KR101083207B1 - System and Method for Managing Public Certificate of Attestation with Activation/Non-Activation Condition and Recording Medium - Google Patents

Abstract

The present invention relates to a method and a system for managing an authorized certificate having an activation / deactivation condition and a recording medium therefor, wherein the system for operating / managing a valid period for an authorized certificate is provided when a customer requests for issuing a certificate (or is issued in advance). When requesting to set activation / deactivation conditions for a public certificate), and when activation / deactivation information is received, a storage medium that connects and stores the public certificate information (or pre-issued public certificate information) issued to the customer and the activation / deactivation information. And, when the customer requests to use the financial transaction service through an authorized certificate, confirms whether the activation / deactivation information for the authorized certificate is set in association with the storage medium, and corresponds to the confirmed activation / deactivation information. Means for checking whether the certificate is in an active state, and as a result of the verification, the public certification If the book is confirmed to be in an activated state, it includes means for processing to provide a financial transaction service through the authorized certificate.

certification

Description

System and Method for Managing Public Certificate of Attestation with Activation / Non-Activation Condition and Recording Medium}

1 is a diagram illustrating a face-to-face biometric information registration system for identification using biometric information according to an embodiment of the present invention.

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identification using biometric information according to another exemplary embodiment of the present invention.

6A and 6B are views illustrating a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to one embodiment of the present invention.

7 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an activation / deactivation function according to an embodiment of the present invention.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an activation / deactivation function according to an embodiment of the present invention.

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate having an activation / deactivation function according to an embodiment of the present invention.

10A and 10B are diagrams illustrating a process of issuing a public certificate issuance with an activation / deactivation function according to an embodiment of the present invention.

11A and 11B illustrate a process of issuing and processing a public certificate having a validity period set according to another exemplary embodiment of the present invention.

12 is a diagram illustrating a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

FIG. 13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to one embodiment of the present invention.

14A and 14B illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

<Description of main parts of drawing>

700: certificate authority server 705: certificate server

710: financial institution server 1200: interface unit

1205: interface providing unit 1210: information receiving unit

1215: information transmission unit 1220: validation unit

1225: financial transaction processing unit 1230: financial system

1235 financial transaction terminal

The present invention is to prevent the risk of hacking due to the use of the certificate only in a specific condition that the customer frequently uses the certificate by issuing by setting the activation / deactivation conditions when issuing the certificate.

With the development of information and communication technology, financial transactions, which were only performed on the offline, have been made through a network called the Internet, thereby providing convenience to many customers.

However, Internet banking provided through a network called the Internet is always exposed to the problem of hacking due to the fact that the network is accessible and accessible to anyone, and various problems are caused by this.

In order to solve this situation, by providing an accredited certificate as an authentication means and providing an internet banking service through an accredited certificate, the customer who uses the accredited certificate is always available, but if the customer uses only during a specific time period, hacking outside of a specific time period The problem of being exposed as an object of.

An object of the present invention for solving the above problems, by setting the activation / deactivation conditions by issuing an authorized certificate, a method and system for blocking the problem that is exposed to the target of hacking in the state not used by the customer and records for this It is to provide a medium.

In the system for operating / managing the validity period for the public certificate according to the present invention, when the customer requests for issuance of the public certificate (or upon request for setting the activation / deactivation condition for the pre-issued public certificate), the activation / deactivation information is received. A storage medium that connects and stores the authentication certificate information (or pre-issued certificate information) issued to the customer and the activation / deactivation information, and when the customer requests to use the financial transaction service through the certificate, Means for confirming whether activation / deactivation information is set for the storage medium in association with the storage medium, and in response to the confirmed activation / deactivation information, whether or not the public certificate is in an activated state; If the status is confirmed, the financial transaction service through the authorized certificate can be provided Characterized in that comprises a stage.

In accordance with an embodiment of the present invention, a certification management system in which an activation / deactivation condition is set includes means for processing a financial transaction service by acquiring a use certificate for the certification certificate which is in the inactive state when the certification certificate is confirmed to be in an inactive state. Characterized in that made.

On the other hand, the method of operating / managing the validity period for the public certificate according to the present invention, when the customer request for issuance of the public certificate (or when the activation / deactivation condition setting request for the pre-issued public certificate), the activation / deactivation information is When received, storing the authentication certificate information (or pre-issued certificate information) issued to the customer and the activation / deactivation information to the storage medium, and when the customer requests to use the financial transaction service through the certificate, Checking whether to set activation / deactivation information for the public certificate in association with the storage medium, and confirming whether the public certificate is in an active state in response to the confirmed activation / deactivation information; If the public certificate is confirmed to be active, financial transaction services through the public certificate may be provided. Including the step of re-characterized in that formed.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the certificate operation method is set the above activation / deactivation conditions.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a face-to-face biometric information registration system for identity verification using biometric information according to an embodiment of the present invention.

In more detail, in Figure 1, a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information. Acquires predetermined image contents corresponding to the biometric information registration application, and obtains from the biometric information registration application information and the biometric information registration application corresponding to the biometric information registration application to the biometric information registration system through a predetermined biometric information registration interface. When the provided image content is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration request information are linked. System configuration for processing and storing in a predetermined storage medium (145) As for, but for the embodiment method that specifically the electronic document repository is provided on the external system associated with the biometric information registering system via a predetermined communication means.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 1 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 1 to infer an implementation method provided in a DBMS in which the electronic document repository is located in the biometric information registration system. As will be appreciated, the present invention includes all implementation methods inferred above, and is not limited to the implementation method illustrated in FIG.

In addition, according to the implementation method shown in FIG. 1, the biometric information registration electronic document corresponding to the biometric information registration application is described as being generated on the server side on the biometric information registration system, but the present invention is limited thereto. The biometric information registration electronic document may be generated at a terminal that has obtained image content corresponding to the biometric information registration application through a predetermined image acquisition device (for example, generating an electronic document provided at the server side). Function is provided on the terminal side to generate the biometric information registration electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 1, the biometric information included in the biometric information registration application includes only selection information for selecting the type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application and the biometric information registration application corresponding to the biometric information registration application created by the customer through a predetermined biometric information registration interface on the biometric information registration system shown in FIG. Receiving a registration application and storing biometric information newly stored biometric information newly stored and stored in the predetermined information storage medium 145 at least one means and / or components corresponding to the functional configuration "information registration server 100 for convenience "

Referring to FIG. 1 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes an information registration terminal including an employee terminal provided at at least one branch of a certification authority (or a branch). Characterized in that it comprises a 180, the information registration terminal 180 is connected to the communication channel and the information registration server 100 provided on the biometric information registration system through a predetermined communication network.

According to an exemplary embodiment of the present invention, the customer visits the certification authority branch (business office) for identification using the biometric information, and visits a window staff (or counter staff) through a window provided at the certification authority office (business office). Through a biometric information registration application (for example, a document provided with a form for filling in at least one information item for identifying the identity using the biometric information) Preferably, the customer seals the seal of the customer's seal for the legal basis for the biometric information registration application.

Then, when the customer submits the created biometric information registration application to the teller staff, the teller staff scans the biometric information registration application through a predetermined image acquisition device to obtain a predetermined image content, and a predetermined employee terminal Input (or select) biometric information registration application information including at least one of image content obtained in response to the biometric information registration application, customer information written in the biometric information registration application, and biometric information, and correspondingly The employee terminal preferably transmits the image content and the biometric information registration application information to the information registration server 100 provided on the biometric information registration system through the communication network.

Here, the employee terminal preferably comprises a terminal used by the employee of the branch (or branch) of the certification authority, the information registration server 100 connected to the employee terminal is provided on the predetermined certification authority system It is preferable to include a server.

In the biometric information registration system as described above, an image acquisition device for obtaining image content corresponding to the biometric information registration application prepared by the customer, the employee terminal used by the employee and the employee terminal and the information registration server 100 The communication network connecting to perform a function of the biometric information registration interface for registering the biometric information registration application information for the customer to identify the identity using the biometric information.

The storage medium 145 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and the biometric information included in the biometric information registration information provided from the information registration terminal 180. The storage medium 145 is characterized in that the storage.

The customer information includes personal information (eg, name, resident registration number, address, phone number, mobile phone number, e-mail address, etc.) of the customer who filled out the biometric information registration application, and member information of the customer (eg, the customer And at least one member ID information, etc. included in the customer D / B provided on the certification authority system associated with the biometric information registration system in response to the customer. desirable.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 100 provided on the biometric information registration system according to the present invention is a generic term for the components of the biometric information registration system side connected to the information registration terminal 180 through a predetermined communication network. It may be implemented by including a server (or device), and / or implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), by which the present invention is not limited.

According to an embodiment of the present invention, the information registration server 100 is provided with an interface unit 105 (or interface means) for managing connection between the information registration terminal 180 and a predetermined communication channel through the communication network. Characterized in that made.

When the information registration terminal 180 is an employee terminal connected to a predetermined communication network according to an embodiment of the present invention, the interface unit 105 communicates with the employee terminal based on a protocol stack defined in the communication network. It is preferable to provide a communication interface for transmitting and receiving at least one or more information (or data) by connecting a channel and using a communication protocol defined in the biometric information registration program provided in the employee terminal.

Referring to FIG. 1, when the predetermined information registration terminal 180 connects a predetermined communication channel with the information registration server 100 through the interface unit 105, the information registration server 100 is connected to the living body. Acquiring image contents corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device provided in the information registration terminal 180 to confirm the identity using the information, and the biometric information corresponding to the biometric information registration application Generate (or extract) at least one user interface for inputting (or selecting) information registration request information to be transmitted to the information registration server 100, and generating (or extracting) in connection with the interface unit 105. In the interface providing unit 110 (or interface providing means) for providing a user interface to the information registration terminal 180, the information registration terminal 180 When the biometric information registration application information corresponding to the biometric information registration application is input (or selected) through a user interface, the biometric information transmitted from the information registration terminal 180 in association with the interface unit 105 is transmitted. The information receiving unit 115 (or information receiving means) for receiving registration application information and the biometric information registration application prepared by the customer through the predetermined image acquisition device based on the user interface in the information registration terminal 180 Acquire and transmit the image content, characterized in that it comprises an image receiving unit 120 (or image receiving means) for receiving the image content corresponding to the biometric information registration application in connection with the interface unit 105. .

The interface provider 110 connects a predetermined communication channel with the information registration server 100 through the interface registration unit 105, and then the information registration server 100 to the information registration server 100. When requesting a user interface for identification using biometric information, an image content corresponding to the biometric information registration application prepared by the customer is obtained through a predetermined image acquisition device provided in the information registration terminal 180, and the biometric information is obtained. Generate at least one user interface for inputting (or selecting) biometric information registration application information corresponding to the information registration application to be transmitted to the information registration server 100 through the communication network, and / or a predetermined database (not shown) Omit the extracted user interface in conjunction with the interface unit 105. It is characterized in that provided through the information registration terminal 180.

According to another embodiment of the present invention, the information registration terminal 180 acquires the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device, and the biometric information corresponding to the biometric information registration application. If a predetermined information registration program having at least one user interface for inputting (or selecting) registration application information and transmitting the information to the information registration server 100 through the communication network is provided, obtaining a predetermined image as described above. Obtain an image content corresponding to the biometric information registration application prepared by the customer through the device, and input (or select) biometric information registration application information corresponding to the biometric information registration application to be transmitted to the information registration server 100. Generate (or extract) a user interface to the information registration terminal 180. Interface providing unit 110 may be omitted mubang to, and which the present invention is not limited.

Thereafter, the information registration terminal 180 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 100 through the communication network. In response thereto, the information receiving unit 115 is connected to the interface unit 105 to transmit the biometric information transmitted from the information registration terminal 180. Characterized in that the registration application information is received.

In addition, the information registration terminal 180 obtains the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device based on the user interface, and the obtained image content through the communication network The image receiving unit 120 receives the image content corresponding to the biometric information registration application in association with the interface unit 105.

According to another exemplary embodiment of the present invention, the information registration terminal 180 acquires image content corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device and is provided to the information registration terminal 180. When previously stored in a predetermined storage device associated with (or associated with), the information registration terminal 180 is stored in the biometric information registration application created by the customer among at least one or more image contents previously stored in the storage device through the user interface. A corresponding image content is selected and transmitted to the information registration server 100 through the communication network. In response, the image receiving unit 120 is connected to the interface unit 105 to correspond to the biometric information registration application. It is desirable to receive content.

According to another exemplary embodiment of the present invention, the biometric information registration application information corresponding to the biometric information registration application and the image content corresponding to the biometric information registration application created by the customer through the user interface in the information registration terminal 180. When transmitting together, the information receiving unit 115 may receive the image content corresponding to the biometric information registration application and the biometric information registration application information together with the interface unit 105 (for example, the image receiving unit 120 is integrated into the information receiving unit 115, and the present invention is not limited thereto.

Referring to FIG. 1, when the biometric information registration request information transmitted from the information registration terminal 180 is received through the information receiving unit 115, the information registration server 100 receives the biometric information registration request information. It is characterized in that it comprises a validity verification unit 125 (or validity confirming means) for confirming whether the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 1, the information registration server 100 receives the image content transmitted from the information registration terminal 180 through the image receiving unit 120, and receives the biometric information through the validity checking unit 125. When the validity of the information registration application information is authenticated, the electronic document generating unit 130 (or electronic document generating means) for generating a predetermined biometric information registration electronic document including the received image content, and the generated biometric information The electronic document transmission unit 135 (or an electronic document transmission means) for transmitting the electronic document to the electronic document storage associated with the biometric information registration system is characterized in that it is made.

The electronic document generating unit 130 may generate a biometric information registration electronic document including the image content received from the information registration terminal 180 through the image receiving unit 120.

According to the exemplary embodiment of the present invention, the electronic document generation unit 130 stores the biometric information intact as an image file including the image content received from the information registration terminal 180 through the image receiving unit 120. It is preferable to process the biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. It is preferable to generate a biometric information registration electronic document for identification using the biometric information to an image file corresponding to the image content including at least one or more of the customer information and biometric information in a watermarking manner.

According to another embodiment of the present invention, the electronic document generating unit 130 is a predetermined document file (eg, including the image content received from the information registration terminal 180 through the image receiving unit 120) Generating a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one of HWP / DOC, or a web document file including MHT) It is preferable to generate a biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generating an image content including at least one or more of the stored customer information and biometric information by a watermarking method, and including a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content, Or EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, etc., or a web document file including the MHT)) to register the biometric information for identification using the biometric information It is desirable to create an electronic document.

According to another exemplary embodiment of the present invention, the electronic document generating unit 130 receives the image contents and the information receiving unit 115 received from the information registration terminal 180 through the image receiving unit 120. A predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including the received biometric information registration request information, or By generating a web document file including the MHT), it is preferable to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generate image content including at least one or more of the stored customer information and biometric information in a watermarking manner, and include a predetermined document file (eg, PDF) including the generated image content and the biometric information registration information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is preferable to generate a biometric information registration electronic document for identification.

Those skilled in the art to which the present invention pertains, the electronic document generating unit 130, the technical features of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the image file and / or the file format for the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmission unit 135 transmits and stores the biometric information registration electronic document generated by the electronic document generation unit 130 to a predetermined electronic document repository associated with the biometric information registration system. .

As shown in FIG. 1, the electronic document repository is connected to the information registration server 100 on the biometric information registration system through a predetermined communication means and the electronic document server 150 and the electronic document D / B 170 When provided externally, the electronic document transmission unit 135 is the electronic document server 150 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 130 It characterized in that the transmission to.

Here, when the electronic document server 150 and the electronic document D / B 170 is provided outside the biometric information registration system, the electronic document server 150 and the electronic document D / B 170 is It is advisable to manage them in accredited bodies.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 135 is generated by the electronic document generation unit 130. It is possible to store the biometric information registration electronic document in the electronic document D / B (170) corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 135 may include electronic document-related information (eg, biometric information corresponding to the image content) for generating predetermined electronic document management information in the electronic document server 150. The electronic document further including the customer information that created the registration application, and / or the certification authority information for transmitting the biometric information registration electronic document, and / or the electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to the storage, by which the present invention is not limited.

Referring to FIG. 1, the information registration server 100 has a validity for identifying an identity using the biometric information through the validity confirming unit 125 through the biometric information registration application information received through the information receiving unit 115. If the authentication, the information storage unit 140 (or information storage means) is stored in a predetermined storage medium 145 by linking the customer information and the biometric information included in the biometric information registration application information of the validity is verified; Characterized in that made.

When the validity confirmation unit 125 confirms the validity of the biometric information registration application information, the information storage unit 140 performs the cooperative processing of the customer information and biometric information included in the biometric information registration application information. The storage medium 145, characterized in that the storage medium 145 is provided in the information registration server 100, or when provided on the network associated with the information registration server 100, the information The storage 140 preferably processes the customer information and the biometric information included in the received biometric information registration request information in the storage medium 145, and stores the storage medium 145 on the certification authority system. When provided in the DBMS provided in the, the information storage unit 140 is to store the customer information, biometric information included in the received biometric information registration application information in the DBMS provided on the certification authority system bar Preferable.

