KR20140033478A - Method for processing registering one time password by using user's handhold phone - Google Patents

Abstract

The present invention relates to a method for processing one time password (OTP) using a user′s cellular phone. The method for processing OTP using a user′s cellular phone through a server communicating with the user′s cellular phone includes: a step of storing information of the user′s cellular phone on which a program to display OTP is installed, information of the user who uses the program on the cellular phone, and a personal identification number (PIN) in order to provide an OTP, which is dynamically generated by an OTP generator on the designated server, to the user′ s cellular phone; a step of receiving the PIN, which is input by the program of the user′s cellular phone corresponding to the user′s information, by using the user′s cellular phone; a step of authenticating the PIN received from the program of the user′s phone by using the PIN information mapped to the user′s phone information; a step of confirming the OTP dynamically generated through OTP generator on the designated server in order to provide the PIN to the program of the user′s cellular phone when the PIN is authenticated; a step of encrypting the OTP which can be decoded using the program of the user′s phone; and a step of transmitting the encrypted OTP to the program of the user′s cellular phone. [Reference numerals] (100) Server for processing mobile banking service; (105) Means for registering information; (110) Means for processing cellular phone; (115) Means for information authentication; (120) Means for OTP transmission; (125) Means for OPT authentication; (130) Means for transmitting authentication results; (135) Means for processing OTP; (140) Means for confirming information; (145) Storing medium; (AA) Cellular phone; (BB) Mobile communications network (communications server); (CC) Information on a user's personal identification number; (DD) Information on a user's cellular phone; (EE) Key for generating OTP; (FF) OTP generator; (GG) Private network

Description

Method for Processing Registering One Time Password by using User's Handhold Phone}

The present invention provides a method for processing an OTP using a customer's mobile phone executed by a server communicating with a customer's mobile phone, the method comprising using a customer's mobile phone unique information having a program for displaying an One Time Password (OTP) and a program of the customer's mobile phone. Storing the personal identification number information for providing the customer unique information of the customer and the OTP generated dynamically through the OTP generating program on the designated server to the program of the customer mobile phone, and storing the personal identification number information from the program of the customer mobile phone corresponding to the customer mobile phone unique information. Receiving a personal identification number entered through the customer's mobile phone, and using the personal identification number information mapped to the customer's mobile phone unique information to authenticate the personal identification number received from the program of the customer mobile phone, and if the personal identification number is authenticated , Through the OTP generation program of the designated server OTP using the customer's mobile phone to check the OTP dynamically generated to provide the program of the mobile phone, to encrypt the OTP to be decrypted through the program of the customer mobile phone, and to transmit the encrypted OTP to the program of the customer mobile phone It is about a processing method.

In general, OTP (One Time Password) is used to replace a security card when using financial transactions such as Internet banking or phone banking, and banks have used OTP generators to generate OTP.

In recent years, in order to reduce the economic waste caused by the spread of the OTP generator, a VM or a program having an OTP generation function is downloaded directly to the user's mobile phone, and then OTP generation is generated in the user's mobile phone.

However, when OTP is generated directly on the user's mobile phone, the OTP generated through the user's mobile phone can be used in Internet banking or phone banking. However, two-factor authentication rules, that is, a medium through which the user uses banking, are used. Because of the security problem in accordance with the regulation, which must be separated into two or more media that provide security information and security information, mobile banking using a mobile phone that generates an OTP cannot use the OTP generated by the mobile phone. Violation of the two-factor authentication rule due to the identity of the medium / phone and the medium / phone generating the OTP).

For this reason, the use of OTP in mobile banking using a mobile phone requires a separate OTP generator, which leads to economic waste of distributing OTP generation program that can be downloaded and used in a mobile phone as a separate OTP generator. This will adversely affect the expansion of banking usage and convenience.

An object of the present invention is a method for processing an OTP using a customer's mobile phone executed by a server communicating with a customer's mobile phone, the unique information of a customer's mobile phone having a program for displaying one time password (OTP) and a program of the customer's mobile phone. A first step of storing personal identification number information for providing the customer unique information of the customer using the OTP and the OTP generated dynamically through the OTP generation program on the designated server to the program of the customer mobile phone and the customer corresponding to the customer mobile phone unique information A second step of receiving a personal identification number input through the customer mobile phone from the program of the mobile phone and authenticating the personal identification number received from the program of the customer mobile phone by using the personal identification number information mapped to the customer mobile phone unique information; If the third step and the personal identification number is authenticated, the designated server A fourth step of checking the dynamically generated OTP to provide the program of the customer's mobile phone through an OTP generation program, and a fifth step of encrypting the OTP so that the program can be decrypted through the program of the customer's mobile phone and the program of the customer's mobile phone. According to an aspect of the present invention, there is provided a method for processing an OTP using a customer mobile phone, which includes a sixth step of transmitting the encrypted OTP.

An OTP processing method using a customer mobile phone according to the present invention is an OTP processing method using a customer mobile phone executed by a server communicating with a customer mobile phone, the customer mobile phone having a program for displaying one time password (OTP). A first step of storing the unique information, the personal information of the customer using the program of the customer's mobile phone, and personal identification number information for providing the program of the customer's mobile phone with the OTP generated dynamically through the OTP generation program on the designated server; A second step of receiving a personal identification number input through the customer cellular phone from a program of the customer cellular phone corresponding to the unique information of the customer cellular phone, and from the program of the customer cellular phone using the personal identification number information mapped to the customer cellular phone unique information; A third step of authenticating the received personal identification number; When the personal identification number is authenticated, a fourth step of checking the dynamically generated OTP for providing to the program of the customer's mobile phone through the OTP generation program of the designated server and encrypting the OTP to be decryptable through the program of the customer's mobile phone And a fifth step of transmitting the encrypted OTP to a program of the customer mobile phone.

In the OTP processing method using a customer mobile phone according to the present invention, the customer mobile phone unique information, the phone number of the customer mobile phone provided with the program, the terminal information of the customer mobile phone provided with the program, uniquely generated and the program Identification code stored in the memory unit of the customer mobile phone having a, characterized in that it comprises at least one of the identification code stored in the USIM of the customer mobile phone provided with the program.

In the OTP processing method using a customer mobile phone according to the present invention, the method further comprises the step of processing to provide a program for displaying the OTP dynamically generated through the OTP generation program on the designated server to the customer mobile phone; do.

In the OTP processing method using a customer mobile phone according to the present invention, it characterized in that it further comprises the step of processing to provide a decryption key for decrypting the encrypted OTP to the program of the customer mobile phone.

In the OTP processing method using a customer mobile phone according to the present invention, the second step is characterized in that it further comprises the step of receiving the unique information of the customer mobile phone from the program of the customer mobile phone.

In the OTP processing method using the customer mobile phone according to the present invention, the third step, OTP generation of the customer mobile phone equipped with the program by using the customer mobile phone unique information received from the program of the customer mobile phone And authenticating with the OTP medium displaying the dynamically generated OTP through the program.

In the OTP processing method using the customer's mobile phone according to the present invention, the fourth step, the OTP generated by the customer's mobile phone equipped with the program via the OTP generation program of the server designated by the customer's mobile phone unique information The OTP medium is authenticated with the OTP medium and is dynamically generated through the OTP generating program of the designated server when it is authenticated that the OTP generated dynamically through the OTP generating program through the personal identification number is provided to the program of the customer's mobile phone. It is characterized by identifying the OTP.

In an OTP processing method using a customer mobile phone according to the present invention, mapping the customer mobile phone unique information or customer unique information with an OTP generation program of a designated server that dynamically generates an OTP to be displayed through a program of the customer mobile phone. The method may further include identifying the OTP dynamically generated through the mapped OTP generating program.

In an OTP processing method using a customer mobile phone according to the present invention, the method further comprises the step of mapping the customer mobile phone unique information or customer unique information and a generated key value for dynamically generating an OTP to be displayed through a program of the customer mobile phone. The fourth step may include identifying the dynamically generated OTP by applying the mapped generation key value to the OTP generator of the designated server.

In an OTP processing method using a customer mobile phone according to the present invention, the method further comprises generating an encryption key corresponding to a decryption key corresponding to a program of the customer mobile phone using the unique information of the customer mobile phone. Step, characterized in that for encrypting the OTP using the generated encryption key.

In the OTP processing method using a customer mobile phone according to the present invention, it characterized in that it further comprises the step of connecting an encrypted communication section between the server and the program of the customer mobile phone.

In the OTP processing method using the customer's mobile phone according to the present invention, the OTP is characterized in that it is encrypted twice by the end-to-end encryption method using the encryption key and the encryption method corresponding to the encrypted communication section.

In an OTP processing method using a customer mobile phone according to the present invention, the server communicating with the customer mobile phone and the server having the OTP generation program is characterized in that it comprises a single server, or a separate server linked to each other.

One time password (OTP) processing method for a mobile banking customer according to the present invention includes storing and registering customer personal identification number information as an OTP generation condition to be provided by the customer when using mobile banking in the server, and in the server, At least one customer's personal identification number information and customer's mobile phone's unique information linked to the customer's personal identification number information are stored and registered in the storage medium in connection with an OTP generation key value or OTP generation program that the customer will provide when using mobile banking. And authenticating personal identification number information transmitted from the customer mobile phone at the server when using the mobile banking of the customer, and authenticating the personal identification number information transmitted from the customer mobile phone on the storage medium at the server. Customer carrying connected with the customer identification number information and the customer identification number information Identifying an OTP generation key value or OTP generation program associated with information including one or more pieces of unique information, and the server generates the OTP generation key value or OTP generation program through the identified OTP generation key value or OTP generation program. Alternatively generating an OTP, encrypting the alternatively generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone, and transmitting the encrypted OTP to the mobile phone by the server; Characterized in that it comprises a step of processing.

On the other hand, OTP (One Time Password) processing method for a mobile banking customer according to the present invention, the customer's personal identification number information required when using the customer's mobile banking on the server and the OTP generation key to provide when the customer uses mobile banking (KEY A value or OTP generation program is stored and registered in a storage medium, and when using the customer's mobile banking, the server authenticates the personal identification number information transmitted from the customer's mobile phone through the server managing the storage medium, Receiving an OTP generation key (KEY) value or OTP generation program to be provided when using the mobile banking of the customer in response to the authentication result, and the mobile phone through the OTP generation key (KEY) value or OTP generation program received from the server Generating an alternative OTP to be generated in the server; Encrypting using an encryption key corresponding to the; and processing the encrypted OTP to be transmitted from the server to the mobile phone.

On the other hand, OTP (One Time Password) processing method for a customer using a mobile banking according to the present invention, processing to store and register the customer personal identification number information required when using the customer's mobile banking on the storage medium in the OTP generation conditions And when using the customer's mobile banking, the step of authenticating the personal identification number information transmitted from the customer mobile phone through the server managing the storage medium in the server, and if the personal identification number information transmitted from the customer mobile phone is authenticated, Generating an OTP to be generated in the mobile phone by using an OTP generation key (KEY) value or an OTP generating program to be provided when the mobile banking of the customer is used in the server; and storing the replacement generated OTP in the mobile phone in the server. Encrypting using an encryption key corresponding to a decryption key; Including the step of processing such that the processed OTP transmitted to the cellular phone characterized by comprising.

On the other hand, OTP (One Time Password) processing method for a mobile banking customer according to the present invention, the server stores the customer personal identification number information required when using the mobile banking in the first storage medium, the processing to register, Processing the OTP generation key (KEY) or OTP generation program to be stored and registered in a second storage medium to be provided by the customer when using mobile banking; and managing the first storage medium by a server when the customer uses mobile banking. Authenticating the personal identification number information transmitted from the customer's mobile phone through a server; and when the personal identification number information transmitted from the customer's mobile phone is authenticated, when using the mobile banking of the customer from a server managing the second storage medium in the server. Receiving an OTP generating key value or an OTP generating program to be provided; and receiving the received OTP generating key from the server. Generating an OTP to be generated in the mobile phone through a value or an OTP generating program, encrypting the OTP generated by the server using an encryption key corresponding to a decryption key previously stored in the mobile phone; And processing the encrypted OTP to be transmitted to the mobile phone by the server.

On the other hand, OTP (One Time Password) processing method for a customer using a mobile banking according to the present invention, the customer mobile phone connected to the customer personal identification number information and the customer personal identification number information required when the customer uses the mobile banking information registration means At least one unique information connected to an OTP generation key or key OTP generation program to be provided by the customer when using mobile banking, and storing and registering the unique information in a storage medium, and when using the mobile banking of the customer, at the information authentication means. Authenticating the personal identification number information transmitted from the mobile phone, and if the personal identification number information transmitted from the customer mobile phone is authenticated, the customer personal identification number information and the customer personal identification number information on the storage medium in the information checking means. OTP associated with information that contains one or more unique information about the customer's mobile phone Confirming a generation key value or an OTP generation program; and alternatively generating an OTP to be generated by the mobile phone through the identified OTP generation key value or OTP generation program in the OTP processing means, and then replacing And encrypting the generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone, and processing the encrypted OTP to be transmitted to the mobile phone by an OTP transmission means. do.

On the other hand, OTP (One Time Password) processing method for a mobile banking customer according to the present invention, the customer registration number information required when using the customer's mobile banking in the information registration means and OTP generation key to provide when the customer uses mobile banking (KEY) value or OTP generating program is stored and registered in the storage medium, and when using the customer's mobile banking, personal identification number information transmitted from the customer's mobile phone through the server managing the storage medium in the information authentication means Receiving an OTP generation key or an OTP generation program to be provided when the mobile banking is used by the customer through a server managing the storage medium in response to the authentication result by the information receiving means; OTP to be generated by the mobile phone through the received OTP generation key (KEY) value or OTP generation program in the processing means After generating a substitute, encrypting the generated generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone, and processing the encrypted OTP to be transmitted to the mobile phone by an OTP transmission means. Characterized in that comprises a.

