CN104506485B - Mobile interchange is paid taxes terminal identity Verification System - Google Patents

Abstract

A kind of mobile interchange provided by the invention is paid taxes the user's registration and identity authentication method of terminal, utilize cryptographic technique and Web service technology, identification code, time variable, subscriber phone number, the company information that the shared secret of client server and mobile interchange are participated in machine are overlapped binding, are then applied to identity authorization system.It is characterized in that by shared secret and machine identification code, subscriber phone number, company information is overlapped binding, machine one enterprise customer of opposite binding, enterprise customer's one machine of opposite binding.When this opposite binding is disturbed, it is necessary to re-establish binding relationship.This method can ensure that legal taxpayer handles tax-related service at any time and any place by mobile device and mobile Internet realization, prevent identity from palming off, user terminal is without preserving subscriber phone number, corporate tax number, the sensitive informations such as user login code.

Description

Mobile interchange is paid taxes terminal identity Verification System

Technical field

The present invention relates to informationization movements to do tax technical field, more particularly to tax terminal safety management method is done in movement.It carriesA kind of mobile interchange has been supplied to pay taxes the user's registration and identity authentication method of terminal.

Background technology

With the rapid development of broadband, wireless communication technique and intelligent terminal, the mobile tax makes tax administration department existWhenever, any place, handle official business in any terminal, be tax administration department existing business system on mobile terminalsExtend, the new image of service-oriented tax can be established, promote the administrative efficacy of Taxation Work, improves tax service quality, it is ensured that taxThe expropriation and management of source steady ordered.

It is mobile to do the telecommunication value-added application that tax business is a Tax, object-oriented be tax cadre, taxpayer andThe public mainly provides concerning taxes service by mobile devices such as mobile radio network, SMS platform and mobile phones, ensures servicePromptness, stability, diversity and safety, to optimize paying taxes service, tax efficiency is done in raising, and tax cost is done in mitigation.

Mobile intelligent terminal has the characteristics that portable, powerful, but terminal is easily lost and is stolen, therefore to mobile intelligenceEnergy terminal carries out authentication and differentiates, to ensure that terminal is used lawfully, in Protective system of Computer Network Safety veryIt is important.The identity identifying technology of common mobile intelligent terminal is usually that digital certificate is embedded in mobile intelligent terminal to show bodyPart, integrated asymmetric key in certificate is calculated using software algorithm, carries out the authentication and discriminating of terminal because certificate andThere are terminals for key, if digital certificate and Key Exposure, there is the possibility attacked, distorted and forged.

Invention content

A kind of mobile interchange provided by the invention is paid taxes the user's registration and identity authentication method of terminal, and password skill is utilizedArt and Web service technology, by the identification code of the shared secret of client server and mobile interchange participation machine, time variable, useFamily phone number, company information are overlapped binding, are then applied to identity authorization system.It is characterized in that by shared secret withMachine identification code, subscriber phone number, company information are overlapped binding.One machine one enterprise customer of opposite binding, oneA enterprise customer one machine of opposite binding.When this opposite binding is disturbed, it is necessary to re-establish correct bindingRow.This method can ensure that legal taxpayer is done at any time and any place by mobile device and mobile Internet realizationTax-related service is managed, prevents identity from palming off.

The present invention is achieved through the following technical solutions：Realize that the technical solution of target of the present invention is a kind of shiftingIt is dynamic to interconnect terminal identity certificate scheme of paying taxes, it is characterised in that：The composition of the system includes that certificate server and user move eventuallyHold software.User before system critical function using needing to register, because the relevant information of legal representative of enterprises is levied in the taxIn guard system registered, so the legal representative of enterprise can by directly by mobile phone note verification code in a manner of using system be shouldEnterprises service, the mandate that the other users of enterprise need to obtain business entity could be taken using system as enterprise after the completion of registeringBusiness.Customer mobile terminal software provides man-machine interface, receives information input by user, then extraction machine condition code is transportedIt calculates, is submitted to certificate server, the authentication information that certificate server submits terminal is verified, and authentication procedures are completed.

