key received for registration Transaction Information and (ii) it is used for the transaction id of registration, which to be used as key assignments of the search for the Transaction Information of registration.
Later, in step S115, key server 400 can will be transferred to block chain node for the Transaction Information of registration 500 in block chain to register, and will be stored in keyword database for the transaction id of registration and subscriber identity information In 411.
Later, in step S116, the Transaction Information for registration transmitted can be stored in area by block chain node 500 In block chain.
Then, in step S120, if it is determined that the public key of the user has been provided in user, then service providing server 300 can indicate that its user authentication information generator 320 creates user authentication information, which is random value.
Later, in step S130, service providing server 300 can indicate its crypto engine 330 by using user's Public key is encrypted user authentication information to obtain encrypted user authentication information.
Here, the acquisition of public key carries out as follows.
In step S131, if receiving service request from user equipment 100, service providing server 300 can be from Customer information database 311 obtains the subscriber identity information about the user of request service and is transmitted to key server 400。
In step S132, key server 400 can be by reference to the subscriber identity information that is transmitted from key data Transaction id of the retrieval of library 411 for registration, and can will be transferred to block chain node 500 for the transaction id of registration.
In step S133, block chain node 500 can be come by reference to the transaction id for registration transmitted from block Transaction Information of the retrieval for registration in chain, and can will be transferred to key server 400 for the Transaction Information of registration.
In step S134, key server 400 can indicate its transaction processing engine 420 from being transmitted for registration Public key is obtained in Transaction Information, and public key is transferred to service providing server 300.
Later, in step S140, service providing server 300 can indicate its message sending part 340 by reference to storage Encrypted user authentication information is transferred to mobile device 200 by the telephone number of the user in customer information database 311.
In step S150, if receiving encrypted user authentication information, mobile device from service providing server 300 200 can indicate user authentication of its decryption engine 210 by using the private key pair encryption for the user being stored in memory 220 Information is decrypted to obtain user authentication information, and exports user authentication information.
In step S160, if user's operation user equipment 100 is to confirm the user authentication being shown in mobile device 200 Information and confirmed user authentication information is inputted, then user equipment 100 can transmit the user authentication information inputted To service providing server 300.
In step S170, transmitted user authentication information can be confirmed in service providing server 300, and can allow Requested service is provided to user equipment 100.
[reference sign]
100：User equipment 200：Mobile device
210：Decryption engine 220：Memory
230：Key generates engine 240：Control unit
300：Service providing server 310,410：Database portion
311：Customer information database 320：User authentication information generator
330：Crypto engine 340：Message sending part
400：Key server 411：Keyword database
420：Transaction processing engine 500：Block chain node
1. a kind of system for safe transmission user authentication information, including：
Ask the user equipment of the desired service of user；
The mobile device of the user believes the encrypted user authentication if receiving encrypted user authentication information Breath is decrypted and exports the user authentication information；With
Service providing server, if serviced described in the user equipment requests, to asking described in the certification of the user User authentication information is encrypted, and the encrypted user authentication information is transferred to the mobile device；
Wherein, the user equipment transmits to the service providing server and is shown in the mobile device in user confirmation On the user authentication information after by the user authentication information input by user, and
Wherein, the service providing server confirms the user authentication information, and allows the service being supplied to described User equipment.
2. system according to claim 1, wherein the service providing server includes：Its database portion, the data Library portion has the customer information database for the telephone number for storing the mobile device；User authentication information generator；Encryption is drawn It holds up；With message sending part,
Wherein, the mobile device includes its decryption engine and its memory, and the memory stores the private key of the user,
Wherein, service providing server instruction (i) the user authentication information generator generates the user authentication information, (ii) crypto engine is encrypted the user authentication information by using the public key of the user to obtain described add Close user authentication information, and (iii) described message sending part is by reference to the institute that is stored in the customer information database It states telephone number and the encrypted user authentication information is transferred to the mobile device, and
Wherein, the mobile device indicates that the decryption engine is decrypted by using the private key being stored in the memory The encrypted user authentication information obtains the user authentication information.
3. system according to claim 2, wherein the public key is stored in the customer information database.
4. system according to claim 2, wherein the customer information database stores the use of the user for identification Family identity information,
Wherein, the system also includes：Key server and block chain node, wherein the key server includes：(I) it is counted According to library portion, there is keyword database, a pair of (i) subscriber identity information of the key data library storage and (ii) are for registering Transaction id, it is described for registration transaction id be used as utilize the public key in the customer information database search for be used for The key assignments of the Transaction Information of registration；And (II) its transaction processing engine,
Wherein, if receiving the Transaction Information for encrypting currency payment, the block chain node is by verifying the use Currency payment is encrypted to authorize in the Transaction Information of encryption currency payment, it will be described for adding by reference to the result of authorisation process The Transaction Information of close currency payment is stored in block chain, and the transaction letter for registration is registered in the block chain Breath,
Wherein, if serviced described in the user equipment requests, the service providing server is from the customer profile data Library obtains the subscriber identity information and the subscriber identity information is transferred to the key server,
Wherein, the key server retrieves institute by reference to the subscriber identity information transmitted from the keyword database The transaction id for registration is stated, and the transaction id for registration is transferred to the block chain node,
Wherein, the block chain node is by reference to described in being transmitted and being retrieved from the block chain for the transaction id of registration It is transferred to the key server for the Transaction Information of registration, and by the Transaction Information for registration, and
Wherein, the key server indicates that its transaction processing engine obtains institute from the Transaction Information for registration transmitted It states public key and the public key is transferred to the service providing server.
