CN103957105A - Use identity authentication method and SIM card - Google Patents

Abstract

The present invention provides a user identity authentication method and a SIM card. The method includes: the SIM card receives the login information input by the user through the client when the user needs to use a body detection instrument; The identification information is encrypted to generate a verification code; a two-dimensional code is generated according to the verification code and the two-dimensional code is sent to the management server, so that the management server turns on the body detection device for the user to use when it determines that the received two-dimensional code exists. The two-dimensional code is generated in real time through the SIM card, avoiding the defect that the two-dimensional code carried on a separate card is always exposed and easy to obtain, and, due to the security of the SIM card itself, and the parameters generated by the two-dimensional code involve user information and The information of the management server that manages the body detection instrument further improves the security of the two-dimensional code generation process and the generated two-dimensional code, and the SIM card is carried in the user's hand-held terminal, which is convenient to carry.

Description

User authentication method and SIM card

technical field

The invention belongs to the technical field of information security, and in particular relates to a user identity authentication method and a SIM card.

Background technique

In the medical and health system, when a user needs to use a testing instrument for a corresponding physical examination, the user's identity needs to be authenticated first.

In the existing identity authentication process, the user's identity authentication information, such as name, mobile phone number and other information, is usually carried in an independent card in the form of barcode, two-dimensional barcode, etc., such as IC card or ID card. When the card is lost, because the user's identity authentication information is solidified and exposed in the card, other people can easily obtain the user's identity authentication information to start the corresponding detection equipment, which is low in security and needs to carry the card to the user. inconvenient.

Contents of the invention

Aiming at the problems existing in the prior art, the present invention provides a user identity authentication method and a SIM card to overcome the defects of low security and poor portability caused by identity authentication information carried in an independent card in the prior art.

The invention provides a user identity authentication method, comprising:

The SIM card receives the login information entered by the user through the client when the user needs to use the physical detection instrument;

The SIM card uses a first preset encryption algorithm to encrypt the login information and the pre-acquired identification information of the management server to generate a verification code;

The SIM card generates a two-dimensional code according to the verification code, and sends the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user.

The invention provides a SIM card, comprising:

The first receiving module is used to receive the login information input by the user through the client when the user needs to use the body detection instrument;

The first processing module is configured to encrypt the login information and the pre-acquired identification information of the management server by using a first preset encryption algorithm to generate a verification code;

The second processing module is configured to generate a two-dimensional code according to the verification code, and send the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user.

In the user identity authentication method and the SIM card provided by the present invention, after the SIM card receives the login information input by the user, it generates a verification code according to the login information and the pre-acquired identification information of the management server, and then generates a verification code based on the verification code. The QR code for authenticating the user's identity,

In order to make the management server that manages the body detection instrument perform identity verification on the user based on the two-dimensional code

When the verification is passed, the corresponding body detection equipment is turned on for the user to use. The two-dimensional code is generated in real time through the SIM card, avoiding the defect that the two-dimensional code carried on a separate card in the prior art is always exposed and easy to be obtained by others, and, due to the security of the SIM card itself and the generation of the two-dimensional code The parameters relate to the information of the current operating user and the information of the management server that manages the body detection instrument, which further improves the security of the two-dimensional code generation process and the generated two-dimensional code, and the SIM card is carried in the user's hand-held terminal, which is convenient to carry.

Description of drawings

FIG. 1 is a flow chart of Embodiment 1 of the user identity authentication method of the present invention;

FIG. 2 is a flow chart of Embodiment 2 of the user identity authentication method of the present invention;

Fig. 3 is the structural representation of SIM card embodiment 1 of the present invention;

FIG. 4 is a schematic structural diagram of Embodiment 2 of the SIM card of the present invention.

Detailed ways

FIG. 1 is a flow chart of Embodiment 1 of the user identity authentication method of the present invention. As shown in FIG. 1 , the method provided in this embodiment can be executed by a user's handheld terminal such as a SIM card in a mobile phone. The method specifically includes the following steps:

Step 101, the SIM card receives the login information input by the user through the client when the user needs to use the body detection instrument;

For example, when a user enters a hospital and wants to use a certain body detection instrument such as a blood pressure measuring instrument, he first enters login information through the application client in the mobile phone, that is, the above-mentioned client. The login information includes, for example, a user name, Password, contact information and other information. The client sends the login information input by the user to the SIM card of the mobile phone, so that the SIM card generates the identity authentication information of the user, and sends the generated identity authentication information to the management server, so that the management server performs identity authentication on the user, Only when the authentication is passed, the user can use the body detection instrument.

