IP Library › Granted Patent US 9,894,053

Granted Patent B2

US 9,894,053 · App. 15/199,645 · Granted Feb 13, 2018

Method and system for authenticating service

Inventor: Kai Cao (Hangzhou, CN)

Assignee: Alibaba Group Holding Limited

H04L63/08 G06F21/35 G06F21/43 H04L63/18 H04L67/02 H04L67/327 H04W12/06

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 9,894,053
App. No.: 15/199,645
Granted: Feb 13, 2018
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Embodiments of the present application relate to a method, a system, and a computer program product for authenticating a service. A method for authenticating a service is provided. The method includes receiving a first service request from a first terminal, generating a first link address that is used to link to an access location based on the received first service request, determining a preset terminal identifier corresponding to a second terminal, the preset terminal identifier being a terminal identifier preset by the user, sending the first link address to the second terminal, receiving a first link request, determining an issued terminal identifier based on the first link request, comparing the determined issued terminal identifier with the preset terminal identifier of the second terminal, and performing a next processing operation on the first service request based on the comparison result.

Claims (91)

1. A method for authenticating a service comprising:

receiving a first service request sent by a user from a first terminal;

generating a first link address that is used to link to an access location based on the received first service request, wherein the first link address includes a uniform resource locator (URL);

determining a preset terminal identifier corresponding to a second terminal, the preset terminal identifier being a terminal identifier preset by the user;

sending the first link address to the second terminal, comprising:

sending a short message service (SMS) message to the second terminal, the SMS message including the first link address, wherein the first link address is to be activated by the second terminal;

receiving a first link request from a terminal that issued the first link request;

determining an issued terminal identifier of the terminal that issued the first link request based on the first link request;

comparing the determined issued terminal identifier with the preset terminal identifier of the second terminal; and

performing a next processing operation on the first service request based on a comparison result.

2. The method as described in claim 1 , wherein the next processing operation includes approving authentication of the first service request in response to a determination that the comparison results of the issued terminal identifier of the terminal that issued the first link request matches the preset terminal identifier of the second terminal.

3. The method as described in claim 1 , wherein the next processing operation includes disapproving authentication of the first service request and sending back an authentication failure message to the terminal in response to a determination that the comparison results of the issued terminal identifier of the terminal that issued the first link request does not match the preset terminal identifier of the second terminal.

4. The method as described in claim 1 , wherein:

the first service request is sent through the first terminal by the user; and

the first terminal and the second terminal are different terminals or the first terminal and the second terminal are the same terminal.

5. The method as described in claim 1 , further comprising:

determining equipment information of the second terminal;

determining equipment information of the terminal that issued the first link request; and

comparing the equipment information of the terminal that issued the first link request with the equipment information of the second terminal.

6. The method as described in claim 5 , wherein the determining of the equipment information of the second terminal comprises:

a) determining the equipment information of the second terminal based on historical record information on the second terminal accessing a server; or

b) in response to a determination that in the past having received a second service request sent by a terminal using a user account number bound to the second terminal, generating a second link address that is used to link to the access location;

sending the second link address to the second terminal;

determining a terminal identifier of the terminal that issued a second link request and equipment information of the terminal based on the second link request issued through the second link address;

comparing the terminal identifier of the terminal that issued the second link request with the preset terminal identifier of the second terminal; and

in response to a determination that the terminal identifier of the terminal that issued the second link request and the preset terminal identifier of the second terminal match and a warning message has not been received within a set length of time following approval of an authentication of the second service request, determining that the equipment information of the terminal that issued the second link request is the equipment information of the second terminal.

7. The method as described in claim 5 , wherein the equipment information comprises an equipment model number of a terminal, a version number of a terminal operating system, a version number of a terminal browser, a size and resolution of a terminal display screen, or any combination thereof.

8. The method as described in claim 1 , wherein the determining of the issued terminal identifier of the terminal that issued the first link request comprises:

querying the terminal that issued the first link request for a phone number of the terminal that issued the first link request, the phone number corresponding with the issued terminal identifier.

9. The method as described in claim 8 , wherein the querying of the terminal that issued the first link request for the phone number of the terminal that issued the first link request is based at least in part on an application programming interface (API) made available by an Internet operator.

10. A system for authenticating a service, comprising:

a server comprising:

at least one processor configured to:

receive a first service request sent by a user from a first terminal;

generate a first link address that is used to link to an access location based on the received first service request, wherein the first link address includes a uniform resource locator (URL);

determine a preset terminal identifier corresponding to a second terminal, the preset terminal identifier being a terminal identifier preset by the user;

send the first link address to the second terminal, comprising to:

send a short message service (SMS) message to the second terminal, the SMS message including the first link address, wherein the first link address is to be activated by the second terminal;

receive a first link request from a terminal that issued the first link request;

determine an issued terminal identifier of the terminal that issued the first link request based on the first link request;

compare the determined issued terminal identifier with the preset terminal identifier of the second terminal; and

perform a next processing operation on the first service request based on a comparison result; and

a memory coupled to the at least one processor and configured to provide the at least one processor with instructions; and

the second terminal configured to receive the first link address sent by the server and issue the first link request through the first link address to the server.

11. The system as described in claim 10 , further comprising:

the first terminal configured to issue the first service request according to user instructions,

wherein the first terminal and the second terminal are different terminals or the first terminal and the second terminal are the same terminal.

12. The system as described in claim 10 , wherein the at least one processor is further configured to:

determine equipment information of the second terminal;

determine equipment information of the terminal that issued the first link request; and

compare the equipment information of the terminal that issued the first link request with the equipment information of the second terminal.

13. The system as described in claim 12 , wherein the determining of the equipment information of the second terminal comprises:

a) determine the equipment information of the second terminal based on historical record information on the second terminal accessing the server; or

b) in response to a determination that in the past having received a second service request sent by a terminal using a user account number bound to the second terminal, generate a second link address that is used to link to the access location;

send the second link address to the second terminal;

determine a terminal identifier of the terminal that issued a second link request and equipment information of the terminal based on the second link request issued through the second link address;

compare the terminal identifier of the terminal that issued the second link request with the preset terminal identifier of the second terminal; and

in response to a determination that the terminal identifier of the terminal that issued the second link request and the preset terminal identifier of the second terminal match and a warning message has not been received within a set length of time following approval of an authentication of the second service request, determine that the equipment information of the terminal that issued the second link request is the equipment information of the second terminal.

14. A server, comprising: