WO2016050078A1 - 一种鉴权方法、移动通讯鉴权平台及设备 - Google Patents

一种鉴权方法、移动通讯鉴权平台及设备 Download PDF

Info

Publication number
WO2016050078A1
WO2016050078A1 PCT/CN2015/079347 CN2015079347W WO2016050078A1 WO 2016050078 A1 WO2016050078 A1 WO 2016050078A1 CN 2015079347 W CN2015079347 W CN 2015079347W WO 2016050078 A1 WO2016050078 A1 WO 2016050078A1
Authority
WO
WIPO (PCT)
Prior art keywords
identification information
mobile communication
authentication platform
information
communication authentication
Prior art date
Application number
PCT/CN2015/079347
Other languages
English (en)
French (fr)
Inventor
张军
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP15847868.5A priority Critical patent/EP3188135B1/en
Publication of WO2016050078A1 publication Critical patent/WO2016050078A1/zh
Priority to US15/472,729 priority patent/US10506431B2/en

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to an authentication method, a mobile communication authentication platform, and a device.
  • identity authentication occurs in real life, such as opening a door, signing an item, paying for a card, operating permission, etc.
  • the business purpose of initiating identity authentication is different, the requirements for identity authentication are similar.
  • various control points of the identity authentication process are generated: network architecture, network element equipment, software algorithms, information management, process specification, role division, etc., even for simple identity authentication cases such as item signing. Said, it will also involve a lot of network elements, such as buyers, sellers, carriers, couriers, consignees, orders, goods and so on.
  • the methods of identity authentication used in these different application scenarios are various, such as key, password, fingerprint, voice, iris, RF access card, signature, stamp, ID card, cash, bank card. , mobile phones, etc.
  • the embodiment of the invention provides an authentication method, a mobile communication authentication platform and a device, which can meet the authentication requirements of different scenarios, and has strong versatility, low cost, and simple security.
  • a first aspect of the embodiments of the present invention provides an authentication method, including:
  • the mobile communication authentication platform receives the first identification information of the first device and the second identification information of the second device;
  • the mobile communication authentication platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identification information and the Whether the second identification information corresponds to, and feeding back the determination result to the first device.
  • the mobile communication authentication platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first Before the identifier information and the second identifier information are corresponding to each other, the method further includes:
  • the mobile communication authentication platform acquires a correspondence between the identification information of the device.
  • the mobile communication authentication platform receives the first The identification information and the second identification information are sent by the first device.
  • the mobile communication authentication platform receives the first The identifier information is sent by the first device, and the second identifier information received by the mobile communication authentication platform is sent by the second device.
  • the mobile communication authentication platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identifier information and the second identifier information, and determines a location before the first identifier information and the second identifier information are corresponding to each other, the method further includes:
  • the mobile communication authentication platform determines the authentication qualification of the first device according to the information of the authentication application of the first device.
  • the mobile communication authentication platform is configured according to the authentication application of the first device
  • the information determining the authentication qualification of the first device includes:
  • the mobile communication authentication platform determines that the authentication application of the first device is a legitimate application according to the information of the authentication application.
  • a second aspect of the embodiments of the present invention provides an authentication method, including:
  • the first device sends an authentication request to the mobile communication authentication platform
  • the first request device includes the first identification information of the first device and the second identification information of the second device, where the first device receives the determination result fed back by the mobile communication authentication platform, and the determination result is
  • the mobile communication authentication platform checks according to the first identification information and the second identification information And obtaining a correspondence between the identification information of the devices in the mobile communication authentication platform, and determining whether the first identification information and the second identification information are corresponding to each other;
  • the authentication request includes first identifier information of the first device, and the first device receives a judgment result fed back by the mobile communication authentication platform, where the determination result is that the mobile communication authentication platform is based on the Determining a correspondence between the first identification information and the received second identification information of the second device, searching for the correspondence between the identification information of the devices in the mobile communication authentication platform, and determining the first identification information and the second identification information Whether it is obtained after the correspondence.
  • the method further includes:
  • the first device sends the information of the authentication application of the first device to the mobile communication authentication platform, so that the mobile communication authentication platform determines the authentication qualification of the first device.
  • a third aspect of the embodiments of the present invention provides a mobile communication authentication platform, including:
  • a receiving unit configured to receive first identification information of the first device and second identification information of the second device
  • a processing unit configured to search for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identifier information and the second identifier information, and determine the first identifier information and the first And determining whether the information corresponds to the information, and feeding back the determination result to the first device.
  • the processing unit is further configured to perform, according to the first identification information, the The second identifier information is used to search for a correspondence between the identification information of the devices in the mobile communication authentication platform, and determine whether the first identification information and the second identification information correspond to each other before acquiring the identification information of the device. Correspondence relationship.
  • the first identifier information and the The second identification information is sent by the first device.
  • the first identifier information received by the receiving unit is The second identifier information that is sent by the first device and sent by the receiving unit is sent by the second device.
  • the receiving unit is further configured to receive information about an authentication application of the first device that is sent by the first device, where the processing unit is further configured to be used according to the authentication application of the first device Information, determining the authentication qualification of the first device.
  • the processing unit is specifically configured to determine, according to the information of the authentication application, The authentication application of the first device is a legitimate application.
  • the receiving unit may be a receiver, and the processing unit may be a processor.
  • a fourth aspect of the embodiments of the present invention provides an apparatus, including:
  • a sending unit configured to send an authentication request to the mobile communication authentication platform
  • a receiving unit configured to receive a determination result fed back by the mobile communication authentication platform when the first identification information of the device and the second identification information of the target device are included in the authentication request, where the determination result is
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identification information and the Whether the second identification information is obtained after the correspondence is obtained;
  • the receiving unit is further configured to include the first identifier information of the first device in the authentication request, and receive a judgment result fed back by the mobile communication authentication platform, where the determination result is the mobile communication authentication
  • the platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identifier information and the second identifier information of the received target device, and determines the first identifier information and the second identifier. Whether the identification information is obtained after the correspondence.
  • the sending unit is further configured to send information of the authentication application of the first device to the mobile
  • the communication authentication platform is configured to enable the mobile communication authentication platform to determine the authentication qualification of the first device.
  • the receiving unit may be a receiver, and the sending unit may be a transmitter.
  • the mobile communication authentication platform may determine the first identification information according to a correspondence between the first identification information of the first device and the second identification information of the second device, and the identification information of the device in the mobile communication authentication platform. Whether the second identifier information is corresponding, and the result of the judgment is fed back to the first device, and the embodiment of the present invention can meet the authentication requirements in various scenarios, and has high versatility and low cost. Simple and safe.
  • FIG. 1 is a schematic diagram of an embodiment of an authentication method in an embodiment of the present invention.
  • FIG. 2 is a schematic diagram of another embodiment of an authentication method in an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of another embodiment of an authentication method in an embodiment of the present invention.
  • FIG. 4 is a schematic diagram of another embodiment of an authentication method in an embodiment of the present invention.
  • FIG. 5 is a schematic diagram of another embodiment of an authentication method according to an embodiment of the present invention.
  • FIG. 6 is a schematic diagram of another embodiment of an authentication method in an embodiment of the present invention.
  • FIG. 7 is a schematic diagram of an embodiment of a mobile communication authentication platform according to an embodiment of the present invention.
  • FIG. 8 is a schematic diagram of an embodiment of a device in an embodiment of the present invention.
  • FIG. 9 is a schematic diagram of another embodiment of a mobile communication authentication platform according to an embodiment of the present invention.
  • the embodiment of the invention provides an authentication method, a mobile communication authentication platform and a device, which can meet the authentication requirements in various scenarios, has strong versatility, low cost, and is simple and secure.
  • an embodiment of an authentication method in an embodiment of the present invention includes:
  • the mobile communication authentication platform receives the first identifier information of the first device and the second identifier information of the second device.
  • the mobile communication authentication platform is a mobile communication authentication platform that has opened the identity authentication capability
  • the device with the authentication application can utilize the identity authentication capability of the mobile communication authentication platform
  • the first device is An authentication application is installed and has a communication capability with the mobile communication authentication platform.
  • the mobile communication authentication platform searches for the mobile communication according to the first identification information and the second identification information. Corresponding to the correspondence between the identification information of the devices in the authentication platform, determining whether the first identification information and the second identification information correspond, and feeding back the determination result to the first device.
  • the correspondence between the identification information of the device is pre-stored, and the mobile communication authentication platform searches for the device in the mobile communication authentication platform according to the first identification information and the second identification information.
  • the correspondence between the identification information and the second identification information may be determined, and the determination result is fed back to the first device.
  • the mobile communication authentication platform may determine, according to the correspondence between the first identification information of the first device and the second identification information of the second device, and the identification information of the device in the mobile communication authentication platform, Whether the first identification information and the second identification information correspond to each other, and the judgment result is fed back to the first device, because the mobile communication authentication platform can meet the authentication requirements in various scenarios, and the versatility is strong, and the cost is high. Low, simple and safe.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identification information.
  • the mobile communication authentication platform obtains the correspondence between the identification information of the device before the second identification information is corresponding.
  • another embodiment of the authentication method in the embodiment of the present invention includes:
  • the mobile communication authentication platform acquires a correspondence between the identification information of the device.
  • the correspondence between the identification information of the device obtained by the mobile communication authentication platform may be: if the correspondence between the devices is established, the correspondence between the identification information of the device is obtained, for example, if the first device and the second device establish a corresponding relationship
  • the mobile communication authentication platform can obtain the correspondence between the identification information of the first device and the identification information of the second device.
  • the user may establish a corresponding relationship between the identification information of the mobile phone and the device (such as a car) after purchasing the device (such as a car), and obtain the correspondence between the identification information of the device, which may be obtained by the user.
  • the car identification information such as the frame number information
  • the mobile phone number of the car are transmitted to the mobile communication authentication platform; when the correspondence is established, the user can also establish the dispatcher mobile phone when shopping.
  • the correspondence between the number and the mobile phone number of the user, and the correspondence between the identification information of the acquired device at this time may be obtained by the mobile communication authentication platform from the shopping website, or may be received by the dispatcher through the mobile phone. This is not specifically limited.
  • the identification information of the device may be the mobile phone number of the user, and the information such as the frame number information of the car with the user's right to use, and is not specifically limited herein.
  • the mobile communication authentication platform receives the first identifier information of the first device and the second identifier information of the second device.
  • the mobile communication authentication platform is a mobile communication authentication platform that has opened the identity authentication capability
  • the device with the authentication application can utilize the identity authentication capability of the mobile communication authentication platform
  • the first device is An authentication application is installed and has a communication capability with the mobile communication authentication platform.
  • the first device may be a car, the second device is a mobile terminal (such as a mobile phone, etc.), or the first device and the second device are both mobile terminals and the like, which are not limited herein.
  • the authentication occurrence condition may be that when the user authenticates the second device by using the first device, if the user wants to use the mobile phone (second device) to open the car (first device) door, and obtain the user's mobile phone through the sensing device in the car.
  • the mobile phone number, or the mobile phone senses the car, and sends the mobile phone number to the car.
  • the second identification information received by the mobile communication authentication platform may be sent by the second device, in this case, the second The device also has the ability to communicate with the mobile communication authentication platform, and may also be installed with the same authentication application as the first device.