Referring to FIG. 1, an electronic document that receives a predetermined biometric information registration electronic document from the information registration server 100 provided on the biometric information registration system and stores and manages the predetermined biometric information D / B 170 in a predetermined electronic document D / B 170. The server 150 includes an electronic document receiving unit 155 (or electronic document receiving means) for receiving a predetermined biometric information registration electronic document from the information registration server 100 through predetermined communication means, and the received biometric information. An information generating unit 160 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 170; and the electronic document management information and the And an electronic document storage unit 165 (or electronic document storage means) for linking and processing the biometric information registration electronic document to a predetermined electronic document D / B 170.

The electronic document receiving unit 155 may receive the biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 100 through the communication means.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the image content received by the information registration server 100 from the information registration terminal 180. It is preferable that the image file including the same as it is made.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the biometric information registration request to the image content received by the information registration server 100 from the information registration terminal 180. It is preferable to include an image file corresponding to the image content including at least one or more information of the customer information, biometric information included in the information in a watermarking (Watermarking) method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is an image received by the information registration server 100 from the information registration terminal 180. A predetermined document file including contents (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange)) containing image content including at least one of customer information and biometric information included in a watermarking method. File, or a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is received by the information registration server 100 from the information registration terminal 180. A word processor file including at least one of a predetermined document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, an HWP / DOC, etc.) including the image content and the biometric information registration request information. , Or a web document file including MHT).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of the customer information and biometric information included in the watermarking method and a predetermined document file (eg, a Portable Document Format (PDF) file) including the biometric information registration information; Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

The information generating unit 160 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 155, and through the electronic document receiving unit 155 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document is received (or a date and time at which the biometric information registration electronic document is stored).

According to the exemplary embodiment of the present invention, the information generating unit 160 registers the biometric information with reference to the information registration server 100 transmitting the biometric information registration electronic document received through the electronic document receiving unit 155. It is preferable to confirm the certification authority that sent the electronic document, and generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100 through the electronic document receiving unit 155, the information generating unit 160 receives the received information. Electronic document-related information (e.g., customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or electronic document file format information, and / or It is preferable to generate the electronic document management information further comprising the biometric information registration application information).

The electronic document storage unit 165 associates the biometric information registration electronic document received through the electronic document receiving unit 155 with the electronic document management information generated by the information generating unit 160 to process a predetermined electronic document D. / B (170) characterized in that the storage.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 is the information registration server 100 by the information registration terminal 180. It is preferable that the image file including the image content received from the) as it is included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the image received by the information registration server 100 from the information registration terminal 180. Preferably, the content includes an image file corresponding to an image content including at least one of customer information and biometric information included in the biometric information registration request information by a watermarking method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the information registration server 100. A predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including image content received from 180, or Web document file including MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file) including image content including at least one or more of customer information and biometric information included in the biometric information registration request information by a watermarking method, or An EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT).

According to another embodiment of the present invention, the biometric information registration electronic document that the electronic document storage unit 165 stores in the electronic document D / B (170) is the information registration server 100 is the information registration terminal At least one predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, an HWP / DOC, etc.) including the image content received from the 180 and the biometric information registration request information. Or a web document file including the MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of customer information and biometric information included in the biometric information registration request information by a watermarking method and a predetermined document file including the biometric information registration request information (eg, PDF ( A Portable Document Format (EDI) file, an EDI (Electronic Data Interchange) file, or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biological information registration electronic document is stored in the biological information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to an exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biometric information registration electronic document is stored in the biometric information registration. It is preferable that the authentication information is sent to the information registration server 100 that sent the electronic document further comprises the certification authority information that sent the electronic document registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100, the electronic document storage unit 165 processes the electronic document registration electronic document in association with the biometric information registration electronic document. The electronic document management information stored in the electronic document D / B 170 may include the received electronic document related information (for example, customer information in which a biometric information registration application corresponding to the image content is prepared, and / or the biometric information registration electronics). Certificate authority information for transmitting the document, and / or the electronic document file format information, and / or the biometric information registration application information).

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

In more detail, Figures 2a and 2b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information for identification using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method relates to an embodiment of the present invention. Specifically, after obtaining a predetermined image content corresponding to the biometric information registration application from the employee terminal through a predetermined image acquisition device and transmitting it to the information registration server 100, the biometric information An implementation method of inputting (or selecting) biometric information registration application information corresponding to a registration application form and transmitting the same to the information registration server 100 is illustrated.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 2a and 2b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIGS. 2A and 2B.

For example, in the implementation method shown in FIGS. 2A and 2B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

Hereinafter, in FIG. 2A and FIG. 2B, the employee terminal shown in FIG. 2 is referred to as "terminal" for convenience, and the information registration server 100 shown in FIG. The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 2A and 2B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (200). The server generates (or extracts) a user interface for acquiring a predetermined image content corresponding to the biometric information registration application written by the customer through the predetermined image obtaining apparatus and transmitting it to the server (205), and The generated (or extracted) user interface is transmitted to the terminal through a communication network and output (210).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (215).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (220), the terminal transmits the obtained image content to the server through the communication network (225).

Thereafter, the server inputs (or selects) biometric information registration request information including at least one of customer information and biometric information corresponding to the biometric information registration application matching the image content and transmits the user interface to the server. It generates (or extracts) 230 and transmits the generated (or extracted) user interface to the terminal through the communication network and outputs it (235).

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (240).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (245), the terminal inputs (or selects) the terminal to the server through the communication network. The biometric information registration application information is transmitted (250).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (255).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration application information, it is preferable to check whether or not the predetermined quality by checking the image quality of the biometric information included in the received biometric information registration application information.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (260), the server generates predetermined information registration error information and transmits it to the terminal (265), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration request information is authenticated (260), the server generates a predetermined biometric information registration electronic document including the image content (270).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is desirable to process information registration electronic texts with each other.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generate image content including at least one of the information in a watermarking (2atermarking) method, and a predetermined document file (for example, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. A predetermined document file (eg, a Portable Document Format (PDF) file) generating an image content including at least one or more of the information by a watermarking method, and including the generated image content and the biometric information registration information; , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (275).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (280), the server processes the customer information and the biometric information included in the biometric information registration request information in a predetermined storage medium 145 (285), predetermined information registration history information (e.g., the history of storing the biological information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (290).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, Figures 3a and 3b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method is an information method. Specifically, the staff terminal inputs (or selects) the biometric information registration application information corresponding to the biometric information registration application and transmits it to the information registration server 100, and then a predetermined image acquisition device. It illustrates a method of obtaining a predetermined image content corresponding to the biometric information registration application through the information registration server 100 to transmit.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 3a and 3b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 3A and 3B.

For example, in the implementation method shown in FIGS. 3A and 3B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 3a and 3b, the employee terminal shown in the drawings is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing is referred to as "server" for convenience, and in the employee terminal The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 3A and 3B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (300). Generates (or extracts) a user interface for inputting (or selecting) biometric information registration application information including at least one of customer information and biometric information corresponding to the biometric information registration application created by the customer and transmitting the biometric information registration application information to the server; 305, by transmitting the generated (or extracted) user interface to the terminal through the communication network Output 310.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (315).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (320), the terminal inputs (or selects) the server to the server through the communication network. The biometric information registration application information is transmitted (325).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (330).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (335), the server generates predetermined information registration error information and transmits it to the terminal (340), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration application information is authenticated (335), the server acquires the predetermined image content corresponding to the biometric information registration application created by the customer through a predetermined image acquisition device in the terminal to the server A user interface for transmitting to the terminal is generated (or extracted) (345), and the generated (or extracted) user interface is transmitted to the terminal through the communication network (350).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (355).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (360), the terminal transmits the obtained image content to the server through the communication network (365).

The server receiving the biometric information registration request information and the image content from the terminal generates a predetermined biometric information registration electronic document including the image content (370).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include customer information and biometrics included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one of the information in a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate a biometric for identification using the biometric information. It is desirable to generate an information registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (375).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), whereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (380), the server processes the customer information and biometric information included in the biometric information registration request information in a predetermined storage medium 145 (385), predetermined information registration history information (e.g., the history of storing the biometric information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (390).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, FIGS. 4A and 4B show that a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information. Acquire a predetermined image content corresponding to the biometric information registration application through the image acquisition device, and the biometric information registration application information corresponding to the biometric information registration application to the biometric information registration system through a predetermined biometric information registration interface; When the image content obtained from the biometric information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document storage, and the customer included in the biometric information registration application information. Information and biometric information in a cooperative process and stored in a predetermined storage medium 145. Is an implementation method, specifically, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and obtains biometric information registration application information corresponding to the biometric information registration application. It shows an implementation method of inputting (or selecting) and transmitting to the information registration server 100.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 4a and 4b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 4A and 4B.

For example, in the implementation method shown in FIGS. 4A and 4B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 4a and 4b, the employee terminal shown in the drawing s is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing s is referred to as "server" for convenience, and in the employee terminal The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 4A and 4B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal illustrated in the drawings s. The server requests a user interface for identification using the biometric information corresponding to the biometric information registration application (400) while accessing the server through a predetermined communication network and connecting a predetermined communication channel (400). Inputs (or selects) biometric information registration application information corresponding to the biometric information registration application written by the customer in the terminal, and acquires predetermined image content corresponding to the biometric information registration application through a predetermined image obtaining device; Generate (or extract) a user interface for transmission to the server (405), and To the generated outputs to transmit the user interface (or extract) to the mobile station 410. The

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (415).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (420), the terminal uses a predetermined image acquisition apparatus based on the user interface. An image content corresponding to the biometric information registration application is acquired (425).

If the image content corresponding to the biometric information registration application is obtained through the image acquisition device (430), the terminal transmits the biometric information registration application information and the image content to the server through the communication network (435).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (440).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (445), the server generates predetermined information registration error information and transmits it to the terminal (450), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration request information is authenticated (445), the server generates a predetermined biometric information registration electronic document including the image content (455).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one of the information in a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (460).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (465), the server processes the customer information and biometric information included in the biometric information registration request information in a predetermined storage medium 145 470, predetermined information registration history information (e.g., the history of storing the biometric information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145). ) Is generated (or extracted) and transmitted to the terminal (475).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identity verification using biometric information according to another exemplary embodiment of the present invention.

In more detail, FIG. 5 illustrates biometric information registration application information including at least one of customer information and biometric information for a predetermined customer to identify an identity using the biometric information to a biometric information registration system through a predetermined biometric information registration interface. If so, the biometric information registration system generates a predetermined biometric information registration electronic document including the provided biometric information registration application information and stores it in a predetermined electronic document storage, and the customer information included in the biometric information registration application information. The present invention relates to a system configuration for cooperatively processing biometric information and storing it in a predetermined storage medium 540. Specifically, the electronic document repository is provided on an external system associated with the biometric information registration system through a predetermined communication means. It is about the implementation method.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer an implementation method provided in a DBMS in which the electronic document repository is located in the biometric information registration system. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In addition, according to the implementation method shown in FIG. 5, the biometric information registration electronic document is illustrated as being generated on the server side on the biometric information registration system, but the present invention is not limited thereto. The information registration electronic document may be generated on the terminal side that inputs (or selects) the biometric information registration application information and transmits the biometric information registration function (for example, the electronic document generation function provided on the server side is provided on the terminal side to register the biometric information). Generate an electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 5, the biometric information included in the biometric information registration application includes only selection information for selecting a type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application information is received from the customer through a predetermined biometric information registration interface on the biometric information registration system shown in FIG. 5 to generate a predetermined biometric information registration electronic document and store it in a predetermined electronic document repository. In addition, at least one means for storing the biometric information registration application information in a predetermined storage medium 540 and / or a component corresponding to a functional configuration is referred to as "information registration server 500" for convenience.

Referring to FIG. 5 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes at least a client terminal including at least one wired terminal and / or a wireless terminal used by a customer. And at least one information registration terminal 570, wherein the information registration terminal 570 communicates with the information registration server 500 provided on the biometric information registration system through a predetermined network means. The channel is connected.

According to an embodiment of the present invention, the customer accesses the information registration server 500 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network, When the biometric information registration application information for identifying the identity using the biometric information is input (or selected) through at least one user interface provided by the information registration server 500, the client terminal transmits the biometric information registration application information through a predetermined network means. It is preferable to transmit to the information registration server 500 provided on the biometric information registration system.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or at least one home appliance terminal (for example, a refrigerator, a set-top-box, etc.) connected to the TCP / IP-based communication network, or a kiosk (KIOSK) connected to the TCP / IP-based communication network It is preferable to make it.

In addition, a wireless terminal connected to the wireless communication network is any terminal device connected to a mobile communication network based on Code Division Multiple Access (CDMA) (and / or High-Speed Downlink Packet Access (HSDPA)), and / or IEEE 802.16x based. A generic term for all terminal devices connected to the portable Internet and / or all terminal devices connected to an IEEE 802.11x based wireless LAN, and is connected to the CDMA based (and / or HSDPA based) mobile communication network (Personal Communication System; PCS). ) And / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or Personal Digital Assistants (PDAs) And / or a mobile Internet terminal connected to a smart phone and / or telematics, or the IEEE 802.16x based mobile internet, or the IEEE 802.11x based It is preferable to include at least one or more WLAN terminal connected to the WLAN.

In addition, the network means for connecting the client terminal and the information registration server 500 is a CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based based on the type of wireless communication network connected to the client terminal It is preferable that any one of the portable Internet and / or IEEE 802.11x-based wireless LAN, and / or includes all kinds of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one or more user interfaces provided by the information registration server 500, and inputs and / or selects at least one or more information through the user interface to the information registration server 500. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the information registration server 500, etc.) is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal corresponding to at least one or more wired terminals and / or wireless terminals, and thus the detailed description thereof is omitted for convenience. .

In the biometric information registration system as described above, a client terminal including at least one wired terminal and / or a wireless terminal used by the customer, and at least one wired communication network connecting the client terminal and the information registration server 500. And / or the wireless communication network performs a function of a biometric information registration interface for registering the biometric information registration application information for the customer to confirm the identity using the biometric information.

According to another exemplary embodiment of the present invention, the information registration terminal 570 further includes a terminal (and / or server) (not shown) provided in at least one or more institutions affiliated with the certification authority, in addition to the client terminal. In this regard, the present invention is not limited thereto.

The storage medium 540 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and biometric information included in the biometric information registration information provided from the information registration terminal 570. The storage medium 540 is characterized in that the storage.

The customer information includes personal information of the customer (eg, customer's name, social security number, address, phone number, mobile phone number, e-mail address, etc.), and member information of the customer (eg, the customer is registered as a customer of the certification authority). It is preferable to include at least one or more), such as member ID information provided in the customer D / B provided on the certification authority system associated with the biometric information registration system corresponding to the customer.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 500 provided on the biometric information registration system according to the present invention is a generic term for components of the biometric information registration system side connected to the information registration terminal 570 through a predetermined network means. It may be implemented by including the above server (or device), and / or may be implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), whereby the present invention is not limited.

According to an embodiment of the present invention, the information registration server 500 includes an interface unit 505 (or interface means) for connecting and managing a predetermined communication channel with the information registration terminal 570 through the network means. Characterized in that made.

According to an exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 505 is At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, if the client terminal is equipped with a browser program corresponding to the Hyper-Text Transfer Protocol (HTTP) protocol, the interface unit 505 connects a communication channel with the client terminal based on the TCP / IP protocol, It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an information registration program) provided by the information registration server 500, the interface unit 505 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 505 uses a protocol stack defined in the wireless communication network. It is preferable to provide a communication interface for connecting at least one communication channel with the client terminal and transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 505 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (e.g., WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Alternatively, when the client terminal is provided with a communication program (eg, IC chip-based information registration program) provided by the information registration server 500, the interface unit 505 is based on the CDMA protocol. And a communication channel and provide a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

Referring to FIG. 5, when the predetermined information registration terminal 570 connects a predetermined communication channel with the information registration server 500 through the interface unit 505, the information registration server 500 may be configured as the living body. Generate (or extract) at least one user interface for inputting (or selecting) predetermined biometric information registration request information from the information registration terminal 570 to transmit the information to the information registration server 500 for identity verification using information. And an interface providing unit 510 (or an interface providing unit) for providing the generated (or extracted) user interface to the information registration terminal 570 in association with the interface unit 505, and the information registration terminal. In operation 570, when the biometric information registration request information is input (or selected) through the user interface, the biometric information registration application information is transmitted in connection with the interface unit 505. And an information receiving unit 515 (or information receiving means) for receiving the biometric information registration request information transmitted from 0).

