IP Library Granted Patent US 9,231,937
Granted Patent B2
US 9,231,937 · App. 14/309,538 · Granted Jan 5, 2016

Method and system for authenticating user identity

Inventor: Kai Cao (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
H04L63/08G06F21/00G06F21/43G06Q20/425H04L63/18
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,231,937
App. No.
14/309,538
Granted
Jan 5, 2016
Kind
B2
Abstract

Embodiments of the present application relate to a method for authenticating user identity, a system for authenticating user identity, and a computer program product for authenticating user identity. A method for authenticating user identity is provided. The method includes generating a first verification code by a server, displaying the first verification code to a user in an application scenario of a service requiring user identity authentication, receiving a second verification code sent by the user via another application that is other than the application scenario, comparing the second verification code sent by the user and the first verification code generated by the server, and determining whether the user has passed identity authentication based on a result of the comparison.

Claims (72)

1. A method for authenticating user identity, comprising:

generating a first verification code by a server;

displaying the first verification code to a user in an application scenario of a service requiring user identity authentication;

displaying a prompt, comprising:

displaying the prompt in the application scenario, the prompt instructing the user to send a second verification code to the server using an application other than the application scenario;

receiving the second verification code sent by the user via the application other than the application scenario;

comparing the second verification code sent by the user and the first verification code generated by the server; and

determining whether the user has passed identity authentication based on a result of the comparison.

2. The method as described in claim 1 , wherein the determining of whether the user has passed identity authentication based on the results of the comparing comprises:

in the event that the second verification code from the user is identical to the first verification code generated by the server, determining the user to have passed identity authentication.

3. The method as described in claim 1 , wherein the application scenario of the service requiring user identity authentication corresponds to a web page or a client application.

4. The method as described in claim 1 , wherein:

the application other than the application scenario corresponds to an application capable of sending a message to the server; and

the message includes the second verification code.

5. The method as described in claim 4 , wherein the determining of whether the user has passed identity authentication based on the results of the comparing comprises:

in the event that the second verification code from the user is identical to the first verification code generated by the server, comparing a user ID of the application other than the application scenario used to send the message against a user ID registered on the server; and

in the event that the user ID of the application other than the application scenario used to send the message is identical to the user ID registered on the server, determining the user to have passed identity authentication.

6. The method as described in claim 5 , wherein:

the application other than the application scenario corresponds to a text messaging application;

the message corresponds to a text message; and

the user ID of the application other than the application scenario corresponds to a mobile telephone number or telephone number.

7. The method as described in claim 4 , wherein:

the application other than the application scenario corresponds to a text messaging application; and

the message corresponds to a text message.

8. The method as described in claim 1 , wherein the first verification code is randomly generated.

9. The method as described in claim 1 , wherein

the application other than the application scenario corresponds to a text messaging application; and

the prompt displayed in the application other than the application scenario instructs the user to send a text message to a displayed telephone number.

10. The method as described in claim 1 , wherein the application scenario and the application other than the application scenario are implemented on different terminal equipment.

11. The method as described in claim 1 , wherein the application scenario and the application other than the application scenario are implemented on the same terminal equipment.

12. A system for authenticating user identity, comprising:

at least one processor configured to:

generate a first verification code by a server;

display the first verification code to a user in an application scenario of a service requiring user identity authentication;

display a prompt, comprising:

display the prompt in the application scenario, the prompt instructing the user to send a second verification code to the server using an application other than the application scenario; or

display the prompt in the application other than the application scenario, the prompt instructing the user to send a second verification code to the server using an application other than the application scenario;

receive the second verification code sent by the user via the application other than the application scenario;

compare the second verification code sent by the user and the first verification code generated by the server; and

determine whether the user has passed identity authentication based on a result of the comparison; and

a memory coupled to the at least one processor and configured to provide the at least one processor with instructions.

13. The system as described in claim 12 , the determining of whether the user has passed identity authentication based on the results of the comparing comprises:

in the event that the second verification code from the user is identical to the first verification code generated by the server, determine the user to have passed identity authentication.

14. The system as characterized in claim 12 , wherein the application scenario of the service requiring authentication of user identity is a web page or client application.

15. The system as described in claim 12 , wherein:

the application other than the application scenario corresponds to an application capable of sending a message to the server; and

the message includes the second verification code.

16. The system as described in claim 15 , wherein the determining of whether the user has passed identity authentication based on the results of the comparing comprises:

in the event that the second verification code from the user is identical to the first verification code generated by the server, compare a user ID of the application other than the application scenario used to send the message against a user ID registered on the server; and,

in the event that the user ID of the application other than the application scenario used to send the message is identical to the user ID registered on the server, determine the user to have passed identity authentication.

17. The system as described in claim 16 , wherein:

the application other than the application scenario corresponds to a text messaging application; and

the user ID of the application other than the application scenario corresponds to a mobile phone number or telephone number.

18. The system as described in claim 15 , wherein:

the application other than the application scenario corresponds to a text messaging application; and

the message corresponds to a text message.

19. A computer program product for authenticating user identity, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

generating a first verification code by a server;

displaying the first verification code to a user in an application scenario of a service requiring user identity authentication;

displaying a prompt, comprising:

displaying the prompt in the application scenario, the prompt instructing the user to send a second verification code to the server using an application other than the application scenario;

receiving the second verification code sent by the user via the application other than the application scenario;

comparing the second verification code sent by the user and the first verification code generated by the server; and

determining whether the user has passed identity authentication based on a result of the comparison.

20. A method for authenticating user identity, comprising:

generating a first verification code by a server;

displaying the first verification code to a user in an application scenario of a service requiring user identity authentication;

displaying a prompt, comprising:

displaying the prompt in the application other than the application scenario, the prompt instructing the user to send a second verification code to the server using an application other than the application scenario;

receiving the second verification code sent by the user via the application other than the application scenario;

comparing the second verification code sent by the user and the first verification code generated by the server; and

determining whether the user has passed identity authentication based on a result of the comparison.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 11, 2020
From: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 054233/0693 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 1, 2020
From: ALIBABA GROUP HOLDING LIMITED
To: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053667/0148 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 19, 2014
From: CAO, KAI
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 033142/0686 →
Priority Claims (1)
CN 2013 1 0252777 · Jun 24, 2013 · national
Continuity (1)
Related Publication 20140380508A1 · Dec 25, 2014