Step 102, the SIM card uses a first preset encryption algorithm to encrypt the login information and the pre-acquired identification information of the management server to generate a verification code;

Step 103, the SIM card generates a two-dimensional code according to the verification code, and sends the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user.

The mobile phone SIM card first uses a first preset encryption algorithm to encrypt the login information and the pre-acquired identification information of the management server to generate a verification code, wherein the first preset encryption algorithm can be the usual An encryption algorithm to be used, or other commonly used encryption algorithms in the prior art, the specific encryption algorithm to be used depends on actual application conditions. Wherein, the identification information of the management server is, for example, the name of the management server, the serial number of the device, and the like. The management server is used for centralized management of all physical testing instruments, such as whether a user can use a certain physical testing instrument for identity authentication, saving the testing data generated by a user using a certain physical testing instrument, and so on. It is worth noting that in this embodiment, if a user has passed the identity authentication of the management server, the user can use all the physical testing instruments managed by the management server, that is, when a user wants to use a certain For a body detection device, after being authenticated by the management server, it means that the user can not only use a certain body detection device he wants to use, but also use other body detection devices.

However, it can be understood that the use authority of each user can be set according to the needs of actual applications. Because it is very likely that the operation of some body detection instruments is too complicated, or the wrong operation will cause serious harm to the user, at this time, the user's access to each body detection instrument should be set. Correspondingly, the identification information of the body detection device that the user needs to use should also be included in the generation parameters of the verification code.

Furthermore, the mobile phone SIM card generates a two-dimensional code according to the generated verification code, and sends the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user. In this embodiment, the user's identity authentication information is stored in the form of a two-dimensional code. The two-dimensional code can be, for example, that the SIM card uses another encryption algorithm different from the above-mentioned first preset encryption algorithm to encrypt the generated verification code. obtained, or obtained after performing certain operations on the verification code.

Generally speaking, after the mobile phone SIM card obtains the two-dimensional code used to authenticate the user's identity, it can send the two-dimensional code to the management server through the client, so that the management server can store the two-dimensional code in the locally stored two-dimensional code database. Check whether there is a QR code that is consistent with the received QR code. If it exists, it means that the user has passed the authentication and can use the corresponding physical testing equipment, and then the management server starts the corresponding physical testing equipment for the user to use.

In this embodiment, after receiving the login information input by the user, the SIM card generates a verification code according to the login information and the pre-acquired identification information of the management server, and then generates a verification code for authenticating the user's identity according to the verification code. QR code to authenticate the user based on the QR code. The two-dimensional code is generated in real time through the SIM card, avoiding the defect that the two-dimensional code carried on a separate card in the prior art is always exposed and easy to be obtained by others, and, due to the security of the SIM card itself and the generation of the two-dimensional code The parameters relate to the information of the current operating user and the information of the management server that manages the body detection instrument, which further improves the security of the two-dimensional code generation process and the generated two-dimensional code, and the SIM card is carried in the user's hand-held terminal, which is convenient to carry.

Fig. 2 is a flow chart of Embodiment 2 of the user identity authentication method of the present invention. As shown in Fig. 2, the method includes:

Step 201, the SIM card receives the identification information of the management server sent by the client, and the identification information of the management server is the registration information input by the user uploaded by the management server after receiving the client sent to the client afterward;

In this embodiment, before the user wants to automatically complete his own identity authentication through the application client in order to use a certain body detection instrument, he needs to complete the user registration process through the client. In the process of user registration, the user enters registration information in the user registration interface of the client, such as user name, age, password, address, contact information, etc., the client sends the registration information entered by the user to the management server, and the management server saves the registration information. While the user registers the information, it sends its own identification information to the client, so that the client can immediately send the identification information of the management server to the user's mobile phone SIM card, so that when the SIM card receives the client When sending the user login information to it, a verification code is generated according to the identification information of the management server and the user login information. Optionally, the client can also temporarily save the identification information of the management server, and when receiving the login information input by the user, send it to the SIM card of the mobile phone together with the login information.