On the other hand, the OTP (One Time Password) processing method for a mobile banking customer according to the present invention, the information registration means to store and register the customer personal identification number information required when using the customer's mobile banking in the first storage medium and And processing the OTP generation key (KEY) value or OTP generation program to be stored and registered in a second storage medium when the customer uses mobile banking, and storing the first information in an information authentication means when the customer uses mobile banking. Authenticating the personal identification number information transmitted from the customer mobile phone through the server managing the medium; and if the personal identification number information transmitted from the customer mobile phone is authenticated, from the server managing the second storage medium in the information receiving means. Receiving an OTP generating key value or an OTP generating program to be provided when the customer uses mobile banking; Means for generating an OTP to be generated by the mobile phone through the received OTP generation key value or an OTP generating program, and then using the encryption key corresponding to the decryption key previously stored in the mobile phone for the generated OTP. And the step of encrypting and processing the encrypted OTP to be transmitted to the mobile phone by the OTP transmission means.

On the other hand, OTP (One Time Password) processing method for a customer using a mobile banking according to the present invention, the information registration means for storing and registering the customer personal identification number information required when using the customer's mobile banking on the storage medium under OTP generation conditions A step of authenticating the personal identification number information transmitted from the customer's mobile phone through a server managing the storage medium by the information authentication means when the mobile banking of the customer is used; and the personal identification number information transmitted from the customer's mobile phone. Is authenticated, the OTP processing means generates an OTP to be generated in the mobile phone by using an OTP generation key (KEY) value or an OTP generating program to be provided when using the mobile banking of the customer, and then replaces the generated OTP with the mobile phone. Encrypting using an encryption key corresponding to a decryption key stored in the storage unit; In characterized by comprising a step of processing such that the OTP of the encryption processing sent to the mobile phone.

OTP processing method for mobile banking according to the present invention, characterized in that it further comprises the step of authenticating the validity of the OTP input transmitted through the mobile phone.

OTP processing method for mobile banking according to the present invention, characterized in that it further comprises the step of providing a validity authentication result for the OTP input through the mobile phone to the mobile banking processing server through the customer mobile phone.

The OTP processing method for mobile banking according to the present invention is characterized in that a communication section between the server and the mobile phone is processed as an encryption section.

In the OTP processing method for mobile banking according to the present invention, the server is characterized by consisting of a single server or two or more separate servers.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the above-described OTP processing method for mobile banking.

On the other hand, the OTP processing system for mobile banking according to the present invention, the customer mobile phone banking the customer personal identification number information and customer mobile phone unique information connected to the customer personal identification number information required when the customer uses the mobile banking Information registration means for storing and registering in the storage medium in connection with the OTP generation key (KEY) value or OTP generation program to be provided when using, and information for authenticating the personal identification number information transmitted from the customer's mobile phone when using the customer's mobile banking. Authentication means, and if the personal identification number information transmitted from the customer mobile phone is authenticated, information including one or more unique information of the customer mobile phone connected to the customer personal identification number information and the customer personal identification number information on the storage medium; Information that identifies the associated OTP generation key (KEY) value or OTP generator Substituting and generating the OTP to be generated in the mobile phone through the confirmed OTP generation key (KEY) value or OTP generation program, and then replaces the generated OTP encryption key corresponding to the decryption key previously stored in the mobile phone And an OTP transmission means for processing the encrypted OTP to be transmitted to the mobile phone.

On the other hand, the OTP processing system for mobile banking according to the present invention, the customer's personal identification number information required when using the customer's mobile banking and OTP generation key (KEY) value or OTP generation program to be provided when the customer uses the mobile banking is stored Information registration means for processing to be stored and registered in a medium, information authentication means for authenticating personal identification number information transmitted from a customer's mobile phone through a server managing the storage medium when the mobile banking of the customer is used, and corresponding to the authentication result. Information receiving means for receiving an OTP generation key value or an OTP generation program to be provided when the mobile banking is used by the server managing the storage medium, and the received OTP generation key value or OTP generation. After generating an OTP to be generated in the mobile phone through a program, the alternative generated OTP is stored in the mobile phone. Using the encryption key corresponding to the decryption key, characterized in that the OTP and processing means for processing encrypted, the encryption processing OTP OTP comprising a transmission means for processing to be sent to the mobile phone.

On the other hand, the OTP processing system for mobile banking according to the present invention, to store and register the customer personal identification number information required when using the customer's mobile banking in the first storage medium, OTP to be provided when the customer uses mobile banking Information registration means for processing the generated key (KEY) or OTP generating program to be stored and registered in the second storage medium, and when using the mobile banking of the customer, transmitted from the customer mobile phone through the server managing the first storage medium Information authentication means for authenticating the personal identification number information, and if the personal identification number information transmitted from the customer mobile phone is authenticated, OTP generation key (KEY) to be provided when using the mobile banking of the customer from the server managing the second storage medium Information receiving means for receiving a value or an OTP generating program and the received OTP generating key value or an OTP generating program; OTP processing means for alternatively generating an OTP to be generated in the mobile phone, and then encrypting the alternatively generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone, and the encrypted OTP is the mobile phone. It characterized in that it comprises an OTP transmission means for processing to be transmitted to.

On the other hand, the OTP processing system for mobile banking according to the present invention, the information registration means for processing to be stored, registered on the storage medium under the OTP generation conditions of the customer personal identification number information required when using the customer's mobile banking, and the customer When using the mobile banking, information authentication means for authenticating the personal identification number information transmitted from the customer's mobile phone through the server managing the storage medium, and if the personal identification number information transmitted from the customer's mobile phone is authenticated, when using the mobile banking of the customer After generating an OTP to be generated in the mobile phone by using an OTP generation key (KEY) value or an OTP generating program to be provided, encrypting the generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone. OTP processing means for processing and the encrypted OTP is transmitted to the mobile phone Rehabilitation is characterized in that it comprises an OTP transmission means.

On the other hand, the OTP processing system for mobile banking according to the present invention, when using the customer's mobile banking information authentication means for authenticating the personal identification number transmitted from the customer's mobile phone, and the personal identification number information transmitted from the customer's mobile phone Information authentication means for identifying an OTP generation key (KEY) value or an OTP generation program associated with the information including one or more pieces of customer mobile phone identification information connected to the customer personal identification number information and the customer personal identification number information when authenticated; Substituting the generated OTP to be generated by the mobile phone through the identified OTP generation key (KEY) value or OTP generation program, and encrypts the generated OTP using an encryption key corresponding to the decryption key previously stored in the mobile phone OTP processing means for processing, and OTP processing so that the encrypted OTP is transmitted to the mobile phone Characterized in that it comprises a transmission means.

On the other hand, the OTP processing system for mobile banking according to the present invention, when using the customer's mobile banking information authentication means for authenticating the personal identification number transmitted from the customer's mobile phone, and the personal identification number information transmitted from the customer's mobile phone If the authentication, OTP generating key (KEY) value or information receiving means for receiving the OTP generating key (KEY) value or OTP generating program to be provided when using the mobile banking of the customer through the server managing the OTP generating program, and the received OTP that generates an OTP to be generated in the mobile phone through an OTP generation key (KEY) value or an OTP generation program, and then encrypts the generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone. A processing means and an OTP transmission means for processing the encrypted OTP to be transmitted to the mobile phone. It is characterized by losing.

OTP processing system for mobile banking according to the present invention, characterized in that it further comprises an OTP authentication means for authenticating the validity of the OTP input transmitted through the mobile phone.

OTP processing system for mobile banking according to the present invention, characterized in that it further comprises an authentication result transmission means for providing a valid authentication result for the OTP input and transmitted through the mobile phone to the mobile banking processing server via the customer mobile phone. It is done.

In the OTP processing system for mobile banking according to the present invention, the OTP transmission means, characterized in that for processing the communication section between the mobile phone as an encryption section.

In the OTP processing system for mobile banking according to the present invention, each of the means is characterized in that provided in a single server or a plurality of servers.

According to the present invention, it is possible to reduce the economic waste of distributing the OTP generation program that can be downloaded and used in a mobile phone as a separate OTP generator, and at the same time, when using mobile banking due to security problems according to two-factor authentication regulations. By overcoming the problem of not being able to use mobile OTP, mobile banking utilization rate will be expanded and convenience will be improved.

1 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a first embodiment of the present invention.
2 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to a first embodiment of the present invention.
3 is a diagram illustrating a second implementation process of registering information for mobile banking linked OTP authentication according to the first embodiment of the present invention.
4 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a first implementation method of the present invention.
5 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to the first embodiment of the present invention.
6 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a second embodiment of the present invention.
7 is a diagram illustrating a first implementation process of registering information for mobile banking linked OTP authentication according to a second embodiment of the present invention.
8 is a diagram illustrating a second implementation process of registering information for mobile banking interworking OTP authentication according to the second embodiment of the present invention.
9 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a second implementation method of the present invention.
FIG. 10 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to a second implementation method of the present invention.
11 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a third embodiment of the present invention.
12 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to a third embodiment of the present invention.
FIG. 13 is a diagram illustrating a second implementation process for registering information for mobile banking linked OTP authentication according to a third embodiment of the present invention.
14 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a third embodiment of the present invention.
FIG. 15 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to a third embodiment of the present invention.
FIG. 16 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a fourth embodiment of the present invention.
FIG. 17 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to a fourth embodiment of the present invention.
18 is a diagram illustrating a second implementation process of registering information for mobile banking linked OTP authentication according to a fourth embodiment of the present invention.
19 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a fourth embodiment of the present invention.
20 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to the fourth embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a first embodiment of the present invention.

In more detail, Figure 1 is an OTP identification information and at least one of the customer personal identification number information required for OTP authentication and the mobile phone unique information connected to the customer personal identification number information in the mobile banking process through the customer mobile phone and the After storing in the storage medium 145 in connection with the OTP generation key (KEY) value or OTP generation program necessary to alternately generate the OTP to be generated in the customer's mobile phone, the customer personal identification number information to use the mobile banking in the customer's mobile phone When transmitting, the customer personal identification number information is authenticated in association with the storage medium 145, and if the customer personal identification number information is authenticated, the customer personal identification number information and the customer's mobile phone unique from the storage medium 145 Check the OTP generation key or OTP generator associated with the OTP identification information that contains one or more pieces of information. As an illustration showing a system configuration of alternatively generating an OTP to be generated in the customer's mobile phone, and encrypting the generated OTP with an encryption key that can be decrypted through a decryption key provided in the customer's mobile phone, Those skilled in the art can refer to and / or modify this drawing to implement various methods of implementing the OTP processing system (e.g., some components are omitted, subdivided, or combined). Although it can be inferred), the present invention includes all the implementation methods inferred above, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 1, the OTP processing system includes a customer mobile phone used as an electronic financial medium of mobile banking, customer personal identification number information and the customer personal identification required for OTP authentication in a mobile banking process through the customer mobile phone. OTP identification information including at least one unique information of the customer mobile phone connected to the number information and the storage medium to be stored in connection with the OTP generation key (KEY) value or OTP generating program required to replace the OTP to be generated by the customer mobile phone (145) And OTP identification information including one or more of the customer personal identification number information and the customer mobile phone unique information on the storage medium 145, and an OTP generation key (KEY) value or OTP necessary for generating an OTP to be generated in the customer mobile phone. Information registration means 105 for storing in connection with the generated program, and when using the mobile banking through the customer mobile phone, Information authentication means 115 for authenticating the receipt of the customer personal identification number information from the mobile phone and the alternative generation of OTP on behalf of the customer mobile phone by comparing with the customer personal identification number information stored in the storage medium 145 and When the customer identification number information is authenticated, an OTP generation key (KEY) value or an OTP generation program connected to the OTP identification information including at least one of the customer identification number information and the customer mobile phone identification information from the storage medium 145. After generating the OTP to be generated in the customer's mobile phone through the information checking means 140 and the confirmed OTP generation key (KEY) value or OTP generation program, and the alternative generated OTP to the mobile phone OTP processing means 135 for encrypting using an encryption key corresponding to the stored decryption key, and the encrypted OTP to the mobile phone Provided by the OTP transmission means 120 for processing to send characterized in that formed.

According to the invention, each means constituting the OTP processing system is implemented in the form of one independent server, or a combination of two or more means functions in the form of a server, or the means is implemented in the form of a server It is evident that all of these things are possible, and that the present invention is not limited by the implementation method constituting the above means.

A customer visits a bank branch to apply for mobile banking, or uses a mobile OTP generation program (e.g., an OTP generation key (KEY) value provided in the customer cell phone) to the customer cell phone in accordance with a preset OTP generation algorithm. Program code to generate and output OTP), or apply for OTP registration for mobile banking, the teller of the bank branch face-to-face authentication of the customer, and the customer terminal unique information and customer through the teller terminal Input and transmit OTP use application information including one or more personal identification number information and customer unique information (for example, information including the name and social security number information of the customer).

Alternatively, the customer applies for mobile banking through a customer terminal, or the customer according to a preset OTP generation algorithm through a mobile OTP generation program (eg, an OTP generation key (KEY) value provided in the customer's mobile phone). Program code for generating and outputting OTP in the mobile phone, or applying for OTP registration for mobile banking, the customer terminal identifies customer mobile phone number information and customer personal identification from the customer through a predetermined information input interface. Input and transmit the OTP use request information including one or more pieces of number information and customer specific information (for example, information including the name and social security number information of the customer).

