CN106534040A - Method and device for identifying subscriber identity of terminal equipment - Google Patents

Abstract

The invention discloses a method and a device for identifying the user identity of terminal equipment, which relate to the field of mobile communication. The method disclosed in the present invention includes: when receiving a user identity identification request initiated by a third party for a terminal device, generating a user identity query request according to the user identity identification request, and sending the generated user identity query request to the core network PCRF, wherein the user The IP address of the terminal device is carried in the identity query request to instruct the PCRF to return the user identity information corresponding to the IP address according to the IP address in the identity query request message; when receiving the user identity information fed back by the PCRF, the received Third parties to whom user identity information is fed back. The invention also discloses a device for identifying the user identity of the terminal equipment. The technical solution of the present application extends the identity marks (MSISDN and IMSI) of operator users to various third-party APPs and contents, which can play an important role in various big data scenarios.

Description

Method and device for identifying user identity of terminal equipment

technical field

The present invention relates to the field of mobile communication, in particular to a method and device for identifying the user identity of terminal equipment.

Background technique

In the era of mobile Internet, user identity information and user account information are very important and strategically valuable resources. Facebook has 1.16 billion active users worldwide, followed by Youtube with 1 billion active users. QZone, the largest social media network in China There are 712 million users, WhatsAPP and Twitter also have 360 million users. The greatest value of the APP of these Internet companies lies in their huge number of users, and the basis of their market value of tens of billions or hundreds of billions of dollars is their hundreds of millions of registered users or Online users, Internet companies rely on this huge user base and user visits to make profits. At the same time, in order to make their accounts more valuable, various Internet companies have opened their user accounts to the outside world, intending to make their accounts a common identity number in the mobile Internet field. For example, a user's Facebook account can be used to log in to most mainstream foreign Internet websites or mobile Internet apps. The decisive factor behind this is that Facebook opens its user account and its identification capabilities based on its account to third parties. Third-party websites and apps required by its rules can identify users through Facebook's user identification capabilities.

However, operators with quite a large number of users are far from discovering the additional value brought by their user groups and user accounts. In particular, they have MSISDN mobile phone numbers and IMSI numbers that are more valuable than Internet virtual accounts. Effectively utilize strategically important resources such as MSISDN mobile phone numbers and IMSI number information. It's like a diamond mine, still buried deep underground, waiting to be discovered, waiting for an effective method to discover this resource, and to help operators utilize this resource.

Contents of the invention

The technical problem to be solved by the present invention is to provide a method and device for identifying the user identity of the terminal equipment, so as to solve the problem in the prior art that a third party cannot identify the user identity of the terminal equipment.

In order to solve the above technical problems, the present invention discloses a method for identifying the user identity of a terminal device, the method comprising:

When a user identity identification request initiated by a third party for the terminal device is received, a user identity query request is generated according to the user identity identification request, and the generated user identity query request is sent to the core network PCRF, wherein the user identity query request carrying the IP address of the terminal device in order to instruct PCRF to return the user identity information corresponding to the IP address according to the IP address in the identity query request message;

When receiving the user identity information fed back by the PCRF, feed back the received user identity information to the third party.

Optionally, in the above method, the user identity information includes at least an international mobile subscriber number MSISDN and an international mobile subscriber identity IMSI.

Optionally, in the above method, the user identity query request is an Rx interface message.

Optionally, the above method further includes: when receiving the user identity information fed back by the PCRF, identifying other user identity information according to the user identity information fed back by the PCRF, and combining the received user identity information and the identified other user identity information Feedback to the third party together with user identity information;

Wherein, the other user identity information includes at least user address and user name.

Optionally, the above method further includes: saving all user identity information of the terminal equipment, and obtaining and updating the user identity information of the terminal equipment from the operator's customer relationship management system, so that the saved user identity information is the same as the latest one actually owned by the operator. The user identity information is consistent.

Optionally, in the above method, when receiving a user identification request initiated by a third party for the terminal device, the method further includes:

Perform access authentication and user authorization on the client of the terminal device;

When the client of the terminal device passes the access authentication and user authorization, it generates a user identity query request according to the user identity identification request, and sends the generated user identity query request to the PCRF.

