CN104901956B - Network community user authentication method and authentication system - Google Patents

Abstract

The invention relates to a network community user authentication method and an authentication system. The method is realized by an authenticated user initiating a responsible authentication request for an unauthenticated user to the authentication system, and then through the authenticated user self-authenticating the unauthenticated user Online authentication for unauthenticated users is equivalent to expanding each authenticated user into a "network community administrator". Using self-authentication can greatly improve the efficiency of user authentication. At the same time, this authentication method is based on online The authenticity of the unauthenticated user's information can be guaranteed by using this method.

Description

A network community user authentication method and authentication system

technical field

The invention relates to the field of user authentication, and more specifically, to a user authentication method and an authentication system in a network community.

Background technique

Online communities refer to online communication spaces including BBS/forums, post bars, bulletin boards, group discussions, online chats, making friends, personal space, wireless value-added services, etc. Online communities with the same theme gather together people with common interests. By. However, in some communities with relatively high authenticity requirements, it is necessary to verify the authenticity of community users. The traditional method is to use manual verification, that is, to achieve authenticity verification by manually identifying the personal information submitted by users. It takes a lot of manpower and material resources to use it.

In order to alleviate the pressure of verifying the authenticity of users, some online communities allow certain network users to enter specific websites to browse group information submitted by unauthenticated users by granting them specific permissions, and then conduct authenticity verification based on the group information. However, this method still adopts a manual review method, and the review efficiency is low, and when the review volume is relatively large, it often cannot be reviewed in time. On the other hand, due to the instability of network users and the difficulty in controlling the audit quality, the authenticity of group information audited by this audit method is not high; at the same time, when using this method, it is necessary to provide a specific website for audit Authorized network users view the group information submitted by unauthenticated users, so they need to pay the cost of developing and maintaining a specific website; at the same time, because network users can access the information submitted by unauthenticated users, there are security risks and the security is not high.

Contents of the invention

The present invention provides a network community user authentication method to solve the above deficiencies in the prior art. The method can ensure the authenticity of authentication user data while realizing high-efficiency authentication of users.

For realizing above-mentioned purpose of the invention, the technical scheme that adopts is:

A user authentication method in a network community, which uses an authentication system to authenticate users, and the authentication system includes a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, a credit limit module, an authentication relationship module and a user registration module ;

The authentication method includes the following steps:

S1. The authenticated user B sends a responsible authentication request to the unauthenticated user C to the user authentication logic processing module;

S2. The user authentication logic processing module sends a query request to the credit limit module of "whether the credit limit for authenticated user B's responsible authentication for other users meets the requirements"; the credit limit module queries the certified user B for other users according to the request. Whether the credit line responsible for authentication meets the requirements, if so, return the allowable flag value to the user authentication logic processing module, and perform step S3, otherwise return the disallowed flag value to the user authentication logic processing module, and terminate the authenticated user B. responsible certification request;

S3. The user authentication logic processing module sends a request to the authentication code module to "generate the authentication code for the authenticated user B", and the authentication code module responds to the request and generates an authentication code based on the characteristic information of the authenticated user B;

S4. The user authentication logic processing module sends a digital signature request to the digital signature module, and the digital signature module reads the private key of the authenticated user B according to the request and digitally signs the authentication code generated by the authentication code module;

S5. The user authentication logic processing module sends an authentication code sending request to the information sending module, and the information sending module responds to the request and sends the digitally signed authentication code to the unauthenticated user C according to the information receiving method of the unauthenticated user C submitted by the authenticated user B. user C;

S6. Unauthenticated user C in the online community fills in and completes personal information and submits relevant personal information through the user registration module;

S7. The unauthenticated user C in the network community sends an authentication request to the user authentication logic processing module, and submits the received authentication code to the user authentication logic processing module;

S8. The user authentication logic processing module sends the submitted authentication code to the digital signature module, and the digital signature module verifies the validity of the digital signature of the authentication code. If the signature is invalid, the authentication request process of user C is terminated, otherwise the signed user information is returned to User authentication logic processing module;

S9. The user authentication logic processing module sends the authentication code to the authentication code module, and the authentication code module authenticates the validity of the authentication code. If the authentication code is invalid, the authentication request process of user C is terminated, otherwise the correct information of the authentication code is returned to the user Authentication logic processing module;

S10. On the basis of S8 and S9, the user authentication logic processing module sends the "user credit limit initialization" request of the unauthenticated user C to the credit limit module, and the credit limit module completes the network community credit limit value of the unauthenticated user C according to the request At the same time, the user authentication logic processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the digital signature public/private key for the unauthenticated user C according to the request; in addition, the user The authentication logic processing module sends an "authentication relationship creation" request to the authentication relationship module, and the authentication relationship module establishes and stores the responsible authentication relationship between the authenticated user B and the unauthenticated user C according to the request;

S11. The authentication process for the unauthenticated user C ends.