Here, the unique information of the customer mobile phone, a virtual mobile OTP medium for receiving and outputting a customer mobile phone to use mobile banking, a customer mobile phone to be provided with a mobile OTP generation program, or OTP generated by the server on behalf of the customer mobile phone As the information for identifying the customer mobile phone corresponding to any one or more of the customer mobile phones to be used, it is preferable to include a telephone number assigned to the customer mobile phone.

According to the implementation method of the present invention, the unique information of the customer mobile phone, the terminal serial number (ESN), USIM serial number (for example, chip serial number, USIM manufacturing number, serial number recorded in the USIM) assigned to the customer mobile phone It further comprises, or comprises a terminal identification code stored in the memory of the mobile phone by generating and encrypting a code value that is not duplicated to identify the customer mobile phone, or one or more USIM identification code recorded in the USIM. desirable.

That is, the unique information of the customer mobile phone includes at least one of all mobile phone related identification information maintained through the memory (or USIM) of the mobile phone even when the customer mobile phone is connected or not connected to the mobile communication network. As a result, the unique information of the customer mobile phone of the present invention is not limited to the above description, and it is possible to include various identification information according to the type of the customer mobile phone and the fixed ID value uniquely identifying the mobile phone. It is apparent that the present invention is not limited by the type of.

The customer personal identification number information, if the mobile phone OTP generation program is provided in the customer mobile phone, to authenticate the generation of the OTP through the mobile OTP generation program, or instead of the customer mobile phone during mobile banking using the customer mobile phone As a personal identification number (PIN) for authenticating an OTP generated on behalf of the customer's mobile phone on the server by approving it as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server. It is preferable to include a password for generating an OTP registered through a PIN pad or a unique identification number uniquely registered so as not to be duplicated for each customer for generating the OTP.

If the customer identification number information includes a unique identification number that is uniquely registered so as not to be duplicated for each customer, the unique identification number is N (through a predetermined number server (not shown) to the information registration means 105 ( N> 1) The number of digits is automatically numbered or determined by allowing the customer to enter a non-overlapping N-digit unique identification number through the PIN pad, or n entered by the customer through the PIN pad. A second number of (Nn) digits uniquely assigned to the customer (for example, the unique information of the customer's mobile phone or a resident registration number included in the customer's unique information) to the first number of (1 <= n <N) digits Combined with N-digit unique identification number, or uniquely assigned to the customer mobile phone unique information (or two or more constituting the customer mobile phone unique information A part (or all) of a call combination) is determined by a N-digit unique identification number, or a part (or all) of a combination (eg, a social security number) included in the customer mobile phone unique information and the customer unique information is N digits. It is preferable to determine the unique identification number of.

The customer unique information is customer information including the name and resident registration number of the customer. When the customer is registered as a financial transaction customer of the bank, the customer unique information is customer information registered in the customer ledger provided in the bank. It is preferable that the customer identification information is included to check the customer information, and if the customer is a new customer of the bank, the customer unique information is customer information (eg, name, social security number, Address, contact information, etc.).

The teller terminal (or customer terminal) transmits the input OTP use request information, and the information registration means 105 receives the OTP use request information from the teller terminal (or customer terminal).

According to an embodiment of the present invention, when the OTP use request information is received, the information registration means 105 uses the customer mobile phone number information and the customer unique information through a mobile communication company server for the validity and the customer mobile phone Checking the validity of one or more of the can be performed.

The information registering means 105 transmits the customer mobile phone number information and the customer unique information included in the OTP use application information to the mobile communication company server to confirm the validity of at least one of the validity of the customer and the validity of the customer mobile phone. .

The mobile communication company server inquires subscriber D / B through the received customer mobile phone number information to confirm subscriber information, compares the subscriber information with the customer unique information, or the subscriber D through the received customer unique information. Check the subscriber information by querying / B, and compares the customer mobile phone number information and the received customer mobile phone number information included in the subscriber information to verify that the mobile phone subscriber and the customer applying for the OTP is the same Check.

In addition, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone corresponding to the customer mobile phone number information to verify the customer mobile phone validity that can use the OTP service applied by the customer through the customer mobile phone It is possible to check more.

According to an embodiment of the present invention, when the OTP service requested by the customer operates by installing a specific OTP generating program in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone. It is preferable to check the validity of the customer mobile phone to confirm whether the operating platform that can operate by installing the OTP generation program on the customer mobile phone is provided.

Alternatively, when the OTP service requested by the customer is operated using the USIM provided in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone and the USIM is read in the customer's mobile phone. It is desirable to check the validity of the customer cell phone to verify that it is equipped.

Alternatively, when the OTP service requested by the customer is operated using the financial IC chip provided in the customer mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone to the customer mobile phone. It is desirable to check the validity of the customer's mobile phone to check whether the financial IC chip is provided.

According to another exemplary embodiment of the present invention, the mobile communication company server confirms the customer validity and provides terminal information (or device information) for the customer mobile phone to the information registering means 105, thereby providing the information registering means ( In 105, it is possible to confirm the validity of the customer mobile phone, whereby the present invention is not limited.

The information registration means 105 is OTP identification information including one or more customer personal identification number information and customer mobile phone unique information included in the OTP use application information and OTP generation key required to replace the OTP to be generated in the customer mobile phone (KEY) value or OTP generating program in connection with the storage medium 145, characterized in that for registering.

Here, the OTP generation key value may include one or more fixed seed values for generating an OTP and a parameter for determining a dynamic seed value.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP-generated key value includes a seed that is fixed to assign to a time-synchronized OTP generation algorithm. The parameter of the (KEY) value preferably includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization type OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation key (KEY) includes a seed fixed to be assigned to the challenge-response OTP generation algorithm, and the OTP generation key (KEY ) Parameter preferably includes a random number generation seed for generating a random number corresponding to the dynamic seed value of the challenge-response OTP.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the OTP generation key value is one or more for generating an OTP on the server on behalf of the customer mobile phone. It is preferred to include a fixed seed value and a parameter for determining the dynamic seed value.

If the customer mobile phone is provided with a mobile OTP generation program, in addition to using the customer mobile phone as the virtual OTP medium for mobile banking, the OTP generation key value is a mobile OTP generation program provided in the customer mobile phone. And at least one fixed seed value for generating an OTP and a parameter for determining a dynamic seed value, wherein the OTP generating key value is provided to the customer mobile phone and encrypted in the customer mobile phone memory. Or stored in the USIM provided in the customer's mobile phone (encryption storage possible).

The OTP generation program may program an OTP generation algorithm that generates an OTP using one or more fixed seed values identified through the OTP generation key value and one or more dynamic seed values dynamically determined / generated as seeds. Implemented in the form of code, when using the customer mobile phone as a virtual banking OTP medium for receiving and outputting the OTP generated in the server, the OTP generation program is provided on the server for generating the OTP, the customer mobile phone When the mobile OTP generation program is provided, the OTP generation program is implemented in the form of a mobile OTP generation program provided to the customer mobile phone.

According to the embodiment of the present invention, there may be a plurality of OTP generation algorithms for generating the OTP according to the type and modification, and in this case, a plurality of OTP generation programs may also exist according to the OTP generation algorithm.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When a customer cell phone is used as a virtual OTP medium for mobile banking that receives and outputs an OTP generated by the server, the information registering means 105 includes an OTP including one or more of the customer personal identification number information and the customer mobile phone unique information. The identification information and the OTP generation key (KEY) in association with the storage medium 145, characterized in that the storage and registration, and if there are a plurality of OTP generation program, OTP generation program information to be used to generate the OTP In further connection, it is preferable to store and register in the storage medium 145.

Alternatively, if the customer mobile phone is provided with a mobile OTP generating program, the information registration means 105 is OTP identification information and OTP generation key (KEY) value including one or more of the customer personal identification number information and the customer mobile phone unique information And store and register the OTP generation program information (eg, version, algorithm, etc.) corresponding to the mobile OTP generation program provided to the customer cellular phone in the storage medium 145.

When the OTP identification information including one or more of the customer personal identification number information and the customer mobile phone unique information is stored in the storage medium 145 in connection with an OTP generation key value or an OTP generation program, the mobile phone processing means 110 Provides the OTP program code for the mobile phone to implement the OTP through the OTP generation key (KEY) value and OTP generation program to the customer mobile phone.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer's mobile phone is used as a virtual OTP medium for mobile banking to receive and output the OTP generated by the server, the mobile phone processing means 110 inputs a personal identification number during the mobile banking through the customer's mobile phone to establish a mobile communication network. Transmit to the server through (eg, through a communication server provided in the mobile communication network), receive and output the OTP generated on behalf of the customer's mobile phone through the OTP generation key value and the OTP generation program in the server. A server for authenticating the OTP by inputting an OTP input interface for inputting the output OTP; The mobile banking interlocking OTP program code for transmission characterized in that it provides the customer with a mobile phone.

According to the method of the present invention, the mobile phone processing means 110 transmits information (eg, callback UEL) for providing the mobile banking linked OTP program code to the customer mobile phone through a mobile communication network, When the mobile banking interworking OTP program code is requested through the information, the mobile banking interworking OTP program code may be provided to the customer mobile phone in response to the request.

According to another exemplary embodiment of the present invention, the mobile banking interworking OTP program code may be provided to the customer mobile phone through the window terminal (or the customer terminal), in which case the mobile phone processing means 110 is the window terminal. (Or a customer terminal) to provide the mobile banking linked OTP program code to be provided in the customer mobile phone, or to provide the mobile banking linked OTP program code provided in the teller terminal (or customer terminal) to the customer mobile phone It is possible to process.

Here, the mobile banking interworking OTP program code, the encryption code for encrypting the personal identification number and transmits to the server via a mobile communication network, and preferably comprises a decryption code for decrypting the OTP encrypted and transmitted by the server; The encryption key for decryption or the decryption key for decryption is included in the encryption code or decryption code and provided to the customer mobile phone, or a key exchange procedure defined between the customer mobile phone and the server (eg, generating a session key). Is provided to the customer mobile phone according to the procedure for encrypting and exchanging a binary key.

When the mobile banking interworking OTP program code and the mobile OTP generation program code is provided together in the customer's mobile phone, and the encryption / decryption uses the encryption code and the decryption code included in the mobile OTP generation program code, the mobile banking interworking The OTP program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key may not be provided to the customer mobile phone.

In addition, the mobile banking interworking OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the Transport Layer Security (TLS) encryption section.

Or, if the customer mobile phone is provided with a mobile OTP generation program, the mobile phone processing means 110 transmits information (eg, callback UEL) for providing the mobile OTP generation program code to the customer mobile phone through a mobile communication network When the customer mobile phone requests the mobile OTP generation program code through the information, it is preferable to provide the mobile OTP generation program code to the customer mobile phone correspondingly.

According to another embodiment of the present invention, the mobile OTP generating program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means 110 is the window terminal ( Or by providing the mobile OTP generation program code to a customer terminal) or processing the mobile OTP generation program code provided in the teller terminal (or the customer terminal) to be provided to the customer mobile phone. It is possible.

Herein, the mobile OTP generation program code includes an encryption code for encrypting an OTP generated by the customer mobile phone and transmitting the encrypted OTP to a server through a mobile communication network, and a decryption code for decrypting the information encrypted and transmitted by the server. Preferably, the encryption key for encryption or the decryption key for decryption is included in the encryption code or decryption code provided to the customer mobile phone, or a key exchange procedure (eg, session key) defined between the customer mobile phone and the server. It is preferable to provide to the customer mobile phone according to the procedure for generating and encrypting and exchanging the binary-type key.

If the customer's mobile phone is provided with the mobile banking linked OTP program code and the mobile OTP generating program code, and the encryption / decryption using the encryption code and decryption code included in the mobile banking linked OTP program code, the mobile OTP The generated program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key corresponding thereto may not be provided to the customer mobile phone.

In addition, the mobile OTP generation program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the TLS (Transport Layer Security) encryption section.

When the mobile OTP generation program code is provided in the customer mobile phone according to an embodiment of the present invention, when the mobile OTP generation program is first started in the mobile phone, the mobile OTP generation program is configured to authenticate the user according to a preset procedure (eg, After processing the predetermined mobile OTP generation program driving password authentication, input the customer authentication information (for example, phone number, social security number, personal identification information, etc.), and transmits after encrypting through the encryption code, the mobile phone processing means After the customer authentication for the customer authentication information from the 110 to download the OTP generation key (KEY) associated with the mobile OTP generation program and store in the customer cell phone memory, or stored in the USIM provided in the customer cell phone Preferably, the OTP generation in the mobile OTP generation program code When the key value is included, the process of downloading the OTP generation key value may be omitted.

According to another exemplary embodiment of the present invention, it is possible to include an integrated OTP generation program in which the mobile banking interworking OTP program code and the mobile OTP generation program code are integrated in the customer mobile phone. Sending information (eg, callback UEL) for providing the integrated OTP program code to the customer mobile phone through a mobile communication network, and requesting the integrated OTP program code through the information from the customer mobile phone, the corresponding customer It is desirable to provide the integrated OTP program code to a mobile phone.

According to another embodiment of the present invention, the integrated OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means 110 is the window terminal (or Customer terminal) to provide the integrated OTP program code to be provided in the customer mobile phone, or to process the integrated OTP program code provided in the window terminal (or customer terminal) provided to the customer mobile phone.

Here, the integrated OTP program code, the encryption code for encrypting the personal identification number transmitted to the server through a mobile communication network, or encrypting the OTP generated by the customer mobile phone to the server via a mobile communication network, and in the server It is preferable to include a decryption code for decrypting the OTP to encrypt and transmit, or decrypt the information transmitted by encrypting in the server, the encryption key for encryption or decryption key for decryption to the encryption code or decryption code It is preferably provided to the customer mobile phone or provided to the customer mobile phone according to a defined key exchange procedure between the customer mobile phone and the server (for example, a process of generating a session key and encrypting and exchanging a binary key). Do.