The present invention also discloses a device for identifying the user identity of a terminal device, the device at least includes an application interaction module, an identity recognition module and a network interaction module, wherein:

The application interaction module opens an identity recognition interface to a third party, receives an identity recognition request message initiated by a third party for the terminal device, and feeds back to the third party the user identity information of the terminal device queried by the identity recognition request message;

The identity recognition module generates a user identity query request according to the received identity recognition request message, wherein the user identity query request carries the IP address of the terminal device to instruct PCRF to IP address, return the user identity information corresponding to the IP address, and obtain the user identity information of the terminal device queried by the third party from the received response to the user identity query request and send it to the application interaction module;

The network interaction module sends the generated user identity query request to core network PCRF, receives the response of the user identity query request returned by PCRF, and returns the response of the user identity query request to the identity recognition module.

Optionally, in the above device, the user identity information includes at least an international mobile subscriber number MSISDN and an international mobile subscriber identity IMSI.

Optionally, in the above device, the user identity query request is an Rx interface message.

Optionally, in the above device, the identity identification module further identifies other user identity information according to the user identity information in the response to the user identity query request, and combines the received user identity information with the identified other user identity information Feedback to the application interaction module, wherein the other user identity information includes at least user address and user name;

The application interaction module feeds back all user identity information sent by the identity recognition module to the third party.

Optionally, the above-mentioned device also includes:

The identity information module saves all user identity information of the terminal equipment, and obtains and updates the user identity information of the terminal equipment from the operator's customer relationship management system, so that the stored user identity information is consistent with the latest user identity information actually owned by the operator.

Optionally, the above-mentioned device also includes:

The access authentication module performs access authentication and user authorization on the client of the terminal device when the application interaction module receives a user identification request initiated by a third party for the terminal device;

The identity identification module generates the user identity query request only when the client of the terminal device passes the access authentication and user authorization.

The present invention also discloses a device for identifying the user identity of a terminal device, the device at least includes:

The first module, when receiving the Rx interface message carrying only the IP address of the terminal device, determines that the Rx interface message is an identity query request message, and queries the user corresponding to the IP address according to the IP address in the identity query request message Identity Information;

The second module feeds back the queried user identity information to the terminal.

Optionally, in the above device, the user identity information includes at least an international mobile subscriber number MSISDN and an international mobile subscriber identity IMSI.

The technical solution of this application provides a method for identifying the user identity of a terminal device and its corresponding device, which opens the operator's user identity identification capability to a third-party APP, and the third-party APP can call the operator's user identity identification capability API , which can realize user identification and user authentication functions. Through the technical solution of this application, on the one hand, the identity mark (MSISDN mobile phone number and IMSI number) of the operator user can be extended to various APPs and contents of the third party, which can play an important role in various big data scenarios; On the other hand, the identity mark of the operator user can be applied to user identity identification, user authentication and authorization in various mobile Internet scenarios, so that the APP can directly obtain the user's MSISDN mobile phone number and IMSI number through the network, and the operator The user account has developed into a common identity number across mobile networks and the Internet, and penetrates into various mobile Internet applications, which can infinitely amplify the value of MSISDN mobile phone numbers and IMSI numbers managed by operators, making them comparable to super Internet APPs, even A killer strategic resource beyond the super Internet APP.

Description of drawings

FIG. 1 is a schematic structural diagram of an apparatus for identifying a user identity of a terminal device in this embodiment;

FIG. 2 is a network location diagram of a device for identifying a user identity of a terminal device in this embodiment;

FIG. 3 is a working principle diagram of identifying the identity of a terminal device user in this embodiment;

FIG. 4 is a business flow chart for identifying user identity information of a terminal device in this embodiment;

FIG. 5 is a flow chart of a service for identifying detailed identity information of a terminal device user in this embodiment.

detailed description

In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be further described in detail below in conjunction with the accompanying drawings. It should be noted that, in the case of no conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Example 1

This embodiment provides a method for identifying the user identity of a terminal device. It only needs to provide the private network IP (Private Internet protocol) address assigned when the terminal device accesses the mobile network, and then the terminal device using this IP address can be obtained. Registered MSISDN (mobile phone number, full name Mobile Subscriber International ISDN, where ISDN is Integrated Services Digital Network, short for Integrated Service Digital Network) and IMSI (International Mobile Subscriber Identification Number, International Mobile Subscriber Identification Number, stored in the mobile phone SIM card, which is unique in the entire network and the world) and more detailed user identity information to achieve the purpose of identifying the user identity of the terminal device.