Utilize above-mentioned identity identifying method, it is characterised in that：

(1) legal representative of enterprises can by directly by short message verification code in a manner of be registered as system validated user.EnterpriseOther users need the mandate for obtaining legal representative of enterprises that could use system.

(2) phone number is provided when user's registration, certificate server by way of short message verification code to phone number intoRow confirms, server obtains the phone number of enterprise customer when registration, the identification code of mobile terminal, and user and server are shared shortBelieve two secrets of identifying code and payment cipher；

(3) customer mobile terminal software is to phone number, and short message verification code, company information mark, which calculate, generates oneThe terminal pass code of certification is stored in user terminal, company information, short message verification code, payment cipher, subscriber phone numberWithout preserving, certificate server does same operation and generates the code and preserve；

(4) user using movement when doing the general business of tax terminal, if the local terminal for preserving certification is passed throughCard code is without carrying out login password input verification, it is only necessary to the terminal pass code and terminal IMEI number of certification, timestampDeng progress operation, operation result is then sent to server end and is authenticated.If the terminal pass code of local authenticationIt loses, then needs to regenerate the code by way of short-message verification code authentication.

(5) user using movement when doing the important service of tax terminal, it is desirable to provide payment cipher progress re-authentication, twoAfter secondary certification passes through, related service could be completed.

Advantage and effect：

The present invention provides the user's registration and identity authentication method that a kind of mobile interchange pays taxes terminal, utilizes password skillArt, WEB service, short message, which is combined, realizes a kind of safe authentication mode, the privately owned attribute based on mobile terminal and safetyAuthentication protocol provides a kind of authentication techniques of safe and convenient.

The characteristics of this technology：

(1) the privately owned attribute based on mobile terminal, using cryptographic technique the phone number of enterprise customer, mobile terminalIMEI number, short message verification code, company information mark are bound, one machine of realization, one enterprise customer of opposite binding, oneEnterprise customer's one machine of opposite binding；

(2) general business is weighed using the authentication mode of the terminal pass code of certification without inputting login password authenticationBusiness is wanted to carry out re-authentication using payment cipher, tax business is done in user-friendly movement, while providing peace to critical servicesFull guard.

Description of the drawings

Fig. 1 mobile interchanges are paid taxes end-user registration flow chart.

Fig. 2 pays taxes operator's management flow chart.

Fig. 3 mobile interchanges are paid taxes terminal identity identifying procedure figure.

Specific implementation mode

The present invention is described in further detail below in conjunction with the accompanying drawings：

1, company information is registered：

It is registered firstly the need of in revenue department using the pay taxes user of terminal of mobile interchange, when registration must registered enterprise's methodThe phone number that people represents.

2, according to described by Fig. 1, legal representative of enterprises user's registration flow is as follows：

By the legal representative of enterprise, (representative should have the expropriation and management system of the tax information system to 2.1 enterprise customers firstUnite in database, and have registered the phone number of legal representative) it registers, when registration, inputs：Enterprise name is paid taxesNumber, then the cell-phone number of legal representative asks mobile phone identifying code；

After 2.2 servers receive the mobile phone identifying code request of user, according to cell-phone number input by user, the number of paying taxes and signTaxpayer's register information of guard system compares, and short message verification code is sent after confirming successfully to legal representative's mobile phone；

2.3 legal representatives input the short message verification code received, and system sends a request for registration to server, content packetIt includes：Enterprise name, the number of paying taxes, the cell-phone number of legal representative, mobile terminal IMEI number, HASH (enterprise name, the number of paying taxes, methodFixed commissarial cell-phone number, mobile terminal IMEI number, short message verification code, timestamp)；

2.4 servers receive registration request, and server end generates HASH (enterprise name, the number of paying taxes, the hand of legal representativeMachine number, mobile terminal IMEI number, short message verification code, timestamp), whether compare two HASH, enterprise uses if the sameIt succeeds in registration at family；