In addition, the integrated OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the mobile phone to the TLS (Transport Layer Security) encryption section.

According to the present invention, the mobile OTP generation program code provided in the customer's mobile phone cannot be used for mobile banking due to the limitation of two-factor authentication that the electronic financial medium and the authentication medium must be separated. If the electronic financial medium is not a customer's mobile phone (eg, internet banking), it can be used as an OTP authentication medium, and as the OTP authentication medium for mobile banking, a mobile banking linked OTP program code is used, or the integrated OTP Only a portion of the program code that transmits customer identification number information to the server or receives an OTP generated by the server may be used.

Therefore, when OTP authentication is required when using mobile banking through the customer mobile phone, the customer mobile phone starts the mobile OTP generation program code (or integrated OTP program code) to output a personal identification number input interface, and the personal identification number. When the customer personal identification number information is input through the input interface, the input customer personal identification number information is encrypted and transmitted with a predetermined encryption key.

According to an embodiment of the present invention, the customer identification number information is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, It is preferable to encrypt twice through the TLS encryption method set in the communication interval between servers.

According to the method of the present invention, the mobile OTP generation program code (or integrated OTP program code) provided in the customer mobile phone is provided in the customer mobile phone, in addition to the customer personal identification number information input through the personal identification number input interface. One or more mobile phone unique identification information (e.g., including a terminal serial number (ESN) assigned to a customer mobile phone, a USIM serial number, a terminal identification code stored in a memory of the mobile phone, and one or more USIM identification codes recorded in the mobile phone USIM); It is possible to confirm, and further comprising the identified mobile phone identification information, and to transmit, whereby the present invention is not limited.

Alternatively, the personal identification number input interface may further include a user interface for inputting customer unique information (for example, a social security number), in addition to the user interface for inputting the customer personal identification number information. The mobile OTP generated program code (or integrated OTP program code) can be transmitted by further including the inputted customer unique information, in addition to the customer personal identification number information, thereby not limiting the present invention.

According to an embodiment of the present invention, when the OTP is input, the customer mobile phone checks the customer mobile phone unique information from the mobile phone memory (or USIM), and transmits the mobile phone further including the unique mobile phone unique information to the input OTP. It is possible that the customer's mobile phone unique information is preferably encrypted with the OTP.

The information authentication means 115 receives the encrypted customer personal identification number information by the customer mobile phone, and confirms the original customer personal identification number information by decrypting the encrypted customer personal identification number information, the storage medium 145 ) To authenticate the validity of the customer identification number information.

When one or more mobile phone unique identification information or customer unique information is further received (and decrypted) from the customer mobile phone according to the embodiment of the present invention, the information authentication means 115 further adds the mobile phone unique identification information or customer unique information. It is desirable to process to authenticate the validity.

If the validity of the customer personal identification number information (in addition, the mobile phone unique identification information or customer unique information can be further included) is authenticated, the information checking means 140 is the storage medium 145 to the customer personal identification number information And an OTP generation key (KEY) value or OTP generation program associated with the OTP identification information including one or more unique information of the customer's mobile phone.

Here, the unique information of the customer mobile phone is received, included in the customer personal identification number information, or confirmed from the caller information for the customer mobile phone, or confirmed from the mobile communication company server based on the caller information of the customer mobile phone. Possible, the present invention is not limited by the manner of confirming the unique information of the customer mobile phone.

The OTP processing means 135 is characterized in that for generating the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program.

According to an embodiment of the present invention, when the OTP processing means 135 is provided with an OTP generation function to replace the OTP to be generated in the customer mobile phone, the information checking means 140 is the customer personal identification number information and Confirm the OTP generation key (KEY) value associated with the OTP identification information including one or more unique mobile phone information, the OTP processing means 135 is one or more fixed seed value and dynamic seed from the OTP generation key (KEY) value It is preferable to substitute the fixed seed value and the dynamic seed value into a preset OTP generation algorithm to generate an OTP to be generated in the customer mobile phone.

According to another embodiment of the present invention, when the OTP processing means 135 is provided with a plurality of OTP generation functions for each OTP generation algorithm to replace the OTP to be generated in the customer mobile phone, the information checking means 140 is OTP generation program information for selecting an OTP generation key (KEY) associated with the OTP identification information including at least one of the customer personal identification number information and the unique information of the customer mobile phone and an OTP generation algorithm to replace the OTP generated by the customer mobile phone. The OTP processing means 135 checks / determines one or more fixed seed values and dynamic seed values corresponding to the OTP generation program information from the OTP generation key value, and determines the fixed seed values and the dynamic seed values. Substituting the seed value into the OTP generation algorithm corresponding to the OTP generation program information, it is preferable to generate the OTP to be generated in the customer mobile phone It is right.

According to another exemplary embodiment of the present invention, when the OTP processing unit 135 is not provided with an OTP generating function to replace the OTP to be generated by the customer mobile phone, the information checking means 140 is the OTP generating condition. Check the OTP generation key (KEY) associated with the information and the OTP generation program code to replace the OTP to be generated in the customer mobile phone, the OTP processing means 135 is one or more fixed from the OTP generation key (KEY) value It is preferable to check / determine the seed value and the dynamic seed value, and to start the OTP generating program code to alternately generate the OTP to be generated in the customer mobile phone through the fixed seed value and the dynamic seed value.

When the OTP to be generated in the customer mobile phone is generated alternatively, the OTP processing means 135 encrypts the generated OTP using an encryption key corresponding to the decryption key provided in the mobile phone.

According to an embodiment of the present invention, the alternatively generated OTP is encrypted using an end-to-end data encryption method (eg, AES 128 encryption method) between the customer mobile phone and the server through an encryption key paired with a decryption key provided to the customer mobile phone. It is preferable.

The OTP transmission means 120 is characterized in that the processing to provide the encrypted OTP to the customer mobile phone through a mobile communication network.

According to an embodiment of the present invention, the OTP transmission unit 120 preferably encrypts the communication section between the mobile phone and the server by a TLS encryption method to transmit the OTP to the customer mobile phone, whereby the OTP is terminated. It is encrypted twice by inter-data encryption and TLS encryption.

The customer cellular phone receives the substitute generated OTP through the mobile communication network, and if the received OTP is encrypted, decrypts the OTP using a predetermined decryption key and outputs the OTP to an OTP output area on the screen. And displaying an OTP input interface in a predetermined area near the OTP output area, and when the OTP is input through the OTP input interface, encrypting the input OTP and transmitting the encrypted OTP.

Here, the OTP is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, and the communication section between the mobile phone and the server that authenticates the OTP. It is preferable to encrypt twice through the set TLS encryption scheme.

The OTP authentication means 125 receives an encrypted OTP from the customer mobile phone through the mobile communication network, and decrypts the encrypted OTP through a decryption key matched with an encryption key provided in the customer mobile phone. .

In addition, the OTP authentication means 125 is characterized by comparing the decrypted OTP and the OTP generated by the OTP processing means 135 to authenticate the validity of the received OTP.

According to another exemplary embodiment of the present invention, the customer cellular phone may transmit the OTP to the mobile banking processing server 100 in addition to the OTP authentication means 125 or to a server that authenticates a separate OTP. In this case, the mobile banking processing server 100 (or a server authenticating the OTP) receives and decrypts the OTP, and generates the OTP in the same manner as the OTP processing unit 135 generates the OTP. It is possible to generate an OTP 'by checking a value or an OTP generating program, and to authenticate the validity of the OTP by comparing the OTP and the OTP'.

When the validity of the OTP is authenticated by the OTP authentication means 125, the authentication result transmission means 130 is connected to the customer mobile phone to verify the OTP validity authentication results mobile banking processing server for processing mobile banking Transfer to (100), or via the customer cell phone characterized in that the processing to be transmitted to the mobile banking processing server (100).

The server for authenticating the OTP receives and decrypts the OTP through the mobile communication network, generates an OTP 'by identifying an OTP generation key value or an OTP generation program corresponding to the received OTP, and generates the OTP. And OTP 'to perform OTP authentication for the mobile banking transaction, and the OTP authentication result is provided to a server providing the mobile banking.

FIG. 2 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to the first embodiment of the present invention.

In more detail, Figure 2 receives the OTP usage information from the window terminal in the information registration means 105 on the OTP processing system shown in Figure 1, and the customer personal identification number information contained in the OTP usage information and the customer's mobile phone unique It is a process for storing and registering the OTP identification information including one or more information, OTP generation key (KEY) or OTP generation program in the storage medium 145, the general knowledge in the technical field to which the present invention belongs If the person having the present invention can refer to and / or modify this drawing 2, various implementation methods (for example, some steps may be omitted or the order may be changed) for the information registration process may be inferred. It is made to include all the implementation methods inferred, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 2, when a customer visits a bank branch and applies for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for an OTP registration for mobile banking, it is shown in FIG. When the counter terminal inputs and transmits the OTP use application information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means receives the OTP use application information (200).

The information registration means 105 is a storage medium by connecting OTP identification information and OTP generation key (KEY) or OTP generation program including one or more customer personal identification number information and customer mobile phone unique information included in the OTP usage information It stores and registers at 145 (205).

If the OTP identification information and the OTP generation key (KEY) value or the OTP generation program are connected and stored in the storage medium 145 (210), the mobile phone processing means 110 sends the OTP generation key (KEY) to a customer mobile phone. Value or OTP program code for the mobile phone to implement the OTP program code and encryption key and decryption key is provided (215).

Here, the OTP program code for the mobile phone provided to the customer mobile phone in the mobile phone processing means 110, to overcome the two-factor authentication limit that the electronic financial medium and the authentication medium must be separated when using the mobile banking through the customer mobile phone In order to provide the customer personal identification number information to the server, the server generates an alternative OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to provide to the customer mobile phone, the alternative generation It is preferable to include a mobile banking interworking OTP program code having a function of receiving and outputting the received OTP, and displays the OTP input interface near the area where the OTP is output to input the alternatively generated OTP. Mobile OTP generation in the mobile banking linked OTP program code according to the intention of It is possible to further include the program code or to include the integrated OTP generating program code.

3 is a diagram illustrating a second implementation process of registering information for mobile banking interworking OTP authentication according to the first embodiment of the present invention.

In more detail, FIG. 3 shows the OTP usage information from the window terminal in the server when the information registering means 105 and the cellular phone processing means 110 on the OTP processing system shown in FIG. 1 are implemented in a predetermined server form. Receive and store in the storage medium 145 by connecting the OTP identification information and the OTP generation key (KEY) value or OTP generation program including one or more customer identification number information and the unique information of the customer mobile phone included in the OTP usage information As a process of registering the information, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 3 to perform various methods for the information registration process (for example, some steps are omitted). May be inferred, or the order thereof may be inferred. The technical features are not limited only by the municipal method.

Referring to FIG. 3, when a customer visits a bank branch to apply for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, When the counter terminal inputs and transmits the OTP use application information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means receives the OTP use application information (300).

The server stores in the storage medium 145 by connecting OTP identification information including one or more of the customer personal identification number information and the unique information of the customer mobile phone and the OTP generation key (KEY) or OTP generation program included in the OTP usage information Register (305).

If the OTP identification information and the OTP generation key (KEY) or OTP generation program are connected and stored in the storage medium 145 (310), the server generates the OTP generation key (KEY) or OTP to a customer mobile phone. The program provides an OTP program code, an encryption key, and a decryption key for a mobile phone to implement OTP (315).

Here, the OTP program code for the mobile phone provided to the customer mobile phone from the server, when using the mobile banking through the customer mobile phone, to overcome the two-factor authentication limitation that the electronic financial media and the authentication media must be separated from the individual customer to the server If the identification number information is provided, and the server generates an OTP to be generated in the customer's mobile phone through the OTP generation key value or an OTP generation program and provides it to the customer's mobile phone, the generated OTP is received. And a mobile banking interlocking OTP program code having a function of displaying an OTP input interface near the area where the OTP is output and inputting the alternatively generated OTP. Mobile OTP generation program code to mobile banking interlocking OTP program code It is possible to include more, or an integrated OTP generation program code.

4 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a first implementation method of the present invention.

In more detail, FIG. 4 illustrates an OTP identification information and an OTP generation key including one or more customer personal identification number information and customer mobile phone unique information in a storage medium 145 through the information registration process illustrated in FIG. 2 or FIG. 3. KEY) value or OTP generating program is connected and stored, and after the mobile banking interworking OTP program code and encryption key and decryption key are provided to the customer's mobile phone, the mobile banking processing through the mobile banking processing server 100 in the customer's mobile phone, When OTP authentication is required, in order to overcome the two-factor authentication limit for the mobile banking in the customer's mobile phone, the mobile banking interworking OTP program code is activated and the customer's personal identification number information is transmitted and transmitted. Authenticate the customer identification number information, and OTP from the storage medium 145 in the information verification means 140 Check the OTP generation key (KEY) or OTP generation program associated with the identification information, and replace the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program in the OTP processing means 135 After generating and encrypting, transmitting the encrypted OTP to the customer mobile phone in the OTP transmission means 120, after outputting the OTP in the customer mobile phone and input and transmit through the OTP input interface, the OTP authentication means Receiving and decrypting the OTP at 125 to confirm the validity, and the authentication result transmission means 130 shows a process of providing a validity authentication result for the OTP to the mobile banking processing server 100, Those skilled in the art to which the present invention pertains refer to a process of authenticating OTP in conjunction with the mobile banking by referring to and / or modifying the drawing 4. Various implementation methods (e.g., implementation steps in which some steps are omitted or changed in order) may be inferred, but the present invention includes all the implementation methods inferred from above, and only the implementation method shown in FIG. The technical features are not limited.