In the above solution, the online authentication of unauthenticated users is realized through self-authentication of authenticated users to unauthenticated users. Using self-authentication can greatly improve the efficiency of user authentication. At the same time, this authentication method is based on online authentication. The authenticity of the unauthenticated user information can be guaranteed because the authenticated user is familiar with the situation of the unauthenticated user.

Preferably, the authentication system also includes an administrator review interface. In step S7, if the unauthenticated user C cannot provide the authentication code, the unauthenticated user C is authenticated by means of community administrator authentication. The process of authenticating an unauthenticated user C in a specific way is as follows:

S101. The unauthenticated user C sends a "community administrator authentication" request to the user authentication logic processing module, and fills in personal information and submits materials;

S102. The community administrator D verifies and examines the personal information and submitted materials of the unauthenticated user C through the administrator audit interface. If the audit fails, the unauthenticated user C's authentication request behavior is terminated, and if the audit passes, step S103 is executed;

S103. The community administrator D submits the processing request of the unauthenticated user C to "approved" to the user authentication logic processing module;

S104. The user authentication logic processing module sends the "user credit limit initialization" request of the unauthenticated user C to the credit limit module, and the credit limit module completes the initialization of the network community credit limit value of the unauthenticated user C according to the request; meanwhile, the user authentication logic The processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the public/private key of the digital signature for the unauthenticated user C according to the request; in addition, the user authentication logic processing module sends the authentication relationship module Send out the request of "creating authentication relationship", and the authentication relationship module establishes and stores the responsible authentication relationship between the community administrator D and the unauthenticated user C according to the request;

S105. The community administrator authentication process ends.

Preferably, in step S2, the credit limit module judges whether the credit limit of the authenticated user B for other users' responsible authentication meets the requirements as follows:

The credit limit module judges whether the credit limit of the authenticated user B is greater than or equal to the limit value X, and if so, it is satisfied; otherwise, it is not satisfied.

At the same time, the present invention also provides an authentication system applying the above authentication method, and its technical solution is as follows:

An authentication system, including a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, a credit limit module, an authentication relationship module, an administrator review interface and a user registration module;

The user authentication logic processing module is used to respond to authentication requests of authenticated and unauthenticated users and coordinate the data processing process among various modules;

The authentication code module is used to generate an authentication code and verify the validity of the authentication code according to the request of the user authentication logic processing module;

The digital signature module is used to complete the digital signature of the authentication code and verify the validity of the digital signature of the authentication code according to the request of the user authentication logic processing module, and create and store the public/private key of the digital signature for the user;

The information sending module is used to send the authentication code to the unauthenticated user according to the request of the user authentication logic processing module;

The credit limit module is used to judge whether the credit limit for the user to authenticate other users meets the requirements according to the request of the user authentication logic processing module, and to complete the initialization of the user's network community credit limit value;

The authentication relationship module is used to establish and store the responsible authentication relationship between users according to the request of the user authentication logic processing module;

The administrator review interface is used to provide community administrators with personal information and related materials submitted by unauthenticated users;

The user registration module is used for user registration to fill in personal information and submit relevant materials.

Compared with prior art, the beneficial effect of the present invention is:

The method provided by the present invention realizes the online authentication of unauthenticated users by means of self-authenticated users' self-authenticated users, which is equivalent to expanding each authenticated user into a "network community administrator", using self-service The authentication method can greatly improve the efficiency of user authentication. At the same time, this authentication method is based on the fact that the offline authenticated user knows the situation of the unauthenticated user. Therefore, using this method can ensure the high authenticity of the information of the unauthenticated user.

Description of drawings

Fig. 1 is a schematic structural diagram of the authentication system provided by the present invention.

Fig. 2 is a flow chart of the authentication method provided by the present invention.

Figure 3 is a flow chart of the administrator authentication method.

detailed description

The accompanying drawings are for illustrative purposes only and cannot be construed as limiting the patent;

The present invention will be further elaborated below in conjunction with the accompanying drawings and embodiments.