The interface providing unit 510 connects a predetermined communication channel with the information registration server 500 through the interface registration unit 505, and then the information registration server 500 sends the information registration server 500 to the information registration server 500. When requesting a user interface for identity verification using biometric information, the information registration terminal 570 inputs (or selects) predetermined biometric information registration request information and transmits the biometric information to the information registration server 500 through the network means. Generate at least one user interface, and / or extract from a predetermined database (not shown), and link the generated (or extracted) user interface with the interface unit 505 via the network means. It is characterized in that provided to the registration terminal 570.

According to an embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal connected to a predetermined wired communication network, the interface providing unit 510 may include a browser program provided in the client terminal and And / or generate (or extract) a predetermined user interface that can be provided by a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

According to another embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 510 is a browser program provided in the client terminal. And / or generate (or extract) a predetermined user interface that can be provided by a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

At least one user for inputting (or selecting) predetermined biometric information registration request information to the information registration terminal 570 according to another embodiment of the present invention and transmitting the biometric information registration request information to the information registration server 500 through the network means. When a predetermined information registration program having an interface is provided, a user interface is generated (or extracted) for inputting (or selecting) predetermined biometric information registration application information to the information registration server 500 as described above. The interface providing unit 510 provided to the information registration terminal 570 may be omitted, and the present invention is not limited thereto.

Thereafter, the information registration terminal 570 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 500 through the network means. In response thereto, the information receiving unit 515 is connected to the interface unit 505 to transmit the biometric information transmitted from the information registration terminal 570. Characterized in that it receives the information registration application information.

According to the embodiment of the present invention, the information registration terminal 570 is the biometric information registration request information including at least one of the customer information, biometric information to the biometric information registration request information from the information registration server 500 At least one or more of a predetermined password and / or security card information for confirming the validity and / or OTP code generated through a predetermined one time password (OTP) generator, the information registration server through the network means ( 500).

According to an embodiment of the present invention, the information registration terminal 570 may include at least one encryption method (eg, a symmetric key based encryption method) and biometric information registration request information including at least one of the customer information and biometric information. Or a public key based encryption method, and / or an electronic envelope based encryption method, and / or a key exchange based encryption method), and / or attach a predetermined electronic signature to the biometric information registration information. It is preferable to transmit to the information registration server 500 through, for this purpose, the information registration terminal 570 is provided with at least one encryption key corresponding to the encryption scheme, and / or at least one encryption key When a predetermined official certificate is included, and / or when the official certificate is provided on a predetermined IC chip (or IC card). In this case, it is preferable that a card reader is provided for checking the official certificate provided in the IC chip (or IC card).

Those skilled in the art to which the present invention pertains include technical features of various encryption schemes for encrypting the biometric information registration application information, and technical features for attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Referring to FIG. 5, when the biometric information registration request information transmitted from the information registration terminal 570 is received through the information receiving unit 515, the information registration server 500 receives the biometric information registration request information. It is characterized in that it comprises a validating unit 520 (or validating means) for confirming whether or not to satisfy the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange based encryption method, the validity confirming unit 520 may include the at least one decryption method (eg, a symmetric key based decryption method) corresponding to the encryption method. / Or public key based decryption scheme, and / or electronic envelope based decryption scheme, and / or key exchange based decryption scheme, etc.), it is preferable to authenticate the validity of the received biometric information registration application information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration application information, the validity verification unit 520 checks the electronic signature attached to the biometric information registration application information, thereby receiving the received biometric information registration application information. It is desirable to authenticate the validity of the.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may compare and authenticate the password included in the biometric information registration request information with a password provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration request information. Do.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the validity confirming unit 520 Compares and authenticates the received security card information included in the biometric information registration application information and the security card information provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration application information. desirable.

Alternatively, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may include: By comparing and authenticating the received OTP code included in the biometric information registration application information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS, the received biometric information registration application information It is desirable to authenticate the validity of the.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 5, when the validity of the biometric information registration request information is authenticated through the validity checker 520, the information registration server 500 includes a predetermined biometric information including the received biometric information registration request information. An electronic document generating unit 525 (or an electronic document generating means) for generating an information registration electronic document, and an electronic document transmission unit for transmitting the generated biometric information registration electronic document to an electronic document repository associated with the biometric information registration system. 530 (or electronic document transmission means) is characterized in that it comprises.

The electronic document generating unit 525 generates a biometric information registration electronic document including the biometric information registration application information received from the information registration terminal 570 through the information receiving unit 515.

According to an exemplary embodiment of the present invention, the electronic document generator 525 may include document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiver 515. A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, or the like) including at least one document file including the document content, and an MHT. Web document files, etc.) is preferably processed as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. After including at least one of the customer information and the biometric information included in the biometric information registration application information in a watermarking (Watermarking) method, a document file containing the document content containing the watermarking (for example, PDF (Portable Document) Format information, an EDI file, a word processor file including at least one of HWP / DOC, or a web document file including MHT). It is desirable to process the registration electronic document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. It is preferable to process an image file including captured image content (eg, image content generated by capturing the document content on a memory) into a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) After the inclusion, the image file including the image content including the watermarking is preferably processed into a biometric information registration electronic document for identification using the biometric information.

According to another exemplary embodiment of the present invention, the electronic document generating unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., a Portable Document Format (PDF) file) including an image content (e.g., image content generated by capturing the document content on a memory) and generating the captured document content. Biometric information for electronic identification using the biometric information by generating an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT) It is preferable to process the document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and the document content. Watermarking at least one or more of the customer information and the biometric information included in the biometric information registration request information into the captured image content (for example, the image content generated by capturing the document content on a memory). Generating an image content including the image content, and at least a document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, or an HWP / DOC, etc.) containing the image content including the watermarking. By generating one or more word processor files or a web document file including MHT). It is treated with biological information registered electronic document to verify its being preferred.

According to another exemplary embodiment of the present invention, the electronic document generating unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., PDF) including content, image content (e.g., image content generated by capturing the document content on a memory), and the biometric information registration request information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is preferable to process the biometric information registration electronic document for identification.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) Generating an image content including an image content, and including a watermarking image content and a biometric information registration information (eg, a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, or Creating a word processor file including at least one HWP / DOC, or a web document file including MHT) It is preferable to process in the biometric information registered electronic document for the identity using biometric information.

Those skilled in the art to which the present invention pertains, the electronic document generating unit 525 is a technical feature of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the file format for the image file and / or the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmission unit 530 transmits and stores the biometric information registration electronic document generated by the electronic document generation unit 525 to a predetermined electronic document repository associated with the biometric information registration system. do.

As shown in FIG. 5, the electronic document repository is connected to the information registration server 500 on the biometric information registration system through a predetermined communication means and the electronic document D / B 565. When provided to the outside, the electronic document transmission unit 530 is the electronic document server 545 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 525 It characterized in that the transmission to.

Here, when the electronic document server 545 and the electronic document D / B 565 is provided outside the biometric information registration system, the electronic document server 545 and the electronic document D / B 565 is It is advisable to manage them in accredited bodies.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 530 is generated by the electronic document generation unit 525. It is possible to store the biometric information registration electronic document in the electronic document D / B 565 corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 530 inputs electronic document related information (eg, the biometric information registration request information) for generating predetermined electronic document management information in the electronic document server 545. (Optional) customer information transmitted, and / or certification authority information for transmitting the biometric information registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to an electronic document storage, by which the present invention is not limited.

Referring to FIG. 5, the information registration server 500 validates that the biometric information registration request information received through the information receiving unit 515 is used for identifying the identity using the biometric information through the validity checking unit 520. Upon authentication, the information storage unit 535 (or information storage means) for storing the data on the predetermined storage medium 540 by cooperatively processing the customer information and the biometric information included in the biometric information registration request information is validated. Characterized in that made.

When the validity of the biometric information registration request information is confirmed by the validity confirming unit 520, the information storage unit 535 stores the biometric information by linking and processing the customer information and biometric information included in the biometric information registration request information. And storing the information in the storage medium 540. When the storage medium 540 is provided in the information registration server 500 or on the network associated with the information registration server 500. The unit 535 preferably processes the customer information and the biometric information included in the received biometric information registration request information and stores them in the storage medium 540, wherein the storage medium 540 is located on the certification authority system. When provided in the provided DBMS, the information storage unit 535 provides the customer information, biometric information included in the received biometric information registration application information to the information system through the external system on the certification authority system Be stored in a DBMS provided on a certificate authority system is preferred.

Referring to FIG. 5, an electronic document which receives a predetermined biometric information registration electronic document from the information registration server 500 provided on the biometric information registration system and stores and manages the same in a predetermined electronic document D / B 565. The server 545 may include an electronic document receiving unit 550 (or an electronic document receiving unit) for receiving a predetermined biometric information registration electronic document from the information registration server 500 through a predetermined communication unit, and the received biometric information. An information generating unit 555 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 565, and the electronic document management information and the living body; And an electronic document storage unit 560 (or electronic document storage means) for linking the information registration electronic document and storing it in a predetermined electronic document D / B 565.

The electronic document receiving unit 550 may receive the biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 500 through the communication means.

According to one embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is the biometric information received by the information registration server 500 from the information registration terminal 570. Document files (eg, Portable Document Format (PDF) files, EDI (Electronic Data Interchange) files, HWP / DOC, etc.) containing document contents including at least one of customer information and biometric information included in the registration application information. And at least one word processor file or at least one web document file including the MHT.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. The document including the watermarking after including at least one of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one information, biometric information in a watermarking method (Watermarking) Document files containing content (eg, Portable Document Format (PDF) files, Electronic Data Interchange (EDI) files, Word processor files including at least one or more such as HWP / DOC, Web document files including MHT, etc.) It is preferable to comprise).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Preferably, the image file includes an image file including image content (eg, image content generated by capturing the document content on a memory) that captures document content including at least one of information and biometric information.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information After including at least one or more information of the information in a watermarking (Watermarking) method, it is preferable to include an image file including the image content including the watermarking.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is a biometric information received by the information registration server 500 from the information registration terminal 570. A predetermined document including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the information registration application information. A file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one of HWP / DOC, or the like, or a web document file including an MHT). It is preferable to make.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Generating image content including at least one or more information of the information by a watermarking method, and a document file (for example, a PDF (Portable Document Format) file or EDI (Electronic) file including the image content including the watermarking). Data Interchange) file, a word processor file including at least one of HWP / DOC, etc., or a web document including MHT. File).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is received by the information registration server 500 from the information registration terminal 570. Image content (eg, image content generated by capturing the document content on a memory) and the biometric information which captured the document information including at least one of customer information and biometric information included in the biometric information registration request information. A predetermined document file including registration application information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more such as HWP / DOC, or MHT). Web document files).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Create image content including at least one or more information of the information by a watermarking method, and a document file (for example, PDF (Portable Document Format) including the image content and the biometric information registration information including the watermarking; Word processor including at least one file, an electronic data interchange (EDI) file, or an HWP / DOC file. It comprises a web document files, etc.) comprising one, or MHT is preferred.

The information generating unit 555 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 550, and through the previous consultation document receiving unit 550 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document was received (or a date and time at which the biometric information registration electronic document was stored).

According to the exemplary embodiment of the present invention, the information generating unit 555 registers the biometric information with reference to the information registration server 500 that transmits the biometric information registration electronic document received through the electronic document receiving unit 550. It is preferable to confirm the certification authority that sent the electronic document, and generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500 through the electronic document receiving unit 550, the information generating unit 555 receives the received information. Electronic document related information (e.g., customer information transmitted by inputting (selecting) the biometric information registration application information and / or certification authority information transmitting the biometric information electronic document, and / or electronic document file format information, and / Or the biological information registration application information, etc.) is preferably generated.

The electronic document storage unit 560 processes the biometric information registration electronic document received through the electronic document receiving unit 550 and the electronic document management information generated through the information generating unit 555 to process a predetermined electronic document D. / B (565) is characterized in that.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 by the information registration terminal 570. A document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file) containing document information including at least one of customer information and biometric information included in the biometric information registration request information received from Or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. After the watermarking method includes at least one or more of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one of customer information and biometric information included in the application information, A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one HWP / DOC, etc.) containing document content including watermarking, or an MHT. Web document files, etc.) to be included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. And an image file including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the application information. It is preferable to make.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. After including at least one or more information of the included customer information, biometric information in a watermarking (Watermarking) method, it is preferably made to include an image file including the image content including the watermarking.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500. Image content (eg, image content generated by capturing the document content on a memory) by capturing document content including at least one of customer information and biometric information included in the biometric information registration request information received from 570. A document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one HWP / DOC, etc.), or a web document including an MHT. File).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. Create image content including at least one or more of the included customer information and biometric information by a watermarking method, and a document file (eg, a Portable Document Format (PDF)) containing the image content including the watermarking. A web document including an MHT, a word processor file including at least one of an EDI file, an HWP / DOC file, or the like. It is preferred which comprises a file, and so on).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered by the information registration server 500. Image content (eg, an image generated by capturing the document content on a memory) by capturing document content including at least one of customer information and biometric information included in the biometric information registration request information received from the terminal 570. A word processor file including at least one predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or an HWP / DOC) including the contents and the biometric registration request information. , Or a web document file including MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. A document file including image information including at least one or more of the included customer information and biometric information by a watermarking method, and containing the watermarking image content and the biometric information registration application information (eg, A word processor including at least one, a portable document format (PDF) file, an electronic data interchange (EDI) file, or an HWP / DOC. File, or a web document file including MHT).

According to an embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration. The information registration server 500 which transmitted the electronic document may preferably further include certification authority information which has transmitted the biometric information registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500, the electronic document storage unit 560 processes the connection with the biometric information registration electronic document and performs the The electronic document management information stored in the electronic document D / B 565 may include the received electronic document related information (for example, customer information transmitted by inputting (selecting) the biometric information registration request information) and / or the biometric information. Certificate authority information for transmitting the registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information).

6A and 6B illustrate a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to an exemplary embodiment of the present invention.

In more detail, FIGS. 6A and 6B illustrate that when a predetermined customer provides biometric information registration request information including at least one of customer information and biometric information through the client terminal to identify an identity using the biometric information, In the information registration system, a predetermined biometric information registration electronic document including the provided biometric information registration application information is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration application information are linked. The present invention relates to an implementation method of processing and storing the data in a predetermined storage medium 540. Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 6a and 6b in the client terminal. It is possible to infer various implementation methods for registering the biometric information registration application information to the information registration server 500. As will be appreciated, the present invention includes all implementation methods inferred from the foregoing, and is not limited to the implementation methods shown in FIGS. 6A and 6B.

For example, in the method shown in FIGS. 6A and 6B, the client terminal inputs (or selects) the biometric information registration request information through a predetermined web page provided by the information registration server 500. Although illustrated as being provided, when a predetermined information registration program is provided in the client terminal, the user interface may not be provided from the information registration server 500, and thus the present invention is not limited thereto.

In the following FIGS. 6A and 6B, the client terminal shown in FIG. 6 is referred to as "terminal" for convenience, and the information registration server 500 shown in FIG. 6 is referred to as "server" for convenience, and in the client terminal The customer information and biometric information transmitted to the information registration server 500 are referred to as "biometric information registration application information" for convenience.

6A and 6B, when the client terminal illustrated in FIG. 6 is a predetermined network means (eg, when the client terminal is a wired terminal, a TCP / IP based wired communication network, and the client terminal is a wireless terminal, CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based portable Internet, and / or IEEE 802.11x-based wireless LAN, etc.) to connect to the server to connect a predetermined communication channel, When a web page including a user interface for identifying an identity using information is requested (600), the server inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information. Generate (or extract) a web page including a user interface for transmission to the server (605), and generate the And transmits the output to the web page containing the extracted) user interface to the mobile station 610. The

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page from the server to the terminal is preferably performed at least once according to the biometric information registration information registration procedure, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one or more customer information and biometric information through a user interface included in the web page (615).

If the terminal inputs (or selects) biometric information registration request information including the customer information and biometric information through the user interface (620), the terminal inputs (or selects) the customer through the communication channel. Information and biometric information are transmitted to the server (625).

According to an embodiment of the present invention, the terminal includes a predetermined password for confirming the validity of the biometric information registration request information in the server to the biometric information registration request information including at least one of the customer information and biometric information; Alternatively, at least one or more OTP codes generated through security card information and / or a predetermined one time password (OTP) generator may be transmitted to the server through the network means.

According to an embodiment of the present invention, the terminal includes at least one encryption method (eg, symmetric key based encryption method, and / or public key based biometric information registration request information including at least one of the customer information and biometric information). An encryption scheme, and / or an electronic envelope-based encryption scheme, and / or a key exchange-based encryption scheme, etc.), and / or attach a predetermined electronic signature to the biometric information registration request information to the server through the network means. Preferably, the terminal has at least one encryption key corresponding to the encryption scheme, and / or has a predetermined public certificate including at least one encryption key, and / or If an accredited certificate is provided on a predetermined IC chip (or IC card), the blank provided on the IC chip (or IC card) It provided a card reader to verify the certificate is preferred.