  • the mobile communication authentication platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines whether the first identification information and the second identification information correspond to each other. And feeding back the judgment result to the first device.
  • the mobile communication authentication platform is based on the correspondence between the first identification information and the second identification information and the identification information of the device acquired in the mobile communication authentication platform, and the mobile communication authentication platform is based on the first The identifier information and the second identifier information are used to find a correspondence between the identifier information of the device in the mobile communication authentication platform, and the first identifier information and the second identifier information are determined to be corresponding, and the judgment result is fed back to the first device. .
  • the first device may perform a corresponding response operation.
  • the result of the feedback is the first identification information and the second identifier.
  • the information is corresponding, when the car opens the door, if it does not correspond, it can feedback a door opening failure message to the user's mobile phone, or no operation.
  • the mobile communication authentication platform may be configured according to the first identification information of the first device and the second identification information of the second device, and the correspondence between the identification information of the device in the mobile communication authentication platform. Determining whether the first identification information and the second identification information correspond, and feeding back the determination result to the first device, because the mobile communication authentication platform can meet the authentication requirements in various scenarios, High versatility, low cost, simple and safe;
  • the mobile communication authentication platform obtains the correspondence between the identification information of the devices, and can directly use the identification information between the acquired devices for authentication, thereby enhancing versatility.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identification information.
  • the mobile communication authentication platform further receives the information of the authentication application of the first device sent by the first device, and the information of the authentication application of the first device received by the mobile communication authentication platform may be followed by The first identification information is sent together, and may also be sent separately.
  • the mobile communication authentication platform determines the authentication qualification of the first device according to the information of the authentication application, and the mobile communication authentication platform is also An embodiment of receiving information of an authentication application of a first device transmitted by a first device is described in detail.
  • another embodiment of the authentication method in the embodiment of the present invention includes:
  • the mobile communication authentication platform acquires a correspondence between the identification information of the device.
  • the mobile communication authentication platform opens the identity authentication capability, the mobile communication authentication platform that stores the legal authentication application identifier, and the authentication application developed by the open identity authentication capability of the mobile communication authentication platform.
  • the validity of the application is registered in the mobile communication authentication platform, and the mobile communication authentication platform approves and applies the legality registration application.
  • the mobile communication authentication platform registers the identification information of the authentication application, the authentication application is For legitimate authentication applications, devices with legitimate authentication applications can have legal authentication qualifications.
  • the correspondence between the identification information of the device obtained by the mobile communication authentication platform may be: if the correspondence between the devices is established, the correspondence between the identification information of the device is obtained, for example, if the first device and the second device establish a corresponding relationship
  • the mobile communication authentication platform can obtain the correspondence between the identification information of the first device and the identification information of the second device.
  • the user may obtain the correspondence between the identification information of the mobile phone and the device (such as a car) after purchasing the device (such as a car), and obtain the correspondence between the identification information of the device, which may be obtained by the user.
  • the car identification information (such as the frame number information) and the mobile phone number of the car are transmitted to the mobile communication authentication platform; when the correspondence is established, the user can also establish the dispatcher mobile phone when shopping. Number, the correspondence with the user's mobile phone number, at this time to obtain the device
  • the correspondence between the identification information may be obtained by the mobile communication authentication platform from the shopping website, or may be received by the dispatcher through the mobile phone, and is not specifically limited herein.
  • the identification information of the device may be the mobile phone number of the user, and the information such as the frame number information of the car with the user's right to use, and is not specifically limited herein.
  • the mobile communication authentication platform receives the first identifier information of the first device and the second identifier information of the second device.
  • the first device is an authentication application
  • the authentication application corresponds to the information of the authentication application that identifies the function
  • the first device is a device that has the communication capability with the mobile communication authentication platform.
  • the mobile communication authentication platform further receives the information of the authentication application of the first device sent by the first device, and the information of the authentication application of the first device received by the mobile communication authentication platform may be the first identifier.
  • the information is sent together, and may also be sent separately, which is not limited herein.
  • the first device may be a car, the second device is a mobile terminal (such as a mobile phone, etc.), or the first device and the second device are both mobile terminals and the like, which are not limited herein.
  • the first identifier information and the second identifier information that are received by the mobile communication authentication platform are sent by the first device, and the second identifier information is obtained by the first device when the authentication occurrence condition is met. If the user wants to use the mobile phone (second device) to open the car (first device) door, through the sensor device in the car and the mobile phone, the mobile phone senses the car and sends the mobile phone number information to the car.
  • the second identification information received by the mobile communication authentication platform may be sent by the second device, in this case, the second The device also installs an authentication application, the authentication application corresponding to the information of the authentication application that identifies the role, and the second device also has the capability to communicate with the mobile communication authentication platform.
  • the mobile communication authentication platform determines, according to the information of the authentication application of the first device, whether the first device has the authentication qualification. If yes, step 304 is performed, and if not, the process ends.
  • the mobile communication authentication platform can compare the information of the authentication application of the first device with the legal application identification information supported by the mobile communication authentication platform, and determine whether the information of the authentication application of the first device is the legal application identification information supported by the first device. If yes, the first device has the authentication qualification, and step 304 is performed. If no, the process may be ended, and the illegal application prompt information may be returned, which is not limited herein.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines whether the first identification information and the second identification information correspond, and The first device feeds back the judgment result.
  • the mobile communication authentication platform is based on the correspondence between the first identification information and the second identification information and the identification information of the device acquired in the mobile communication authentication platform, and the mobile communication authentication platform is based on the first The identifier information and the second identifier information are used to find a correspondence between the identifier information of the device in the mobile communication authentication platform, and the first identifier information and the second identifier information are determined to be corresponding, and the judgment result is fed back to the first device. .
  • the first device may perform a corresponding response operation. For example, when the first device is a car and the second device is a user phone, the result of the feedback is corresponding to the first identifier information and the second identifier information.
  • the car opens the door, if it does not correspond, it can feedback a door opening failure message to the user's mobile phone, or no operation.
  • the mobile communication authentication platform may determine, according to the correspondence between the first identification information of the first device and the second identification information of the second device, and the identification information of the device in the mobile communication authentication platform, Whether the first identifier information and the second identifier information correspond to each other, and the result of the judgment is fed back to the first device, because the mobile communication authentication platform can meet the authentication requirements in various scenarios, the universality is strong, and the cost is low. Simple and safe;
  • the mobile communication authentication platform may determine the first according to the correspondence between the first identification information of the first device and the second identification information of the second device, and the identification information of the device in the mobile communication authentication platform. Before the identification information and the second identification information correspond, the mobile communication authentication platform determines the authentication qualification of the first device, increases the security, and limits the invalid authentication request.
  • FIG. 4 another embodiment of the communication method in the embodiment of the present invention includes:
  • the first device sends an authentication request to the mobile communication authentication platform.
  • the mobile communication authentication platform is a mobile communication authentication platform that has opened the identity authentication capability, and the device with the legitimate authentication application can utilize the identity authentication capability of the mobile communication authentication platform.
  • the device is a device that has an authentication application installed and has the ability to communicate with the mobile communication authentication platform.
  • the first request device may include the first identifier information of the first device and the second identifier information of the second device, where the first device acquires the second device before sending the authentication request to the mobile communication authentication platform.
  • the second identifier information may be obtained by the second device to be sent by the second device, or may be automatically obtained by the second device, which is not limited herein.
  • the authentication request may also include only the first identification letter of the first device.
  • the second device sends the second identification information of the second device to the mobile communication authentication platform.
  • the first device receives a judgment result fed back by the mobile communication authentication platform.
  • the mobile communication authentication platform After the first device sends the authentication request to the mobile communication authentication platform, the mobile communication authentication platform obtains the first identification information of the first device and the second identification information of the second device, and the mobile communication authentication platform is based on the first The identification information and the second identification information are used to search for a correspondence between the identification information of the devices in the mobile communication authentication platform, determine whether the first identification information and the second identification information correspond, and feed back the determination result to the first device.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identifier. Whether the information and the second identification information correspond to each other.
  • the first device sends an authentication request to the mobile communication authentication platform, where the authentication request may include the first identifier information of the first device, or the first identifier information of the first device and the second identifier of the second device. Identifying information, so that the correspondence between the identification information of the devices in the mobile communication authentication platform determines whether the first identification information and the second identification information correspond, and feeds back the determination result to the first device, because the mobile communication
  • the authentication platform can therefore meet the authentication needs in various scenarios, with strong versatility, low cost, and simple security.
  • the first device may further send the information of the authentication application of the first device to the mobile communication authentication platform, and the information about the authentication application of the first device may be:
  • the right request further includes information of the authentication application of the first device, so that the mobile communication authentication platform determines the authentication qualification of the first device, or the first device may separately be used for the mobile communication authentication platform.
  • the information of the authentication application of the first device is sent, which is not limited herein.
  • FIG. 5 another embodiment of the authentication method in the embodiment of the present invention includes:
  • the first device sends an authentication request to the mobile communication authentication platform.
  • the mobile communication authentication platform opens the identity authentication capability, the mobile communication authentication platform that stores the legal authentication application identifier, and the authentication application developed by the open identity authentication capability of the mobile communication authentication platform.
  • the validity of the application is registered in the mobile communication authentication platform, and the mobile communication authentication platform approves and applies the legality registration application.
  • the authentication application is Legitimate authentication application, device with legal authentication application installed
  • the first device is an authentication application, and the authentication application corresponds to the information of the authentication application that identifies the function.
  • the first device is a device that has the capability of communicating with the mobile communication authentication platform.
  • the first request device may include the first identifier information of the first device and the second identifier information of the second device, where the first device acquires the second device before sending the authentication request to the mobile communication authentication platform.
  • the second identifier information may be obtained by the second device to be sent by the second device, or may be automatically obtained by the second device, which is not limited herein.
  • the authentication request may include only the first identifier information of the first device, and the second device sends the second identifier information of the second device to the mobile communication authentication platform.
  • the first device sends the information of the authentication application of the first device to the mobile communication authentication platform.
  • the mobile communication authentication platform Transmitting, by the first device, the information of the authentication application of the first device to the mobile communication authentication platform, so that the mobile communication authentication platform determines the authentication qualification of the first device, and the mobile communication authentication platform is configured according to the authentication