Step 202, the SIM card receives the login information input by the user through the client when the user needs to use the physical testing instrument;

Step 203, the SIM card uses a second preset encryption algorithm to encrypt the login information, the pre-obtained identification information of the management server and the identification information of the SIM card to generate a verification code;

In this embodiment, the verification code generated by the SIM card of the mobile phone not only considers the user's login information and the identification information of the management server, but also considers the identification information of the SIM card, such as an integrated circuit card identification code (Integrate Circuit Card Identity, hereinafter ICCID for short), optionally, may also include identification information of the body detection instrument to be used. It is equivalent to that the verification code comprehensively considers the factors of the operating user, the management server and the mobile terminal, that is, both the management server and the mobile terminal are equivalent to authentication.

Step 204, the SIM card uses a third preset encryption algorithm to encrypt the verification code to generate a two-dimensional code;

Optionally, the generated two-dimensional code may also be generated by the client, that is, the SIM card sends the verification code to the client, so that the client uses the third preset encryption algorithm to The verification code is encrypted to generate the two-dimensional code.

Optionally, other operations may be performed on the verification code to obtain the two-dimensional code, such as XOR operation with a preset binary sequence.

In this embodiment, the two-dimensional code used for user identity authentication can be generated by the user's mobile phone SIM card, or by the above-mentioned client. Preferably, the client generates a two-dimensional code, that is, the SIM card sends the verification code to the client, so that the client uses the third preset encryption algorithm to encrypt the verification code , to generate the QR code.

The reason why the client is preferred to generate the two-dimensional code is to consider trying to reduce the processing load of the SIM card in practical applications. In addition, encrypting the verification code to generate a two-dimensional code is equivalent to re-encrypting the user name, contact information, and management server identification information contained in the user login information that generates the verification code, which further ensures the security of user information. safety.

Step 205, the SIM card sends the two-dimensional code to the client to display the two-dimensional code image, so that the client can scan the two-dimensional code through the image scanning gun connected to the body detection instrument The scanned image is sent to the management server, so that the management server turns on the body detection instrument for use by the user when determining that the received two-dimensional code exists according to the locally stored two-dimensional code database.

In this embodiment, if the SIM card of the mobile phone uses the third preset encryption algorithm to encrypt the verification code to generate a two-dimensional code, then the SIM card of the mobile phone sends the generated two-dimensional code to the client. The two-dimensional code is displayed on the interface as a two-dimensional code image. Generally, a two-dimensional code image scanning gun can be connected to each body detection instrument, and the two-dimensional code image displayed on the client interface can be scanned by the two-dimensional code image scanning gun on the body detection instrument that the user needs to use, so as to pass The scanning gun uploads the two-dimensional code image to the management server that manages each body detection instrument, so that the management server determines that the received two-dimensional code exists according to the locally stored two-dimensional code database. user described above.

It can be understood that the client can also send the two-dimensional code to the management server through the wireless network, and the specific method is limited by the actual application environment.

In this embodiment, the SIM card generates a verification code according to the user's login information, the identification information of the management server, and the identification information of the SIM card, and then generates a two-dimensional code for authenticating the user's identity according to the verification code, so that in In the process of generating the two-dimensional code, the authentication of the user terminal and the management server is realized, thereby further ensuring the security of the generated two-dimensional code. In addition, the client generates the two-dimensional code, which reduces the processing load of the SIM card.

Fig. 3 is a schematic structural diagram of Embodiment 1 of the SIM card of the present invention. As shown in Fig. 3, the SIM card includes:

The first receiving module 11 is used to receive the login information input by the user through the client when the user needs to use the body detection instrument;

The first processing module 12 is configured to encrypt the login information and the pre-acquired identification information of the management server by using a first preset encryption algorithm to generate a verification code;

The second processing module 13 is configured to generate a two-dimensional code according to the verification code, and send the two-dimensional code to the management server, so that the management server determines that the two-dimensional code received according to the locally stored two-dimensional code database When the two-dimensional code exists, the body detection instrument is turned on for use by the user.

The SIM card of this embodiment can be used to execute the technical solution of the method embodiment shown in FIG. 1 , and its implementation principle and technical effect are similar, and will not be repeated here.

Fig. 4 is a schematic structural diagram of the second embodiment of the SIM card of the present invention. As shown in Fig. 4, the SIM card in this embodiment is based on the embodiment shown in Fig. 3, and the first processing module 12 is specifically used At:

Encrypting the login information, the pre-acquired identification information of the management server, and the identification information of the SIM card by using a second preset encryption algorithm to generate a verification code.

Further, the second processing module 13 is specifically used for:

The verification code is encrypted by using a third preset encryption algorithm to generate a two-dimensional code.

Further, the second processing module 13 is also used for:

Send the two-dimensional code to the client to display the two-dimensional code image, so that the client scans the two-dimensional code image and sends it to the management through the image scanning gun connected to the body detection instrument server, so that the management server determines that the received two-dimensional code exists according to the locally stored two-dimensional code database, and turns on the body detection instrument for the user to use.

Further, the SIM card also includes:

The second receiving module 21 is configured to receive the identification information of the management server sent by the client, where the identification information of the management server is the registration information input by the user uploaded by the management server upon receiving the client. The information is then sent to the client.

The SIM card of this embodiment can be used to implement the technical solution of the method embodiment shown in FIG. 2 , and its implementation principle and technical effect are similar, and will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present invention. scope.

Claims (10)

1. A user identity authentication method, characterized in that, comprising: The SIM card receives the login information entered by the user through the client when the user needs to use the physical detection instrument; The SIM card uses a first preset encryption algorithm to encrypt the login information and the pre-acquired identification information of the management server to generate a verification code; The SIM card generates a two-dimensional code according to the verification code, and sends the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user. 2. The method according to claim 1, wherein the SIM card uses a first preset encryption algorithm to encrypt the login information and the pre-acquired identification information of the management server to generate a verification code, including: The SIM card encrypts the login information, the pre-obtained identification information of the management server and the identification information of the SIM card by using a second preset encryption algorithm to generate a verification code. 3. The method according to claim 1, wherein the SIM card generates a two-dimensional code according to the verification code, comprising: The SIM card uses a third preset encryption algorithm to encrypt the verification code to generate a two-dimensional code. 4. The method according to claim 3, wherein the SIM card sends the two-dimensional code to the management server, so that the management server determines that the two-dimensional code is received according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for the user to use, including: The SIM card sends the two-dimensional code to the client to display the two-dimensional code image, so that the client scans and sends the two-dimensional code image through the image scanning gun connected to the body detection instrument to the management server, so that the management server turns on the body detection instrument for use by the user when it determines that the received two-dimensional code exists according to the locally stored two-dimensional code database. 5. The method according to any one of claims 1 to 4, characterized in that, before the SIM card receives the login information input by the user through the client when the user needs to use the body detection instrument, the method further includes: The SIM card receives the identification information of the management server sent by the client, and the identification information of the management server is sent to the management server after receiving the registration information input by the user uploaded by the client. of the client. 6. A SIM card, characterized in that, comprising: The first receiving module is used to receive the login information input by the user through the client when the user needs to use the body detection instrument; The first processing module is configured to encrypt the login information and the pre-acquired identification information of the management server by using a first preset encryption algorithm to generate a verification code; The second processing module is configured to generate a two-dimensional code according to the verification code, and send the two-dimensional code to the management server, so that the management server determines the received two-dimensional code according to the locally stored two-dimensional code database. When the two-dimensional code exists, the body detection instrument is turned on for use by the user. 7. The SIM card according to claim 6, wherein the first processing module is specifically used for: Encrypting the login information, the pre-acquired identification information of the management server, and the identification information of the SIM card by using a second preset encryption algorithm to generate a verification code. 8. The SIM card according to claim 6, wherein the second processing module is specifically used for: Using the third preset encryption algorithm to encrypt the verification code to generate a two-dimensional code. 9. The SIM card according to claim 8, wherein the second processing module is also used for: Send the two-dimensional code to the client to display the two-dimensional code image, so that the client scans the two-dimensional code image and sends it to the management through the image scanning gun connected to the body detection instrument server, so that the management server turns on the body detection instrument for use by the user when it is determined according to the locally stored two-dimensional code database that the received two-dimensional code exists. 10. The SIM card according to any one of claims 6-9, further comprising: The second receiving module is configured to receive the identification information of the management server sent by the client, where the identification information of the management server is the registration information input by the user uploaded by the management server after receiving the client. and then sent to the client.