According to an embodiment of the present invention, the terminal may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method) for registering biometric information registration information including at least one of the customer information and biometric information. Scheme, and / or an electronic envelope-based encryption scheme, and / or a key exchange-based encryption scheme, and the like, and transmits the encrypted data to the server through the network means. The IC is provided with one or more encryption keys, and / or with a predetermined certificate containing at least one or more encryption keys, and / or when the certificate is provided with a predetermined IC chip (or IC card). It is preferable that a card reader is provided for confirming the public certificate provided in the chip (or IC card).

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the biometric information registration application information, and technical features of attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Thereafter, the server receives and reads the customer information and the biometric information through the communication channel to check the validity of the biometric information registration application information (630).

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange-based encryption scheme, the server may include the at least one decryption scheme (eg, a symmetric key based decryption scheme and / or a public key based scheme) corresponding to the encryption scheme. Decryption method, and / or electronic envelope-based decryption method, and / or key exchange-based decryption method, etc.), it is preferable to authenticate the validity of the received biometric information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration request information, the server verifies the validity of the received biometric information registration request information by checking the electronic signature attached to the biometric information registration request information. It is preferable.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for checking the validity of the biometric information registration request information, the server may be configured as described above. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the password included in the biometric information registration application information and the password provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the server registers the biometric information. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the received security card information included in the application information with the security card information provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the server requests the biometric information registration request. The validity of the received biometric information registration request information is verified by comparing and authenticating the received OTP code included in the information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS. It is desirable to.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration application information is not authenticated (635), the server generates a web page including predetermined information registration error information and transmits it to the terminal (640), and the biometric information registration application information. Do not perform the corresponding information registration procedure.

On the contrary, if the validity of the biometric information registration request information is authenticated (635), the server generates at least one predetermined document content including biometric information and at least one customer information including the biometric information registration request information (645). In operation 650, a predetermined biometric information registration electronic document including the document content is generated.

According to an exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and includes a document file (eg, the document content). , A Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including an MHT). It is preferable to process the biometric information registration electronic document for confirmation.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and the customer information and biometric information included in the biometric information registration request information in the document content. After including at least one of the information in a watermarking (Watermarking) method, a document file containing a document content including the watermarking (for example, a PDF (Portable Document Format) file, or an EDI (Electronic Data Interchange) file, Or a word processor file including at least one or more HWP / DOC, or a web document file including MHT), as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). It is preferable to process the image file including the image content generated by capturing on the memory as a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). Image content generated by capturing the image on a memory) including at least one of customer information and biometric information included in the biometric information registration request information by a watermarking method, and then including the watermarking image content. It is preferable to process the image file including a biometric information registration electronic document for identification using the biometric information.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing image content (eg, image content generated by capturing the document content on a memory). By generating a word processor file including at least one or a web document file including the MHT, etc.), it is preferable to process the biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). To the image content generated by capturing the image on the memory) to generate the image content including at least one of the customer information and the biometric information included in the biometric information registration application information by a watermarking method, the watermarking A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or a word processor file including at least one or more HWP / DOC, etc.) including an image content included therein, or an MHT. Biometric information registration electronic document for identification using the biometric information by generating a web document file) To treatment it is preferred.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including an image content (eg, image content generated by capturing the document content on a memory) and the biometric information registration request information. ), A word processor file including at least one of HWP / DOC, or a web document file including MHT), and the like to process the biometric information registration electronic document for identification using the biometric information. desirable.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). To the image content generated by capturing the image content on the memory), the image content including at least one or more of the customer information and the biometric information included in the biometric information registration application information by watermarking (Watermarking) method, Word processor file including at least one document file (eg, Portable Document Format (PDF) file, EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing the included image content and the biometric information registration application information , Or a web document file including MHT), thereby identifying an identity using the biometric information. It is treated with a biometric information registering electronic documents are preferred for.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (655).

As shown in FIG. 6, the electronic document repository includes a predetermined electronic document server 545 and an electronic document D / B 565 associated with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 545 through the communication means to store in the electronic document D / B (565).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. The electronic document D / B 565 can be stored, and the present invention is not limited thereto.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document and predetermined electronic document management information to the electronic illustrated in FIG. It is preferable to include storing in the document D / B 565.

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

The electronic document management information may include predetermined electronic document related information (eg, customer information transmitted by inputting (selecting) the biometric information registration request information and / or certification authority information transmitting the biometric information electronic document); And / or the electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document storage (660), the server processes the customer information, biometric information included in the biometric information registration application information and stored in a predetermined storage medium 540 665, predetermined information registration history information (e.g., details of storing the biometric information registration electronic document in the electronic document storage, and / or details of storing the biometric information registration application information in the storage medium 540). ) Is generated (or extracted) and transmitted to the terminal (670).

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

7 is a diagram illustrating a certificate issuing system for issuing and processing a certified certificate having an activation / deactivation function according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates that a predetermined customer receives authentication request information including customer information and biometric information from an unattended certificate issuing terminal 715 in order to process and issue an authorized certificate having an activation / deactivation function. The present invention relates to a system for processing identity verification based on the biometric information included in the received authentication request information. Those skilled in the art to which the present invention pertains may refer to and / or modify the present invention. Various implementation methods for a certificate issuance system configuration for issuing and processing a public certificate having an activation / deactivation function may be inferred, but the present invention includes all the implementation methods inferred above, and the implementation method illustrated in FIG. It is not limited to only.

For example, those of ordinary skill in the art to which the present invention belongs, financial information (for example, card information or account information, etc.) replacing the biometric information provided by the customer by referring to and / or modifying the drawing 7 If received, it will be possible to infer an implementation method for a method for issuing and processing a public certificate through identification verification using the received financial information, thereby not limiting the present invention.

Hereinafter, when the customer information and the biometric information for the certificate issuance request are input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. When the authentication request information is generated based on the information and the biometric information, and the generated authentication request information is transmitted through the certificate issuing terminal 715, after the identity verification process is performed based on the authentication request information, the authentication result is verified. Components corresponding to at least one or more means and / or functional configurations provided to the issuing terminal 715 are referred to as "certification authority server 700" for convenience.

Referring to FIG. 7 according to an embodiment of the present invention, a certificate issuing system for issuing and processing a public certificate having the activation / deactivation function may include a certificate provided in at least one certification authority branch (or branch) or a public place. Issuing terminal 715, characterized in that made, the certificate issuing terminal 715 is a communication channel is connected to the certification authority server 700 provided on the certificate issuing system through a predetermined communication network.

The storage medium 740 provided on the certificate issuing system according to the present invention includes customer information, biometric information, and the certificate issuing terminal 715 registered through the biometric information registration system illustrated in FIG. 1 or 5. Based on the received authentication request information, the authentication history information that has been authenticated is stored in a predetermined storage medium 740 by cooperative processing.

The customer information includes personal information of the customer (for example, the name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.) of the customer who registered the biometric information through the biometric information registration system shown in FIG. 1 or 5. ) And a member provided in the customer D / B provided on the certification authority system associated with the certificate issuing system in response to the customer by the member information of the customer (for example, when the customer subscribes as a customer of the certification authority). ID information and the like).

The biometric information may include image data provided by a customer who registers the biometric information through the biometric information registration system illustrated in FIG. 1 or FIG. 5 (or a scan of a body part of the customer (eg, a fingerprint, an iris, a face, etc.) and And / or at least one feature data on the image data (e.g., a feature on a pattern that is differentiated from a general pattern of fingerprints).

When the authentication request information for the customer who registered the biometric information is received through the biometric information registration system illustrated in FIG. As a result of the authentication process, the authentication request terminal unique information, etc.) is preferably included.

The certification authority server 700 provided on the certificate issuing system according to the present invention is a generic term for the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

Referring to FIG. 7, the certification authority server 700 generates authentication request information based on the customer information and the biometric information input from the certificate issuing terminal 715, and when the generated authentication request information is transmitted, On the basis of the information receiving unit 720 (or information receiving means) for receiving the authentication request information transmitted from the certificate issuing terminal 715 and the authentication request information received through the information receiving unit 720, An information confirmation unit 725 (or information confirmation means) for confirming processing, and an information providing unit 730 (or information providing means) for providing the certificate issuing terminal 715 with an identification result of the customer; Characterized in that made.

When the certificate issuing terminal 715 generates and transmits the authentication request information for the identity verification request for the process of issuing an authorized certificate, based on the customer information and the biometric information input (or selected) through the output user interface, The information receiving unit 720 is characterized in that for receiving the authentication request information transmitted from the certificate issuing terminal 715.

When the certificate request information transmitted from the certificate issuing terminal 715 is received through the information receiving unit 720, the information checking unit 725 is based on the authentication request information transmitted by the certificate issuing terminal 715. Perform identity verification for the customer.

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium 740, It is preferable to process identity verification for the authentication request information by checking whether the stored customer information and the customer information included in the authentication request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal 715, the biometric information matching the biometric information included in the received authentication request information is stored through the storage medium 740. It is preferable to process the identification information on the authentication request information by the certificate issuing terminal 715 by transmitting the stored customer information in connection with the confirmed biometric information to the certificate issuing terminal 715.

When a result corresponding to the received authentication request information is confirmed through the information checking unit 725, the information providing unit 730 transmits a result corresponding to the authentication request information to the certificate issuing terminal 715. It is characterized by.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal 715, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Referring to FIG. 7, the certification authority server 700 stores the authentication details of receiving the authentication request information in the storage medium 740 in response to the authentication request information transmitted from the certificate issuing terminal 715. An information storage section 735 (or information storage means) is provided.

The information storage unit 735 stores the authentication details in response to the authentication request information received in the storage medium 740 in response to the authentication request information transmitted from the certificate issuing terminal 715.

According to the embodiment of the present invention, the authentication details include date information on which authentication request information is received from the certificate issuing terminal 715, a part (or all) of customer information included in the received authentication request information, and At least one authentication result confirmed in response to the authentication request information is preferably included.

According to an embodiment of the present invention, the storage medium 740 may include a first storage medium 740 for storing customer information and biometric information registered by the customer through the biometric information registration system illustrated in FIG. 1 or 5. The first storage medium 740 and the second storage medium 740 may be connected / configured in a relational manner. Do.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an activation / deactivation function according to an embodiment of the present invention.

In more detail, FIG. 8 illustrates that a predetermined customer issues a certificate through a certification authority server 700 shown in FIG. 7 in order to process and issue an authorized certificate having an activation / deactivation function. Receive a public key generated by the certificate issuing terminal 715 (or generated from a wired or wireless storage medium connected to the certificate issuing terminal 715) from 715, and generates the public certificate information based on the received public key As a system configuration for processing to be stored in a wired or wireless storage medium through the certificate issuing terminal 715, those skilled in the art to which the present invention pertains, reference and / or modified by the present Figure 8 to activate / Various implementation methods for the certificate issuance system configuration for issuing and processing the public certificate with the deactivation function can be inferred, but the present invention is Includes all embodiments estimation method, it shall not be limited to the exemplary method shown in the figure 8.

For example, one of ordinary skill in the art will be able to infer an implementation method of specifying activation / deactivation conditions for a pre-issued public certificate by referring to and / or modifying this drawing. The present invention is not limited thereby.

Hereinafter, when the customer information and the biometric information for the request for issuing a certificate is input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. After identity verification based on the information and biometric information, a component corresponding to at least one or more means and / or functional configurations for processing the issuance of a public certificate is referred to as "certificate server 705" for convenience.

Referring to FIG. 8 according to an embodiment of the present invention, the certificate issuance system for issuing an authorized certificate with the activation / deactivation function issuing a certificate provided in at least one certification authority branch (or branch) or a public place. And a terminal 715. The certificate issuing terminal 715 is connected to a certificate server 705 provided on the certificate issuing system through a predetermined communication network.

The certificate D / B 840 provided on the certificate issuing system according to the present invention issuing and processing a certificate issued to a customer in accordance with a request for issuing a certificate, the customer information and the certificate information according to the certificate issued certificate processing, and It is characterized by storing the expiration date information and activation / deactivation information for the accredited certificate by linking.

When the customer information requests for issuance of a certificate through the certificate issuing system and processes a certificate issuance corresponding thereto, and provides an authorized certificate to the customer, personal information of the target customer who issued and processed the authorized certificate (for example, Name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.).

The public certificate information is used as version information for distinguishing the public certificate type for the public certificate provided to the customer, and as reference information for the suspension of revocation and revocation list of the public certificate provided to the public certificate provided to the customer. Signing algorithm information having serial number information, signature algorithm value used when creating a public certificate, issuer information for the organization that issued the public certificate, validity period information for the period guaranteeing the status of the public certificate, Issuer public key identifier information for identifying the owner information that owns the certificate, the public key information held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner. Key usage information, including the purpose for which the public key of It is preferable to include at least one or more information.

The validity period information is preferably made including a period / date and time that is available in the state that the authorized certificate issued to the customer is valid.

According to an embodiment of the present invention, the validity period information may include a specific period (eg, an expiration period available after the accredited certificate is issued) or specific date and time information, and the public certificate generated within the validity period It is desirable that only requests for use be processed effectively.

According to another exemplary embodiment of the present invention, the validity period information may include information about a specific number of times (or a specific number of days) (for example, the number of times (or the number of days) actually available after the accredited certificate is issued). If the number of times (or days) is exceeded, the issued certificate is preferably treated as invalid.

According to another exemplary embodiment of the present invention, it is preferable that the validity period information is a combination of a specific number and a specific period.

In other words, if the service is set to be available only within a certain number of times during a certain period, the remaining number of times will be destroyed if the specified time period is exceeded. It is preferred to be treated as not.

The activation / deactivation information includes at least one activation or deactivation condition information set by the customer in order to process the activation or deactivation according to a specific situation of the customer or a condition set by the customer. It is preferable.

According to the implementation method of the present invention, the activation / deactivation condition set by the customer is activated during a time zone defined by the customer (for example, an activity time (for example, AM9: 00 to PM 10:00), and the set time zone). Other times can be set by deactivation processing.

According to another exemplary embodiment of the present invention, the activation / deactivation condition set by the customer may be activated on a day (eg, Mon / Wed / Fri, etc.) set by the customer, and deactivation is performed for a time zone other than the set day. It is possible.

Those skilled in the art to which the present invention pertains will be able to infer various implementation methods for the activation / deactivation conditions, whereby the present invention is not limited.

The certificate server 705 provided on the certificate issuing system according to the present invention is a generic term of the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server (or Device) and / or at least one program recorded on a recording medium provided in a predetermined server (or device), and the present invention is not limited thereto.

According to an embodiment of the present invention, the certificate server 705 comprises an interface unit 800 (or interface means) for connecting and managing a predetermined communication channel with the certificate issuing terminal 715 through the communication network. It is characterized by.

According to an embodiment of the present invention, the certificate issuing terminal 715 is connected to a predetermined communication channel based on a protocol stack defined in the communication network, and the certificate issuance related program provided in the certificate issuing terminal 715 is provided. It is desirable to provide a communication interface for transmitting and receiving at least one or more information (or data) using a defined communication protocol.

Referring to FIG. S, the certificate server 705 activates / deactivates a predetermined certificate issuing terminal 715 when a predetermined communication channel is connected to the certificate server 705 through the interface unit 800. In the certificate issuing terminal 715, the certificate server (715) inputs (or selects) customer information, biometric information, validity information, and activation / deactivation information for a predetermined certificate issuing process. An interface agent for generating (or extracting) at least one user interface for transmitting to the certificate issuing terminal (715) and providing the generated (or extracting) user interface to the certificate issuing terminal (715) in association with the interface unit (800). Study (805) (or interface providing means), and the certificate issuing terminal 715 the user interface to the customer information, biometric information and validator When information and activation / deactivation information are input (or selected) and transmitted, the customer information, biometric information, validity period information, and activation / deactivation information transmitted from the certificate issuing terminal 715 in connection with the interface unit 800 are transmitted. Information receiving unit 810 (or information receiving means) for receiving the information generating unit 815 (or generating authentication request information based on the received customer information, biometric information, validity information and activation / deactivation information) Information generation means) and an authentication confirmation unit 820 (or authentication confirmation means) for transmitting the generated authentication request information to the authentication authority server 700 to confirm authentication for the biometric information. If the certificate server 705 does not receive the biometric information and / or if identification is not directly possible based on the biometric information, the information generation unit 815. ) And the authentication confirmation unit 820 may be omitted.

The interface providing unit 805 connects a predetermined communication channel with the certificate server 705 through the interface unit 800 by the certificate issuing terminal 715, and then activates the certificate server 705 with the certificate server 705. When requesting a user interface for the public certificate issuing / deactivation function, the certificate issuing terminal 715 inputs (or selects) predetermined customer information, biometric information, expiration date information, and activation / deactivation information. A user that generates at least one user interface for transmitting to the certificate server 705 through a communication network, and / or extracts from a predetermined database (not shown), and the generated (or extracted) in conjunction with the interface unit An interface may be provided to the certificate issuing terminal 715 through the communication network.

According to an embodiment of the present invention, a predetermined user interface that can be provided to a certificate issuance related program included in the certificate issuing terminal 715 is generated (or extracted), and the generated (or extracted) through the interface unit 800. It is preferable to provide the user interface) to the certificate issuing terminal 715.

Here, at least one of inputting (or selecting) predetermined customer information, biometric information, expiration date information, and activation / deactivation information on the certificate issuing terminal 715 to transmit to the certificate server 705 through the communication network. If a predetermined certificate issuance related program having the above user interface is provided, the certificate server 705 is inputted (or selected) with predetermined customer information, biometric information, expiration date information, and activation / deactivation information as described above. The interface providing unit 805 for generating (or extracting) a user interface for transmitting to the certificate issuing terminal 715 may be omitted, and the present invention is not limited thereto.

Thereafter, the certificate issuing terminal 715 inputs (or selects) the customer information, the biometric information, the expiration date information, and the activation / deactivation information through the user interface, and the input (or the selected) customer information and the biometric information. And validity period information and activation / deactivation information to the certificate server 705 through the communication network. In response, the information receiving unit 810 is linked with the interface unit 800 to issue the certificate issuing terminal 715. And receiving the customer information, the biometric information, the expiration date information, and the activation / deactivation information transmitted from the same.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 may include the customer information, the biometric information, and the validity period information in the certificate server 705 in the customer information, the biometric information, the validity information, and the activation / deactivation information. The network means further comprises at least one or more of a predetermined password and / or security card information for confirming the validity of the activation / deactivation information and / or OTP code generated through a predetermined one time password (OTP) generator, etc. It is preferable to transmit to the certificate server 705 through.

According to an embodiment of the present invention, the certificate issuing terminal 715 is at least one encryption method (eg, symmetric key-based encryption method, and / or public) to the customer information, biometric information, validity information and activation / deactivation information Key-based encryption method, and / or electronic envelope-based encryption method, and / or key exchange-based encryption method, etc. It is preferable to attach a signature to the certificate server 705 via the network means, and for this purpose, the certificate issuing terminal 715 has at least one encryption key corresponding to the encryption method, and / or Have a predetermined public certificate containing at least one encryption key, and / or have said public certificate If provided in the IC chip (or IC card) it is preferably provided with a card to verify the certificate provided in the IC chip (or IC card) reader.

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the customer information, the biometric information, the expiration date information, and the activation / deactivation information, and the customer information and the biometric information. Since you will be familiar with the technical features of attaching a predetermined electronic signature to period information and activation / deactivation information, a detailed description thereof will be omitted for convenience.

When the customer information, the biometric information, the expiration date information and the activation / deactivation information are input (or selected) through the output user interface, the information generator 815 inputs (or selects) the customer information and the biometric information. And generating authentication request information based on validity information and activation / deactivation information.

When authentication request information is generated through the information generating unit 815, the authentication confirming unit 820 transmits the generated authentication request information to the certification authority server 700 to transmit biometric information included in the authentication request information. Check and check whether the checked biometric information matches the biometric information registered by the user in the certification authority server 700 by comparing and checking whether the biometric information is registered by the user from the certification authority server 700. Characterized in that the check.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, the generated authentication request information is transmitted to the certification authority server 700, and the certification authority server 700 is included in the authentication request information. The biometric information and the biometric information stored in a database held by the certification authority server 700 (or accessible) and compare the biometric information, and the biometric information is included in the customer information and the authentication request information registered on the database. Checking whether the customer information is matched, by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server 700, the authentication request information It is advisable to check the authenticity for.

According to another embodiment of the present invention, the authentication whether the authentication information included in the authentication request information, and transmits the generated authentication request information to the certification authority server 700, the certification authority server 700 is the authentication request information Compare / confirm biometric information included in the biometric information stored in a database held by the certification authority server 700 (or accessible), and verify authentication information including customer information registered with the biometric information. By checking whether the customer information included in the received authentication result information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

Referring to FIG. S, when the authentication of the customer is confirmed, the certificate server 705 requests and receives public key information from the certificate issuing terminal 715 to generate and provide the public certificate information to the customer. An information receiving unit 810 (or information receiving means), an information generating unit 815 (or information generating means) for generating public certificate information based on the received public key information, and the generated public certificate information. It is characterized in that it comprises a certificate issuing unit 825 (or certificate issuing means) to be transmitted to the certificate issuing terminal 715 to be stored in the wired and wireless storage medium for the customer.

After the identity verification process based on the biometric information of the customer through the authentication verification unit 820 (or after the identity verification process based on the biometric information about the customer in the certificate issuing terminal 715), the certificate issuing terminal 715 When the public key information and the customer information is transmitted, the information receiving unit 810 is characterized in that for receiving the customer information and public key information transmitted from the certificate issuing terminal 715.

When the customer information and the public key information transmitted from the certificate issuing terminal 715 are received through the information receiving unit 810, the information generating unit 815 is an authorized certificate based on the received customer information and the public key information. Characterized by generating the information, characterized in that the process of setting the validity period information and the activation / deactivation information, when generating the authorized certificate information.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

When the public certificate information is generated through the information generator 815, the certificate issuer 825 stores the generated public certificate information on the wired / wireless storage medium requested by the customer through the certificate issue terminal 715. It is characterized by processing.

Referring to FIG. 8, the certificate server 705 issues and processes the public certificate through the certificate issuing unit 825 after issuing the public certificate or before providing the public certificate information to the customer. Characterized in that it comprises a payment processing unit 830 (or payment processing means) for processing so that payment for the activation process of the authorized certificate is made.

According to the implementation method of the present invention, the payment processing for the activation process of the authentication certificate to the customer, after generating the certificate information to provide to the customer, through the certificate issuing terminal 715 to the wired and wireless storage medium requested by the customer It is preferable to request a payment using a predetermined payment means by calculating a payment amount before providing.

Herein, the payment amount is a payment amount corresponding to a basic validity period when no validity period is set when the authorized certificate is issued, and / or a predetermined period corresponding to the validity period when the customer sets a validity period. The amount of payment calculated based on the base rate for the unit period (or the amount of payment applied with a certain discount rate according to the validity period), and / or the amount of payment calculated based on the number of times (or the discount rate applied according to a certain number of times or more) It is preferable that the payment amount calculated through).

If payment for the payment amount is not made when the public certificate is issued, the public certificate provided to the customer is set as an invalid public certificate, and when the payment is made, the public certificate is set as a valid public certificate. desirable.

Referring to FIG. 8, the certificate server 705 stores the authorized certificate information provided to the certificate issuing terminal 715, customer information, validity period information, and activation / deactivation information for the target customer who issued the certificate. And an information storage unit 835 (or information storage means) for storing the data in the certificate D / B 840 in association with each other.

According to an embodiment of the present invention, the certificate D / B 840 is a database accessible from the certificate server 705, the customer information for one or more customers, and the public certificate information corresponding to the certificate provided to the customer And expiration date information and activation / deactivation information are preferably stored.

In addition, the certificate D / B 840 is preferably a database that can not be modified / generated by accessing from an external server other than the certificate server 705.

Referring to FIG. 8, when the customer uses an authorized certificate when using a financial transaction service, the certificate server 705 checks the activation / deactivation condition registered by the customer, and when the customer sets the activation / deactivation condition, deactivation processing. In order to use the financial transaction service in the established state, check the communication means information, such as the mobile phone number registered in advance by the customer, and obtain the authentication through the communication means corresponding to the confirmed communication means information in the state that meets the deactivation conditions Characterized in that it comprises a certification verification unit 820 (or certification verification means) for processing to enable the temporary use of the public certificate.

According to an embodiment of the present invention, the authentication for the temporary activation process for the authorized certificate that meets the deactivation conditions, sending a SMS (Short Message Service) text message to the mobile phone number pre-registered by the customer, and sends the text message It is preferable that the verified customer requests and authenticates a separate certificate so that the temporary use of the public certificate is possible while the deactivation conditions are met.

Here, the method for authenticating and requesting a separate authentication by the customer includes transmitting a callback URL in the text message, and accessing the customer through the callback URL and entering a predetermined password. It is desirable that the certificate be temporarily activated only for a certain number of times (or for a certain period of time, or a certain number of times and periods).

In this case, it is possible to send a multimedia message using the MMS (Multimedia Message Service) instead of the text message using the SMS, it is preferable that the customer provides the details to use the authorized certificate.

In addition, it is desirable to classify / store the financial transaction history used after the temporary activation process in the deactivated state so that the customer can immediately check (or later check).

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate having an activation / deactivation function according to an embodiment of the present invention.

In more detail, FIG. 9 shows an unmanned certificate issuing terminal 715 provided at a predetermined financial institution (eg, a commercial bank branch, a card company branch) and / or a public place, and has an activation / deactivation function according to the present invention. As shown in the preferred functional configuration for handling the issue of a public certificate, those skilled in the art to which the present invention pertains, the present invention is equipped with an activation / deactivation function according to the present invention by referring to and / or modifying the present invention. Various implementation methods may be inferred for the certificate issuing terminal 715 for processing the issued public certificate, but the present invention includes all the implementation methods inferred and is not limited by the implementation method shown in FIG. No.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 9 and infer an implementation method of applying to a financial institution-specific certificate issued by a financial institution in addition to the authorized certificate. There will be, and the invention is not limited thereby.

Referring to FIG. 9, the certificate issuing terminal 715 may use a wireless terminal such as a USB memory and / or a mobile phone and / or a wired / wireless storage medium such as an SD / MMC memory card and / or a CF memory card and / or an XD memory card. Storage medium control unit 900 for recognizing and storing the certificate information issued by using the biometric information, and the processing of each step for issuing a certificate certificate with the activation / deactivation function provided through the certificate issuing terminal 715 A screen output unit for outputting a screen, a key input unit 920 for receiving predetermined information according to each step, and to request for issuance of a certificate having an activation / deactivation function according to the present invention, the user's biometric information A biometric unit 915 for recognizing the communication unit 915 and a communication unit 970 for communicating with the certificate authority server 700 and / or the financial institution server 710 and / or the certificate server 705 through a predetermined communication network; The certificate issuing terminal 715, the memory unit for storing at least one certificate issuance processing information for the process of issuing an authorized certificate with the activation / deactivation function, and predetermined certificate issuance information after the certificate issuing process, and the certificate Including a power supply unit 980 for supplying power to the issuing terminal 715 and at least one terminal functional unit 975 and a control unit 925 for controlling each functional component provided in the certificate issuing terminal 715 Is done.

In addition, the certificate issuing terminal 715 recognizes the MS card and / or IC card and / or bankbook that stores the customer's financial information (for example, the card information and / or account information possessed by the customer) and predetermined information It comprises a card reader unit 905 to obtain a.

The control unit 925 controls the overall operation of the certificate issuing terminal 715 in the functional configuration, manages the flow of information or data between each component, and issuing an authorized certificate with the activation / deactivation function according to the present invention To control at least one or more components provided in the certificate issuing terminal 715, at least one processor and execution memory including a Central Processing Unit (CPU) / Micro Processing Unit (MPU) in hardware (E.g., a register) and a bus for inputting and outputting predetermined data and at least one or more electronic circuits (or integrated circuits) therefor, and performing software-specific functions. And loading the execution memory from a predetermined recording medium provided in the certificate issuing terminal 715 to the execution memory. Including a predetermined program routine (Routine) and / or program data processing operations by a processor is characterized in that formed. In particular, the control unit 925 includes a predetermined operating system and / or a terminal control program routine for managing the certificate issuing terminal 715 after the certificate issuing terminal 715 is booted by software. .

Hereinafter, FIG. 9 illustrates at least one program component provided in the certificate issuing terminal 715 in the controller 925 for convenience in order to issue a certificate having an activation / deactivation function according to the present invention.

The storage medium controller 900 stores and reads the certificate information on the wired / wireless storage medium after the issued certificate information with the activation / deactivation function according to the present invention is issued and processed, the wired / wireless storage medium and the certificate. It provides an interface between the issuing terminal 715, according to the standard for reading and / or recording one or more information or data according to the type of wired and wireless storage media (e.g., SPI protocol, etc. in the case of a memory card) It is desirable to control.

The card reader unit 905 is characterized in that it provides an interface between the card and the certificate issuing terminal 715 to read at least one or more information or data provided in the card for issuing a public certificate, ISO / IEC MS reader interface to interface the MS (Magnetic Stripe) card based on the 7810 standard with the certificate issuing terminal 715, and / or contact based on the ISO / IEC 7816 standard for the process of issuing a public certificate with the activation / deactivation function Contact IC reader unit for interfacing the integrated IC card with the certificate issuing terminal 715 and / or contactless IC reader unit for interfacing the contactless IC card based on the ISO / IEC 14443 standard with the certificate issuing terminal 715 And a contact IC reader unit and / or a contactless IC reader unit corresponding to an IC card reader provided in the certificate issuing terminal 715. It is preferable.

The MS reader unit is a card reader unit 905 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information or data (eg, magnetization). When the MS card on which the stored binary information or binary data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information or data is recorded), The predetermined information or data is interfaced to the certificate issuing terminal 715 from at least one or more tracks included in the MS of the MS card by using a predetermined electrical signal loaded.

The contact IC reader unit is a card reader unit 905 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies power to the IC chip of the IC card through the contact point, and the predetermined information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the certificate issuing terminal 715.

The contactless IC reader part is a card reader part 905 based on ISO / IEC 14443. The contactless IC reader part may be at least in electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined information or data from the IC chip through the half-duplex transaction using the APDU certificate It is characterized in that the interface to the issuing terminal 715.

The screen output unit may be predefined or real-time defined to be output from the certificate issuing terminal 715 to a predetermined screen output means including a liquid crystal display (LCD) and / or a cathode ray tube (CRT) by the controller 925. And at least one piece of information or data, and the key data input through the key input unit 920 to the predefined information or data to be output on the screen from the certificate issuing terminal 715. Biometric information input through the unit 915, information stored or generated by the components provided in the certificate issuing terminal 715, information transmitted and received through the communication unit 970, performed by the certificate issuing terminal 715 It includes data corresponding to a predetermined calculation result.

According to the exemplary embodiment of the present invention, the screen output unit preferably outputs a processing screen and / or an interface screen according to each authorized certificate issuing step equipped with an activation / deactivation function according to the present invention to a predetermined screen output device.

The key input unit 920 includes at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or an operation mode of the certificate issuing terminal 715 controlled by the controller 925. When predetermined information (or signal) is inputted from the key button of, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 925. The controller 925 acquires predetermined key data corresponding to the key event in the current input mode and / or operation mode of the certificate issuing terminal 715, and / or is matched with the key event. It is characterized in that to obtain a command for executing a predetermined function, the key input unit 920 and the key input device having at least one or more key buttons are provided in the certificate issuing terminal 715 in cooperation with each other Functions as a key input means.

According to an embodiment of the present invention, a key input device interoperating with the key input unit 920 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, A keyboard device having English character keys and / or Korean character keys) and a function key, and / or at least one numeric key and a function key in conjunction with the screen output means, and / or at least one numeric key And at least one touch screen device having character keys and function keys.

According to an embodiment of the present invention, the key input unit 920 preferably receives at least one or more pieces of information from a predetermined key input device according to each of the steps of issuing a public certificate having an activation / deactivation function according to the present invention.

The biometric recognition unit 915 detects information input from a biometric information recognition device having a function of reading at least one or more biometric information, and specifies the certificate issuing terminal 715 controlled by the control unit 925. When predetermined biometric information is input from the biometric information reader provided in the biometric information recognizing apparatus in the input mode and / or the operation mode, the input biometric information is provided to the controller 925. 925 is characterized in that to obtain the biometric information in the current input mode and / or operation mode of the certificate issuing terminal 715.

According to an embodiment of the present invention, a biometric information recognition device that interoperates with the biometric recognition unit 915 may include a keypad device having at least one or more function keys, and / or at least one fingerprint recognition device, and / or at least one. At least one biometric device equipped with a biometric information reader function such as the iris recognition device and / or the face recognition device is preferable.

The communication unit 970 provides communication means for performing a transaction function (for example, a transaction function interoperating with one or more servers connected to the certificate issuing terminal 715 through a communication network) provided in the certificate issuing terminal 715. And a network communication unit and / or a predetermined cable communication port (eg, RS-232c) that provides transactional communication with a server on the communication network through a communication network (eg, a party network or a CD / ATM network) in hardware. Cable communication unit and / or Infrared Ray communication, RF (Radio Frequency) communication, Bluetooth (BlueTooth), Wireless LAN (Wireless LAN) to provide transactional communication with external communication devices via USB (Universal Serial Bus). Local area communication unit for providing transactional communication with the local area communication device through at least one or more short-range wireless communication, including Wi-Fi, Ultra Wide Band system (UWB) It is made, including, comprises a communication protocol and a communication application for providing a communication transaction in software.

According to an embodiment of the present invention, the communication unit 970 connects a communication channel for issuing a public certificate with an activation / deactivation function with one or more servers on the communication network via a network through the network communication unit. It is preferable.

The memory unit is a storage medium that stores at least one or more information or data required for the control unit 925 to perform a predetermined control function. The memory unit includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and FM (Flash Memory). And at least one storage means including a hard disk drive (HDD) and a solid state drive (SSD), and a predetermined program required by the controller 925 to perform a predetermined control function in software. Routine and program data (e.g., data input or output for a program routine to perform a predetermined function).

According to an embodiment of the present invention, the memory unit preferably stores at least one certificate issuance processing information used by the certificate issuing terminal 715 to process a financial transaction with an activation / deactivation function according to the present invention. And / or After the process of issuing a public certificate issued with the activation / deactivation function, it is preferable to store the certificate issuance history information corresponding to the issue of the public certificate.

The terminal functional unit 975 is a component provided in the certificate issuing terminal 715 in addition to the components shown in FIG. 9 and / or components provided in the certificate issuing terminal 715 for a predetermined purpose or role. As a security application module (SAM), a user device such as a scanner device capable of confirming customer information, such as a resident registration card / driver's license / passport that is put by the user is made of a variety of additional function configuration according to the intention of those skilled in the art.

Those skilled in the art to which the present invention pertains can easily understand each terminal function unit 975 provided according to the characteristics of the certificate issuing terminal 715, and thus a detailed description thereof will be omitted.

Referring to FIG. 9, a mode checking unit 930 for checking whether an operation mode of the certificate issuing terminal 715 is an authorized certificate issuing mode with an activation / deactivation function, and an authentication with the activation / deactivation function is provided. In response to an interface output unit 935 for processing one or more user interfaces corresponding to a certificate issuance mode to be output through the screen output unit, and an operation mode input (or selected) through the output one or more user interfaces, An information generation unit 940 for generating authentication request information based on biometric information input by a user requesting for issuance of the authorized certificate, and customer information on the user, and the generated authentication request information by the certification authority server 700. And an authentication confirmation unit 945 for confirming the authentication of the biometric information. .

The certificate issuing terminal 715 is a plurality of operation modes, such as an official certificate issuing mode for processing the issuance of a public certificate with the activation / deactivation function according to the present invention, a public certificate issuing mode for processing the issue of public certificates using financial information In addition, the mode check unit 930 is the operation mode of the certificate issuing terminal 715 using the official certificate issuance mode or financial information processing the issuance of the certificate is equipped with the activation / deactivation function according to the present invention It is characterized by checking whether the mode of issuing a public certificate.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 selects an authorized certificate issuing having an activation / deactivation function according to the present invention from among a plurality of operation modes on a basic screen, thereby enabling the activation / deactivation function. It is preferable to switch to the public certificate issuing mode for processing the issued public certificate.

According to another exemplary embodiment of the present invention, the certificate issuing terminal 715 is authorized with an activation / deactivation function according to the present invention among a plurality of operation modes after a predetermined IC card is inserted into the IC card reader. By selecting the certificate issuance, it is preferable to switch to the public certificate issuing mode for processing the public certificate issuance with the activation / deactivation function.

When the mode checking unit 930 is set to an authorized certificate issuing mode equipped with an activation / deactivation function, the interface output unit 935 inputs (or selects) customer information and biometric information for processing the issued certificate. At least one user interface for the) characterized in that comprises a.

According to an embodiment of the present invention, customer information for processing the issued certificate and at least one user interface for inputting (or selecting) biometric information may include customer information such as a customer name, social security number, address, and telephone number. And at least one region for inputting (or selecting) and at least one button (or icon) for processing the biometric information of the user through the biometric recognition unit 915.

When the customer information and the biometric information are input (or selected) through the output user interface, the information generator 940 generates the authentication request information based on the input (or the selected) customer information and the biometric information. It features.

Here, the generated 'authentication request information' is directly referred to as 'certificate issue request information' when directly transmitted to the certificate server 705.

When the authentication request information is generated through the information generating unit 940, the authentication confirming unit 945 transmits the generated authentication request information to the certification authority server 700 to transmit the biometric information included in the authentication request information. Check and check whether the checked biometric information matches the biometric information registered by the user in the certification authority server 700 by comparing and checking whether the biometric information is registered by the user from the certification authority server 700. Characterized in that the check.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, the generated authentication request information is transmitted to the certification authority server 700, and the certification authority server 700 is included in the authentication request information. The biometric information and the biometric information stored in a database held by the certification authority server 700 (or accessible) and compare the biometric information, and the biometric information is included in the customer information and the authentication request information registered on the database. Checking whether the customer information is matched, by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server 700, the authentication request information It is advisable to check the authenticity for.

According to another embodiment of the present invention, the authentication whether the authentication information included in the authentication request information, and transmits the generated authentication request information to the certification authority server 700, the certification authority server 700 is the authentication request information Compare / confirm biometric information included in the biometric information stored in a database held by the certification authority server 700 (or accessible), and verify authentication information including customer information registered with the biometric information. By checking whether the customer information included in the received authentication result information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

Referring to FIG. 9, the certificate issuing terminal 715, based on a result of confirming authentication of the authentication request information, when the authentication of the authentication request information is confirmed, an authorized certificate having the activation / deactivation function. An authentication key generation unit 950 for generating an authentication key for issuance processing, and transmits the generated authentication key to a certificate server 705 to request issuance of a public certificate, and the authentication transmitted from the certificate server 705. Certificate processing unit 955 for receiving public certificate information generated based on a key, wired / wireless storage of the public certificate information received from the certificate server 705 and the generated authentication key information through the storage medium control unit 900 And an information storage unit 960 for processing to be stored in the medium.

Based on a result of confirming the authentication of the authentication request information, when the authentication of the authentication request information is confirmed, the authentication key generator 950 may generate a public key and a private key.

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

When a public key and a private key are generated through the authentication key generation unit 950, the certificate processing unit 955 transmits the generated public key to a certificate server 705, and transmits the certificate from the certificate server 705. Characterized in that the public certificate information generated based on the public key.

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

When the public certificate information is received from the certificate server 705, the information storage unit 960 processes the received public certificate information to be stored in the wired / wireless storage medium based on a protocol corresponding to the type of wired / wireless storage medium. Characterized in that.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawing 9 and / or any wired / wireless storage medium capable of storing authorized certificate information in addition to the USB storage medium or the mobile phone storage medium (eg, smart). Card storage media, etc.), whereby the present invention is not limited thereto.

10A and 10B illustrate a process of issuing a public certificate issuance with an activation / deactivation function according to an embodiment of the present invention.

In more detail, FIGS. 10A and 10B illustrate a process of validating customer information, biometric information, and validity period from a certificate issuing terminal for processing of issuance of a certificate through identification verification using biometric information based on FIGS. 7, 8, and 9. When the information is input (or selected), the authentication authority server and the certificate issuing terminal process identity verification based on the customer information and the biometric information among one or more of the input (or selected) information, and the public key is issued by the certificate issuing terminal. And a process of generating a private key and requesting for issuance of a public certificate through a certificate server, and processing the received public certificate information to be stored in a wired / wireless storage medium, having a general knowledge in the technical field to which the present invention pertains. Grown up, the certificate issuing authority with the activation / deactivation function by referring to and / or modified with reference to Figures 10a and 10b. Various implementation methods for the process may be inferred, but the present invention includes all the implementation methods inferred, and is not limited to the implementation methods shown in FIGS. 10A and 10B.

For example, those of ordinary skill in the art to which the present invention pertains may modify the order of the process of issuing a public certificate issuance process with an activation / deactivation function by referring to and / or modifying the drawings 10a and 10b, and It will be possible to infer some omitted implementations, and the invention is not limited thereby.

Referring to FIGS. 10A and 10B, the certificate issuing terminal illustrated in FIG. 9 inputs customer information, biometric information, expiration date information, and activation / deactivation information for a request for issuance of a certificate through identification verification using biometric information. Request (1000) a user interface output to generate (or select), generate (or extract) a user interface corresponding to the output request and process the output (1005), and output the customer information and the biometric information through the output user interface; And input (or select) validity information and activation / deactivation information (1010).

If the customer information, the biometric information, the expiration date information, and the activation / deactivation information are inputted (or selected) through the output user interface (1015), the certificate issuing terminal receives the inputted (or selected) customer information and biometric information. The authentication request information is generated (or extracted) based on the information, the validity information, and the activation / deactivation information (1020), and the authentication authority server shown in FIG. 7 is generated through the communication network. The authentication authority server checks the authentication result based on the received authentication request information (1030).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information matching the biometric information included in the received authentication request information is confirmed through the storage medium, and the confirmed It is preferable to process the identification information for the authentication request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate issuing terminal (1040), and correspondingly, the certificate issuing terminal checks the received authentication result (1045).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1050), the certificate issuing terminal generates (or extracts) error information on the authentication failure based on the received authentication result and processes it to be output. (1055).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1050), the certificate issuing terminal generates a public key and a private key (1060), and transmits the generated public key to the certificate server to authenticate Request the certificate information (1065).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1070), and transmits the generated public certificate information to the certificate issuing terminal (1075), and correspondingly the certificate issuing terminal is The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected to a certificate issuing terminal (1080).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing the authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 10a and 10b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

11A and 11B illustrate a process of issuing and processing a public certificate having an expiration date set according to another exemplary embodiment of the present invention.

In more detail, FIGS. 11A and 11B illustrate the customer information, the biometric information, and the expiration date from the certificate issuing terminal for processing of issuance of a certificate through identification verification using biometric information based on FIGS. 7, 8, and 9. When the information is input (or selected), the customer information and biometric information among the one or more input (or selected) information is transmitted to the certificate server, the certificate server processes the identity verification with the certificate authority server, the certificate issuing terminal It is a process for generating a public key and a private key from the request to receive a certificate issued through a certificate server, and receiving the received certificate information stored in a wired or wireless storage medium, the present invention generally If you have the knowledge of this, refer to and / or modify the drawings 11a and 11b issuance of a certificate issued with a valid period set Various implementation methods for the process of processing may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation methods shown in FIGS. 11A and 11B.

For example, those of ordinary skill in the art to which the present invention pertains may modify the order of the process of issuing and processing a public certificate having a validity period set by referring to and / or modifying the drawings 11a and 11b. Some omitted implementations may be inferred, thereby limiting the invention.

11A and 11B, the certificate issuing terminal illustrated in FIG. 9 inputs (or selects) customer information, biometric information, and expiration date information for a request for issuance of a certificate through identification verification using biometric information. Request a user interface output (1100), generate (or extract) a user interface corresponding to the output request and process the output (1105), and output the customer information, the biometric information, and the expiration date information through the output user interface. Enter (or select) 1110.

If the customer information, the biometric information, and the valid period information are input (or selected) through the output user interface (1115), the certificate issuing terminal receives the input (or selected) customer information, biometric information, and validity period. Generate (or extract) the certificate issuing request information based on the information (1120), and transmit the generated (or extracted) certificate issuing request information to the certification authority server shown in FIG. In response thereto (1125), the certificate server receives the certificate issuing request information transmitted from the certificate issuing terminal, and requests identification verification through a certification authority server based on the received certificate issuing information (1130). In response, the certification authority server verifies the customer identity in response to the received identity verification request (1135).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information matching the biometric information included in the received authentication request information is confirmed through the storage medium, and the confirmed It is preferable that the identification information for the authentication request information is processed in the certificate issuing terminal by transmitting the stored customer information in connection with the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate server (1140), and correspondingly, the certificate server confirms the received authentication result (1145).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1150), the certificate server generates (or extracts) error information on the authentication failure based on the received identity verification result through a communication network. The process of transmitting the certificate issuing terminal to be output (1155).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1150), the certificate server requests a public key for issuing a public certificate to the certificate issuing terminal (1160), and correspondingly the certificate issuing terminal After generating the public key and the private key according to the public key request, and transmits the generated public key to the certificate server (1165).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1170), and transmits the generated public certificate information to a certificate issuing terminal (1175). The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected to a certificate issuing terminal (1180).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, the online request form for the wireless certification certificate should follow the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 11a and 11b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

12 illustrates a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

More specifically, FIG. 12 illustrates financial transaction request information including at least one customer account information, transaction amount information, and transaction authentication information for a predetermined customer to provide the financial transaction service to a financial transaction system through a predetermined financial transaction interface. If provided, the system for providing a financial transaction for providing the financial transaction service using the customer account information, transaction amount information and transaction authentication information included in the provided financial transaction request information in the financial transaction system However, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 12 to infer various implementation methods for constructing a financial transaction system for providing a financial transaction service. Includes all the implementation methods inferred, and the seal shown in FIG. It shall be limited to methods.

Hereinafter, at least one means for providing a financial transaction for providing the financial transaction service using financial transaction request information provided from the customer through a predetermined financial transaction interface on the financial transaction system shown in FIG. 12 and / or A component corresponding to the functional configuration is referred to as a "financial institution server 710" for convenience, and the financial institution server 710 in the present FIG. 12 providing the non-face-to-face financial transaction service is an internet banking server or a wireless banking server. It is preferable to include all kinds of non-face-to-face banking server, including at least one home banking server.

Referring to FIG. 12 according to an embodiment of the present invention, the financial transaction system for providing a financial transaction service includes at least one client terminal including at least one wired terminal and / or a wireless terminal used by a customer. The financial transaction terminal 1235, a communication network corresponding to a wired communication network and / or a wireless communication network to which the financial transaction terminal 1235 is connected, and the financial transaction service 1235 connected to the financial transaction terminal 1235 through the communication network. It comprises a financial institution server 710 for processing financial transactions for provision and the financial system 1230 in which the customer account is opened.

The financial system 1230, which processes the at least one financial transaction service through the customer account in connection with the financial institution server 710, includes at least one window terminal provided at a branch (and / or a branch) of the financial institution. And a predetermined financial network (for example, a party network), and provides a face-to-face financial transaction service for at least one financial transaction customer through the counter terminal.

In addition, the financial system 1230 may include at least one financial terminal including a cash dispenser / automatic teller machine (CD / ATM) provided at a branch (and / or a branch) of the financial institution, and / or the financial institution; At least one financial terminal provided in at least one affiliated financial institution (and / or another financial institution branch) and / or at least one financial terminal provided in a public place and a predetermined financial network (eg, CD Network), and provides a non-face-to-face financial transaction service to at least one financial transaction customer through the financial terminal.

In addition, the financial system 1230 is characterized in that associated with a predetermined Internet banking server, a network (eg, wired Internet, and / or IEEE 802.11x-based network connected to the TCP / IP-based backbone network through the Internet banking server) At least one client terminal (e.g., a personal computer equipped with the wired Internet access and browsing function) connected to a wireless LAN, and / or an HSDPA based wireless communication network, and / or an IEEE 802.16x based portable Internet. And / or provide a non-face-to-face financial transaction service to at least one or more financial transaction customers through a laptop, the wireless LAN / portable internet connection and browsing function, and / or the like.

In addition, the financial system 1230 is characterized in that associated with a predetermined wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based mobile communication network, and / or through the wireless banking server) PCS equipped with at least one wireless terminal (e.g., access and browsing function connected to the mobile communication network) connected to an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. At least one financial transaction through a Personal Communication System and / or Global System for Mobile (GSM) terminal and / or a Personal Digital Assistant (PDA) and / or a Smart Phone and / or Telematics) Provide non-face-to-face financial transaction services to customers.

In addition, the financial system 1230 is characterized in that it is associated with a predetermined IC chip-based wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based on the IC chip-based wireless banking server) Equipped with at least one wireless terminal (e.g., a financial IC chip) connected to a mobile communication network, and / or an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. The wireless terminal provides an IC chip-based non-face-to-face financial transaction service to at least one financial transaction customer.

In addition, the financial system 1230 is characterized in that it is associated with a predetermined telebanking server, and through the telebanking server to a predetermined wired voice telephone network (for example, public switched telephone network (PSTN)) At least one wired call terminal (e.g., a telephone) connected and / or at least one wireless call terminal (e.g., a PCS and a mobile communication network based on a Code Division Multiple Access (CDMA)) connected to a predetermined wireless voice call network (e.g., a PCS and And / or a non-face-to-face financial transaction service to at least one or more financial transaction customers through a GSM terminal and / or a smart phone.

In addition, the financial system 1230 is associated with a predetermined home banking server, at least one or more home appliances connected to a predetermined home network through the home banking server (eg, digital TV connected to a home network and / Or a non-face-to-face financial transaction service to at least one financial transaction customer through a refrigerator or the like.