  • the information of the application may be compared with the legal application identification information supported by the mobile communication authentication platform, and the information of the authentication application is determined to be the legal application identification information supported by the authentication application. If yes, the authentication is performed, and the first device has the authentication. And determining, by the mobile communication authentication platform, the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determining the first identification information Whether it corresponds to the second identification information, and feeds back the determination result to the first device.
  • the first device receives the judgment result of the feedback of the mobile communication authentication platform.
  • the mobile communication authentication platform After the first device sends the authentication request to the mobile communication authentication platform, the mobile communication authentication platform obtains the first identification information of the first device and the second identification information of the second device, and the mobile communication authentication platform is based on the first The identification information and the second identification information are used to search for a correspondence between the identification information of the devices in the mobile communication authentication platform, determine whether the first identification information and the second identification information correspond, and feed back the determination result to the first device.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identifier. Whether the information and the second identification information correspond to each other.
  • the first device sends an authentication request to the mobile communication authentication platform, where the authentication request may include the first identifier information of the first device, or the first identifier information of the first device and the second identifier of the second device.
  • the authentication request may include the first identifier information of the first device, or the first identifier information of the first device and the second identifier of the second device.
  • the first device further sends the information of the authentication application of the first device to the mobile communication authentication platform, so that the mobile communication authentication platform determines the authentication qualification of the first device, increases the security, and limits the invalidity. Authentication request.
  • Another embodiment of the weighting method includes:
  • the mobile communication authentication platform acquires a correspondence between the identification information of the device.
  • the correspondence between the identification information of the device obtained by the mobile communication authentication platform may be: if the correspondence between the devices is established, the correspondence between the identification information of the devices is obtained, for example, when the correspondence between the car and the user's mobile phone is established, the mobile communication The right platform can obtain the correspondence between the identification information of the first device and the identification information of the second device.
  • the user may establish a correspondence relationship between the identification information of the mobile phone and the car after purchasing the car, and obtain the correspondence between the identification information of the device, which may be after the user knows the frame number information of the car.
  • the car frame number information and its own mobile phone number are sent to the mobile communication authentication platform, and the corresponding relationship between the car frame number information and the user's mobile phone number information is established in the mobile communication authentication platform.
  • the first device is the user's car
  • the second device is the user's mobile phone. It should be noted that, in this embodiment, only the first device and the second device are respectively a car and a mobile phone, in practical applications. It can also be used for other devices or mobile terminals, and is not specifically limited.
  • the identification information of the automobile is the frame number information of the automobile
  • the identification information of the mobile phone is the mobile phone number as an example, which is not limited herein.
  • the mobile communication authentication platform receives the frame number information and the mobile phone number information sent by the automobile;
  • the mobile communication authentication platform opens the identity authentication capability, and the mobile communication authentication platform that stores the legal authentication application identifier, and the device with the legal authentication application can have the legal authentication qualification. .
  • An authentication application capable of communicating with the mobile communication authentication platform is installed on the automobile and the mobile phone.
  • the mobile communication authentication platform also receives the information of the authentication application of the automobile transmitted by the automobile, and the mobile communication
  • the information of the authentication application of the car received by the authentication platform may be sent together with the frame number information of the car, or may be sent separately, which is not limited herein.
  • the car frame number information received by the mobile communication authentication platform and the mobile phone number information of the user mobile phone are sent by the first device, and the mobile phone number information of the user mobile phone is obtained when the car meets the conditions for occurrence of the authentication, such as
  • the user wants to use the mobile phone (second device) to open the car (first device) door, through the sensor device in the car and the mobile phone, the mobile phone senses the car and sends the mobile phone number information to the car.
  • car frame number information received by the mobile communication authentication platform is sent by the car
  • the user mobile phone number information received by the mobile communication authentication platform can be sent by the mobile phone.
  • the mobile communication authentication platform determines whether the automobile has the authentication qualification according to the information of the authentication application of the automobile. If yes, step 604 is performed, and if not, the process ends.
  • the mobile communication authentication platform can compare the information of the authentication application of the automobile with the legal application identification information supported by the mobile communication authentication platform, and determine whether the information of the authentication application of the automobile is the legal application identification information supported by the vehicle, and if so, the automobile If the authentication is qualified, the process 604 is performed. If no, the process may be ended, and the illegal application prompt information may be returned, which is not limited herein.
  • the mobile communication authentication platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the frame number information and the mobile phone number information, determines whether the frame number information and the mobile phone number information correspond, and provides feedback to the car. critical result.
  • the mobile communication authentication platform is based on the first identification information and the second identification information, and the correspondence between the identification information of the devices acquired in the mobile communication authentication platform, and the mobile communication authentication platform is based on the automobile vehicle.
  • the frame number information and the mobile phone number information are used to find the correspondence between the identification information of the devices in the mobile communication authentication platform, and it can be determined whether the car frame number information and the mobile phone number information correspond, and the judgment result is fed back to the car.
  • the car After receiving the feedback result of the feedback, the car can make a corresponding response operation. For example, when the feedback result is that the car frame number information and the user's mobile phone number information correspond to each other, the car opens the door, and when it does not correspond, the door opening failure information can be fed back. Give the user a phone, or no action.
  • an embodiment of the mobile communication authentication platform in the embodiment of the present invention includes:
  • the receiving unit 701 is configured to receive first identifier information of the first device and second identifier information of the second device.
  • the processing unit 702 is configured to search for the location according to the first identifier information and the second identifier information. Determining, by the correspondence between the identification information of the devices in the mobile communication authentication platform, determining whether the first identification information and the second identification information correspond, and feeding back the determination result to the first device.
  • the processing unit 702 is further configured to: search, according to the first identifier information and the second identifier information, a correspondence between the identifiers of the devices in the mobile communication authentication platform, and determine Before the first identifier information and the second identifier information are corresponding, the corresponding relationship between the identifier information of the device is acquired.
  • the first identifier information and the second identifier information received by the receiving unit 701 may be sent by the first device.
  • the first identifier information received by the receiving unit 701 may be sent by the first device, and the second identifier information received by the receiving unit may be sent by the second device.
  • the receiving unit 701 is further configured to receive information about an authentication application of the first device that is sent by the first device;
  • the processing unit 702 is further configured to determine an authentication qualification of the first device according to the information of the authentication application of the first device.
  • the processing unit 702 is specifically configured to determine, according to the information of the authentication application, that the authentication application of the first device is a legal application.
  • the receiving unit 701 receives the first identification information and the second identification information of the second device, and the processing unit 702 determines the first identification information according to the correspondence between the identification information of the devices in the mobile communication authentication platform. Whether the second identifier information corresponds to the second identifier information, and the result of the judgment is fed back to the first device, because the mobile communication authentication platform can meet the authentication requirements in different scenarios, the universality is strong, the cost is low, and the security is simple and secure.
  • the receiving unit 701 receives the first identification information of the first device and the second identification information of the second device;
  • the processing unit 702 searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identifier information and the second identifier information, and determines the first identifier information and the second identifier. Whether the information corresponds, and the judgment result is fed back to the first device.
  • the processing unit 702 may further search for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determine the Obtaining the label of the device before the first identifier information and the second identifier information correspond to each other Identify the correspondence between information.
  • the first identifier information and the second identifier information received by the receiving unit 701 may be sent by the first device.
  • the first identifier information received by the receiving unit 701 may be sent by the first device, and the second identifier information received by the receiving unit may be sent by the second device.
  • the receiving unit 701 may further receive, by the first device, information about an authentication application of the first device;
  • the processing unit 702 may determine the authentication qualification of the first device according to the information of the authentication application of the first device.
  • the processing unit 702 may determine, according to the information of the authentication application, that the authentication application of the first device is a legitimate application.
  • the receiving unit 701 may be a receiver
  • the processing unit 702 may be a processor (one or more), which is not limited herein.
  • an embodiment of the device in the embodiment of the present invention includes:
  • the sending unit 801 is configured to send an authentication request to the mobile communication authentication platform.
  • the receiving unit 802 is configured to receive the determination result fed back by the mobile communication authentication platform when the first identification information of the device and the second identification information of the target device are included in the authentication request, where the determination result is
  • the mobile communication authentication platform searches for a correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information, and determines the first identification information and the Determining whether the second identification information is corresponding;
  • the receiving unit 802 is further configured to include the first identifier information of the first device in the authentication request, and receive a determination result fed back by the mobile communication authentication platform, where the determining result is the mobile communication
  • the right platform searches for the correspondence between the identification information of the devices in the mobile communication authentication platform according to the first identification information and the second identification information of the received target device, and determines the first identification information and the first The second identification information is obtained after the correspondence.
  • the sending unit 801 is further configured to send the information of the authentication application of the first device to the mobile communication authentication platform, so that the mobile communication authentication platform determines the authentication qualification of the first device.
  • the receiving unit 802 may specifically be a receiver, and the sending unit 801 may It is a transmitter and is not limited here.
  • the sending unit 801 sends an authentication request to the mobile communication authentication platform, where the authentication request may include the first identifier information of the first device, or the first identifier information of the first device and the second identifier of the second device. Identifying information, so that the correspondence between the identification information of the devices in the mobile communication authentication platform determines whether the first identification information and the second identification information correspond, and feeds back the determination result to the first device, because the mobile communication
  • the authentication platform can therefore meet the authentication needs in various scenarios, with strong versatility, low cost, and simple security.
  • the mobile communication authentication platform provided by the embodiment of the present invention is described in the following with reference to the embodiment of FIG. 3.
  • the mobile communication authentication platform includes: a receiver 901, a transmitter 902, and a processor 903. There are one or more).
  • the first device may have more or less components than those shown in FIG. 9, may combine two or more components, or may have different component configurations or settings, and each component may be Hardware, software, or a combination of hardware and software, including one or more signal processing and/or application specific integrated circuits.
  • the receiver 901 is configured to perform the following operations:
  • the receiver 901 is further configured to perform the following operations:
  • the processor 903 determines, according to the information of the authentication application, whether the first device has the authentication qualification, and if yes, searches for the identifier information of the device in the mobile communication authentication platform according to the first identifier information and the second identifier information. Corresponding relationship, determining whether the first identification information and the second identification information correspond, and if not, ending the process.
  • the transmitter 902 feeds back the determination result to the first device according to whether the first identification information and the second identification information determined by the processor 903 correspond.
  • the disclosed system, apparatus, and method may be implemented in other manners.
  • the device embodiments described above are merely illustrative.
  • the division of the unit is only a logical function division.
  • there may be another division manner for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed.
  • the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.
  • each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.
  • the integrated unit if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium.
  • the technical solution of the present invention which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium.
  • a number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention.
  • the foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本发明实施例公开了一种鉴权方法、移动通讯鉴权平台及设备。本发明实施例方法包括：移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。本发明实施例能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。