Specifically, the above method includes the following operations:

Step 100: When receiving a user identity identification request initiated by a third party for the terminal device, generate a user identity query request according to the user identity identification request, and send the generated user identity query request to the PCRF;

Wherein, the generated user identity query request only carries the IP address of the terminal device, so as to instruct PCRF to return the user identity information corresponding to the IP address according to the IP address in the identity query request message.

Specifically, the user identity query request may be an Rx interface message. It should be noted that the Rx interface message only carries the private network IP address of the terminal device, and does not carry service and media information. In this way, the PCRF will identify the Rx The interface message is a user identity query request, not an ordinary charging or policy request message.

Step 200: When receiving the user identity information fed back by the PCRF, feed back the received user identity information to the third party.

In this step, the user identity information fed back by the PCRF includes at least MSISDN and IMSI.

Some schemes also propose that in addition to the user identity information fed back by the PCRF, other user identity information can also be obtained by querying, such as user name, user address and other information. The identity information can be fed back to the third party.

Among them, the "other user identity information" mentioned above can be obtained and updated from the operator's customer relationship management system in real time, so as to ensure the synchronization between the "other user identity information" involved in this patent and the actual user information.

It should also be noted that, considering the security of user identity information, when receiving a user identity identification request initiated by a third party for a terminal device, the client of the terminal device can perform access authentication and user authorization. When the client side of the device has passed the access authentication and user authorization, it generates a user identity query request according to the user identity identification request, and sends the generated user identity query request to the PCRF.

Example 2

This embodiment provides a device for identifying the user identity of a terminal device, which is based on the PCC architecture (the PCC architecture is defined in the 3GPP TS 23.203 specification, and its full name is: Policy and charging control architecture), making full use of the core network PCC architecture of the operator. The charging and policy control interface (that is, the Rx interface defined in the 3GPP TS 29.214 specification, hereinafter collectively referred to as the Rx interface) function provided by the PCRF network element to the service layer, through the expansion of the use of the Rx interface, is sent to the core network The Rx request message of PCRF only carries information such as the private network IP address of the terminal device, and does not carry service and media information, so that the PCRF of the core network knows that this is not an ordinary billing or policy request message, but requires it to be based on the request message In the private network IP address, return the MSISDN and IMSI information of the terminal device user corresponding to the private network IP address. At the same time, the device for identifying the user identity of the terminal device realized by the present invention provides an identity recognition interface for the third-party APP, receives the request for identifying the user identity of the terminal device initiated by the third-party APP, extracts the private network IP address in the request message, and follows the request The message requires basic identity information identification or detailed identity information identification. After obtaining the MSISDN and IMSI information of the terminal device user through the core network PCRF, a targeted identity identification response is performed and the corresponding basic identity information (MSISDN and IMSI information ) or detailed identity information (except MSISDN and IMSI information, user address, user name, etc.), to realize the identity recognition function of the terminal device.

Wherein, the involved terminal devices may be various fixed or mobile electronic devices in which a SIM (subscriber identity module) card of an operator or a similar user account card is placed. Specifically, the device provided in this embodiment includes at least an application interaction module, an identity identification module, and a network interaction module.

The application interaction module opens the identity recognition interface to the third party, receives the identity recognition request initiated by the client application installed on the terminal device or the identity recognition request message initiated by the background system of the external server, and after processing the identity recognition request message, Send to the identity recognition module, and feed back the user identity information of the terminal device queried by the identity recognition request message to the third party.

The identity identification module, based on the IP address of the terminal device provided by the client, and according to the characteristics of the AA-Request command of the Rx interface of the operator's core network PCRF system, organizes the identity query request message, connects with the core network PCRF through the network interaction module, and initiates Identity query request, instructing PCRF to return the user identity information (including at least MSISDN and IMSI information) corresponding to the IP address according to the IP address provided in the AA-Request request message, and to obtain from the received response to the user identity query request The user identity information of the terminal device queried by the third party is sent to the application interaction module.

Wherein, the IP address of the terminal device is assigned by the core network when the specific terminal device accesses the Internet through the wireless network, and the core network stores the assigned IP address of the terminal device and its corresponding MSISDN and IMSI information.

The network interaction module receives the request message of the identity identification module, adapts the Rx interface message of the core network PCRF based on the Diameter protocol, sends the request message to the PCRF, and at the same time receives the response message of the user identity query request returned by the PCRF, and sends the identity The identification module returns a corresponding response message.