In addition, the financial system 1230 is characterized in that associated with a predetermined TV banking server, at least one digital TV (for example, two-way digital TV, connected to a predetermined return channel (Return Channel) through the TV banking server) The non-face-to-face financial transaction service is provided to at least one financial transaction customer through a satellite DMB terminal or a terrestrial DMB terminal.

Referring to FIG. 12, the financial system 1230 is provided in a financial institution to open at least one financial account to at least one financial transaction customer and provide at least one financial transaction service based on the financial account. A computer system comprising: an accounting system for processing a window service such as credit or receiving or trust or foreign exchange occurring in at least one branch (or window), an information system for processing a headquarters business, a branch office information support, and a customer information management; Interconnection between the financial system 1230 and at least one other financial system 1230 (and / or payment system), and / or at least one non-face-to-face financial transaction means (e.g., provided in at least one external communication network) Internet banking, wireless banking, IC chip-based wireless banking, tele banking, TV banking, etc.) And an external system that provides access to 1230 and / or various financial transaction interfaces through at least one common network (eg, CD common network, financial common network). 1230 is an interface module corresponding to a middleware platform that provides interfacing between components in the financial system 1230, and predetermined information required for performing respective functions in components in the financial system 1230. And a DBMS (DataBase Management System) including at least one database for storing and managing (eg, ledger information, and / or customer information, and / or management information).

In addition, the financial system 1230 is intended by those skilled in the art and / or types of financial institutions (eg, commercial banks, savings banks, trust banks) provided with the financial system 1230 and the purpose of the financial system 1230. And according to the features, it is possible to further include at least one or more components, such as foreign exchange module (not shown), investment finance module (not shown), international module (not shown), in the technical field to which the present invention belongs Those skilled in the art will be familiar with the detailed technical details of the financial system 1230, and thus the detailed description thereof will be omitted for convenience, and the present invention is not limited thereto.

According to the present invention, the DBMS provided in the financial system 1230 is that the financial institution opens at least one financial account to at least one financial transaction customer, at least one financial transaction service based on the financial account And at least one ledger D / B for storing at least one ledger for providing, wherein the ledger D / B is at least one for processing at least one financial transaction to be provided to the financial transaction customer by the financial institution. The above ledger information (e.g., customer ledger, reception ledger, collateral ledger, etc.) and at least one ledger additional information corresponding to each ledger information (e.g., more specifically and / or supplementing the attributes / functions of each ledger) are relational (Relationship) is stored in association with the ledger information is stored in the customer account Including the response to a given account ledger is characterized in that formed.

Those skilled in the art to which the present invention pertains include at least one ledger information provided in the ledger D / B and each ledger according to the type of each financial institution and the purpose and characteristic of the financial system 1230. In addition to being familiar with at least one ledger additional information corresponding to the information, each ledger information is linked and stored in a relational relation, and / or predetermined ledger information and at least one ledger additional information are linked in a relational manner. Since it will be understood that the stored information, detailed description thereof will be omitted for convenience.

According to an embodiment of the present invention, the customer connects to the financial institution server 710 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network, When the financial transaction request information for providing the financial transaction service is input (or selected) through at least one user interface provided by the financial institution server 710, the client terminal receives a financial transaction request information on the financial transaction system through a predetermined communication network. It is preferable to transmit to the financial institution server 710 provided in.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or a home appliance terminal (eg, Set-Top-Box) connected to the TCP / IP based communication network, or a kiosk (KIOSK) connected to the TCP / IP based communication network, etc. It is preferable.

In addition, the wireless terminal connected to the wireless communication network is all terminal devices connected to a code division multiple access (CDMA) based mobile communication network, and / or all terminal devices connected to a high-speed downlink packet access (HSDPA) based wireless communication network, and / Or all terminal devices connected to the IEEE 802.16x based mobile Internet, and / or all terminal devices connected to Motorola's DataTAC method and / or Erricson's Mobitex type wireless data communication network, and are personal communications connected to the CDMA based mobile communication network. Terminal (Personal Communication System; PCS) and / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or personal information terminals (Personal Digital Assistant; PDA) and / or Smart Phone and / or Telematics, or HSDPA based wireless communication At least one wireless communication terminal connected to the trust network, or a portable Internet terminal connected to the IEEE 802.16x-based portable Internet, or a wireless data communication terminal connected to the DataTAC / Mobitex-based wireless data communication network, and the like.

In addition, the financial institution server 710 connected to the client terminal may be any one of an internet banking server and / or a wireless banking server and / or a telebanking server and / or a TV banking server according to a characteristic of the client terminal and a communication network. And / or preferably comprises a separate web server for the information registration.

In addition, the communication network connecting the client terminal and the financial institution server 710 may be a CDMA based mobile communication network and / or an HSDPA based wireless communication network and / or an IEEE 802.16x based portable device according to a type of wireless communication network to which the client terminal is connected. It is preferable that any one of the Internet and / or DataTAC / Mobitex-based wireless data communication network is included, and / or includes all types of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one user interface provided by the financial institution server 710, and inputs and / or selects at least one or more information through the user interface to the financial institution server 710. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the financial institution server 710, etc.) is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal corresponding to at least one or more wired terminals and / or wireless terminals, and thus the detailed description thereof is omitted for convenience. .

In the financial transaction system as described above, a client terminal including at least one or more wired terminal and / or wireless terminal used by the customer, at least one wired communication network connecting the client terminal and the financial institution server 710 and And / or the wireless communication network performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service.

According to another exemplary embodiment of the present invention, the financial transaction terminal 1235 may include an automatic teller machine (ATM) and a cash dispenser connected to a predetermined financial network (for example, a financial common network) in addition to the client terminal. A wired telephone network such as a financial automatic device (not shown) further including a cash dispenser (CD), and / or a public switched telephone network (PSTN) or a voice over IP (VoIP) network. Or further comprises a predetermined call terminal (not shown) connected to the mobile telephone network, and / or a predetermined call terminal (not shown) connected to a mobile telephone network, such as a wireless VoIP network, and / or Terminals (and / or servers) (not shown) provided in at least one or more institutions affiliated with the financial institution may be further included, whereby the present invention is not limited.

In the financial transaction system as described above, when the financial transaction terminal 1235 is the financial automatic device (not shown), the financial automatic device (not shown), the financial automatic device (not shown), and the financial institution server A financial network connecting 710 performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service, and / or the financial transaction terminal 1235 is connected to the call terminal. (Not shown), a wired telephone network and / or a wireless telephone network connecting the call terminal (not shown) and the call terminal (not shown) and the financial institution server 710 may provide the financial transaction service to the customer. A financial transaction interface for registering financial transaction request information, and / or provided to an institution affiliated with the financial institution that is the financial transaction terminal 1235. If the terminal (and / or server) (not shown), the terminal (and / or server) (not shown) and the terminal (and / or server) (not shown) connecting the financial institution server 710 The network performs a function of a financial transaction interface for registering the financial transaction request information for the customer to provide the financial transaction service.

The financial institution server 710 provided on the financial transaction system according to the present invention is a generic term for the financial transaction system side components connected to the financial transaction terminal 1235 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

According to an embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wired terminal and / or a wireless terminal connectable to an internet banking server on a predetermined internet banking system, the financial institution server 710 Is a predetermined Internet banking server provided on the Internet banking system, and / or a program provided on the Internet banking server, and / or accessible to the external system of the financial system 1230 through the Internet banking system. A server (or device), a program included in the server (or device), and / or on the financial system 1230 accessible through the Internet banking server (and / or the server (or device)). It may be a server (or device) provided in the external system, and / or a program provided in the external system on the financial system 1230, The present invention is not limited thereto.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wireless terminal connectable to a wireless banking server on a predetermined wireless banking system, the financial institution server 710 may be the wireless banking. A predetermined wireless banking server provided on the system, and / or a program provided in the wireless banking server, and / or a predetermined server accessible to the external system of the financial system 1230 through the wireless banking system ( Or a device), a program included in the server (or device), and / or external to the financial system 1230 accessible through the wireless banking server (and / or the server (or device)). It may be a server (or device) and / or a program provided in the external world on the financial system 1230, whereby the present invention is not limited All.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a call terminal (not shown) connectable to a telebanking server on a predetermined telebanking system, the financial institution server 710 may be configured for the telebanking. The banking system 1230 is a predetermined telebanking server (eg, an Automatic Response Service (ARS) server) provided on the system, and / or a program included in the telebanking server, and / or through the telebanking system. A server (or device) that is accessible to the outside world, a program included in the server (or device), and / or accessible through the telebanking server (and / or the server (or device)). It may be a server (or device) provided in the external system on the financial system 1230, and / or a program provided in the external system on the financial system 1230, whereby This is not limited.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a wired terminal (or two-way digital TV) capable of connecting with a TV banking server on a predetermined TV banking system, the financial institution server 710 may be configured as described above. A predetermined TV banking server provided on the TV banking system, and / or a program provided on the TV banking server, and / or a predetermined access to the external system of the financial system 1230 via the TV banking system. A foreign system on the financial system 1230 that is a server (or device), a program included in the server (or device), and / or accessible through the TV banking server (and / or the server (or device)). It may be a server (or device) provided in, and / or a program provided in the external system on the financial system 1230, whereby the present invention is not limited.

The financial transaction request information transmitted from the financial transaction terminal 1235 to the financial institution server 710 for providing the financial transaction service includes at least one predetermined customer account information, transaction amount information, and transaction authentication information. Characterized in that made.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the skilled person corresponding to the customer information (for example, the name of the account holder, or the customer account) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name, or bank code), branch information (e.g., branch code), contact information (e.g., the person who opened and in charge of the customer account) Name, contact person code, etc.) may be further included.

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1235 (or the financial The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1235 or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

According to an embodiment of the present invention, the financial institution server 710 includes an interface unit 1200 (or interface means) for connecting and managing a predetermined communication channel with the financial transaction terminal 1235 through the communication network. Characterized in that made.

According to an embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 1200 At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, when a browser program corresponding to a Hyper-Text Transfer Protocol (HTTP) protocol is provided in the client terminal, the interface unit 1200 connects a communication channel with the client terminal based on the TCP / IP protocol. It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an internet banking program) provided by the financial institution server 710, the interface unit 1200 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a financial automatic device connected to a predetermined financial network, the interface unit 1200 may perform the financial based on a protocol stack defined in the financial network. It is desirable to provide a communication interface for connecting at least one communication channel with an automation device and for transmitting and receiving at least one information (or data) using a communication protocol defined in a financial transaction related program included in the automated teller machine.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 1200 may include a protocol stack defined in the wireless communication network. It is preferable to provide a communication interface for transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal and connecting a predetermined communication channel with the client terminal. .

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 1200 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (e.g., WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Alternatively, when the client terminal is provided with a communication program (eg, an IC chip-based banking program) provided by the financial institution server 710, the interface unit 1200 may be connected to the client terminal based on the CDMA protocol. It connects a communication channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface unit 1200 may connect the wired telephone network and / or It is preferable to connect a communication terminal (not shown) with a predetermined call path based on a voice call protocol defined in a wireless telephone network, and to provide a communication interface for transmitting and receiving the voice call-based information (or data).

For example, the interface unit 1200 provides a communication interface for transmitting and receiving information based on Dual Tone MultiFrequency (DTMF) based on the call terminal and the communication path, and / or provides a communication interface for transmitting and receiving information based on voice recognition. to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface unit 1200 may define a protocol defined in the TV banking system. Connect a predetermined communication channel with the wired terminal (or bidirectional digital TV) based on the stack, and use the communication protocol defined in the communication program included in the wired terminal (or bidirectional digital TV) at least one or more information (or It is desirable to provide a communication interface for transmitting and receiving data.

Referring to FIG. 12, the financial institution server 710 connects a communication channel with a financial transaction terminal 1235 to the financial institution server 710 through the interface unit 1200, and / or the communication. When a financial transaction for providing the financial transaction service is requested through a channel, the financial transaction terminal 1235 inputs (or selects) predetermined financial transaction request information in connection with the interface unit 1200 and transmits the predetermined financial transaction request information. And an interface providing unit 1205 (or interface providing means) for generating (or extracting) a user interface and providing the same to the financial transaction terminal 1235. When a predetermined terminal-side banking program including a user interface is provided, the interface providing unit 1205 may be omitted.

The interface provider 1205 is provided in the financial transaction terminal 1235 after a predetermined financial transaction terminal 1235 connects a communication channel with the financial institution server 710 through the interface unit 1200. Corresponding to the functional configuration to generate (or select) the financial transaction request information to generate a predetermined user interface that can be transmitted to the financial institution server 710 via the communication network, and / or a predetermined database (not shown) And extract the generated (or extracted) user interface in cooperation with the interface unit 1200 to the financial transaction terminal 1235 through the communication network.

According to an embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface providing unit 1205 Generates (or extracts) a predetermined user interface that can be provided to a browser program and / or a communication program provided in the client terminal, and generates the generated (or extracted) user interface through the interface unit 1200. It is preferable to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a financial automatic device connected to a predetermined financial network, the interface providing unit 1205 may be a financial transaction related program provided in the financial automatic device. It is preferable to generate (or extract) a predetermined user interface that can be provided, and provide the generated (or extracted) user interface to the ATM using the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 1205 is a browser provided in the client terminal. It is preferable to generate (or extract) a predetermined user interface that can be provided by a program and / or a communication program, and to provide the client terminal with the generated (or extracted) user interface through the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface providing unit 1205 may include the call terminal (not shown). Generates (or extracts) a predetermined user interface that can be provided, and the user terminal (eg, ARS based user interface) generated (or extracted) through the interface unit 1200 to the call terminal (not shown). Is preferably provided.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1235 is a wired terminal (or a two-way digital TV) connected to a TV banking system, the interface provider 1205 may provide the wired terminal (or two-way digital). It is preferable to generate (or extract) a predetermined user interface that can be provided to a TV) and to provide the generated (or extracted) user interface to the wired terminal (or an interactive digital TV) through the interface unit 1200. .

In accordance with another embodiment of the present invention having at least one user interface for inputting (or selecting) the financial transaction request information to the financial transaction terminal 1235 to the financial institution server 710 via the communication network. When a predetermined terminal-side banking program is provided, the interface providing unit 1205 for providing the user interface to the financial transaction terminal 1235 may be omitted, and the present invention is not limited thereto.

According to an embodiment of the present invention, the user interface may input (or select) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information to transmit to the financial institution server 710. It is preferable to include the interface function.

Here, when providing a user interface for inputting (or selecting) the financial transaction request information, when using an authentication certificate as a transaction authentication means for a financial transaction request input (or selecting) through the user interface, the official possessed by the customer It is preferable to check the validity period (e.g., the number of available times / day of availability / certificate expiration date, etc.) for the certificate, and to process the output to further include the confirmed validity period.

Referring to FIG. 12, the financial institution server 710 inputs financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information through the user interface at the financial transaction terminal 1235. (Or the selection), the information receiving unit 1210 (or the receiving unit) receiving the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information in association with the interface unit 1200 (or Information receiving means), a validity checking unit 1220 (or validating means) for checking the validity of the customer account information, the transaction amount information, and the transaction authentication information included in the received financial transaction request information; In connection with the system 1230, the financial transaction for providing the financial transaction service is processed based on the verified financial transaction request information. In connection with the financial transaction processing unit 1225 (or financial transaction processing unit) and the financial transaction processing unit 1225 to generate predetermined financial transaction result information for the financial transaction for providing the financial transaction service, the interface unit ( And an information transmitter 1215 (or information transmission means) for transmitting the financial transaction result information to the financial transaction terminal 1235 in connection with 1200.

The financial transaction terminal 1235 inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface to the financial institution server through the communication network. It characterized in that the transmission to (710).

The information receiving unit 1210 inputs (or selects) the financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information through the user interface in the financial transaction terminal 1235. When transmitting through, it is characterized in that for receiving the financial transaction request information in conjunction with the interface unit 1200, and provides the received financial transaction request information to the validity verification unit 1220.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the skilled person corresponding to the customer information (for example, the name of the account holder, or the customer account) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name, or bank code), branch information (e.g., branch code), contact information (e.g., the person who opened and in charge of the customer account) Name, contact person code, etc.) may be further included.

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security The card further includes at least one or more security code information (eg, one or more security codes, or a combination of two or more security codes) included in the card, and / or is generated through an One Tome Password (OTP) generator provided to the customer. It is preferable to further comprise an OTP code.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1235 (or the financial The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1235 or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

The validity confirming unit 1220 checks whether the financial transaction request information received from the financial transaction terminal 1235 satisfies the validity for providing a financial transaction service.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for the financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1230. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is the account provided in the ledger D / B on the financial system 1230 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (eg, an encryption key provided in the financial transaction terminal 1235, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, the verification of the validity of the financial transaction request information is confirmed by requesting the validity of the certificate to the certificate server 705 before encrypting through the encryption key or before attaching the electronic signature through the encryption key, It is preferable to process so that the validity is verified only when the authorized certificate is confirmed to be valid.