Referring to FIG. 4, an OTP identification information and an OTP generation key (KEY) including one or more customer identification number information and unique mobile phone information on the storage medium 145 through the information registration process illustrated in FIG. 2 or FIG. 3. And store the value or the OTP connection program, and the mobile banking interworking OTP program code and encryption key and decryption key provided to the customer's mobile phone, and during the mobile banking processing through the mobile banking processing server 100 in the customer's mobile phone (400) ), If OTP authentication is required (405), the customer's mobile phone outputs a personal identification number information input interface by starting a mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking; If the customer's personal identification number information is input through the personal identification number information input interface, And the transmission information to the authentication means 115, 410.

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information encrypted with an encryption key provided to the customer mobile phone through the information registration process shown in FIG. 2 or FIG. The authentication means 115 decrypts the previously received customer personal identification number information through a decryption key matched with the encryption key.

The information authentication means 115 compares the customer personal identification number information and the customer personal identification number information stored in the storage medium 145 to authenticate the customer personal identification number information (415).

If the customer identification number information is authenticated (420), the information checking means 140 checks the OTP generation key (KEY) or OTP generation program connected to the OTP identification information from the storage medium 145 (425) ), The OTP processing means 135 alternately generates (430) the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or the OTP generation program and encrypts the generated OTP (435). ).

According to an embodiment of the present invention, the OTP processing means 135 encrypts the generated OTP with an encryption key that matches the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 2 or 3. Preferably, the customer cellular phone decrypts the received OTP with the decryption key.

The OTP transmission means 120 transmits the encrypted OTP to the customer mobile phone through the mobile communication network (440).

After outputting the received OTP (445), the customer mobile phone displays the OTP input interface in a predetermined area near the area where the OTP is output. If the output OTP is keyed through the OTP input interface (450), the customer cellular phone encrypts the input OTP and transmits the encrypted OTP to the OTP authentication means 125 through the mobile communication network (455), and the OTP authentication. The means 125 decrypts the OTP, compares the decrypted OTP with the OTP generated by the OTP processing means 135, confirms the validity of the OTP (460), and transmits the authentication result 130. The OTP validity authentication result is transmitted to the mobile banking processing server 100 that provides mobile banking to the customer mobile phone (465), and the mobile banking processing server 100 determines whether to approve a transaction according to the OTP validity authentication result. To determine and process the mobile banking requested by the customer mobile phone (470).

5 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to the first embodiment of the present invention.

In more detail, FIG. 5 shows information authentication means 115, information verification means 140, OTP processing means 135, OTP transmission means 120, and OTP authentication means 125 on the OTP processing system shown in FIG. And if the authentication result transmission means 130 is implemented in the form of a predetermined server, the customer personal identification number information and the unique information of the customer mobile phone to the storage medium 145 through the information registration process shown in FIG. Connect and store OTP identification information and OTP generation key (KEY) or OTP generation program including one or more, and provide mobile banking interworking OTP program code, encryption key and decryption key to the customer mobile phone, and then mobile banking on the customer mobile phone When the mobile banking processing through the processing server 100, if OTP authentication is required, in order to overcome the two-factor authentication limit for the mobile banking in the customer mobile phone mobile banking interworking OTP pro When the RAM code is activated and the customer's personal identification number information is input and transmitted, the server authenticates the customer's personal identification number information, and the OTP generation key or key that is connected to the OTP identification information from the storage medium 145. Checking the generation program, the OTP processing means 135 generates and encrypts the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program, and encrypts the encrypted OTP to the customer mobile phone After transmitting to the customer's mobile phone outputs the OTP and then input via the OTP input interface to transmit, the server receives and decrypts the OTP to check the validity, the OTP validation result of the mobile banking As shown in the process provided to the processing server 100, those skilled in the art to which the present invention belongs, this figure 5 Although various implementation methods (e.g., some steps may be omitted or changed in order) may be inferred by referring and / or modifying the OTP in association with the mobile banking, the present invention may infer the above-mentioned. It is made including all the implementation methods that are, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 5, an OTP identification information and an OTP generation key (KEY) including one or more customer identification number information and a customer's mobile phone unique information in a storage medium 145 through the information registration process illustrated in FIG. 2 or FIG. 3. The value or OTP generation program is connected and stored, and the mobile banking interworking OTP program code and encryption key and decryption key are provided to the customer's mobile phone, and the mobile banking processing is performed through the mobile banking processing server 100 in the customer's mobile phone (500). ), When OTP authentication is required (505), the customer's mobile phone outputs a personal identification number information input interface by starting a mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking. If the customer's personal identification number information is input through the personal identification number information input interface, And it transmits to the server 510.

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting the encryption key provided to the customer mobile phone through the information registration process shown in FIG. Decrypts the received customer personal identification number information through a decryption key matching the encryption key.

The server compares the customer personal identification number information and the customer personal identification number information stored in the storage medium 145 to authenticate the customer personal identification number information (515).

If the customer identification number information is authenticated (520), the server checks the OTP generation key (KEY) value or OTP generation program associated with the OTP identification information from the storage medium 145 (525), the OTP generation Substituting the generated OTP to be generated in the customer mobile phone through a key value or an OTP generating program (530), and encrypts the substitution generated OTP (535).

According to an embodiment of the present invention, the server encrypts the substitute generated OTP with an encryption key that matches the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 2 or 3. The customer cellular phone decrypts the received OTP with the decryption key.

The server transmits the encrypted OTP to the customer mobile phone through the mobile communication network (540).

After the customer mobile phone outputs the received OTP (545), it displays the OTP input interface in a predetermined area near the area where the OTP is output. If the output OTP is keyed through the OTP input interface (550), the customer cellular phone encrypts the input OTP and transmits the encrypted OTP to the server through a mobile communication network (555), and the server decrypts the OTP. And comparing the decrypted OTP and the OTP generated by the OTP processing means 135 to confirm the validity of the OTP (560), and the mobile banking to provide mobile banking to the customer mobile phone with the OTP validity authentication result. The mobile banking processing server 100 determines whether to approve a transaction according to the OTP validity authentication result and processes the mobile banking requested by the customer's mobile phone (570).

6 is a diagram illustrating a configuration of an OTP processing system for mobile banking according to a second embodiment of the present invention.

In more detail, FIG. 6 illustrates OTP identification information and at least one of customer personal identification number information required for OTP authentication and one or more mobile phone unique information linked to the customer personal identification number information in the mobile banking process through the customer mobile phone. After storing the OTP generation key (KEY) value or OTP generation program required to replace the OTP to be generated in the customer's mobile phone in the storage medium 650 managed by the server (1) (645), the mobile banking in the customer's mobile phone If the customer identification number information is transmitted for use, the server (1) 645 authenticates the customer personal identification number information, and if the customer identification number information is authenticated, the server (1) (645) Receive an OTP generation key (KEY) value or OTP generation program for replacing the OTP on behalf of the customer mobile phone from the storage medium 650 through the customer holiday A system configuration for alternatively generating an OTP to be generated in a phone and encrypting the generated OTP with an encryption key that can be decrypted through a decryption key provided in the customer mobile phone is provided to the customer mobile phone. Those skilled in the art may refer to and / or modify this drawing to determine various implementations of the OTP processing system (e.g., implementations where some components are omitted, subdivided, or combined). It may be inferred, but the present invention includes all the inferred implementation methods, and the technical features are not limited to the implementation method illustrated in FIG.

Referring to FIG. 6, the OTP processing system includes a customer mobile phone used as an electronic financial medium of mobile banking, customer personal identification number information required for OTP authentication in the mobile banking process through the customer mobile phone, and the customer personal identification. A storage medium 650 for storing OTP identification information including at least one unique information of a customer mobile phone connected to the number information and an OTP generation key (KEY) value or OTP generation program required to alternately generate an OTP to be generated by the customer mobile phone; In the server (1) 645 and the server (1) 645, the OTP identification information and the customer mobile phone including at least one of the customer personal identification number information and the customer mobile phone unique information in the storage medium 650 through the server (1) (645) Information registration means (625) for storing the OTP generation key (KEY) value or OTP generation program required to replace the OTP to be generated, and the mobile phone through the customer mobile phone When using one banking, OTP is received on behalf of the customer mobile phone by receiving customer personal identification number information from the customer mobile phone and comparing the customer personal identification number information stored in the storage medium 650 through the server (1) 645. Information authentication means 630 for authenticating the validity of the alternative generation and, if the customer identification number information is authenticated, the server (1) 645 through the server (650) on behalf of the customer mobile phone on behalf of Information receiving means 635 for receiving an OTP generation key (KEY) or OTP generation program for alternative generation of OTP and the confirmed OTP generation key (KEY) or OTP generation program through the mobile phone to be generated through the OTP generation program. OTP processing means 640 for encrypting the generated OTP using the encryption key corresponding to the decryption key previously stored in the mobile phone after generating the substitute OTP; It is characterized in that it comprises an OTP transmission means 610 for processing the processed OTP to be transmitted to the mobile phone.

According to the invention, each means constituting the OTP processing system is implemented in the form of one independent server, or a combination of two or more means functions in the form of a server, or the means is implemented in the form of a server It is evident that all of these things are possible, and that the present invention is not limited by the implementation method constituting the above means.

A customer visits a bank branch to apply for mobile banking, or uses a mobile OTP generation program (e.g., an OTP generation key (KEY) value provided in the customer cell phone) to the customer cell phone in accordance with a preset OTP generation algorithm. Program code to generate and output OTP), or apply for OTP registration for mobile banking, the teller of the bank branch face-to-face authentication of the customer, and the customer terminal unique information and customer through the teller terminal Input and transmit OTP use application information including one or more personal identification number information and customer unique information (for example, information including the name and social security number information of the customer).

Alternatively, the customer applies for mobile banking through a customer terminal, or the customer according to a preset OTP generation algorithm through a mobile OTP generation program (eg, an OTP generation key (KEY) value provided in the customer's mobile phone). Program code for generating and outputting OTP in the mobile phone, or applying for OTP registration for mobile banking, the customer terminal identifies customer mobile phone number information and customer personal identification from the customer through a predetermined information input interface. Input and transmit the OTP use request information including one or more pieces of number information and customer specific information (for example, information including the name and social security number information of the customer).

Here, the unique information of the customer mobile phone, a virtual mobile OTP medium for receiving and outputting a customer mobile phone to use mobile banking, a customer mobile phone to be provided with a mobile OTP generation program, or OTP generated by the server on behalf of the customer mobile phone As the information for identifying the customer mobile phone corresponding to any one or more of the customer mobile phones to be used, it is preferable to include a telephone number assigned to the customer mobile phone.

According to the implementation method of the present invention, the unique information of the customer mobile phone, the terminal serial number (ESN), USIM serial number (for example, chip serial number, USIM manufacturing number, serial number recorded in the USIM) assigned to the customer mobile phone It further comprises, or comprises a terminal identification code stored in the memory of the mobile phone by generating and encrypting a code value that is not duplicated to identify the customer mobile phone, or one or more USIM identification code recorded in the USIM. desirable.

That is, the unique information of the customer mobile phone includes at least one of all mobile phone related identification information maintained through the memory (or USIM) of the mobile phone even when the customer mobile phone is connected or not connected to the mobile communication network. As a result, the unique information of the customer mobile phone of the present invention is not limited to the above description, and it is possible to include various identification information according to the type of the customer mobile phone and the fixed ID value uniquely identifying the mobile phone. It is apparent that the present invention is not limited by the type of.

The customer personal identification number information, if the mobile phone OTP generation program is provided in the customer mobile phone, to authenticate the generation of the OTP through the mobile OTP generation program, or instead of the customer mobile phone during mobile banking using the customer mobile phone As a personal identification number (PIN) for authenticating an OTP generated on behalf of the customer's mobile phone on the server by approving it as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server. It is preferable to include a password for generating an OTP registered through a PIN pad or a unique identification number uniquely registered so as not to be duplicated for each customer for generating the OTP.

If the customer's personal identification number information includes a unique identification number uniquely registered so as not to be duplicated for each customer, the unique identification number is N (through a predetermined number server (not shown) to the information registration means 625) N> 1) The number of digits is automatically numbered or determined by allowing the customer to enter a non-overlapping N-digit unique identification number through the PIN pad, or n entered by the customer through the PIN pad. A second number of (Nn) digits uniquely assigned to the customer (for example, the unique information of the customer's mobile phone or a resident registration number included in the customer's unique information) to (1 <= n <N) first number of digits Combined with N-digit unique identification number, or uniquely assigned to the customer mobile phone unique information (or two or more constituting the customer mobile phone unique information A part (or all) of a call combination) is determined by a N-digit unique identification number, or a part (or all) of a combination (eg, a social security number) included in the customer mobile phone unique information and the customer unique information is N digits. It is preferable to determine the unique identification number of.

The customer unique information is customer information including the name and resident registration number of the customer. When the customer is registered as a financial transaction customer of the bank, the customer unique information is customer information registered in the customer ledger provided in the bank. It is preferable that the customer identification information is included to check the customer information, and if the customer is a new customer of the bank, the customer unique information is customer information (eg, name, social security number, Address, contact information, etc.).

The teller terminal (or customer terminal) transmits the input OTP use request information, and the information registering means 625 receives the OTP use request information from the teller terminal (or customer terminal).

According to an embodiment of the present invention, when the OTP use request information is received, the information registration means 625 uses the customer mobile phone number information and the customer unique information through a mobile communication company server to the validity of the customer and the customer mobile phone Checking the validity of one or more of the can be performed.