Preferably, the above-mentioned identity recognition module can also identify other user identity information (such as user address, user name, etc.) according to the user identity information in the response to the user identity query request, and identify the received user identity information and Feedback to the application interaction module together with other user identity information. At this time, the application interaction module feeds back all the user identity information sent by the identity recognition module to the third party.

In addition, the above-mentioned device also includes an identity information module, which saves all user identity information of the terminal equipment, and obtains and updates the user identity information of the terminal equipment from the operator's customer relationship management system, so that the user identity information in the identity information module is consistent with the operator's identity information. The latest user identity information actually owned is consistent.

The above-mentioned device may also include an access authentication module. At this time, the identity identification module calls the interface of the access authentication module according to the information of the client (including the client application and the external system) that initiates the identity identification request, and accesses the client. Authentication, and receive the authentication result returned by the access authentication module. If the result returned by the access authentication module shows that the authentication is passed, the identity recognition module initiates a subsequent identity recognition operation.

The access authentication module receives the access authentication request sent by the identity recognition module, and judges whether it is a legitimate client and whether it is a legal client and whether it is a legal client that meets the requirements of the rules according to the client information of the identity recognition request message provided in the request message. request message, and then determine whether to initiate the terminal device user authorization for this identity recognition request according to the client's situation, that is, the access authentication module initiates an interaction with the user authorization, and the identity recognition module can only send the request after obtaining the user's consent. Returns access authentication success. After the above-mentioned access authentication and user authorization for the client are successfully completed, an access authentication response is returned to the identity recognition module, and the confirmation result is success or failure.

The specific implementation of the above-mentioned device will be described below in conjunction with the accompanying drawings.

Figure 1 shows the device for identifying the user identity of terminal equipment provided in the priority scheme, which is mainly composed of five modules including an application interaction module, an identity identification module, an identity information module, an access authentication module and a network interaction module.

The application interaction module opens the identification interface to the third party, receives the terminal device user identification request initiated by the client including the client application on the terminal device or the background system of the external server, and extracts the request message for receiving Enter the client information for authentication and the terminal device IP address information for identification, verify the client information format and IP address format in the request message, and send the identification request message to the identification module after the format verification is passed.

The identity recognition module receives the identity recognition request message from the application interaction module, and calls the interface of the access authentication module according to the information of the client that initiated the request message in the identity recognition request message, performs access authentication on the client, and receives the Enter the authentication result returned by the authentication module. If the result returned by the access authentication module shows that the authentication is passed, the identity recognition module further judges the IP address of the terminal device provided by the client, and judges whether the IP address type is an IPV4 address type or an IPV6 address type, and according to the Rx interface of the PCRF system of the operator's core network The AA-Request command fills in the requirements, correspondingly fills in the identity query request message, connects with the PCRF of the core network through the network interaction module, initiates an identity query request, and instructs the PCRF to return the terminal device user’s ID according to the IP address provided in the AA-Request message. Identity information, including the MSISDN and IMSI information of the terminal device. Because each terminal device accesses the wireless network, when going online, the core network will assign each terminal device its IP address in the wireless network, and the core network also saves the MSISDN and IMSI information of each terminal device, so , the core network PCRF can return the IP address and the corresponding MSISDN and IMSI information of the terminal device in the response message. After obtaining the above-mentioned IP address, MSISDN and IMSI information of the terminal device, the identity recognition module sends the Message request, return MSISDN or IMSI or return both MSISDN and IMSI. Preferably, other detailed user identity information (such as user name, user address, etc.) can be returned by means of the identity information module to complete the identification of the identity information registered by the terminal device in its corresponding operator.

The identity information module saves the identity information of terminal equipment users, and supports updating and obtaining the latest terminal equipment user identity information from the operator's customer relationship management system to ensure that the system information is consistent with the actual user information.

The access authentication module receives the access authentication request sent by the identity recognition module, and judges whether it is a legitimate client and whether it is a legal client and whether it is a legal client that meets the requirements of the rules according to the client information of the identity recognition request message provided in the request message. request message, and then determine whether to initiate the terminal device user authorization for this identity recognition request according to the client's situation, that is, the access authentication module initiates an interaction with the user authorization, and the identity recognition module can only send the request after obtaining the user's consent. Returns access authentication success. After the above-mentioned access authentication and user authorization for the client are successfully completed, an access authentication response is returned to the identity recognition module, and the confirmation result is success or failure.