Description

一种鉴权方法、移动通讯鉴权平台及设备
本申请要求于2014年9月30日提交中国专利局、申请号为201410526279.7、发明名称为“一种鉴权方法、移动通讯鉴权平台及设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通讯技术领域，尤其涉及一种鉴权方法、移动通讯鉴权平台及设备。
背景技术
现实生活中出现身份鉴权的场景非常多，例如开门、物品签收、刷卡付款、操作许可等等，在这些场景中虽然发起身份鉴权的业务目的不同，但对于身份鉴权效果的要求是类似的，如简单高效、安全可靠。
为了实现这样的效果，就产生了身份鉴权过程的各个控制点：网络架构、网元设备、软件算法、信息管理、流程规范、角色分工等，即使对于物品签收这样简单的身份鉴权案例来说，也会涉及到了众多网元，如买家、卖家、承运方、快递员、收货人、订单、物品实物等。在身份鉴权过程上，在这些不同的应用场景中使用的身份鉴权的手段五花八门，例如钥匙、密码、指纹、声音、虹膜、射频门禁卡、签字、盖章、身份证、现金、银行卡、手机等等。
上述各个不同鉴权的场景中，由于鉴权规则、基础设施、参与人员各不相同，对参与鉴权的各方都造成很大不便，且会导致***重复建设，效率低下，资金浪费。
发明内容
本发明实施例提供了一种鉴权方法、移动通讯鉴权平台及设备,能够满足各种不同场景下对的鉴权需要，通用性强，成本低廉，简单安全。
本发明实施例第一方面提供了一种鉴权方法，包括：
移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；
所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
结合本发明实施例的第一方面，在本发明实施例的第一方面的第一种实现 方式中，在所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，所述方法还包括：
所述移动通讯鉴权平台获取设备的标识信息之间的对应关系。
结合本发明实施例的第一方面或第一方面的第一种实现方式，在本发明实施例的第一方面的第二种实现方式中，所述移动通讯鉴权平台接收的所述第一标识信息和所述第二标识信息为所述第一设备发送的。
结合本发明实施例的第一方面或第一方面的第一种实现方式，在本发明实施例的第一方面的第三种实现方式中，所述移动通讯鉴权平台接收的所述第一标识信息为所述第一设备发送的，所述移动通讯鉴权平台接收的所述第二标识信息为所述第二设备发送的。
结合本发明实施例的第一方面或第一方面的第一种实现方式或第一方面的第二种实现方式或第一方面的第三种实现方式，在本发明实施例的第一方面的第四种实现方式中，所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，所述方法还包括：
所述移动通讯鉴权平台接收所述第一设备发送的所述第一设备的鉴权应用的信息；
所述移动通讯鉴权平台根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
结合本发明实施例的第一方面的第四种实现方式，在本发明实施例的第一方面的第五种实现方式中，所述移动通讯鉴权平台根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格包括：
所述移动通讯鉴权平台根据所述鉴权应用的信息，确定所述第一设备的鉴权应用为合法应用。
本发明实施例第二方面提供了一种鉴权方法，包括：
第一设备向移动通讯鉴权平台发送鉴权请求；
所述鉴权请求中包括所述第一设备的第一标识信息和第二设备的第二标识信息，所述第一设备接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查 找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的；
或者，
所述鉴权请求中包括所述第一设备的第一标识信息，所述第一设备接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和接收的第二设备的第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的。
结合本发明实施例的第二方面，在本发明实施例的第二方面的第一种实现方式中，所述方法还包括：
所述第一设备发送所述第一设备的鉴权应用的信息至所述移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格。
本发明实施例第三方面提供了一种移动通讯鉴权平台，包括：
接收单元，用于接收第一设备的第一标识信息和第二设备的第二标识信息；
处理单元，用于根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
结合本发明实施例的第三方面，在本发明实施例的第三方面的第一种实现方式中，所述处理单元还用于在所述鉴权单元根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，获取设备的标识信息之间的对应关系。
结合本发明实施例的第三方面或第三方面的第一种实现方式，在本发明实施例的第三方面的第二种实现方式中，述接收单元接收的所述第一标识信息和所述第二标识信息为所述第一设备发送的。
结合本发明实施例的第三方面或第三方面的第一种实现方式，在本发明实施例的第三方面的第三种实现方式中，所述接收单元接收的所述第一标识信息为所述第一设备发送的，所述接收单元接收的所述第二标识信息为所述第二设备发送的。
结合本发明实施例的第三方面或第三方面的第一种实现方式或第三方面的第二中实现方式或第三方面的第三种实现方式，在本发明实施例的第三方面的第四种实现方式中，所述接收单元还用于接收第一设备发送的所述第一设备的鉴权应用的信息；所述处理单元还用于根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
结合本发明实施例的第三方面的第四种实现方式，在本发明实施例的第三方面的第五种实现方式中，所述处理单元具体用于根据所述鉴权应用的信息，确定所述第一设备的鉴权应用为合法应用。
所述接收单元可以为接收器，所述处理单元可以为处理器。
本发明实施例第四方面提供了一种设备，包括：
发送单元，用于向移动通讯鉴权平台发送鉴权请求；
接收单元，用于在所述鉴权请求中包括所述设备的第一标识信息和目标设备的第二标识信息时，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的；
所述接收单元还用于在所述鉴权请求中包括所述第一设备的第一标识信息，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和接收的目标设备的第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的。
结合本发明实施例的第四方面，在本发明实施例的第四方面的第一种实现方式中，所述发送单元还用于发送所述第一设备的鉴权应用的信息至所述移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格。
所述接收单元可以为接收器，所述发送单元可以为发送器。
从以上技术方案可以看出，本发明实施例具有以下优点：
移动通讯鉴权平台可以根据第一设备的第一标识信息和第二设备的第二标识信息，以及移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果，本发明实施例能够满足各种不同场景下的鉴权需要，通用性强，成本低廉， 简单安全。
附图说明
图1是本发明实施例中鉴权方法的一个实施例示意图；
图2是本发明实施例中鉴权方法的另一个实施例示意图；
图3是本发明实施例中鉴权方法的另一个实施例示意图；
图4是本发明实施例中鉴权方法的另一个实施例示意图；
图5是本发明实施例中鉴权方法的另一个实施例示意图；
图6是本发明实施例中鉴权方法的另一个实施例示意图；
图7是本发明实施例中移动通讯鉴权平台的一个实施例示意图；
图8是本发明实施例中设备的一个实施例示意图；
图9是本发明实施例中移动通讯鉴权平台的另一个实施例示意图。
具体实施方式
本发明实施例提供了一种鉴权方法、移动通讯鉴权平台及设备，能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
为了使本技术领域的人员更好地理解本发明方案，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分的实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都应当属于本发明保护的范围。
请参阅图1，本发明实施例中鉴权方法的一个实施例包括：
101、移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；
移动通讯行业经过长期的发展演进和规模商用，已经形成了非常成熟的鉴权技术，包括网络架构、网元设备、软件算法、信息管理、流程规范、角色分工等各个控制点，只要移动通讯鉴权平台将此身份鉴权能力对外开放，那么任何第三方的设备可以利用移动通讯鉴权平台的身份鉴权能力进行鉴权；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力的移动通讯鉴权平台，安装有鉴权应用的设备即可利用移动通讯鉴权平台的身份鉴权能力，第一设备为安装了鉴权应用，并具有与移动通讯鉴权平台通讯能力的设备。
102、移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通 讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果。
需要说明的是，在移动通讯鉴权平台内，会预先保存设备的标识信息之间的对应关系，移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，即可判断第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果。
本实施例中，移动通讯鉴权平台可以根据第一设备的第一标识信息和第二设备的第二标识信息，以及移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
图1所示的实施例中，在移动通讯鉴权平台根据第一标识信息和所述第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应之前，移动通讯鉴权平台会获取设备的标识信息之间的对应关系，下面以一具体实施例作出详细说明。
请参阅图2，本发明实施例中鉴权方法的另一个实施例包括：
201、移动通讯鉴权平台获取设备的标识信息之间的对应关系；
移动通讯鉴权平台获取设备的标识信息之间的对应关系可以是：若设备之间建立对应关系，获取设备的标识信息之间的对应关系，例如，若第一设备和第二设备建立对应关系，移动通讯鉴权平台可以获取第一设备的标识信息和第二设备的标识信息的对应关系。
建立对应关系时，可以是如用户在买设备(如汽车)后，建立自己的手机与设备(如汽车)的标识信息的对应关系，获取设备的标识信息之间的对应关系，可以是用户获知汽车的车架号信息后，将汽车标识信息(如车架号信息)及自己的手机号发送到移动通讯鉴权平台；建立对应关系时，也可以是用户购物时，建立了发货员手机号，与用户的手机号之间的对应关系，此时获取设备的标识信息之间的对应关系可以是移动通讯鉴权平台从购物网站获取，也可以是接收自发货员通过手机发送的，此处不作具体限定。