Example 1

As shown in Figures 1 and 2, the user authentication method provided by the present invention uses the authentication system to perform authentication code authentication on the user. The authentication system includes a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, a credit limit module, Authentication relationship module and user registration module;

The authentication method includes the following steps:

S1. The authenticated user B sends a responsible authentication request to the unauthenticated user C to the user authentication logic processing module, wherein the authenticated user B and the unauthenticated user C are users in the real society and are familiar with each other;

S2. The user authentication logic processing module sends a query request to the credit limit module of "whether the credit limit for user B's responsible authentication for other users meets the requirements"; Whether the credit limit satisfies the requirements, if so, then return the allowable flag value to the user authentication logic processing module, and perform step S3, otherwise return the disallowed flag value to the user authentication logic processing module, and terminate the responsible authentication request of user B;

S3. The user authentication logic processing module sends a request for "generating user B's responsibility authentication code" to the authentication code module, and the authentication code module responds to the request and generates an authentication code based on the characteristic information of user B;

S4. The user authentication logic processing module sends a digital signature request to the digital signature module, and the digital signature module reads the private key of user B according to the request and digitally signs the authentication code generated by the authentication code module;

S5. The user authentication logic processing module sends an authentication code sending request to the information sending module, and the information sending module responds to the request and sends the digitally signed authentication code to the unauthenticated user C according to the information receiving method of the unauthenticated user C submitted by user B ;

S6. Unauthenticated user C in the online community fills in and completes personal information and submits relevant personal information through the user registration module;

S7. The unauthenticated user C in the network community sends an authentication request to the user authentication logic processing module, and submits the received authentication code to the user authentication logic processing module;

S8. The user authentication logic processing module sends the submitted authentication code to the digital signature module, and the digital signature module verifies the validity of the digital signature of the authentication code. If the signature is invalid, the authentication request process of user C is terminated, otherwise the signed user information is returned to User authentication logic processing module;

S9. The user authentication logic processing module sends the authentication code to the authentication code module, and the authentication code module authenticates the validity of the authentication code. If the authentication code is invalid, the authentication request process of user C is terminated, otherwise the correct information of the authentication code is returned to the user Authentication logic processing module;

S10. On the basis of S8 and S9, the user authentication logic processing module sends the "user credit limit initialization" request of user C to the credit limit module, and the credit limit module completes the initialization of the network community credit limit value of user C according to the request; at the same time , the user authentication logic processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the digital signature public/private key for user C according to the request; The relationship module issues a request for "creating authentication relationship", and the authentication relationship module establishes and stores the responsible authentication relationship between user B and user C according to the request;

S11. The authentication process for the unauthenticated user C ends.

In the above solution, the online authentication of unauthenticated users is realized through self-authentication of authenticated users to unauthenticated users. Using self-authentication can greatly improve the efficiency of user authentication. At the same time, this authentication method is based on online authentication. The authenticity of the unauthenticated user information can be guaranteed because the authenticated user is familiar with the situation of the unauthenticated user.

It should be pointed out that, when the authentication method provided by the present invention is used in practice, steps S1-S5 and step S6 can be exchanged, and this exchange will not affect the use effect of the authentication method.

On the basis of the above, the present invention also expands the authentication method: a responsible authentication penalty mechanism is established, which enables the application of the authentication method provided by the present invention to achieve the goal of ecological development of authenticated users. The technical solution of the accountability certification penalty mechanism is as follows:

S201. If the authenticated user C has a violation in the online community, the credit limit module punishes the user C with a credit value M according to the violation level;

S202. At the same time, the credit limit module inquires through the user authentication relationship module whether there is user C who is responsible for recommending user B. If there is, user B will assume the recommendation responsibility, and the credit limit module will punish user B with a credit limit value N, N Less than or equal to M;

S203. If user B also has user A who is responsible for authenticating, then user A will assume the responsibility of joint recommendation authentication, and the credit limit module will punish user A with a credit limit value of O, where O is less than or equal to N; Defined in the quota module.

S204. Authenticated users below a certain credit line value Y cannot participate in the interactive functions of the online community; certified users below a certain credit line value Z will be recorded in the blacklist of the community platform and cannot log in to the community.