The network interaction module supports the adaptation of the interface protocol of the internal identification module and the interface protocol of the PCRF system of the external core network, and converts the received identification request message of the identification module into a Diameter-based protocol supported by the PCRF system. At the same time, the Rx interface response message returned by the PCRF of the core network or the Rx interface notification message initiated is converted into an interface protocol supported by the internal identity recognition module to realize message interaction between internal and external systems.

Figure 2 shows where the device for identifying the user identity of the terminal equipment is placed in the network. 201, the client application located in the terminal device interacts with the user identity recognition device of the terminal device through the wireless network and the Internet and the user identity recognition request and response message; 202, the background system located in the server communicates with the user identity recognition device of the terminal device through the Internet 203, the user identity recognition device of the terminal device passes through the user identity recognition request and response message interaction between the operator's internal network and the core network PCRF; 204, the user identity recognition device of the terminal device passes through The operator's internal network interacts with the operator's customer relationship management system.

Fig. 3 is a working principle diagram of the device for identifying the user identity of the terminal device.

301. The application interaction module of the device for identifying the user identity of the terminal device opens an identity identification interface to the outside world, and supports two types of interfaces, the Restful protocol and the SOAP protocol. The client application located in the terminal device invokes the application interaction module to open the identity recognition Restful protocol interface to the outside world, requests the device for identifying the identity of the terminal device user to identify the identity of the terminal device user, and obtains identification result information.

301', the application interaction module of the device for identifying the user identity of the terminal device opens an identity identification interface to the outside world, and supports two types of interfaces, the Restful protocol and the SOAP protocol. The background system located on the external server calls the application interaction module to open the identity recognition Restful protocol or SOAP protocol interface to the outside world, requests the device for identifying the identity of the terminal device user to identify the identity of the terminal device user, and obtains the identification result information.

302. After receiving the user identification request initiated by the client, the application interaction module executes the corresponding logical processing defined by this module, and then interacts with the identification interface between the identification modules. The application interaction module communicates with the identification module The identity recognition interface interacts and sends an identity recognition request to the identity recognition module.

303. After executing the corresponding logical processing defined by this module, the identity recognition module connects with the access authentication interface exposed by the access authentication module, and performs access authentication for the identity recognition request of the client, and the access authentication module completes After processing the corresponding logic defined by this module, return the authentication result to the identity recognition module.

304. The identity identification module initiates an identity identification request to the PCRF of the core network through a message transfer interface with the network interaction module. According to the definition of this internal interface, the identity recognition module transmits the terminal device user identity recognition message to the network interaction module, and the network interaction module returns the identity recognition result to the identity through this interface after receiving the identity recognition response returned by the core network PCRF Identification module.

305, the Rx interface between the network interaction module and the core network PCRF, through this interface, the network interaction module adapts to the Rx interface of the Diameter protocol of the core network PCRF, performs protocol adaptation and conversion of internal and external systems, and requests the core network PCRF Identify the identity, and receive the identity identification response message returned by the PCRF of the core network.

306. The identity recognition module determines whether to interact with the identity information module according to the specific requirements of the terminal device user identity recognition request (user identity information fed back by PCRF, or other user identity information), and obtains the terminal device user from the identity information module through MSISDN detailed identity information.

307. The identity information module acquires detailed identity information of the terminal device user from the customer relationship management system through an interface with the customer relationship management system.

Fig. 4 shows a business process for identifying user identity information of a terminal device.

401. When a terminal device user registers or uses a client application located on the terminal device or an external system located on the background server, the client application or the external system needs to provide the mobile phone number without the user manually inputting the mobile phone number MSISDN of the terminal device. and the IMSI to confirm the user identity, so the client application or the external system initiates a request for terminal device user identity recognition to the terminal device identity recognition device. The request message carries the private network IP address obtained by the client application or the external system from the terminal device, which is assigned by the terminal device to access the wireless network, and the information of the client application or the external system, and requests to return the terminal corresponding to the IP address. MSISDN and IMSI of the device;

402. The terminal device identity recognition device initiates a terminal device identity recognition request to the PCRF after completing the corresponding processing according to the division of labor of each internal module, and the request message carries the private network IP address of the terminal device, and does not carry business and media information, so that the core The network PCRF can know that this is not an ordinary charging or policy request message. If the private network IP address assigned by the core network to the terminal device is duplicated, then carry the IP address field information to ensure that the core network PCRF can uniquely determine the identity of the terminal device to be identified through the private network IP address and the IP address field;

403. The PCRF of the core network returns the MSISDN and the IMSI number in the response message according to the request message sent by the terminal equipment identification device;

404. The terminal device identity recognition device returns a terminal device identity recognition response message to the client application or the external system.