需要说明的是，设备的标识信息可以是用户的手机号，用户具有使用权的汽车的车架号信息等信息，此处不作具体限定。
202、移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力的移动通讯鉴权平台，安装有鉴权应用的设备即可利用移动通讯鉴权平台的身份鉴权能力，第一设备为安装了鉴权应用，并具有与移动通讯鉴权平台通讯能力的设备。
第一设备可以是汽车，第二设备是移动终端(如手机等)，或者第一设备和第二设备都是移动终端等，此处不作限定。
需要说明的是，移动通讯鉴权平台接收的第一标识信息和第二标识信息为所述第一设备发送的，第二标识信息为所述第一设备在满足鉴权发生条件时获取的，满足鉴权发生条件可以是用户使用第一设备对第二设备鉴权时，如用户想用手机(第二设备)想开汽车(第一设备)门，通过汽车内的感应装置，获取用户手机的手机号码，或者手机感应到汽车，向汽车发送手机号。
可以理解的是，移动通讯鉴权平台接收的第一标识信息为第一设备发送的同时，移动通讯鉴权平台接收的第二标识信息可以为第二设备发送的，这种情况下，第二设备也具有与移动通讯鉴权平台通信的能力，也可以安装有与第一设备相同的鉴权应用。
203、移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果。
需要说明的是，移动通讯鉴权平台根据第一标识信息和第二标识信息，以及在移动通讯鉴权平台内，获取的设备的标识信息之间的对应关系，移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，即可判断第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果。
第一设备接收到反馈的判断结果后，可以做出相应的响应操作，如第一设备为汽车，第二设备为用户手机时，在反馈的判断结果为第一标识信息和所述第二标识信息是对应时，汽车开门，不对应时，可以反馈一个开门失败信息给用户手机，或者无操作。
本实施例中，移动通讯鉴权平台可以根据第一设备的第一标识信息和第二设备的第二标识信息，以及移动通讯鉴权平台中设备的标识信息之间的对应关 系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全；
其次，移动通讯鉴权平台获取设备的标识信息之间的对应关系，可以直接利用获取的设备之间的标识信息进行鉴权，增强了通用性。
图1或图2所示的实施例中，移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应之前，移动通讯鉴权平台还接收第一设备发送的第一设备的鉴权应用的信息，移动通讯鉴权平台接收的第一设备的鉴权应用的信息可以是跟第一标识信息一起发送的，也可以是单独发送的此处不作限定，移动通讯鉴权平台根据所述鉴权应用的信息确定第一设备的鉴权资格，下面对移动通讯鉴权平台还接收第一设备发送的第一设备的鉴权应用的信息的实施例作出详细说明。
请参阅图3，本发明实施例中鉴权方法的另一个实施例包括：
301、移动通讯鉴权平台获取设备的标识信息之间的对应关系；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力，存储有合法鉴权应用标识的移动通讯鉴权平台，利用移动通讯鉴权平台开放的身份鉴权能力开发的鉴权应用，会在移动通讯鉴权平台注册该应用的合法性，移动通讯鉴权平台审批鉴权应用合法性注册申请，在移动通讯鉴权平台登记鉴权应用的标识信息后，该鉴权应用即为合法鉴权应用，安装有合法的鉴权应用的设备即可拥有合法的鉴权资格。
移动通讯鉴权平台获取设备的标识信息之间的对应关系可以是：若设备之间建立对应关系，获取设备的标识信息之间的对应关系，例如，若第一设备和第二设备建立对应关系，移动通讯鉴权平台可以获取第一设备的标识信息和第二设备的标识信息的对应关系。
建立对应关系时，可以是如用户在购买设备(如汽车)后，建立自己的手机与设备(如汽车)的标识信息的对应关系，获取设备的标识信息之间的对应关系，可以是用户获知汽车的车架号信息后，将汽车标识信息(如车架号信息)及自己的手机号发送到移动通讯鉴权平台；建立对应关系时，也可以是用户购物时，建立了发货员手机号，与用户的手机号之间的对应关系，此时获取设备 的标识信息之间的对应关系可以是移动通讯鉴权平台从购物网站获取，也可以是接收自发货员通过手机发送的，此处不作具体限定。
需要说明的是，设备的标识信息可以是用户的手机号，用户具有使用权的汽车的车架号信息等信息，此处不作具体限定。
302、移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；
本实施例中，第一设备为安装了鉴权应用，该鉴权应用对应有一起标识作用的鉴权应用的信息，第一设备为具有与移动通讯鉴权平台通讯能力的设备。
本实施例中，移动通讯鉴权平台还接收有第一设备发送的第一设备的鉴权应用的信息，移动通讯鉴权平台接收的第一设备的鉴权应用的信息可以是跟第一标识信息一起发送的，也可以是单独发送的，此处不作限定。
第一设备可以是汽车，第二设备是移动终端(如手机等)，或者第一设备和第二设备都是移动终端等，此处不作限定。
需要说明的是，移动通讯鉴权平台接收的第一标识信息和第二标识信息为所述第一设备发送的，第二标识信息为所述第一设备在满足鉴权发生条件时获取的，如用户想用手机(第二设备)想开汽车(第一设备)门，通过汽车和手机内的感应装置，手机感应到汽车，向汽车发送手机号信息。
可以理解的是，移动通讯鉴权平台接收的第一标识信息为第一设备发送的同时，移动通讯鉴权平台接收的第二标识信息可以为第二设备发送的，这种情况下，第二设备也安装了鉴权应用，该鉴权应用对应有一起标识作用的鉴权应用的信息，第二设备也具有与移动通讯鉴权平台通信的能力。
303、移动通讯鉴权平台根据第一设备的鉴权应用的信息判断第一设备是否具有鉴权资格，若是，则执行步骤304，若否，则结束流程。
移动通讯鉴权平台根据第一设备的鉴权应用的信息可以跟移动通讯鉴权平台支持的合法应用标识信息对比，判断第一设备的鉴权应用的信息是否为自身支持的合法应用标识信息，若是，则第一设备具有鉴权资格，执行步骤304，若否，可以结束流程，也可以返回不合法应用提示信息，此处不作限定。
304、移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应，并向第一设备反馈判断结果。
需要说明的是，移动通讯鉴权平台根据第一标识信息和第二标识信息，以及在移动通讯鉴权平台内，获取的设备的标识信息之间的对应关系，移动通讯鉴权平台根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，即可判断第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果。
第一设备接收到反馈的判断结果后，可以做出相应的响应操作，如第一设备为汽车，第二设备为用户手机时，在反馈的判断结果为第一标识信息和第二标识信息对应时，汽车开门，不对应时，可以反馈一个开门失败信息给用户手机，或者无操作。
本实施例中，移动通讯鉴权平台可以根据第一设备的第一标识信息和第二设备的第二标识信息，以及移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全；
其次，在移动通讯鉴权平台可以根据第一设备的第一标识信息和第二设备的第二标识信息，以及移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，移动通讯鉴权平台对第一设备的鉴权资格进行判断，增加了安全度，限制了无效的鉴权请求。
下面从另一侧来描述鉴权方法，请参阅图4，本发明实施例中通信方法的另一个实施例包括：
401、第一设备向移动通讯鉴权平台发送鉴权请求；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力的移动通讯鉴权平台，安装有合法的鉴权应用的设备即可利用移动通讯鉴权平台的身份鉴权能力，第一设备为安装了鉴权应用，并具有与移动通讯鉴权平台通讯能力的设备。
所述鉴权请求中可以包括第一设备的第一标识信息和第二设备的第二标识信息，第一设备在向移动通讯鉴权平台发送鉴权请求前，先获取了所述第二设备的第二标识信息，获取的方式可以是第二设备向所述第一设备发送的，也可以是第二设备自动获取的，此处不作限定。
在实际应用中，所述鉴权请求中也可以只包括所述第一设备的第一标识信 息，此时第二设备会向移动通讯鉴权平台发送第二设备的第二标识信息。
402、第一设备接收移动通讯鉴权平台反馈的判断结果；
第一设备向移动通讯鉴权平台发送鉴权请求后，移动通讯鉴权平台会获取到第一设备的第一标识信息和第二设备的第二标识信息，移动通讯鉴权平台会根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应，并向第一设备反馈判断结果。
即该判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应后得到的。
本实施例中，第一设备向移动通讯鉴权平台发送鉴权请求，鉴权请求中可以包括第一设备的第一标识信息，或者第一设备的第一标识信息和第二设备的第二标识信息，以使得移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
图4所示的实施例中，第一设备还可以向移动通讯鉴权平台发送第一设备的鉴权应用的信息，该第一设备的鉴权应用的信息的发送方式可以是：所述鉴权请求中还包括所述第一设备的鉴权应用的信息，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格，也可以是第一设备向移动通讯鉴权平台单独发送第一设备的鉴权应用的信息，此处不作限定。
下面以第一设备向移动通讯鉴权平台单独发送第一设备的鉴权应用的信息为例作出详细说明，请参阅图5，本发明实施例中鉴权方法的另一个实施例包括：
501、第一设备向移动通讯鉴权平台发送鉴权请求；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力，存储有合法鉴权应用标识的移动通讯鉴权平台，利用移动通讯鉴权平台开放的身份鉴权能力开发的鉴权应用，会在移动通讯鉴权平台注册该应用的合法性，移动通讯鉴权平台审批鉴权应用合法性注册申请，在移动通讯鉴权平台登记鉴权应用的标识信息后，该鉴权应用即为合法鉴权应用，安装有合法的鉴权应用的设备即可 拥有合法的鉴权资格，第一设备为安装了鉴权应用，该鉴权应用对应有一起标识作用的鉴权应用的信息，第一设备为具有与移动通讯鉴权平台通讯能力的设备。
所述鉴权请求中可以包括第一设备的第一标识信息和第二设备的第二标识信息，第一设备在向移动通讯鉴权平台发送鉴权请求前，先获取了所述第二设备的第二标识信息，获取的方式可以是第二设备向所述第一设备发送的，也可以是第二设备自动获取的，此处不作限定。
在实际应用中，所述鉴权请求中也可以只包括所述第一设备的第一标识信息，此时第二设备会向移动通讯鉴权平台发送第二设备的第二标识信息。
502、第一设备发送第一设备的鉴权应用的信息至移动通讯鉴权平台；
第一设备发送第一设备的鉴权应用的信息至移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格，移动通讯鉴权平台根据所述鉴权应用的信息可以跟移动通讯鉴权平台支持的合法应用标识信息对比，判断所述鉴权应用的信息是否为自身支持的合法应用标识信息，若是，则具有鉴权资格，在第一设备具有鉴权资格时，移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
