WiFi authentication system authenticated with a text message-based code: user's cell phone number, acceptance code, and through authentication, the system records this mobile phone as an online identity. But there is a gap here that many projects ignore.——SMS authentication code is authenticated by"This cell number will get a text."It's not proof."This cell phone number is in my name."A person who takes a personal cell phone number, can pass the authentication code, but the logs record an identity that has nothing to do with himself. For a strictly real name-demanding scene, this is a discount.
The NatShell V7 Authentication & Billing system is further designed in the context of authenticating a real name: mobile phone number, identity card, and name three elements are matched to prevent false ID numbers from being registered. The three elements are equal to the three types of information that users fill out, their identification number, their names, and their identities, confirming that they belong to the same person rather than to three unrelated parts.
Why do we have to make three elements, not two?The ID number plus name is two elements, but the ID number itself can be known, and the name is public, and both are easily used for forgery. Adding the cell phone number makes it more difficult to use it: the mobile number is a real name of the operator, matching the ID number with the name means that the user must have one at the same time."We'll tie it to the target ID number."The mobile phone number, which is hard to get in reality. The three-factor verification is the essence of raising the cost of counterfeiting to levels that are not worth doing.
It is important to clarify a capability boundary: three elements are right."Verify three messages for matching", does not equal"The public security real-time database is being connected."。"Mobile phone number, ID card, name three."Depending on data sources and the verification channel, the type of data source in different projects, the openness of the validation interface, and the time limit for individual verifications may vary. So, in project communication, the correct word is"V7 supports mobile phone numbers, ID cards, real names matching and prevents false identity registration"The specific verification access, where the data source is and whether it is real time, is confirmed by project site and cannot be described in general terms."The system can check public security data in real time."。
Where do three elements match the actual name from the application scene?One is the toll on campus and campus.The opening name and the chargeer must be matched to avoid a false identity account.Two, hotel and apartment guests.The physical name records are to be kept in the same manner as the residence registration;Three is the public regional and political visitors network.Request"Who's on the Internet, who's in charge?"It goes back to people. SMS certification solves the problem."Do you have the code?"Three things work out."Is this identity real?"The two are not dimensions, and the strict scene should be used in a cumulative manner.
There is another reality: error in the user information entry. The name of a remote word, the last X-size and cell phone number is wrong, all lead to failure. The program has to design a failed process: rechecking the user for resubmission or providing manual clearance access, or allowing temporary access to the Internet first. If failure is rejected completely, experience is bad; if failure is bypassed, the real name is made up of nothing.
Finally, the three elements are:"The moment I opened the account,"The identity is not a substitute for the subsequent log retention and audit."Who is this man?", the authentication log was recorded on the Internet"When did this guy get on the Internet?"The audit platform links the two to a real traceability.
In practice, there is also a common scenario to distinguish from three elements: the user ' s C.O.P.S. system. Many systems run first with S.O.C., and users have opened their accounts with cell phone numbers, accessed them, and then came up with regulatory or management requirements to add three elements to the actual name of the user.
Finally, it was clarified how the three elements related to public security audits.Three elements match."Identification of registration"The public security audit is..."Logs for the Internet link"The two are different links, different links.. Three elements are matched, which does not automatically meet audit requirements; the interface of the audit platform is not reliable, nor does it represent an opening identity. A complete physical access system with all three parts of registration verification, certification logs, and audit reports is completed, one half set missing. When you communicate with the manufacturer, separate these paragraphs and clear them, rather than general."Can you name it?"It's much more effective.
A cost-based reminder: Three factor verifications are channel costs, which are called in order to be a continuous operating expense, as is the SMS certification code. The programme phase links the amount of validation and budget to a single account: average daily opening, size of inventory replenishment, individual verification costs, and not insignificant figures for one year. Some projects, for cost savings, do only three elements for fee opening, with free user general text messaging, a pragmatic hierarchy, provided that regulatory requirements allow and that the actual name strength of free user meets the management bottom line.