The response message may include MSISDN, or IMSI, or MSISDN and IMSI, or MSISDN and IMSI, and user detailed identity information according to the specific attributes and request requirements of the client application or external system.

Fig. 5 shows a business process for identifying other identity information of a terminal device user.

501. When a terminal device user registers or uses a client application on the terminal device or an external system on the background server, the client application or the external system needs to verify the mobile phone number MSISDN of the user to which the terminal device belongs and obtain the terminal The detailed identity information registered by the device user with the operator initiates a request for terminal device user identity recognition to the terminal device identity recognition device. The request message carries the IP address obtained from the terminal device by the client application or the external system, the IP address assigned by the terminal device to access the wireless network, and the information of the client application or the external system, and requests to return the information of the terminal device corresponding to the IP address. MSISDN, IMSI and detailed identity information registered by the terminal device user with the operator;

502. After completing the corresponding processing, each module inside the terminal equipment identification device initiates a terminal equipment identification request to the PCRF, and the request message carries the private network IP address of the terminal equipment and does not carry service and media information, so that the core network PCRF can Know that this is not an ordinary accounting or policy request message. If the private network IP address assigned by the core network to the terminal device is duplicated, then carry the IP address field information to ensure that the core network PCRF can uniquely determine the identity of the terminal device to be identified through the private network IP address and the IP address field;

503. The PCRF of the core network returns the MSISDN and the IMSI in the response message according to the request message sent by the terminal equipment identification device. Through the MSISDN returned by the core network, the terminal device identity recognition device queries the detailed user information obtained from the customer relationship management system. If not found, then turn to step 504; if found user detailed information, then turn to step 506;

504. The terminal equipment identity recognition device queries the detailed identity information of the user from the customer relationship management system according to the obtained MSISDN information;

505. The customer relationship management system returns the user identity information corresponding to the MSISDN to the terminal device identity recognition device;

506. The terminal device identification device returns a terminal device identification response message to the client application or the external system, including the MSISDN, IMSI number and other user identity information. Other user identity information may include the user's ID card or social security number information, package consumer information, etc.

Example 3

This embodiment provides a device for identifying the user identity of a terminal device, which can be placed on the PCRF side of the core network, and used in combination with the device in Embodiment 2 above, to identify the user identity of the terminal device. It includes at least the following two modules.

The first module, when receiving the Rx interface message that only carries the IP address of the terminal device, determines that the Rx interface message is an identity query request message, and queries the user identity information corresponding to the IP address according to the IP address in the identity query request message;

Wherein, because the current Rx interface message generally includes the private network IP address of the terminal device, and business and media information, and the Rx interface message in this embodiment only carries the private network IP address of the terminal device, and does not carry the business and media information. When receiving media information, it can be determined that the Rx interface message is a user identity query request.

The second module feeds back the queried user identity information to the terminal.

Wherein, the queried user identity information includes at least MSISDN and IMSI.

It can be seen from the above embodiments that the technical solution of this application creatively utilizes the functions provided by the PCRF network element of the operator's core network to the Rx interface message provided by the service layer, and expands the operation mode of the Rx interface, that is, when sending The Rx request message of the core network PCRF carries the private network IP address of the terminal device, but does not carry service and media information, so that the core network PCRF can know that this is not an ordinary billing or policy request message, but only returns the terminal device's The identity information of the terminal device user corresponding to the private network IP. Through the method and device provided by the present invention, if the client application or external system needs to confirm or provide the user's mobile phone number MSISDN when the user registers or uses its service, it can automatically obtain the identity information of the terminal device, avoiding the user from manually inputting the mobile phone number MSISDN reduces the number of interaction steps, effectively improves the friendliness and ease of use of current mobile Internet applications, improves the interactive experience of users using applications, and effectively uses the operator's user account as a mobile Internet application. An important identity account in the ecosystem, which enhances the operator's voice in the mobile Internet value chain.

More importantly, through the device provided by this application, the operator's user account can be developed into a universal identity number across mobile networks and the Internet, penetrate into various mobile Internet applications, and can infinitely enlarge the MSISDN mobile phone number managed by the operator And the value of the IMSI number makes it a killer strategic resource that rivals or even surpasses super Internet APPs. It can greatly enhance the user experience, maximize the value of the network, create profits, and enhance the market competitiveness of operators.