503、第一设备接收移动通讯鉴权平台反馈的判断结果；
第一设备向移动通讯鉴权平台发送鉴权请求后，移动通讯鉴权平台会获取到第一设备的第一标识信息和第二设备的第二标识信息，移动通讯鉴权平台会根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应，并向第一设备反馈判断结果。
即该判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应后得到的。
本实施例中，第一设备向移动通讯鉴权平台发送鉴权请求，鉴权请求中可以包括第一设备的第一标识信息，或者第一设备的第一标识信息和第二设备的第二标识信息，以使得移动通讯鉴权平台中设备的标识信息之间的对应关系， 判断所述第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
其次，第一设备还向移动通讯鉴权平台发送第一设备的鉴权应用的信息，以使得移动通讯鉴权平台对第一设备的鉴权资格进行判断，增加了安全度，限制了无效的鉴权请求。
为便于理解，下面以第一设备为汽车，第二设备为手机为例，结合一具体应用场景对上述实施例中描述的鉴权方法进行详细描述，请参阅图6，本发明实施例中鉴权方法的另一个实施例包括：
601、移动通讯鉴权平台获取设备的标识信息之间的对应关系；
移动通讯鉴权平台获取设备的标识信息之间的对应关系可以是：若设备之间建立对应关系，获取设备的标识信息之间的对应关系，如汽车和用户手机建立对应关系时，移动通讯鉴权平台即可获取第一设备的标识信息和第二设备的标识信息的对应关系。
建立对应关系时，可以是如用户在购买汽车后，建立自己的手机与汽车的标识信息的对应关系，获取设备的标识信息之间的对应关系，可以是用户获知汽车的车架号信息后，将汽车车架号信息及自己的手机号发送到移动通讯鉴权平台，在移动通讯鉴权平台即建立了汽车车架号信息和用户手机号信息的对应关系。
本实施例中，第一设备为用户的汽车，第二设备为用户的手机，需要说明的是，本实施例仅以第一设备，第二设备分别为汽车，手机为例，在实际应用中，还可以为其他设备或者移动终端等，不作具体限定。
需要说明的是，本实施例以汽车的标识信息为汽车的车架号信息，手机的标识信息为手机号为例做出说明，具体此处不作限定。
602、移动通讯鉴权平台接收汽车发送的车架号信息和手机号信息；
本实施例中，移动通讯鉴权平台为对外开放了身份鉴权能力，存储有合法鉴权应用标识的移动通讯鉴权平台，安装有合法的鉴权应用的设备即可拥有合法的鉴权资格。
汽车和手机上都安装有能够与移动通讯鉴权平台通信的鉴权应用，本实施例中，移动通讯鉴权平台还接收有汽车发送的汽车的鉴权应用的信息，移动通 讯鉴权平台接收的汽车的鉴权应用的信息可以是跟汽车的车架号信息一起发送的，也可以是单独发送的，此处不作限定。
需要说明的是，移动通讯鉴权平台接收的汽车车架号信息和用户手机的手机号信息为第一设备发送的，用户手机的手机号信息为汽车在满足鉴权发生条件时获取的，如用户想用手机(第二设备)想开汽车(第一设备)门，通过汽车和手机内的感应装置，手机感应到汽车，向汽车发送手机号信息。
可以理解的是，移动通讯鉴权平台接收的汽车车架号信息为汽车发送的同时，移动通讯鉴权平台接收的用户手机号信息可以为手机发送的。
603、移动通讯鉴权平台根据汽车的鉴权应用的信息判断汽车是否具有鉴权资格，若是，则执行步骤604，若否，则结束流程。
移动通讯鉴权平台根据汽车的鉴权应用的信息可以跟移动通讯鉴权平台支持的合法应用标识信息对比，判断汽车的鉴权应用的信息是否为自身支持的合法应用标识信息，若是，则汽车具有鉴权资格，执行步骤604，若否，可以结束流程，也可以返回不合法应用提示信息，此处不作限定。
604、移动通讯鉴权平台根据车架号信息和手机号信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断车架号信息和手机号信息是否对应，并向汽车反馈判断结果。
需要说明的是，移动通讯鉴权平台根据第一标识信息和第二标识信息，以及在移动通讯鉴权平台内，获取的设备的标识信息之间的对应关系，移动通讯鉴权平台根据汽车车架号信息和手机号信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，即可判断汽车车架号信息和手机号信息是否对应，并向汽车反馈判断结果。
汽车接收到反馈的判断结果后，可以做出相应的响应操作，如在反馈的判断结果为汽车车架号信息和用户手机号信息对应时，汽车开门，不对应时，可以反馈一个开门失败信息给用户手机，或者无操作。
下面介绍本发明实施例中的移动通讯鉴权平台实施例，请参阅图7，本发明实施例中的移动通讯鉴权平台的一个实施例包括：
接收单元701，用于接收第一设备的第一标识信息和第二设备的第二标识信息；
处理单元702，用于根据所述第一标识信息和所述第二标识信息，查找所 述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
所述处理单元702还可以用于在所述鉴权单元根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，获取设备的标识信息之间的对应关系。
所述接收单元701接收的所述第一标识信息和所述第二标识信息可以为所述第一设备发送的。
所述接收单元701接收的所述第一标识信息可以为所述第一设备发送的，所述接收单元接收的所述第二标识信息可以为所述第二设备发送的。
所述接收单元701还可以用于接收第一设备发送的所述第一设备的鉴权应用的信息；
所述处理单元702还可以用于根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
所述处理单元702具体用于根据所述鉴权应用的信息，确定所述第一设备的鉴权应用为合法应用。
本实施例中，接收单元701接收第一标识信息和第二设备的第二标识信息，处理单元702根据移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
为便于理解，下面以一具体应用场景为例，对本实施例中的移动通讯鉴权平台的内部运作流程进行描述：
接收单元701接收第一设备的第一标识信息和第二设备的第二标识信息；
处理单元702根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
所述处理单元702还可以在所述鉴权单元根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，获取设备的标 识信息之间的对应关系。
所述接收单元701接收的所述第一标识信息和所述第二标识信息可以为所述第一设备发送的。
所述接收单元701接收的所述第一标识信息可以为所述第一设备发送的，所述接收单元接收的所述第二标识信息可以为所述第二设备发送的。
所述接收单元701还可以接收第一设备发送的所述第一设备的鉴权应用的信息；
所述处理单元702可以根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
所述处理单元702可以根据所述鉴权应用的信息，确定所述第一设备的鉴权应用为合法应用。
本实施例中，所述的接收单元701具体可以是接收器，处理单元702可以是处理器(一个或多个)，此处不作限定。
下面介绍本发明实施例中的第一设备实施例，请参阅图8，本发明实施例中的设备的一个实施例包括：
发送单元801，用于向移动通讯鉴权平台发送鉴权请求；
接收单元802，用于在所述鉴权请求中包括所述设备的第一标识信息和目标设备的第二标识信息时，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的；
所述接收单元802还用于在所述鉴权请求中包括所述第一设备的第一标识信息，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和接收的目标设备的第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的。
所述发送单元801还可以用于发送所述第一设备的鉴权应用的信息至所述移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格。
本实施例中，所述的接收单元802具体可以是接收器，发送单元801可以 是发送器，此处不作限定。
本实施例中，发送单元801向移动通讯鉴权平台发送鉴权请求，鉴权请求中可以包括第一设备的第一标识信息，或者第一设备的第一标识信息和第二设备的第二标识信息，以使得移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向第一设备反馈判断结果，由于移动通讯鉴权平台的因此能够满足各种不同场景下的鉴权需要，通用性强，成本低廉，简单安全。
下面结合图3的实施例从硬件角度对本发明实施例提供的移动通讯鉴权平台进行描述，请参照图9，该移动通讯鉴权平台包括：接收器901、发送器902和处理器903(可以有一个或多个)。
本发明实施例涉及的第一设备可以具有比图9所示出的更多或更少的部件，可以组合两个或更多个部件，或者可以具有不同的部件配置或设置，各个部件可以在包括一个或多个信号处理和/或专用集成电路在内的硬件、软件或硬件和软件的组合实现。
所述接收器901用于执行如下操作：
在设备之间建立对应关系时获取设备的标识信息之间的对应关系；
所述接收器901还用于执行如下操作：
接收第一设备的第一标识信息和第二设备的第二标识信息及第一设备的鉴权应用的信息。
所述处理器903根据所述鉴权应用的信息判断第一设备是否具有鉴权资格，若是，则根据第一标识信息和第二标识信息，查找移动通讯鉴权平台中设备的标识信息之间的对应关系，判断第一标识信息和第二标识信息是否对应，若否，则结束流程。
所述发送器902根据所述处理器903判断的第一标识信息和第二标识信息是否对应，向第一设备反馈判断结果。
以上仅结合图3的方法实施例描述了本发明实施例提供的移动通讯鉴权平台的一个实施例；本发明提供的移动通讯鉴权平台的其他实施例可以参考本实施例，移动通讯鉴权平台具体实现的操作可以参考前述各方法实施例中移动通讯鉴权平台所执行的方法，具体不再赘述。
所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描 述的***，装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
在本申请所提供的几个实施例中，应该理解到，所揭露的***，装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个***，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。另外，在本发明各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本发明的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行本发明各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述，以上实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。

Claims (16)

  1. 一种鉴权方法，其特征在于，包括:
    移动通讯鉴权平台接收第一设备的第一标识信息和第二设备的第二标识信息；
    所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
  2. 根据权利要求1所述的方法，其特征在于，
    在所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，所述方法还包括：
    所述移动通讯鉴权平台获取设备的标识信息之间的对应关系。
  3. 根据权利要求1或2所述的方法，其特征在于，
    所述移动通讯鉴权平台接收的所述第一标识信息和所述第二标识信息为所述第一设备发送的。
  4. 根据权利要求1或2所述的方法，其特征在于，
    所述移动通讯鉴权平台接收的所述第一标识信息为所述第一设备发送的，所述移动通讯鉴权平台接收的所述第二标识信息为所述第二设备发送的。
  5. 根据权利要求1至4中任一所述的方法，其特征在于，
    所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，所述方法还包括：
    所述移动通讯鉴权平台接收所述第一设备发送的所述第一设备的鉴权应用的信息；
    所述移动通讯鉴权平台根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
  6. 根据权利要求5中所述的方法，其特征在于，
    所述移动通讯鉴权平台根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格包括：
    所述移动通讯鉴权平台根据所述鉴权应用的信息，确定所述第一设备的鉴 权应用为合法应用。
  7. 一种鉴权方法，其特征在于，包括:
    第一设备向移动通讯鉴权平台发送鉴权请求；
    所述鉴权请求中包括所述第一设备的第一标识信息和第二设备的第二标识信息，所述第一设备接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的；
    或者，
    所述鉴权请求中包括所述第一设备的第一标识信息，所述第一设备接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和接收的第二设备的第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的。
  8. 根据权利要求7所述的方法，其特征在于，
    所述方法还包括：
    所述第一设备发送所述第一设备的鉴权应用的信息至所述移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格。
  9. 一种移动通讯鉴权平台，其特征在于，包括：
    接收单元，用于接收第一设备的第一标识信息和第二设备的第二标识信息；
    处理单元，用于根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应，并向所述第一设备反馈判断结果。
  10. 根据权利要求9所述的移动通讯鉴权平台，其特征在于，所述处理单元还用于在所述鉴权单元根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应之前，获取设备的标识信息之间的对应关系。
  11. 根据权利要求9或10所述的移动通讯鉴权平台，其特征在于，所述接收单元接收的所述第一标识信息和所述第二标识信息为所述第一设备发送 的。
  12. 根据权利要求9或10所述的移动通讯鉴权平台，其特征在于，所述接收单元接收的所述第一标识信息为所述第一设备发送的，所述接收单元接收的所述第二标识信息为所述第二设备发送的。
  13. 根据权利要求9至12中任一所述的移动通讯鉴权平台，其特征在于，所述接收单元还用于接收第一设备发送的所述第一设备的鉴权应用的信息；
    所述处理单元还用于根据所述第一设备的鉴权应用的信息，确定所述第一设备的鉴权资格。
  14. 根据权利要求13所述的移动通讯鉴权平台，其特征在于，所述处理单元具体用于根据所述鉴权应用的信息，确定所述第一设备的鉴权应用为合法应用。
  15. 一种设备，其特征在于，包括：
    发送单元，用于向移动通讯鉴权平台发送鉴权请求；
    接收单元，用于在所述鉴权请求中包括所述设备的第一标识信息和目标设备的第二标识信息时，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和所述第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的；
    所述接收单元还用于在所述鉴权请求中包括所述第一设备的第一标识信息，接收所述移动通讯鉴权平台反馈的判断结果，所述判断结果为所述移动通讯鉴权平台根据所述第一标识信息和接收的目标设备的第二标识信息，查找所述移动通讯鉴权平台中设备的标识信息之间的对应关系，判断所述第一标识信息和所述第二标识信息是否对应后得到的。
  16. 根据权利15所述的设备，其特征在于，所述发送单元还用于发送所述第一设备的鉴权应用的信息至所述移动通讯鉴权平台，以使得所述移动通讯鉴权平台确定所述第一设备的鉴权资格。
PCT/CN2015/079347 2014-09-30 2015-05-20 一种鉴权方法、移动通讯鉴权平台及设备 WO2016050078A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP15847868.5A EP3188135B1 (en) 2014-09-30 2015-05-20 Authentication method, mobile communication authentication platform and device
US15/472,729 US10506431B2 (en) 2014-09-30 2017-03-29 Authentication method, mobile communications authentication platform, and device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410526279.7 2014-09-30
CN201410526279.7A CN104301893B (zh) 2014-09-30 2014-09-30 一种鉴权方法、移动通讯鉴权平台及设备

