The most common form of WiFi certification system is"Cell phone company WiFi, Play Portal, lose and pass code."The government service centre self-service terminal, hospital clinic screens, airport public search machines, bank site experience machines that are online and based on another set of certification methods.——Identification card certification.
NatShell V7 Authentication & Billing system supports ID card-scribing certification, which is classified as third party data source authentication: ID-based card-scribing certification, and re-use to government, airport, etc.
There is a difference in nature between ID card certification and SMS authentication.SMS certification is only a mobile phone number, which can be temporarily borrowed, changed, not necessarily tied to the person; ID card-scanting is more authentic than an identity card-reading card. For places requiring strict physical access, card-scribing records are more reliable and traceable.
First, the need for card reading equipment and the choice and installation of card readers, I.D. readers are additional costs; second, the logic of matching readable document information and back-office data sources is correct, whether it is a direct reading of the document number or a serial number plus its name, or whether it is necessary to check with public security or third party data sources online, which determines the strength of authentication and the complexity of implementation; and third, the collection, use and retention of identity card information must meet the relevant requirements of personal information protection, with clear rules on desensitization, encryption and duration of retention.
Here, we'll stress a border: ID card certification is"Network ID checkup using I.D.", does not equal"System to read and store all ID information directly". If the client proposes to verify a public security data source in real time or to retain full document photographs, which involve open third-party interfaces and data compliance, they must be separately identified and cannot be implicitly created because of product support for card certification.
From an optional perspective, ID card certification is appropriate for three types of scenarios.The first is a public Internet area with high real names, such as the Government Service Centre and the Office Hall, where swipes are more stringent than text messages; the second is an airport, a high-speed station, a cell phone number that is not fully covered, and passports, document brushes can compensate for the lack of SMS certification coverage for passengers outside the country; and the third is a specific industry terminal, such as a bank network experience machine, hospital self-service machines, which can be avoided by using a swirling card."Mobile phone identification code + Stranger Public Terminal"Risks.
And watch out for a puddle that can be stepped on easily: card-swipe authentication is done."Identification"It's not resolved."Account management". After the card is cleared, who uses it, how long it takes and how many traffics it generates, which is still governed by the system of accounts and log records that are attached to the certification system. V7 has user management and log-retarding capability in addition to credit-scribing certification, which allows access to authentication logs and links to online records so that real name authentication and ex post facto retroactiveization can be closed. If a card is not used for account purposes, only half a set of real names is made.
Finally, it is suggested that if the unit is planning WiFi certification in a public area, do not rush to text-based authentication. First, you can find out how many of your users have no mobile phone or are unable to use it, how many are outsiders and how many are fixed terminals.
The deployment location of the card certification is also to be considered in advance. Whether it is placed next to each public terminal as a separate card reader or whether the user will have a single card reading device on the front desk, the help desk and a temporary access voucher for the user, with the two types of management costs very different. The first user operates directly, but each device has to be equipped with hard cards, which are maintained; the latter has little hardware input, but one more."Check card exchange vouchers". Where the Government Hall, airports and other service desks exist, it is more common to use a centralized card for vouchers; where there are no serviced personnel, it is better suited to stand-alone cards at the end.
There's another piece of detail:Card certification and certificate validity matching design. A card is drawn, and the user of a machine may need half an hour. The user of a machine may only take minutes to get online if one card is used indefinitely. The V7 certification strategy supports access control over time and strategy.
And finally, let's make it clear that this is a supplement to SMS authentication, not a substitute. SMS certification covers the following:"Someone with a cell number.", the card-swipe authentication covers"Someone with a license, but not necessarily a cell number."The public arena is characterized by two categories of people. In the government hall, there are young people with mobile code-scanning and elderly persons with identity cards; in airports, there are local passengers and foreigners who have no documentation but are not easy to receive international texts.