After 2.5 user registration success, judges whether to need to register payment cipher according to user role, there is critical function useThe people of permission needs to register payment cipher, and payment cipher makes for certification when executing important service, payment cipher input by userIt is preserved with server is submitted to after short-message verification code encryption；

After 2.6 succeed in registration, terminal calculates HASH, and (enterprise name, the number of paying taxes, the cell-phone number of legal representative, short message are testedDemonstrate,prove code) it is saved in mobile terminal as terminal pass code, it is used for later certification, without preserving the number of paying taxes, legal representative'sThe sensitive informations such as cell-phone number, the IMEI number of server end preservation customer mobile terminal, short message verification code, phone number, terminal are logicalThe information such as row card code.

After the completion of 3 legal representative of enterprises Accreditation Systems, the tax operator of enterprise can be added, when addition provides user nameAnd cell-phone number, Fig. 2 describe the flow of legal representative of enterprises addition business taxation operator；

After 4 legal representative of enterprises add tax operator, tax operator registers according to 2.1 beginning steps, flowIt is similar with legal representative of enterprises register flow path.

5, machine code and shared secret are superimposed binding：System carry out Hash (terminal pass code+terminal IMEI number+whenBetween stab) operation, generate a login authentication code, be used for authentication, this authentication code is bundled with user, subscriber phone number,User mobile phone equipment, pay taxes legal person.

6, Fig. 3 describes the flow of mobile tax terminal login system, and main entry stage is as follows

When the user of 6.1 registrations opens system software, system acquires this hand set IMEI number, current time stamp t, meter firstIt calculates：(terminal pass code+terminal IMEI number+timestamp t) is submitted to server to HASH as login authentication code.

6.2 servers receive user authentication information, server according to：Taxpayer Identification Number, tax registration cell-phone number, thisThe information such as hand set IMEI number judge whether terminal registered, and compare login time whether in the error range of permission, ifIt registered and the time is reasonable, and calculated HASH (terminal pass code+terminal IMEI number+timestamp t), the login sent with terminalAuthentication code compares, and allows terminal to obtain information if consistent, otherwise refuses.

7, important service confirmation stage：To avoid maloperation, when each important service is asked, user is needed to input payment closeThe mode of code carries out secondary identity validation.

The present invention utilizes cryptographic technique, and WEB service, short message, which is combined, realizes a kind of safe authentication mode, based on shiftingThe privately owned attribute of dynamic terminal and the authentication protocol of safety provide a kind of authentication techniques of safe and convenient.General service uses defaultIdentifying code is authenticated, and user needs to provide password confirming without inputting password, important service, and this mode combination can meetThe demand for security of important service, while user being facilitated to execute general business again.

Claims (2)

1. The terminal identity Verification System 1. a kind of mobile interchange is paid taxes, it is characterised in that：It is moved eventually including certificate server and userEnd；Using needing to register before system, when user's registration, needs to confirm the phone number of user, terminal kimonos after succeeding in registration userBusiness device shares short message verification code and payment cipher；Customer mobile terminal software provides man-machine interface, receives information input by user,Then extraction machine condition code carries out operation, be submitted to certificate server, the authentication information that certificate server submits terminal intoRow verification, completes authentication procedures；

   By short message verification code and machine characteristic code, subscriber phone number, company information is overlapped binding；One machine is opposite to be tied upA fixed enterprise customer, enterprise customer's one machine of opposite binding；When this opposite binding is disturbed, it is necessary to weightIt is newly-built to found correct binding relationship；

   (1) legal representative of enterprises can by directly by short message verification code in a manner of be registered as system validated user；Enterprise otherUser needs the mandate for obtaining legal representative of enterprises that could use system；

   (2) phone number is provided when user's registration, certificate server carries out phone number by way of short message verification code trueRecognize, server obtains the phone number of enterprise customer, the identification code of mobile terminal when registration, and user and server are shared short message and testedDemonstrate,prove code and payment cipher；