Example 2

This embodiment improves embodiment 1, specifically as follows:

The authentication system also includes an administrator review interface. In step S7, if the unauthenticated user C cannot provide the authentication code, the unauthenticated user C is authenticated by means of community administrator authentication. As shown in Figure 3, the community administrator Authentication method The process of authenticating an unauthenticated user C is as follows:

S101. The unauthenticated user C sends a "community administrator authentication" request to the user authentication logic processing module, and fills in personal information and submits materials;

S102. The community administrator D verifies and examines the personal information and submitted materials of the unauthenticated user C through the administrator audit interface. If the audit fails, the unauthenticated user C's authentication request behavior is terminated, and if the audit passes, step S103 is executed;

S103. The community administrator D submits the processing request of the unauthenticated user C to "approved" to the user authentication logic processing module;

S104. The user authentication logic processing module sends the "user credit limit initialization" request of the unauthenticated user C to the credit limit module, and the credit limit module completes the initialization of the network community credit limit value of the unauthenticated user C according to the request; meanwhile, the user authentication logic The processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the public/private key of the digital signature for the unauthenticated user C according to the request; in addition, the user authentication logic processing module sends the authentication relationship module Send out the request of "creating authentication relationship", and the authentication relationship module establishes and stores the responsible authentication relationship between the community administrator D and the unauthenticated user C according to the request;

S105. The community administrator authentication process ends.

Example 3

At the same time, the present invention also provides an authentication system applying the authentication methods described in Embodiment 1 and Embodiment 2, the system includes a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, a credit limit module, Authentication relationship module, administrator review interface and user registration module;

The user authentication logic processing module is used to respond to authentication requests of authenticated and unauthenticated users and coordinate the data processing process among various modules;

The authentication code module is used to generate an authentication code and verify the validity of the authentication code according to the request of the user authentication logic processing module;

The digital signature module is used to complete the digital signature of the authentication code and verify the validity of the digital signature of the authentication code according to the request of the user authentication logic processing module, and create and store the public/private key of the digital signature for the user;

The information sending module is used to send the authentication code to the unauthenticated user according to the request of the user authentication logic processing module;

The credit limit module is used to judge whether the credit limit for the user to authenticate other users meets the requirements according to the request of the user authentication logic processing module, and to complete the initialization of the user's network community credit limit value;

The authentication relationship module is used to establish and store the responsible authentication relationship between users according to the request of the user authentication logic processing module;

The administrator review interface is used to provide community administrators with personal information and related materials submitted by unauthenticated users;

The user registration module is used for user registration to fill in personal information and submit relevant materials.

The method provided by the present invention realizes the online authentication of unauthenticated users by means of self-authenticated users' self-authenticated users, which is equivalent to expanding each authenticated user into a "network community administrator", using self-service The authentication method can greatly improve the efficiency of user authentication. At the same time, this authentication method is based on the fact that the offline authenticated user knows the situation of the unauthenticated user. Therefore, using this method can ensure the high authenticity of the information of the unauthenticated user.

Apparently, the above-mentioned embodiments of the present invention are only examples for clearly illustrating the present invention, rather than limiting the implementation of the present invention. For those of ordinary skill in the art, other changes or changes in different forms can be made on the basis of the above description. It is not necessary and impossible to exhaustively list all the implementation manners here. All modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included within the protection scope of the claims of the present invention.

Claims (4)

