Authentication-authorization system for mobile communication terminal and method therefor

A multi-terminal authentication-authorization system, applied in a Mobile Internet architecture, the system at least comprising a first terminal authentication-authorization system and a second terminal authentication-authorization system, each of the terminal authentication-authorization systems further including a terminal, located at a first end, having a first authentication program which can execute authentication-authorization, a plurality of application service programs which can provide application services, and a terminal identification data;

• a card, optionally installed in the terminal, having a card identification data and a preset code data;
• a data management terminal, located at a second end, executing a second authentication program which can provide authentication-authorization and preset code data the same as the one in the card;
• and an encoding terminal, located at a third end, executing a third authentication program which can provide authentication-authorization, responsible for dynamically generating a code data for authentication-authorization to the card and the data management terminal continuously and randomly according to the request of the data management terminal;
• wherein the first terminal authentication-authorization system and the second terminal authentication-authorization system carry out the respective authentication-authorization independently;
• after the first terminal authentication-authorization system and the second terminal authentication-authorization system activate the mobile communication terminal and install the card to make the mobile communication terminal in a first connect state and complete the initialization, when respective application service program requests the authentication-authorization, a data buffer time point is randomly appointed by the first authentication program and the second authentication program, and when reaching the data buffer time point, the first code data in the card and the second code data in the data management terminal are respectively buffered as a first buffer code data and a second buffer code data in sync, and the first authentication program transfers the first code data together with the card identification data and the terminal identification data to the second authentication program for comparison, to determine the authentication-authorization result;
• if matching, the first authentication program allows the respective requesting application service program to proceed, which is characterized in that the first terminal authentication-authorization system and the second terminal authentication-authorization system are joined to execute multiple authentication-authorizations, when executing multiple authentication-authorizations:
• after the first terminal authentication-authorization system completes the first-stage authentication-authorization, the terminal thereof transfers the first code data in its card and the second code data in the data management terminal to the second terminal authentication-authorization system;
• the first code data and the second code data of the terminal of the second terminal authentication-authorization system and the data management terminal are joined with the first code data and the second code data of the first terminal authentication-authorization system as new first code data and second code data by the terminal of the second terminal authentication-authorization system and the data management terminal for carrying out the second-stage authentication-authorization;
• after passing, the first authentication program of the first terminal authentication-authorization system is authorized by the terminal of the second terminal authentication-authorization system to allow the requesting application service program to proceed, achieving multi-terminal authentication-authorization.

An authentication-authorization method for a mobile communication terminal, applied in an authentication-authorization system for a mobile communication terminal of a Mobile Internet architecture, the authentication-authorization system for a mobile communication terminal including a mobile communication terminal, located at a first end and having a first authentication program for executing the authentication-authorization, a plurality of application service programs for providing application services, and a mobile terminal identification data;

• a card, optionally installed in the mobile communication terminal and having a card identification data and a preset code data;
• a data management terminal, located at a second end, executing a second authentication program which can provide authentication-authorization and preset code data the same as the one in the card;
• and an encoding terminal, located at a third end and executing a third authentication program which can provide authentication-authorization and is responsible for dynamically generating a code data for the authentication-authorization to the card and the data management terminal continuously and randomly according to the request of the data management terminal, the authentication-authorization method for a mobile communication terminal comprises:
• activating the mobile communication terminal and installing the card to make the mobile communication terminal in a first connect state and completing initialization;
• randomly appointing a data buffer time point by the first authentication program and the second authentication program when the application service program requests executing the authentication-authorization form the first authentication program, and buffering the first code data in the card and a second code data of the data management terminal respectively as a first buffer code data and a second buffer code data in sync when reaching the data buffer time point;
• transferring the first buffer code data together with the card identification data and the mobile terminal identification data to the second authentication program by the first authentication program after completing buffering, and carrying out a comparison with the second buffer code data to determine the authentication-authorization result;
• and
• authorizing the first authentication program to allow the requesting application service program to proceed by the second authentication program if matching.

An multi-terminal authentication-authorization method, applied in a multi-terminal authentication-authorization system of a Mobile Internet architecture, wherein the multi-terminal authentication-authorization system at least comprises a first terminal authentication-authorization system and a second terminal authentication-authorization system;

• each of the terminal authentication-authorization systems further comprises a terminal, located at a first end and having a first authentication program for executing the authentication-authorization, a plurality of application service programs for providing application services, and a terminal identification data;
• a card, optionally installed in the terminal and having a card identification data and a preset code data;
• a data management terminal, located at a second end and executing a second authentication program which can provide the authentication-authorization and the preset code data same as the one in the card;
• and an encoding terminal, located at a third end, executing a third authentication program which can provide the authentication-authorization and responsible for dynamically generating a code data for the authentication-authorization to the card and the data management terminal continuously and randomly according to the request of the data management terminal;
• wherein the first terminal authentication-authorization system and the second terminal authentication-authorization system carry out the respective authentication-authorization independently;
• after the first terminal authentication-authorization system and the second terminal authentication-authorization system activate the mobile communication terminal and install the card making the mobile communication terminal in a first connect state and complete initialization, when the respective application service program requests the authentication-authorization, a data buffer time point is randomly appointed by the first authentication program and the second authentication program, and when reaching the data buffer time point, buffering the first code data in the card and the second code data of the data management terminal respectively in sync;
• the first authentication program transfers the first code data together with the card identification data and the terminal identification data to the second authentication program for comparison to determine the authentication-authorization result, if matching, the first authentication program is authorized to allow the respective requesting application service program to proceed, which is characterized in that the first terminal authentication-authorization system and the second terminal authentication-authorization system execute multiple authentication-authorizations, when executing multiple authentication-authorizations, it comprises the following steps:
• completing the first-stage authentication-authorization by the first terminal authentication-authorization system;
• after passing, transferring the first code data in its card and the second code data in the data management terminal to the second terminal authentication-authorization system through the terminal, joining the first code data and the second code data thereof with the first code data and the second code data of the first terminal authentication-authorization system as the new first code data and the new second code data by the terminal of the second terminal authentication-authorization system and the data management terminal to carry out second-stage authentication-authorization;
• and
• only after passing, the terminal of the second terminal authentication-authorization system authorizing the first authentication program of the first terminal authentication-authorization system, to allow the requesting application service program to proceed, and achieving multi-terminal authentication-authorization.