The information registration means 625 transmits the customer mobile phone number information and the customer unique information included in the OTP use application information to the mobile communication company server to confirm the validity of at least one of the validity of the customer and the validity of the customer mobile phone. .

The mobile communication company server inquires subscriber D / B through the received customer mobile phone number information to confirm subscriber information, compares the subscriber information with the customer unique information, or the subscriber D through the received customer unique information. Check the subscriber information by querying / B, and compares the customer mobile phone number information and the received customer mobile phone number information included in the subscriber information to verify that the mobile phone subscriber and the customer applying for the OTP is the same Check.

In addition, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone corresponding to the customer mobile phone number information to verify the customer mobile phone validity that can use the OTP service applied by the customer through the customer mobile phone It is possible to check more.

According to an embodiment of the present invention, when the OTP service requested by the customer operates by installing a specific OTP generating program in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone. It is preferable to check the validity of the customer mobile phone to confirm whether the operating platform that can operate by installing the OTP generation program on the customer mobile phone is provided.

Alternatively, when the OTP service requested by the customer is operated using the USIM provided in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone and the USIM is read in the customer's mobile phone. It is desirable to check the validity of the customer cell phone to verify that it is equipped.

Alternatively, when the OTP service requested by the customer is operated using the financial IC chip provided in the customer mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone to the customer mobile phone. It is desirable to check the validity of the customer's mobile phone to check whether the financial IC chip is provided.

According to another embodiment of the present invention, the mobile communication company server confirms the customer validity, and provides the terminal information (or device information) for the customer mobile phone to the information registration means 625, thereby providing the information registration means ( In 625, it is possible to confirm the validity of the customer mobile phone, whereby the present invention is not limited.

The information registration means 625 is OTP identification information including one or more customer personal identification number information and customer mobile phone unique information included in the OTP use application information and OTP generation key required to alternately generate the OTP to be generated in the customer mobile phone It provides a (KEY) value or OTP generating program to the server (1) (645) to store and register in the storage medium (650).

Here, the OTP generation key value may include one or more fixed seed values for generating an OTP and a parameter for determining a dynamic seed value.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP-generated key value includes a seed that is fixed to assign to a time-synchronized OTP generation algorithm. The parameter of the (KEY) value preferably includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization type OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation key (KEY) includes a seed fixed to be assigned to the challenge-response OTP generation algorithm, and the OTP generation key (KEY ) Parameter preferably includes a random number generation seed for generating a random number corresponding to the dynamic seed value of the challenge-response OTP.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the OTP generation key value is one or more for generating an OTP on the server on behalf of the customer mobile phone. It is preferred to include a fixed seed value and a parameter for determining the dynamic seed value.

If the customer mobile phone is provided with a mobile OTP generation program, in addition to using the customer mobile phone as the virtual OTP medium for mobile banking, the OTP generation key value is a mobile OTP generation program provided in the customer mobile phone. And at least one fixed seed value for generating an OTP and a parameter for determining a dynamic seed value, wherein the OTP generating key value is provided to the customer mobile phone and encrypted in the customer mobile phone memory. Or stored in the USIM provided in the customer's mobile phone (encryption storage possible).

The OTP generation program may program an OTP generation algorithm that generates an OTP using one or more fixed seed values identified through the OTP generation key value and one or more dynamic seed values dynamically determined / generated as seeds. Implemented in the form of code, when using the customer mobile phone as a virtual banking OTP medium for receiving and outputting the OTP generated in the server, the OTP generation program is provided on the server for generating the OTP, the customer mobile phone When the mobile OTP generation program is provided, the OTP generation program is implemented in the form of a mobile OTP generation program provided to the customer mobile phone.

According to the embodiment of the present invention, there may be a plurality of OTP generation algorithms for generating the OTP according to the type and modification, and in this case, a plurality of OTP generation programs may also exist according to the OTP generation algorithm.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer's mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the information registration means 625 uses the server personal identification number information through the server 1 and 645. OTP identification information and OTP generation key (KEY) value including one or more unique information of the customer mobile phone is characterized in that the processing to be stored and registered in the storage medium 650, if there are a plurality of OTP generation program, Even if the OTP generating program information to be used for generating the OTP through the server (1) 645 is stored and registered in the storage medium (650). It is preferable to.

Alternatively, when the mobile OTP generation program is provided in the customer cellular phone, the information registration means 625 includes an OTP including one or more of the customer personal identification number information and the customer mobile phone unique information through the server (1) 645. Preferably, the identification information, the OTP generation key (KEY) value, and OTP generation program information (eg, version, algorithm, etc.) corresponding to the mobile OTP generation program provided to the customer's mobile phone are stored and registered in the storage medium 650. Do.

OTP identification information including one or more of the customer personal identification number information and customer mobile phone unique information is stored in the storage medium 650 by an OTP generation key (KEY) value or an OTP generation program through the server (1) 645. Then, the mobile phone processing means 605 provides the OTP program code for the mobile phone to implement OTP through the OTP generation key (KEY) value and OTP generation program to the customer mobile phone.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer's mobile phone is used as a virtual OTP medium for mobile banking to receive and output the OTP generated by the server, the mobile phone processing means 605 inputs a personal identification number during the mobile banking through the customer's mobile phone to establish a mobile communication network. Transmit to the server through (eg, through a communication server provided in the mobile communication network), receive and output the OTP generated on behalf of the customer's mobile phone through the OTP generation key value and the OTP generation program in the server. A server for authenticating the OTP by inputting an OTP input interface for inputting the output OTP; The mobile banking interlocking OTP program code for transmission characterized in that it provides the customer with a mobile phone.

According to an embodiment of the present invention, the mobile phone processing means 605 transmits information (eg, callback UEL) for providing the mobile banking linked OTP program code to the customer mobile phone through a mobile communication network, When the mobile banking interworking OTP program code is requested through the information, the mobile banking interworking OTP program code may be provided to the customer mobile phone in response to the request.

According to another embodiment of the present invention, the mobile banking interworking OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means 605 is the window terminal. (Or a customer terminal) to provide the mobile banking linked OTP program code to be provided in the customer mobile phone, or to provide the mobile banking linked OTP program code provided in the teller terminal (or customer terminal) to the customer mobile phone It is possible to process.

Here, the mobile banking interworking OTP program code, the encryption code for encrypting the personal identification number and transmits to the server via a mobile communication network, and preferably comprises a decryption code for decrypting the OTP encrypted and transmitted by the server; The encryption key for decryption or the decryption key for decryption is included in the encryption code or decryption code and provided to the customer mobile phone, or a key exchange procedure defined between the customer mobile phone and the server (eg, generating a session key). Is provided to the customer mobile phone according to the procedure for encrypting and exchanging a binary key.

When the mobile banking interworking OTP program code and the mobile OTP generation program code is provided together in the customer's mobile phone, and the encryption / decryption uses the encryption code and the decryption code included in the mobile OTP generation program code, the mobile banking interworking The OTP program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key may not be provided to the customer mobile phone.

In addition, the mobile banking interworking OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the Transport Layer Security (TLS) encryption section.

Or, if the customer mobile phone is provided with a mobile OTP generating program, the mobile phone processing means 605 transmits information (eg, callback UEL) for providing the mobile OTP generating program code to the customer mobile phone through a mobile communication network When the customer mobile phone requests the mobile OTP generation program code through the information, it is preferable to provide the mobile OTP generation program code to the customer mobile phone correspondingly.

According to another exemplary embodiment of the present invention, the mobile OTP generation program code may be provided to the customer mobile phone through the window terminal (or a customer terminal), and in this case, the mobile phone processing means 605 may use the window terminal ( Or by providing the mobile OTP generation program code to a customer terminal) or processing the mobile OTP generation program code provided in the teller terminal (or the customer terminal) to be provided to the customer mobile phone. It is possible.

Herein, the mobile OTP generation program code includes an encryption code for encrypting an OTP generated by the customer mobile phone and transmitting the encrypted OTP to a server through a mobile communication network, and a decryption code for decrypting the information encrypted and transmitted by the server. Preferably, the encryption key for encryption or the decryption key for decryption is included in the encryption code or decryption code provided to the customer mobile phone, or a key exchange procedure (eg, session key) defined between the customer mobile phone and the server. It is preferable to provide to the customer mobile phone according to the procedure for generating and encrypting and exchanging the binary-type key.

If the customer's mobile phone is provided with the mobile banking linked OTP program code and the mobile OTP generating program code, and the encryption / decryption using the encryption code and decryption code included in the mobile banking linked OTP program code, the mobile OTP The generated program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key corresponding thereto may not be provided to the customer mobile phone.

In addition, the mobile OTP generation program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the TLS (Transport Layer Security) encryption section.

When the mobile OTP generation program code is provided in the customer mobile phone according to an embodiment of the present invention, when the mobile OTP generation program is first started in the mobile phone, the mobile OTP generation program is configured to authenticate the user according to a preset procedure (eg, After processing the predetermined mobile OTP generation program driving password authentication, input the customer authentication information (for example, phone number, social security number, personal identification information, etc.), and transmits after encrypting through the encryption code, the mobile phone processing means After the customer authentication for the customer authentication information from the 605 to download the OTP generation key (KEY) value associated with the mobile OTP generation program and store in the customer cell phone memory, or stored in the USIM provided in the customer cell phone Preferably, the OTP generation in the mobile OTP generation program code When the key value is included, the process of downloading the OTP generation key value may be omitted.

According to another exemplary embodiment of the present invention, it is possible to include an integrated OTP generation program in which the mobile banking interworking OTP program code and the mobile OTP generation program code are integrated in the customer mobile phone, in which case the mobile phone processing means 605 Sending information (eg, callback UEL) for providing the integrated OTP program code to the customer mobile phone through a mobile communication network, and requesting the integrated OTP program code through the information from the customer mobile phone, the corresponding customer It is desirable to provide the integrated OTP program code to a mobile phone.

According to another embodiment of the present invention, the integrated OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means 605 is the window terminal (or Customer terminal) to provide the integrated OTP program code to be provided in the customer mobile phone, or to process the integrated OTP program code provided in the window terminal (or customer terminal) provided to the customer mobile phone.

Here, the integrated OTP program code, the encryption code for encrypting the personal identification number transmitted to the server through a mobile communication network, or encrypting the OTP generated by the customer mobile phone to the server via a mobile communication network, and in the server It is preferable to include a decryption code for decrypting the OTP to encrypt and transmit, or decrypt the information transmitted by encrypting in the server, the encryption key for encryption or decryption key for decryption to the encryption code or decryption code It is preferably provided to the customer mobile phone or provided to the customer mobile phone according to a defined key exchange procedure between the customer mobile phone and the server (for example, a process of generating a session key and encrypting and exchanging a binary key). Do.

In addition, the integrated OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the mobile phone to the TLS (Transport Layer Security) encryption section.

According to the present invention, the mobile OTP generation program code provided in the customer's mobile phone cannot be used for mobile banking due to the limitation of two-factor authentication that the electronic financial medium and the authentication medium must be separated. If the electronic financial medium is not a customer's mobile phone (eg, internet banking), it can be used as an OTP authentication medium, and as the OTP authentication medium for mobile banking, a mobile banking linked OTP program code is used, or the integrated OTP Only a portion of the program code that transmits customer identification number information to the server or receives an OTP generated by the server may be used.

Therefore, when OTP authentication is required when using mobile banking through the customer mobile phone, the customer mobile phone starts the mobile OTP generation program code (or integrated OTP program code) to output a personal identification number input interface, and the personal identification number. When the customer personal identification number information is input through the input interface, the input customer personal identification number information is encrypted and transmitted with a predetermined encryption key.

According to an embodiment of the present invention, the customer identification number information is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, It is preferable to encrypt twice through the TLS encryption method set in the communication interval between servers.

According to the method of the present invention, the mobile OTP generation program code (or integrated OTP program code) provided in the customer mobile phone is provided in the customer mobile phone, in addition to the customer personal identification number information input through the personal identification number input interface. One or more mobile phone unique identification information (e.g., including a terminal serial number (ESN) assigned to a customer mobile phone, a USIM serial number, a terminal identification code stored in a memory of the mobile phone, and one or more USIM identification codes recorded in the mobile phone USIM); It is possible to confirm, and further comprising the identified mobile phone identification information, and to transmit, whereby the present invention is not limited.

Alternatively, the personal identification number input interface may further include a user interface for inputting customer unique information (for example, a social security number), in addition to the user interface for inputting the customer personal identification number information. The mobile OTP generated program code (or integrated OTP program code) can be transmitted by further including the inputted customer unique information, in addition to the customer personal identification number information, thereby not limiting the present invention.

According to an embodiment of the present invention, when the OTP is input, the customer mobile phone checks the customer mobile phone unique information from the mobile phone memory (or USIM), and transmits the mobile phone further including the unique mobile phone unique information to the input OTP. It is possible that the customer's mobile phone unique information is preferably encrypted with the OTP.

The information authentication means 630 receives the encrypted customer personal identification number information by the customer mobile phone, and confirms the original customer personal identification number information by decrypting the encrypted customer personal identification number information, the server (1) In operation 645, the data is processed to authenticate the validity of the customer identification number information in association with the storage medium 650.

When one or more mobile phone unique identification information or customer unique information is further received (and decrypted) from the customer mobile phone according to the embodiment of the present invention, the information authentication means 630 further adds the mobile phone unique identification information or customer unique information. It is preferable to process to authenticate the validity through the server (1) (645).