For example, in the case where the customer uses the public certificate as a transaction authentication means for the financial transaction request, when the customer is set to activate / deactivate the public certificate only in a specific condition, the public certificate used in the transaction authentication means. It is preferable to request the certificate server 705 to confirm whether it is valid according to the activation / deactivation condition for the certificate, and to process the validity only when it is valid.

When the validity of the financial transaction request information is confirmed, the financial transaction processing unit 1225 is linked to the financial system 1230 having an account ledger corresponding to the customer account, the customer account information included in the financial transaction request information. And processing the financial transaction for providing the financial transaction service based on the transaction amount information and the transaction authentication information.

According to the implementation method of the present invention, the financial transaction processing unit 1225 is linked to the financial system 1230, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

When the financial transaction for providing the financial transaction service is processed by the financial transaction processor 1225, the information transmission unit 1215 is connected to the financial transaction processor 1225 to provide a financial transaction for the financial transaction service. Generate a financial transaction processing history including any of financial transaction approval details or financial transaction error details, and the financial transaction result information including the financial transaction processing details in connection with the interface unit 1200 through the communication network; Characterized in that the transmission to the financial transaction terminal 1235.

Here, the financial transaction processing history is characterized in that it comprises the customer account information and the transaction amount information, characterized in that it further comprises an authorization code (or error code) for the financial transaction.

The financial transaction result information may include a protocol structure for transmitting the generated financial transaction processing details to the financial transaction terminal 1235 through the communication network, wherein the financial transaction result information is the financial transaction request. It is preferable that the information is encrypted similarly to the information or transmitted to the financial transaction terminal 1235 with an electronic signature of the financial institution attached thereto.

13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates a case where a financial institution server 710 on the financial transaction system illustrated in FIG. 12 includes a non-face-to-face banking server function to which a client terminal can be connected through a predetermined communication network. After connecting to the financial institution server 710 to connect the communication channel for the financial transaction, and includes the customer account information, transaction amount information and transaction authentication information to the financial institution server 710 via the communication channel When the financial transaction request information is transmitted, the financial institution server 710 uses the client account information, transaction amount information, and transaction authentication information included in the received financial transaction request information to provide the financial transaction service. As an embodiment for providing the present invention, those skilled in the art to which the present invention pertains, see FIG. And / or may be modified to infer various implementation methods for the process of processing a financial transaction for providing a financial transaction service in the non-face-to-face manner, but the present invention includes all the implementation methods inferred, FIG. 13 It is not limited to the implementation method shown by.

Hereinafter, in FIG. 13, the client terminal shown in FIG. 12 is referred to as "terminal" for convenience, and the financial institution server 710 shown in FIG. 12 is called "server" for convenience.

Referring to FIG. 13, a terminal shown in FIG. 12 is a predetermined communication network (for example, when the terminal is a wired terminal, a TCP / IP based wired communication network, when the terminal is a wireless terminal, a CDMA based mobile communication network, and And / or request a financial transaction for providing the financial transaction service by accessing the server through an HSDPA-based wireless communication network and / or an IEEE 802.16x-based mobile Internet (1300). The communication channel is generated by generating (or extracting) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information for providing a service. It transmits to the terminal through the output (1305).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1310).

If the terminal receives (or selects) financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1315), the terminal receives the input through the communication channel ( Or) the selected customer account information, transaction amount information, and transaction authentication information to the server (1320), and the user account information, transaction amount information, and transaction authentication input (or selected) through the communication channel at the terminal. The transmitting of the information to the server may include electronically signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal and transmitting the information to the server. It is preferable that it further comprises.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1235 (or the financial The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1235 or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server receives and reads the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the communication channel to confirm the validity of the financial transaction request information (1325). The validity of the financial transaction request information may include decrypting the financial transaction request information when the financial transaction request information is electronically signed and / or encrypted through a security module (not shown) provided in the terminal. Or, and / or decrypting the financial transaction request information.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for the financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1230. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is the account provided in the ledger D / B on the financial system 1230 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (eg, an encryption key provided in the financial transaction terminal 1235, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, the verification of the validity of the financial transaction request information is confirmed by requesting the validity of the certificate to the certificate server 705 before encrypting through the encryption key or before attaching the electronic signature through the encryption key, It is preferable to process so that the validity is verified only when the authorized certificate is confirmed to be valid.

For example, in the case where the customer uses the public certificate as a transaction authentication means for the financial transaction request, when the customer is set to activate / deactivate the public certificate only in a specific condition, the public certificate used in the transaction authentication means. It is preferable to request the certificate server 705 to confirm whether it is valid according to the activation / deactivation condition for the certificate, and to process the validity only when it is valid.

If the validity of the financial transaction request information is not authenticated (1330), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1335), and the communication channel. The financial transaction result information including the financial transaction processing history is transmitted to the terminal (1355), and the terminal outputs the financial transaction result including the financial transaction processing history (1360).

On the other hand, if the validity of the financial transaction request information is authenticated (1330), the server is linked with the financial system 1230 having an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1340).

According to the implementation method of the present invention, the financial transaction processing unit 1225 is linked to the financial system 1230, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1345), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. In operation 1350, the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the communication channel (1355). In response, the terminal transmits the financial transaction result including the financial transaction processing history. The screen is output (1360).

14A, 14B, and 14C illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

In more detail, FIGS. 14A, 14B, and 14C illustrate that the client terminal is based on TCP / IP when the financial transaction system illustrated in FIG. 12 is realized through an Internet banking system among non-face-to-face channel-based banking systems. After accessing the Internet banking server through a network (eg, the Internet) and performing a predetermined customer authentication procedure, the client terminal sends predetermined financial transaction request information for providing a financial transaction service to the Internet banking server. When the financial transaction request information including account information, transaction amount information, and transaction authentication information is transmitted, the financial institution server 710 receives customer account information, transaction amount information, and transaction authentication included in the received financial transaction request information. For implementing a financial transaction for providing the financial transaction service using information As those skilled in the art to which the present invention pertains, financial transactions for providing financial transaction services in a non-face-to-face manner other than the Internet banking by referring to and / or modifying the drawings 14a, 14b and 14c. Various implementation methods for the process of processing may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

That is, when accessing the Internet banking server through a predetermined browser program (for example, Microsoft Internet Explorer, and / or Netscape's Netscape Navigator, etc.) included in the client terminal in FIGS. 14A, 14B, and 14C, Although the implementation method for connecting the Internet banking-based financial transaction channel for registering the financial transaction request information between the client terminal and the Internet banking server based on the browser program is shown, those of ordinary skill in the art to which the present invention pertains. The client terminal based on a predetermined internet banking program mounted on the client terminal by referring to and / or modifying an internet banking-based financial transaction channel connection method using the browser programs shown in FIGS. 14a, 14b, and 14c. And internet banking standing Although it is possible to infer an implementation method of connecting an internet banking-based financial transaction channel for registering financial transaction request information therebetween, the present invention includes an internet banking-based financial transaction provided based on the internet banking program, The present invention is not limited by this.

In addition, those skilled in the art to which the present invention pertains, in addition to the Internet banking system by referring to and / or modify the Internet banking-based financial transaction channel connection method shown in Figure 14a, 14b and 14c, Corresponding to each non-face-to-face channel for financial transaction processing for providing the financial transaction service in all kinds of other non-face-to-face banking systems including at least one of a telebanking system and / or a wireless banking system and / or a TV banking system. It would be possible to infer an implementation method of connecting a financial transaction channel, but the present invention may be of any kind including the telebanking system and / or the wireless banking system and / or the TV banking system and / or the non-faced channel banking system proposed in the future. The non-face-to-face based financial transactions of the present invention, the technical configuration of the present invention 14a and 14b It limited to the case of the Internet banking illustrated in surface 14c in no way.

In the following figures 14a, 14b and 14c, the client terminal is referred to as " terminal " for convenience, and the Internet banking server corresponding to the financial institution server 710 is referred to as " server " for convenience.

Referring to FIGS. 14A, 14B, and 14C, when the terminal executes a predetermined browser program and accesses the server through the TCP / IP-based network (1400a), the server may access the terminal and the server through the browser. The communication channel is connected to the terminal (1405a), wherein the communication channel is generated (or extracted) from the server at the request of a browser program provided to the terminal and transmitted to the terminal. This means that a predetermined communication session is allocated to receive at least one or more information (or data) input (or selected) based on a predetermined user interface included in the web page in a browser program included in the web browser.

According to another embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server is based on a predetermined communication protocol defined in the internet banking program and at least one or more information (or Communication channel for transmitting / receiving data) can be allocated.

Thereafter, the server is equipped with a predetermined security module for internet banking on the terminal in a predetermined web page (eg, an internet banking main page) generated (or extracted) for providing to the terminal, and / or the By providing a predetermined script for checking whether to update the security module to the terminal, whether the terminal is equipped with a predetermined security module for Internet banking, and / or update the security module Check (1410a).

According to another exemplary embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server requests the version information and / or the last update date information from the internet banking program, thereby providing the Internet banking program (and / Or a security module associated with the Internet banking program) can be updated.

If a predetermined security module is to be mounted and / or updated in the terminal (1415a), the server transmits the latest version of the security module for internet banking to the terminal according to a remote program installation procedure defined in the browser program. And mount and / or update (1420a).

If the terminal does not need to install and / or update the latest version of the internet banking security module (1425a), or if the terminal does not need to install and / or update the internet banking security module (1415a), the server may By activating the security module for Internet banking mounted on the terminal, to connect the security channel for Internet banking (or switch the communication channel between the terminal and the server to a secure channel) between the terminal and the server (1430a), where the security for Internet banking A channel is attached to a predetermined digital signature and / or at least one encryption method (or data) of information (or data) required for security among information (or data) included in a web page to be provided from the server to the terminal. And / or provide an encryption by using an encryption algorithm, the terminal may verify the electronic signature and / or the encryption scheme (and / or encryption algorithm). Means a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to the algorithm), and the information to be provided to the server for registering financial transaction request information in the terminal. (Or data) attaches a predetermined digital signature, and / or encrypts and transmits at least one or more encryption methods (and / or encryption algorithms), the server verifies the electronic signature and / or the encryption method ( And / or a communication channel for decrypting the information (or data) with a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm).

According to another exemplary embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the Internet banking-based secure channel may be provided by the server to the terminal according to a communication protocol defined in the internet banking program (or When the electronic signature is attached to the data) and / or encrypted and provided by at least one or more encryption methods (and / or encryption algorithms), the terminal confirms the electronic signature and / or the encryption method (and / or Means a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm), and is provided to the server for registering financial transaction request information in the terminal. Attach certain electronic signatures to information (or data) and / or at least one or more Encrypting the data using an encryption method (and / or an encryption algorithm), and verifying the digital signature at the server and / or a predetermined decryption method (and / or decryption) corresponding to the encryption method (and / or encryption algorithm). Algorithm) means a communication channel to decode the information (or data).

According to the present invention, the security module is to perform an electronic signature attachment, and / or encryption, and / or protection function for the information (or data) using the authorized certificate of the customer mounted in the terminal It features.

When the secure channel for internet banking is connected, the server requests the terminal to perform an internet banking customer authentication procedure through the browser program (1435a).

According to an exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (eg, ID / PW, customer number, etc., registered by the customer during the internet banking application process) through the terminal. ) Is input (or generated) and transmitted to the server, wherein the server comprises authenticating a customer connected through the terminal as an internet banking customer based on the customer authentication data, wherein the customer authentication data It is preferable that the digital signature and / or encrypted is transmitted through the secure channel.

According to another exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (for example, an ID / PW or customer number registered by the customer during the internet banking application process) through the terminal. And the like) are input (or generated) and transmitted to the authentication server, the authentication server authenticates the customer connected through the terminal as the Internet banking customer based on the customer authentication data, and provides the result to the server. In this case, it is preferable that the customer authentication data includes public certificate-based authentication data, and the authentication server is a server for authenticating the public certificate-based authentication data.

Thereafter, the terminal inputs (or generates) predetermined customer authentication data according to the request, transmits the electronic signature and / or encryption to the server (and / or authentication server) through the security module, and performs internet banking customer authentication. Request (1440a), the server (and / or authentication server) authenticates a customer connected through the terminal as an Internet banking customer for non-face-to-face financial transactions based on the customer authentication data received from the terminal. (1445a).

If the Internet banking customer authentication fails (1450a), the server blocks the Internet banking secure channel for the terminal (1455a), thereby preventing the Internet banking-based financial transaction through the terminal.

On the other hand, if the Internet banking customer authentication succeeds (1450a), the server converts the Internet banking security channel into an internet banking-based financial transaction channel in connection with a security module provided in the terminal (1460a), where the Internet banking-based The financial transaction channel refers to the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information from the terminal to the server to process the internet banking based financial transaction. It means the communication channel.

Subsequently, the terminal requests an internet banking-based financial transaction for providing the financial transaction service to the server through the financial transaction channel (1400b), and correspondingly, the server requests the client account information for providing the financial transaction service. Generate (or extract) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one transaction amount information and transaction authentication information, and transmitting the same to the terminal through the financial transaction channel. (1405b).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1410b).

If the financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information is input (or selected) through the user interface (1415b), the terminal receives the input through the financial transaction channel. And transmits the selected customer account information, the transaction amount information, and the transaction authentication information to the server (1420b), and the customer account information and the transaction amount information inputted (or selected) through the financial transaction channel in the terminal. Transmitting the transaction authentication information to the server, by digitally signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal to the server. It is preferable to further comprise transmitting.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1235 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1235 or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server receives and reads the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the financial transaction channel to confirm the validity of the financial transaction request information; 1425b) confirming the validity of the financial transaction request information includes: when the financial transaction request information is electronically signed and / or encrypted through a security module (not shown) provided in the terminal, the financial transaction request information. And decrypting the financial transaction request information.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for the financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1230. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is the account provided in the ledger D / B on the financial system 1230 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1230 corresponding to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (eg, an encryption key provided in the financial transaction terminal 1235, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, the verification of the validity of the financial transaction request information is confirmed by requesting the validity of the certificate to the certificate server 705 before encrypting through the encryption key or before attaching the electronic signature through the encryption key, It is preferable to process so that the validity is verified only when the authorized certificate is confirmed to be valid.

For example, in the case where the customer uses the public certificate as a transaction authentication means for the financial transaction request, when the customer is set to activate / deactivate the public certificate only in a specific condition, the public certificate used in the transaction authentication means. It is preferable to request the certificate server 705 to confirm whether it is valid according to the activation / deactivation condition for the certificate, and to process the validity only when it is valid.

If the validity of the financial transaction request information is not authenticated (1430b), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1435b), and the financial transaction. The financial transaction result information including the financial transaction processing history is transmitted to the terminal through a channel (1455b). In response, the terminal outputs the financial transaction result including the financial transaction processing history (1460b).

On the other hand, if the validity of the financial transaction request information is authenticated (1430b), the server is linked to the financial system 1230 having an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1440b).

According to the implementation method of the present invention, the financial transaction processing unit 1225 is linked to the financial system 1230, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1445b), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. (1450b), the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the financial transaction channel (1455b), and the terminal corresponding to the financial transaction result including the financial transaction processing history; Screen is output (1460b).

The present invention has an advantage of suggesting a method for preventing hacking by issuing an authentication certificate by setting activation / deactivation conditions, thereby preventing the problem of being exposed to hacking in the state where the customer is not using it.

Claims (4)

In the certificate management system provided in the server connected to the storage medium that stores any one or more of the condition information of the time conditions, date conditions, day of the week when the certificate is activated, Means for confirming whether or not to activate the official certificate by comparing the condition at the time the customer requests the use of the financial transaction service with the storage medium and the activation certificate of the customer in connection with the storage medium when the customer requests the use of the financial transaction service through the authorized certificate of the customer. ; Means for processing the use of financial transaction services through the authorized certificate when the authorized certificate of the customer is activated; And In the deactivated state of the certificate, the customer confirms the communication means information registered in advance, and if the authentication is obtained through a communication means corresponding to the confirmed communication means information, the temporary certificate can be used temporarily under the deactivation conditions And a means for processing; an authorized certificate management system in which activation / deactivation conditions are set. delete In the method of operating a public certificate of a server connected to a storage medium for storing the condition of activation / deactivation of public certificate, When requesting activation of a certificate for use of a certificate of a customer, confirming whether the certificate of the customer is activated according to the condition of activation / deactivation of the certificate of the customer in association with the storage medium; If the customer's public certificate is activated, processing the use of the financial transaction services through the public certificate; Authorized certificate management method comprising the activation / deactivation conditions set to include. A computer-readable recording medium recording a program for executing the method of claim 3.

Images