5. system according to claim 4, wherein the mobile device includes that its key generates engine,
Wherein, the mobile device indicates that its key generates engine and generates the public key and the private key, and the private key is stored It is transferred to the service providing server in the memory, and by the public key,
Wherein, the private key and the subscriber identity information are transferred to the key server by the service providing server,
Wherein, the key server (i) receives the private key and the subscriber identity information from the service providing server, (ii) indicate its transaction processing engine (ii-1) generate include the public key the Transaction Information and described for registering For the transaction id of registration, the transaction id for registration is used as the key assignments of the search Transaction Information for registration, (ii-2) Transaction Information for registration is transferred to the block chain node, and (ii-3) in the key data The transaction id for registration and the subscriber identity information are stored in library, and
Wherein, the Transaction Information for registration transmitted is stored in the block chain by the block chain node.
6. system according to claim 1, wherein the user authentication information include number, character, symbol or they Combination.
7. a kind of method for safe transmission user authentication information, including：
Step S100, user equipment are connected to service providing server and transmit service request to ask the desired service of user；
Step S110, if the user equipment receives the service request, the service providing server determines request Whether the user of the service provides the public key of the user before the service request；
Step S120, if the public key has been provided in the user, the service providing server indicates that its user authentication is believed It ceases generator and creates the user authentication information；
Step S130, the service providing server indicate that its crypto engine believes the user authentication by using the public key Encryption for information obtains encrypted user authentication information；
Step S140, the service providing server indicate its message sending part by reference to being stored in customer information database The telephone number of the user the encrypted user authentication information is transferred to mobile device；
Step S150, the mobile device indicate private key of its decryption engine by using the user stored in memory The encrypted user authentication information decryption is obtained into the user authentication information, and exports the user authentication information；
Step S160, after the user confirms the user authentication information of display on the mobile device, the use Family equipment is transmitted to the service providing server by the user authentication information input by user, and
Step S170, the service providing server confirms the user authentication information, and allows the service being supplied to institute State user equipment.
8. according to the method described in claim 7, wherein, if determining that the user does not provide the public key in step S110, Then the method further includes：
Step S111, the service providing server is by reference to the phone number that is stored in the customer information database Code will ask to be transferred to the mobile device for generating the generation of the public key and the private key；
Step S112, the mobile device instruction key generate engine and generate the public key and the private key, the private key is deposited Storage is transferred to the service providing server in the memory, and by the public key；
The private key and subscriber identity information about the user are transferred to institute by step S113, the service providing server State key server；
Step S114, the key server (i) receive the private key and the user identity from the service providing server Information, (ii) indicate that its transaction processing engine generates the Transaction Information and (ii-2) for registration that (ii-1) includes the public key For the transaction id of registration, the transaction id for registration is used as the key assignments of the search Transaction Information for registration；
The Transaction Information for registration is transferred to block chain node by step S115, the key server, and will be described It is stored in keyword database for the transaction id of registration and the subscriber identity information；And
Wherein, the Transaction Information for registration transmitted is stored in block chain by the block chain node.
9. according to the method described in claim 7, wherein, in step S130, the public key is stored in the customer information number According in library.
10. according to the method described in claim 7, wherein, after step sloo, the public key is transmitted in the following manner To the service providing server：
Step S131, if serviced described in the user equipment requests, the service providing server is from the customer information Database obtains the subscriber identity information about the user for asking the service and is transferred to the subscriber identity information Key server,
Step S132, the key server are examined by reference to the subscriber identity information transmitted from the keyword database Transaction id of the rope for registration, and the transaction id for registration is transferred to the block chain node,
Step S133, the block chain node are retrieved from block chain by reference to the transaction id for registration transmitted and are used for The Transaction Information of registration, and the Transaction Information for registration is transferred to the key server；And
Step S134, the key server indicate that its transaction processing engine is obtained from the Transaction Information for registration transmitted It takes the public key and the public key is transferred to the service providing server.
11. according to the method described in claim 7, wherein, the user authentication information includes number, character, symbol or its group It closes.
CN201680078057.0A 2016-01-05 2016-07-11 Security information transmitting system and method for personal identification CN108496382A (en)
KR10-2016-0000729 2016-01-05
CN108496382A true CN108496382A (en) 2018-09-04
KR20180013710A (en) * 2016-07-28 2018-02-07 (주)이스톰 Public key infrastructure based service authentication method and system
KR101877335B1 (en) * 2017-01-02 2018-08-09 주식회사 코인플러그 Method for authenticating a user without a face-to-face contact by using mobile id based on blockchain and merkle tree structure related thereto, and terminal and server using the same
KR101862859B1 (en) * 2017-01-11 2018-05-31 주식회사 코인플러그 Method for providing payment gateway service in use of unspent transaction output based protocol and servers using the same
KR101862861B1 (en) * 2017-01-11 2018-07-04 주식회사 코인플러그 Method for providing payment gateway service in use of unspent transaction output based protocol and servers using the same
WO2020072537A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
EP3668047A1 (en) * 2018-12-12 2020-06-17 Evidian Method for opening a secure session on a computer terminal
KR101637863B1 (en) 2016-07-08
JP5626537B2 (en) 2014-11-19 Request offline profile data for online use in confidentiality