Those skilled in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk, and the like. Optionally, all or part of the steps in the foregoing embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the foregoing embodiments may be implemented in the form of hardware, or may be implemented in the form of software function modules. This application is not limited to any specific form of combination of hardware and software.

The above descriptions are only preferred examples of the present invention, and are not intended to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (14)

1. A method for identifying a terminal device user identity, characterized in that the method comprises: When a user identity identification request initiated by a third party for the terminal device is received, a user identity query request is generated according to the user identity identification request, and the generated user identity query request is sent to the core network PCRF, wherein the user identity query request carrying the IP address of the terminal device in order to instruct PCRF to return the user identity information corresponding to the IP address according to the IP address in the identity query request message; When receiving the user identity information fed back by the PCRF, feed back the received user identity information to the third party. 2. The method of claim 1, wherein The user identity information includes at least an international mobile subscriber number MSISDN and an international mobile subscriber identity IMSI. 3. The method of claim 1, wherein, The user identity query request is an Rx interface message. 4. The method according to any one of claims 1 to 3, wherein the method further comprises: When receiving the user identity information fed back by the PCRF, identify other user identity information according to the user identity information fed back by the PCRF, and feed back the received user identity information and other identified user identity information to the first Three parties; Wherein, the other user identity information includes at least user address and user name. 5. The method according to claim 4, further comprising: saving all user identity information of the terminal equipment, and obtaining and updating the user identity information of the terminal equipment from the customer relationship management system of the operator, so that The stored user identity information is consistent with the latest user identity information actually owned by the operator. 6. The method according to claim 4, characterized in that, when receiving a user identification request initiated by a third party for the terminal device, the method further comprises: Perform access authentication and user authorization on the client of the terminal device; When the client of the terminal device passes the access authentication and user authorization, it generates a user identity query request according to the user identity identification request, and sends the generated user identity query request to the PCRF. 7. A device for identifying the identity of a terminal device user, characterized in that the device at least includes an application interaction module, an identity recognition module and a network interaction module, wherein: The application interaction module opens an identity recognition interface to a third party, receives an identity recognition request message initiated by a third party for the terminal device, and feeds back to the third party the user identity information of the terminal device queried by the identity recognition request message; The identity recognition module generates a user identity query request according to the received identity recognition request message, wherein the user identity query request carries the IP address of the terminal device to instruct PCRF to IP address, return the user identity information corresponding to the IP address, and obtain the user identity information of the terminal device queried by the third party from the received response to the user identity query request and send it to the application interaction module; The network interaction module sends the generated user identity query request to core network PCRF, receives the response of the user identity query request returned by PCRF, and returns the response of the user identity query request to the identity recognition module. 8. The apparatus of claim 7, wherein The user identity information includes at least an international mobile subscriber number MSISDN and an international mobile subscriber identity IMSI. 9. The apparatus of claim 7, wherein The user identity query request is an Rx interface message. 10. Apparatus according to any one of claims 7 to 9, wherein The identity identification module also identifies other user identity information according to the user identity information in the response to the user identity query request, and feeds back the received user identity information and other identified user identity information to the application interaction module, Wherein, the other user identity information includes at least user address and user name; The application interaction module feeds back all user identity information sent by the identity recognition module to the third party. 11. The device of claim 10, further comprising: The identity information module saves all user identity information of the terminal equipment, and obtains and updates the user identity information of the terminal equipment from the operator's customer relationship management system, so that the stored user identity information is consistent with the latest user identity information actually owned by the operator. 12. The device of claim 10, further comprising: The access authentication module performs access authentication and user authorization on the client of the terminal device when the application interaction module receives a user identification request initiated by a third party for the terminal device; The identity identification module generates the user identity query request only when the client of the terminal device passes the access authentication and user authorization. 13. A device for identifying the identity of a terminal device user, characterized in that the device at least includes: The first module, when receiving the Rx interface message carrying only the IP address of the terminal device, determines that the Rx interface message is an identity query request message, and queries the user corresponding to the IP address according to the IP address in the identity query request message Identity Information; The second module feeds back the queried user identity information to the terminal. 14. The device according to claim 13, wherein the user identity information includes at least an International Mobile Subscriber Number (MSISDN) and an International Mobile Subscriber Identity (IMSI).