If the validity of the customer personal identification number information (which may further include mobile phone unique identification information or customer unique information) is authenticated, the information receiving means 635 sends the customer personal identification to the server (1) 645. OTP identification key or OTP generation program for providing an OTP identification information including number information and one or more unique information of the customer's mobile phone to replace the OTP on behalf of the customer's mobile phone from the server (1) 645. Receive

Here, the unique information of the customer mobile phone is received, included in the customer personal identification number information, or confirmed from the caller information for the customer mobile phone, or confirmed from the mobile communication company server based on the caller information of the customer mobile phone. Possible, the present invention is not limited by the manner of confirming the unique information of the customer mobile phone.

The OTP processing means 640 is characterized in that for generating the OTP to be generated in the customer's mobile phone through the OTP generation key (KEY) value or OTP generation program.

According to an embodiment of the present invention, when the OTP processing means 640 is provided with an OTP generation function to replace the OTP to be generated by the customer's mobile phone, the information receiving means 635 may include the customer personal identification number information. Receive an OTP generation key (KEY) value associated with the OTP identification information including one or more unique mobile phone information, the OTP processing means 640 is one or more fixed seed value and dynamic seed from the OTP generation key (KEY) value It is preferable to substitute the fixed seed value and the dynamic seed value into a preset OTP generation algorithm to generate an OTP to be generated in the customer mobile phone.

According to another embodiment of the present invention, when the OTP processing means 640 is provided with a plurality of OTP generation functions for each of the OTP generation algorithms to replace the OTP to be generated in the customer mobile phone, the information receiving means 635 is OTP generation program information for selecting an OTP generation key (KEY) associated with the OTP identification information including at least one of the customer personal identification number information and the unique information of the customer mobile phone and an OTP generation algorithm to replace the OTP generated by the customer mobile phone. And the OTP processing means 640 checks / determines one or more fixed seed values and dynamic seed values corresponding to the OTP generation program information from the OTP generation key value, and determines the fixed seed values and the dynamic seed values. Substituting the seed value into the OTP generation algorithm corresponding to the OTP generation program information, it is preferable to generate the OTP to be generated in the customer mobile phone It is right.

According to another exemplary embodiment of the present invention, when the OTP processing means 640 is not provided with an OTP generating function to replace the OTP to be generated by the customer mobile phone, the information receiving means 635 may generate the OTP generating condition. Receive an OTP generation key (KEY) associated with the information and the OTP generation program code to replace the OTP to be generated in the customer mobile phone, the OTP processing means 640 is one or more fixed from the OTP generation key (KEY) value It is preferable to check / determine the seed value and the dynamic seed value, and to start the OTP generating program code to alternately generate the OTP to be generated in the customer mobile phone through the fixed seed value and the dynamic seed value.

When the OTP to be generated in the customer's mobile phone is generated alternatively, the OTP processing means 640 encrypts the generated OTP using an encryption key corresponding to the decryption key provided in the mobile phone.

According to an embodiment of the present invention, the alternatively generated OTP is encrypted using an end-to-end data encryption method (eg, AES 128 encryption method) between the customer mobile phone and the server through an encryption key paired with a decryption key provided to the customer mobile phone. It is preferable.

The OTP transmission means 610 is characterized in that for processing the encrypted OTP to be provided to the customer mobile phone through a mobile communication network.

According to the embodiment of the present invention, the OTP transmission means 610 encrypts the communication section between the mobile phone and the server by a TLS encryption method to transmit the OTP to the customer mobile phone, whereby the OTP is the end It is encrypted twice by inter-data encryption and TLS encryption.

The customer cellular phone receives the substitute generated OTP through the mobile communication network, and if the received OTP is encrypted, decrypts the OTP using a predetermined decryption key and outputs the OTP to an OTP output area on the screen. And displaying an OTP input interface in a predetermined area near the OTP output area, and when the OTP is input through the OTP input interface, encrypting the input OTP and transmitting the encrypted OTP.

Here, the OTP is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, and the communication section between the mobile phone and the server that authenticates the OTP. It is preferable to encrypt twice through the set TLS encryption scheme.

The OTP authentication means 615 receives the encrypted OTP from the customer mobile phone through the mobile communication network, and decrypts the encrypted OTP through a decryption key matching the encryption key provided in the customer mobile phone. .

In addition, the OTP authentication means 615 is characterized by comparing the decrypted OTP and the OTP generated by the OTP processing means 640 to authenticate the validity of the received OTP.

According to another exemplary embodiment of the present invention, the customer cellular phone may transmit the OTP to the mobile banking processing server 600 in addition to the OTP authentication means 615 or to a server that authenticates a separate OTP. In this case, the mobile banking processing server 600 (or a server authenticating the OTP) receives and decrypts the OTP, and generates the OTP in the same manner as the OTP processing means 640 generates the OTP. It is possible to generate an OTP 'by checking a value or an OTP generating program, and to authenticate the validity of the OTP by comparing the OTP and the OTP'.

When the validity of the OTP is authenticated by the OTP authentication means 615, the authentication result transmission means 620 is connected to the customer mobile phone and the mobile phone banking processing server for processing the mobile banking is connected to the customer mobile phone Transmitted to 600, or characterized in that the processing to be transmitted to the mobile banking processing server 600 via the customer mobile phone.

The server for authenticating the OTP receives and decrypts the OTP through the mobile communication network, generates an OTP 'by identifying an OTP generation key value or an OTP generation program corresponding to the received OTP, and generates the OTP. And OTP 'to perform OTP authentication for the mobile banking transaction, and the OTP authentication result is provided to a server providing the mobile banking.

7 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to a second embodiment of the present invention.

In more detail, FIG. 7 receives the OTP usage information from the window terminal at the information registration means 625 on the OTP processing system shown in FIG. 6, and is included in the OTP usage information through the server (1) 645. As the present invention illustrates a process of storing and registering OTP identification information and OTP generation key (KEY) or OTP generation program including at least one of customer personal identification number information and unique mobile phone information on a storage medium 650, Those skilled in the art may refer to and / or modify this drawing to infer various implementation methods (e.g., some steps may be omitted or the order may be changed) for the information registration process. As will be appreciated, the present invention includes all implementation methods inferred, and the technical features are not limited only to the implementation method illustrated in FIG.

Referring to FIG. 7, when a customer visits a bank branch and applies for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, the illustrated in FIG. When the counter terminal inputs and transmits the OTP use application information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means 635 receives the OTP use application information (700). .

The information registration means 625 is a server (1) to the OTP identification information and OTP generation key (KEY) or OTP generation program including one or more customer identification number information and customer mobile phone unique information included in the OTP usage information Provided to (645) and stored in the storage medium 650, registered (705).

If the OTP identification information and the OTP generation key (KEY) value or the OTP generation program are connected and stored in the storage medium 650, the mobile phone processing means 605 sends the OTP generation key (KEY) to a customer mobile phone. OTP program code, encryption key and decryption key for a mobile phone to implement OTP through the value or OTP generation program (715).

Here, the OTP program code for the mobile phone provided to the customer mobile phone in the mobile phone processing means 605 overcomes the two-factor authentication limit that the electronic financial medium and the authentication medium should be separated when using mobile banking through the customer mobile phone. In order to provide the customer personal identification number information to the server, the server generates an alternative OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to provide to the customer mobile phone, the alternative generation It is preferable to include a mobile banking interworking OTP program code having a function of receiving and outputting the received OTP, and displays the OTP input interface near the area where the OTP is output to input the alternatively generated OTP. Mobile OTP generation in the mobile banking linked OTP program code according to the intention of It is possible to further include the program code or to include the integrated OTP generating program code.

8 is a diagram illustrating a second implementation process of registering information for mobile banking interworking OTP authentication according to the second embodiment of the present invention.

In more detail, FIG. 8 illustrates that when the information registration means 625 and the mobile phone processing means 605 on the OTP processing system shown in FIG. 6 are implemented in a predetermined server form, the server receives OTP usage information from a window terminal. Receive and store in the storage medium 650 by connecting the OTP identification information and the OTP generation key (KEY) or OTP generation program including one or more customer identification number information and the unique information of the customer mobile phone included in the OTP usage information As a process of registering the information, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 8 to perform various methods for the information registration process (for example, some steps are omitted). May be inferred, or the order of implementation may be inferred. The technical features are not limited only by the municipal method.

Referring to FIG. 8, when a customer visits a bank branch to apply for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, When the counter terminal inputs and transmits the OTP use request information including one or more customer mobile number information, customer personal identification number information, and customer unique information, the information receiving means 635 receives the OTP use request information (800). .

The server provides OTP identification information, OTP generation key (KEY) value or OTP generation program including one or more customer identification number information and customer mobile phone unique information included in the OTP usage information to the server (1) 645. The storage medium 650 is stored and registered (805).

If the OTP identification information and the OTP generation key (KEY) or OTP generation program are connected and stored in the storage medium (650) (810), the server generates the OTP generation key (KEY) or OTP to the customer's mobile phone. The program provides an OTP program code, an encryption key, and a decryption key for a mobile phone to implement OTP (815).

Here, the OTP program code for the mobile phone provided to the customer mobile phone from the server, when using the mobile banking through the customer mobile phone, to overcome the two-factor authentication limitation that the electronic financial media and the authentication media must be separated from the individual customer to the server If the identification number information is provided, and the server generates an OTP to be generated in the customer's mobile phone through the OTP generation key value or an OTP generation program and provides it to the customer's mobile phone, the generated OTP is received. And a mobile banking interlocking OTP program code having a function of displaying an OTP input interface near the area where the OTP is output and inputting the alternatively generated OTP. Mobile OTP generation program code to mobile banking interlocking OTP program code It is possible to include more, or an integrated OTP generation program code.

9 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to the second embodiment of the present invention.

In more detail, FIG. 9 illustrates an OTP identification information and an OTP generation key including one or more customer personal identification number information and unique mobile phone information in a storage medium 650 through the information registration process illustrated in FIG. 7 or 8. KEY) value or OTP generation program is connected and stored, the mobile banking interworking OTP program code and encryption key and decryption key provided to the customer cell phone, when the mobile banking processing through the mobile banking processing server 600 in the customer cell phone, When OTP authentication is required, in order to overcome the two-factor authentication limit for the mobile banking on the customer's mobile phone, the mobile banking interworking OTP program code is activated and the customer's personal identification number information is transmitted and transmitted. ) Authenticates the customer personal identification number information through the server (1) 645, and the information receiving means (635) Receive an OTP generation key (KEY) value or an OTP generation program for substituting the OTP on behalf of the customer mobile phone from the server (1) 645, the OTP processing means 640 in the OTP generation key (KEY) Alternately generates and encrypts an OTP to be generated by the customer mobile phone through a value or OTP generating program, and transmits the encrypted OTP to the customer mobile phone by the OTP transmission means 610, and then outputs the OTP from the customer mobile phone. After inputting and transmitting through the OTP input interface, the OTP authentication means 615 receives and decrypts the OTP to confirm validity, and the authentication result transmission means 620 confirms the validity authentication result for the OTP in the mobile. As shown in the process provided to the banking processing server 600, those of ordinary skill in the art to which the present invention pertains, referring to and / or modifying the present figure 9 Various implementation methods (e.g., some steps may be omitted or changed in order) may be inferred for the process of authenticating OTP in conjunction with mobile banking, but the present invention includes all the implementation methods inferred above. It is made, the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 9, the OTP identification information and the OTP generation key (KEY) including one or more customer identification number information and customer mobile phone unique information in the storage medium 650 through the information registration process illustrated in FIG. 7 or 8. And store the value or the OTP connection program, and the mobile banking interworking OTP program code and encryption key and decryption key provided to the customer's mobile phone, the mobile banking processing server 600 through the mobile banking processing server 600 in the customer's mobile phone (900) ), If OTP authentication is required (905), the customer's mobile phone outputs a personal identification number information input interface by activating a mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking; If the customer's personal identification number information is input through the personal identification number information input interface, And the transmission information to the authentication means 630, 910.

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting it with an encryption key provided to the customer mobile phone through the information registration process shown in FIG. 7 or 8. The authentication means 630 decrypts the previously received customer personal identification number information through a decryption key matched with the encryption key.

The information authentication means 630 authenticates the customer personal identification number information by comparing the customer personal identification number information and the customer personal identification number information stored in the storage medium 650 through the server (1) (645). (915).

If the customer identification number information is authenticated (920), the information receiving means 635 is an OTP generation key (KEY) value for replacing the OTP on behalf of the customer mobile phone from the server (1) 645 Or check the OTP generating program (925), the OTP processing means 640 alternately generates the OTP to be generated in the customer mobile phone through the OTP generating key (KEY) value or OTP generating program (930), the The generated generated OTP is encrypted (935).

According to an embodiment of the present invention, the OTP processing means 640 encrypts the generated generated OTP with an encryption key matching the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 7 or 8. Preferably, the customer cellular phone decrypts the received OTP with the decryption key.

The OTP transmission means 610 transmits the encrypted OTP to the customer mobile phone through a mobile communication network (940).

After the customer mobile phone outputs the received OTP (945), it displays the OTP input interface in a predetermined area near the area where the OTP is output. If the output OTP is input through the OTP input interface (950), the customer mobile phone encrypts the input OTP and transmits the OTP to the OTP authentication means 615 through a mobile communication network (955). The means 615 decrypts the OTP, compares the decrypted OTP and the OTP generated by the OTP processing means 640 to confirm the validity of the OTP (960), and the authentication result transmission means (620). The OTP validity authentication result is transmitted to the mobile banking processing server 600 providing mobile banking to the customer's mobile phone (965), and the mobile banking processing server 600 determines whether to approve a transaction according to the OTP validity authentication result. To determine and process the mobile banking requested by the customer mobile phone (970).

FIG. 10 illustrates a second implementation process for authenticating OTP in association with mobile banking according to a second implementation method of the present invention.