1. A network community user authentication method, characterized in that: use an authentication system to authenticate the user, and the authentication system includes a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, a credit limit module, an authentication relationship module and user registration module; The authentication method includes the following steps: S1. The authenticated user B sends a responsible authentication request to the unauthenticated user C to the user authentication logic processing module; S2. The user authentication logic processing module sends a query request to the credit limit module of "whether the credit limit for authenticated user B's responsible authentication for other users meets the requirements"; the credit limit module queries the certified user B for other users according to the request. Whether the credit line responsible for authentication meets the requirements, if so, return the allowable flag value to the user authentication logic processing module, and perform step S3, otherwise return the disallowed flag value to the user authentication logic processing module, and terminate the authenticated user B. responsible certification request; S3. The user authentication logic processing module sends a request to the authentication code module to "generate the authentication code for the authenticated user B", and the authentication code module responds to the request and generates an authentication code based on the characteristic information of the authenticated user B; S4. The user authentication logic processing module sends a digital signature request to the digital signature module, and the digital signature module reads the private key of the authenticated user B according to the request and digitally signs the authentication code generated by the authentication code module; S5. The user authentication logic processing module sends an authentication code sending request to the information sending module, and the information sending module responds to the request and sends the digitally signed authentication code to the unauthenticated user C according to the information receiving method of the unauthenticated user C submitted by the authenticated user B. user C; S6. Unauthenticated user C in the online community fills in and completes personal information and submits relevant personal information through the user registration module; S7. The unauthenticated user C in the network community sends an authentication request to the user authentication logic processing module, and submits the received authentication code to the user authentication logic processing module; S8. The user authentication logic processing module sends the submitted authentication code to the digital signature module, and the digital signature module verifies the validity of the digital signature of the authentication code. If the signature is invalid, the authentication request process of user C is terminated, otherwise the signed user information is returned to User authentication logic processing module; S9. The user authentication logic processing module sends the authentication code to the authentication code module, and the authentication code module authenticates the validity of the authentication code. If the authentication code is invalid, the authentication request process of user C is terminated, otherwise the correct information of the authentication code is returned to the user Authentication logic processing module; S10. On the basis of S8 and S9, the user authentication logic processing module sends the "user credit limit initialization" request of the unauthenticated user C to the credit limit module, and the credit limit module completes the network community credit limit value of the unauthenticated user C according to the request At the same time, the user authentication logic processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the digital signature public/private key for the unauthenticated user C according to the request; in addition, the user The authentication logic processing module sends an "authentication relationship creation" request to the authentication relationship module, and the authentication relationship module establishes and stores the responsible authentication relationship between the authenticated user B and the unauthenticated user C according to the request; S11. The authentication process for the unauthenticated user C ends. 2. The network community user authentication method according to claim 1, characterized in that: said authentication system also includes an administrator review interface, and in step S7, if the unauthenticated user C cannot provide an authentication code, then the community administrator is used The authentication method is used to authenticate the unauthenticated user C, and the process of authenticating the unauthenticated user C through the community administrator authentication method is as follows: S101. The unauthenticated user C sends a "community administrator authentication" request to the user authentication logic processing module, and fills in personal information and submits materials; S102. The community administrator D verifies and examines the personal information and submitted materials of the unauthenticated user C through the administrator audit interface. If the audit fails, the unauthenticated user C's authentication request behavior is terminated, and if the audit passes, step S103 is executed; S103. The community administrator D submits the processing request of the unauthenticated user C to "approved" to the user authentication logic processing module; S104. The user authentication logic processing module sends the "user credit limit initialization" request of the unauthenticated user C to the credit limit module, and the credit limit module completes the initialization of the network community credit limit value of the unauthenticated user C according to the request; meanwhile, the user authentication logic The processing module sends a "digital signature public/private key creation" request to the digital signature module, and the digital signature module creates and stores the public/private key of the digital signature for the unauthenticated user C according to the request; in addition, the user authentication logic processing module sends the authentication relationship module Send out the request of "creating authentication relationship", and the authentication relationship module establishes and stores the responsible authentication relationship between the community administrator D and the unauthenticated user C according to the request; S105. The community administrator authentication process ends. 3. The network community user authentication method according to claim 1 or 2, characterized in that: in step S2, the credit limit module judges whether the credit limit for the authenticated user B to authenticate other users meets the requirements. The specific process is as follows : The credit limit module judges whether the credit limit of the authenticated user B is greater than or equal to the limit value X, and if so, it is satisfied; otherwise, it is not satisfied. 4. An authentication system applying the network community user authentication method according to any one of claims 1 to 3, characterized in that it includes a user authentication logic processing module, an authentication code module, a digital signature module, an information sending module, and a credit limit module , authentication relationship module, administrator review interface and user registration module; The user authentication logic processing module is used to respond to authentication requests of authenticated and unauthenticated users and coordinate the data processing process among various modules; The authentication code module is used to generate an authentication code and verify the validity of the authentication code according to the request of the user authentication logic processing module; The digital signature module is used to complete the digital signature of the authentication code and verify the validity of the digital signature of the authentication code according to the request of the user authentication logic processing module, and create and store the public/private key of the digital signature for the user; The information sending module is used to send the authentication code to the unauthenticated user according to the request of the user authentication logic processing module; The credit limit module is used to judge whether the credit limit for the user to authenticate other users meets the requirements according to the request of the user authentication logic processing module, and to complete the initialization of the user's network community credit limit value; The authentication relationship module is used to establish and store the responsible authentication relationship between users according to the request of the user authentication logic processing module; The administrator review interface is used to provide community administrators with personal information and related materials submitted by unauthenticated users; The user registration module is used for user registration to fill in personal information and submit relevant materials.