   (3) customer mobile terminal software is to phone number, and short message verification code, company information mark, which calculate, generates a certificationTerminal pass code is stored in user terminal, and company information, subscriber phone number, login password is without preserving, authentication serviceDevice does same operation and generates code and preserve；

   (4) user using movement when doing the general business of tax terminal, if the local terminal pass code that saves is without being stepped onRecord Password Input verification, it is only necessary to which, terminal pass code and machine characteristic code, time identifier carries out operation, then operation resultServer end is sent to be authenticated；If pass code loss in local terminal needs to regenerate the terminal pass code；

   (5) user using movement when doing the important service of tax terminal, it is desirable to provide payment cipher carries out re-authentication, secondary to recognizeAfter card passes through, related service could be completed.
2. The terminal identity Verification System 2. mobile interchange according to claim 1 is paid taxes, it is characterised in that include the following steps：Legal representative of enterprises registration step is as follows：

   Step 1：Enterprise customer is registered by the legal representative of enterprise first, which should be present in tax information systemIn the expropriation and management system database of system, and to have registered the legal representative of phone number, when registration, inputs：Enterprise name is receivedDuty paragraph, the cell-phone number of legal representative, then applies for mobile phone note verification code；

   Step 2：Certificate server is according to cell-phone number input by user, taxpayer's register information ratio of the number of paying taxes and expropriation and management systemIt is right, short message verification code is sent after confirming successfully to legal representative's mobile phone；

   Step 3：Legal representative inputs the short message verification code received, and then system sends a request for registration to server, contentIncluding：Enterprise name, the number of paying taxes, the cell-phone number of legal representative, mobile machine condition code, HASH (enterprise name, the number of paying taxes,The cell-phone number of legal representative, mobile machine condition code, short message verification code, timestamp)；

   Step 4：Server receives registration request, and server end generates HASH (enterprise name, the number of paying taxes, the hand of legal representativeMachine number, mobile machine condition code, short message verification code, timestamp), whether compare two HASH, enterprise uses if the sameIt succeeds in registration at family；

   Step 5：After user registration success, one payment cipher of re-registration, payment cipher is for certification when executing important service, branchIt pays password and is preserved using server is submitted to after short-message verification code encryption；

   Step 6：After succeeding in registration, terminal calculates HASH (enterprise name, the number of paying taxes, the cell-phone number of legal representative, short-message verificationCode) as terminal pass code it is saved in mobile terminal, it is used for later certification, without the preservation number of paying taxes, the mobile phone of legal representativeNumber sensitive information, server end preserve the machine characteristic code of customer mobile terminal, short message verification code, phone number, and terminal is passed throughCode information；

   Before other users are registered as system validated user, legal representative of enterprises mandate is needed, user is registered when business entity authorizesPhone number and user information, other users can be registered as system user after the completion of mandate, and flow is registered with business entityStep is identical；The step of mobile terminal user identity certification, is as follows：

   Step 1：User opens mobile terminal system software, and system acquires the machine characteristic code of mobile terminal, current time firstT is stabbed, the terminal pass code of preservation is obtained, if terminal pass code is not present, again by the verification mode of short message verification codeTerminal pass code is generated, it is identical when flow is with registration；Then it calculates：HASH (logging request+terminal pass code+machine characteristic code+Timestamp t) is submitted to server as login authentication code；

   Step 2：Server receive user logging request, server according to：Machine characteristic code information judges whether terminal is registeredIt crosses, compares login time whether in the error range of permission, if the registered and time is reasonable, obtain the terminal of preservationTerminal pass code calculates HASH (logging request+terminal pass code+machine characteristic code+timestamp t), the login sent with terminalAuthentication code compares, and indicates that authentication passes through if consistent, otherwise refuses user's further operating；

   Step 3：To avoid maloperation and personation, when each important service is asked, user is needed to input payment cipher progress secondaryIdentity validation.