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/472,729 Continuation US10506431B2 (en) 2014-09-30 2017-03-29 Authentication method, mobile communications authentication platform, and device

Publications (1)

Publication Number Publication Date
WO2016050078A1 true WO2016050078A1 (zh) 2016-04-07

Family

ID=52321415

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/079347 WO2016050078A1 (zh) 2014-09-30 2015-05-20 一种鉴权方法、移动通讯鉴权平台及设备

Country Status (4)

Country Link
US (1) US10506431B2 (zh)
EP (1) EP3188135B1 (zh)
CN (1) CN104301893B (zh)
WO (1) WO2016050078A1 (zh)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104301893B (zh) * 2014-09-30 2019-08-20 华为技术有限公司 一种鉴权方法、移动通讯鉴权平台及设备
CN105991619B (zh) * 2015-03-05 2021-01-15 中兴通讯股份有限公司 一种安全认证方法和装置
CN105262773B (zh) * 2015-11-09 2019-03-08 北京世纪龙脉科技有限公司 一种物联网***的验证方法及装置
CN108243165B (zh) * 2016-12-26 2020-10-30 中移(苏州)软件技术有限公司 一种鉴权方法及装置

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102883404A (zh) * 2011-07-14 2013-01-16 华为终端有限公司 实现机器对机器业务的方法、m2m终端、ap和***
CN103310518A (zh) * 2013-06-25 2013-09-18 奇瑞汽车股份有限公司 一种开启车辆车门的方法和***
EP2763444A1 (en) * 2013-02-01 2014-08-06 Alcatel Lucent A method and devices for authenticating
CN104301893A (zh) * 2014-09-30 2015-01-21 华为技术有限公司 一种鉴权方法、移动通讯鉴权平台及设备

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6496979B1 (en) * 1997-10-24 2002-12-17 Microsoft Corporation System and method for managing application installation for a mobile device
FI20010297A0 (fi) * 2001-02-16 2001-02-16 Vesa Juhani Hukkanen Menetelmä ja laitejärjestelmä kommunikoinnin toteuttamiseksi
WO2004080008A1 (ja) * 2003-03-04 2004-09-16 Fujitsu Limited 連携情報管理システム
US7242923B2 (en) * 2004-03-23 2007-07-10 Motorola, Inc. System and method for authenticating wireless device with fixed station
US7542455B2 (en) * 2006-04-18 2009-06-02 Cisco Technology, Inc. Unlicensed mobile access (UMA) communications using decentralized security gateway
US9350716B2 (en) * 2007-03-20 2016-05-24 At&T Intellectual Property I, Lp System and method for authentication of a communication device
US20090300365A1 (en) * 2008-05-30 2009-12-03 Robert Karmes Vehicle Diagnostic System Security with Memory Card
US8224313B2 (en) * 2008-09-24 2012-07-17 Centurylink Intellectual Property Llc System and method for controlling vehicle systems from a cell phone
KR20170010097A (ko) * 2009-06-08 2017-01-25 집카, 인크 차량과 통신하기 위한 모바일 디바이스 애플리케이션
US20110185354A1 (en) * 2010-01-26 2011-07-28 Emdigo Inc. Mobile Application Delivery Management System
US8457686B2 (en) * 2010-12-02 2013-06-04 General Motors Llc Method of communication between a vehicle telematics unit and a call center
US10277630B2 (en) * 2011-06-03 2019-04-30 The Boeing Company MobileNet
US8607043B2 (en) * 2012-01-30 2013-12-10 Cellco Partnership Use of application identifier and encrypted password for application service access
US9569403B2 (en) * 2012-05-03 2017-02-14 Ford Global Technologies, Llc Methods and systems for authenticating one or more users of a vehicle communications and information system
CN102802156B (zh) * 2012-08-31 2015-11-04 魅族科技（中国）有限公司 一种鉴权方法和相关设备
CN102984689B (zh) * 2012-11-21 2017-02-15 东莞宇龙通信科技有限公司 移动终端的验证***和方法
CN103035054B (zh) * 2012-12-29 2015-04-08 江苏中科天安智联科技有限公司 具有许可及授权功能的nfc智能汽车钥匙***
US9276737B2 (en) * 2013-03-14 2016-03-01 General Motors Llc Securing a command path between a vehicle and personal wireless device
WO2014146186A1 (en) * 2013-03-22 2014-09-25 Keyfree Technologies Inc. Managing access to a restricted area
US20150024688A1 (en) * 2013-07-16 2015-01-22 GM Global Technology Operations LLC Automatic Pairing of a Vehicle and a Mobile Communications Device
US9685013B2 (en) * 2013-10-25 2017-06-20 Nxp B.V. System and method for authenticating components of a vehicle

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102883404A (zh) * 2011-07-14 2013-01-16 华为终端有限公司 实现机器对机器业务的方法、m2m终端、ap和***
EP2763444A1 (en) * 2013-02-01 2014-08-06 Alcatel Lucent A method and devices for authenticating
CN103310518A (zh) * 2013-06-25 2013-09-18 奇瑞汽车股份有限公司 一种开启车辆车门的方法和***
CN104301893A (zh) * 2014-09-30 2015-01-21 华为技术有限公司 一种鉴权方法、移动通讯鉴权平台及设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3188135A4 *

Also Published As

Publication number Publication date
CN104301893B (zh) 2019-08-20
EP3188135A1 (en) 2017-07-05
US10506431B2 (en) 2019-12-10
CN104301893A (zh) 2015-01-21
US20170201885A1 (en) 2017-07-13
EP3188135B1 (en) 2023-05-31
EP3188135A4 (en) 2017-09-20

Similar Documents

Publication Publication Date Title
EP3457344B1 (en) Payment authentication method, apparatus and system for onboard terminal
US8855312B1 (en) Mobile trust broker
KR101612751B1 (ko) 디지털 인증서의 제공
CN110300083B (zh) 一种获取身份信息的方法、终端及验证服务器
EP3744067B1 (en) Method and apparatus for managing user authentication in a blockchain network
US20150371026A1 (en) Systems and methods for authentication via bluetooth device
US20200265438A1 (en) Systems and methods for estimating authenticity of local network of device initiating remote transaction
CN107113613B (zh) 服务器、移动终端、网络实名认证***及方法
CN105656850B (zh) 一种数据处理方法、相关装置及***
US9549322B2 (en) Methods and systems for authentication of a communication device
US8918844B1 (en) Device presence validation
US20220255929A1 (en) Systems and methods for preventing unauthorized network access
WO2016050078A1 (zh) 一种鉴权方法、移动通讯鉴权平台及设备
US11451933B2 (en) Identification verification and authentication system
US20220070165A1 (en) Identification and authentication of a user using identity-linked device information for facilitation of near-field events
US11513706B2 (en) Modular data processing and storage system
EP3491776B1 (en) Multi-device authentication process and system utilizing cryptographic techniques
CN114175578B (zh) 安全地共享私人信息
KR101940310B1 (ko) 웹 사이트 검증 장치 및 그 방법
US20150006887A1 (en) System and method for authenticating public keys
CN113950681A (zh) 数据项的加密签署
CN114172687A (zh) 云端连接方法、辅助设备连接云端的方法及电子设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15847868

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2015847868

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2015847868

Country of ref document: EP