In more detail, FIG. 10 shows information authentication means 630, information receiving means 635, OTP processing means 640, OTP transmission means 610, and OTP authentication means 615 on the OTP processing system shown in FIG. And the authentication result transmission means 620 in the form of a predetermined server, the customer personal identification number information and the unique information of the customer mobile phone to the storage medium 650 through the information registration process shown in Figure 7 or 8 Connect and store OTP identification information and OTP generation key (KEY) or OTP generation program including one or more, and provide mobile banking interworking OTP program code, encryption key and decryption key to the customer mobile phone, and then mobile banking on the customer mobile phone When the mobile banking processing through the processing server 600, if OTP authentication is required, in order to overcome the two-factor authentication limit for the mobile banking in the customer mobile phone mobile banking linked OTP pro When the RAM code is activated and the customer's personal identification number information is input and transmitted, the server authenticates the customer's personal identification number information through the server (1) 645 and the customer from the server (1) 645. Receiving an OTP generation key (KEY) value or OTP generation program for alternative generation of the OTP on behalf of a mobile phone, and the customer mobile phone through the OTP generation key (KEY) value or OTP generation program in the OTP processing means 640 After generating and encrypting the OTP to be generated in the alternative, and transmitting the encrypted OTP to the customer mobile phone, after outputting the OTP from the customer mobile phone and input through the OTP input interface to transmit, the server OTP Receiving and decrypting to confirm the validity, and showing the process of providing a validity authentication result for the OTP to the mobile banking processing server 600, the present invention Those skilled in the art may refer to and / or modify this drawing 10 to implement various methods of authenticating OTP in conjunction with the mobile banking (eg, some steps may be omitted or the order may be changed). Implementation method) may be inferred, but the present invention includes all the implementation methods inferred, and the technical features are not limited to the implementation method shown in FIG.

Referring to FIG. 10, an OTP identification information and an OTP generation key (KEY) including one or more customer identification number information and a customer mobile phone unique information in the storage medium 650 through the information registration process illustrated in FIG. 7 or 8. And store the value or the OTP connection program, and the mobile banking interworking OTP program code and encryption key and decryption key provided to the customer's mobile phone, and during the mobile banking processing through the mobile banking processing server 600 in the customer's mobile phone (1000) ), If OTP authentication is required (1005), the customer mobile phone outputs a personal identification number information input interface by starting a mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking, and When the customer personal identification number information is input through the personal identification number information input interface, the entered customer personal identification number And transmits the information to the server 1010.

According to an exemplary embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting it with an encryption key provided to the customer mobile phone through the information registration process illustrated in FIG. 7 or 8. Decrypts the received customer personal identification number information through a decryption key matching the encryption key.

The server authenticates the customer personal identification number information by comparing the customer personal identification number information stored in the storage medium 650 and the customer personal identification number information through the server (1) 645 (1015).

If the customer identification number information is authenticated (1020), the server via the server (1) (645) OTP generation key (KEY) value or OTP generation program for replacing the OTP on behalf of the customer mobile phone Check (1025), and alternatively generates the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program (1030), and encrypts the substitution generated OTP (1035).

According to an embodiment of the present invention, the server encrypts the substitute generated OTP with an encryption key that matches the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 7 or 8. The customer cellular phone decrypts the received OTP with the decryption key.

The server transmits the encrypted OTP to the customer mobile phone through a mobile communication network (1040).

After outputting the received OTP (1045), the customer mobile phone displays an OTP input interface in a predetermined area near the area where the OTP is output. If the outputted OTP is keyed through the OTP input interface (1050), the customer cellular phone encrypts the input OTP and transmits it to the server through a mobile communication network (1055), and the server decrypts the OTP. And comparing the decrypted OTP and the OTP generated by the OTP processing means 640 to confirm the validity of the OTP (1060), and the mobile banking providing the mobile banking to the customer mobile phone with the OTP validity authentication result. Transmitting to the processing server 600 (1065), the mobile banking processing server 600 determines whether to approve a transaction according to the OTP validity authentication result to process the mobile banking requested by the customer mobile phone (1070).

11 is a block diagram of an OTP processing system for mobile banking according to a third embodiment of the present invention.

More specifically, Figure 11 is a server for OTP identification information including one or more customer identification number information required for OTP authentication and mobile phone identification information associated with the customer identification number information in the mobile banking process through the customer cell phone (1) The server 2 (1155) stores an OTP generation key (KEY) value or OTP generation program required for storing the first storage medium 1150 managed in 1145 and replacing the OTP to be generated by the customer mobile phone. After storing in the second storage medium (1160) managed in the), and sends the customer personal identification number information to use mobile banking in the customer mobile phone, the customer personal identification number through the server (1) (1145) When the information is authenticated and the customer personal identification number information is authenticated, the server 2 (1155) is used to replace the OTP on behalf of the customer mobile phone from the second storage medium 1160 for the customer. Receiving an OTP generation key (KEY) value or OTP generating program to generate an OTP to be generated in the customer mobile phone, and encrypts the generated OTP with an encryption key that can be decrypted through a decryption key provided in the customer mobile phone As a system configuration provided to the customer mobile phone, a person having ordinary knowledge in the technical field to which the present invention pertains may refer to and / or modify the drawing 11 and various implementation methods for the OTP processing system (for example, Some components may be omitted, subdivided, or combined). However, the present invention includes all the implementation methods inferred above, and the technical features thereof are only shown by the implementation method shown in FIG. It is not limited.

Referring to FIG. 11, the OTP processing system includes a customer mobile phone used as an electronic financial medium of mobile banking, customer personal identification number information and the customer personal identification required for OTP authentication in a mobile banking process through the customer mobile phone. A server (1) (1145) for managing the first storage medium 1150 for storing OTP identification information including one or more unique information of the customer mobile phone connected to the number information and alternately to generate the OTP to be generated in the customer mobile phone The server 2 (1155) managing the second storage medium (1160) storing the necessary OTP generation key (KEY) value or the OTP generation program, and the customer personal identification number information through the server (1) 1145; OTP identification information including one or more unique information of the customer's mobile phone is stored in the first storage medium 1150, and the OTP required to alternately generate the OTP to be generated in the customer's mobile phone through the server (2) (1155) Information registration means (1125) for processing the generated key (KEY) or OTP generating program to be stored in the second storage medium 1160, and when using the mobile banking through the customer mobile phone, the customer personal identification number information from the customer mobile phone Information authentication means for authenticating the reception and replacement of the OTP on behalf of the customer mobile phone compared to the customer personal identification number information stored in the first storage medium 1150 through the server (1) 1145 1130 and, if the customer personal identification number information is authenticated, an OTP generation key for replacing and generating an OTP on behalf of the customer mobile phone from the second storage medium 1160 through the server (2) 1155 ( After generating the OTP to be generated in the customer mobile phone through the information receiving means 1135 for receiving the KEY value or the OTP generating program and the checked OTP generating key (KEY) value or the OTP generating program, OTP processing means 1140 for encrypting the previously generated OTP using an encryption key corresponding to a decryption key previously stored in the mobile phone, and OTP transmission means 1110 for processing the encrypted OTP to be transmitted to the mobile phone. It is characterized by consisting of).

According to the invention, each means constituting the OTP processing system is implemented in the form of one independent server, or a combination of two or more means functions in the form of a server, or the means is implemented in the form of a server It is evident that all of these things are possible, and that the present invention is not limited by the implementation method constituting the above means.

A customer visits a bank branch to apply for mobile banking, or uses a mobile OTP generation program (e.g., an OTP generation key (KEY) value provided in the customer cell phone) to the customer cell phone in accordance with a preset OTP generation algorithm. Program code to generate and output OTP), or apply for OTP registration for mobile banking, the teller of the bank branch face-to-face authentication of the customer, and the customer terminal unique information and customer through the teller terminal Input and transmit OTP use application information including one or more personal identification number information and customer unique information (for example, information including the name and social security number information of the customer).

Alternatively, the customer applies for mobile banking through a customer terminal, or the customer according to a preset OTP generation algorithm through a mobile OTP generation program (eg, an OTP generation key (KEY) value provided in the customer's mobile phone). Program code for generating and outputting OTP in the mobile phone, or applying for OTP registration for mobile banking, the customer terminal identifies customer mobile phone number information and customer personal identification from the customer through a predetermined information input interface. Input and transmit the OTP use request information including one or more pieces of number information and customer specific information (for example, information including the name and social security number information of the customer).

Here, the unique information of the customer mobile phone, a virtual mobile OTP medium for receiving and outputting a customer mobile phone to use mobile banking, a customer mobile phone to be provided with a mobile OTP generation program, or OTP generated by the server on behalf of the customer mobile phone As the information for identifying the customer mobile phone corresponding to any one or more of the customer mobile phones to be used, it is preferable to include a telephone number assigned to the customer mobile phone.

According to the implementation method of the present invention, the unique information of the customer mobile phone, the terminal serial number (ESN), USIM serial number (for example, chip serial number, USIM manufacturing number, serial number recorded in the USIM) assigned to the customer mobile phone It further comprises, or comprises a terminal identification code stored in the memory of the mobile phone by generating and encrypting a code value that is not duplicated to identify the customer mobile phone, or one or more USIM identification code recorded in the USIM. desirable.

That is, the unique information of the customer mobile phone includes at least one of all mobile phone related identification information maintained through the memory (or USIM) of the mobile phone even when the customer mobile phone is connected or not connected to the mobile communication network. As a result, the unique information of the customer mobile phone of the present invention is not limited to the above description, and it is possible to include various identification information according to the type of the customer mobile phone and the fixed ID value uniquely identifying the mobile phone. It is apparent that the present invention is not limited by the type of.

The customer personal identification number information, if the mobile phone OTP generation program is provided in the customer mobile phone, to authenticate the generation of the OTP through the mobile OTP generation program, or instead of the customer mobile phone during mobile banking using the customer mobile phone As a personal identification number (PIN) for authenticating an OTP generated on behalf of the customer's mobile phone on the server by approving it as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server. It is preferable to include a password for generating an OTP registered through a PIN pad or a unique identification number uniquely registered so as not to be duplicated for each customer for generating the OTP.

If the customer identification number information includes a unique identification number that is uniquely registered so as not to be duplicated for each customer, the unique identification number is N (through a predetermined number server (not shown) to the information registration means 1125 N> 1) The number of digits is automatically numbered or determined by allowing the customer to enter a non-overlapping N-digit unique identification number through the PIN pad, or n entered by the customer through the PIN pad. A second number of (Nn) digits uniquely assigned to the customer (for example, the unique information of the customer's mobile phone or a resident registration number included in the customer's unique information) to the first number of (1 <= n <N) digits Combined with N-digit unique identification number, or uniquely assigned to the customer mobile phone unique information (or two or more constituting the customer mobile phone unique information A part (or all) of a call combination) is determined by a N-digit unique identification number, or a part (or all) of a combination (eg, a social security number) included in the customer mobile phone unique information and the customer unique information is N digits. It is preferable to determine the unique identification number of.

The customer unique information is customer information including the name and resident registration number of the customer. When the customer is registered as a financial transaction customer of the bank, the customer unique information is customer information registered in the customer ledger provided in the bank. It is preferable that the customer identification information is included to check the customer information, and if the customer is a new customer of the bank, the customer unique information is customer information (eg, name, social security number, Address, contact information, etc.).

The teller terminal (or customer terminal) transmits the input OTP use request information, and the information registering means 1125 receives the OTP use request information from the teller terminal (or customer terminal).

According to an embodiment of the present invention, when the OTP use request information is received, the information registration means 1125 uses the customer mobile phone number information and the customer unique information through a mobile communication company server and the validity of the customer mobile phone Checking the validity of one or more of the can be performed.

The information registering unit 1125 transmits the customer mobile phone number information and the customer unique information included in the OTP use application information to the mobile communication company server to confirm at least one validity of the validity of the customer and the validity of the customer mobile phone. .

The mobile communication company server inquires subscriber D / B through the received customer mobile phone number information to confirm subscriber information, compares the subscriber information with the customer unique information, or the subscriber D through the received customer unique information. Check the subscriber information by querying / B, and compares the customer mobile phone number information and the received customer mobile phone number information included in the subscriber information to verify that the mobile phone subscriber and the customer applying for the OTP is the same Check.

In addition, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone corresponding to the customer mobile phone number information to verify the customer mobile phone validity that can use the OTP service applied by the customer through the customer mobile phone It is possible to check more.

According to an embodiment of the present invention, when the OTP service requested by the customer operates by installing a specific OTP generating program in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone. It is preferable to check the validity of the customer mobile phone to confirm whether the operating platform that can operate by installing the OTP generation program on the customer mobile phone is provided.

Alternatively, when the OTP service requested by the customer is operated using the USIM provided in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone and the USIM is read in the customer's mobile phone. It is desirable to check the validity of the customer cell phone to verify that it is equipped.

Alternatively, when the OTP service requested by the customer is operated using the financial IC chip provided in the customer mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone to the customer mobile phone. It is desirable to check the validity of the customer's mobile phone to check whether the financial IC chip is provided.

According to another exemplary embodiment of the present invention, the mobile telecommunication company server confirms the customer validity and provides terminal information (or device information) for the customer mobile phone to the information registration means 1125, thereby providing the information registration means ( In 1125, it is possible to confirm the validity of the customer mobile phone, whereby the present invention is not limited.

The information registration means 1125 provides the OTP identification information including one or more of the customer personal identification number information and the customer mobile phone unique information included in the OTP use application information to the server (1) 1145 to provide a first storage medium ( To the server (2) 1155 to provide the OTP generation key (KEY) value or OTP generation program necessary to alternately generate the OTP to be generated by the customer mobile phone, to the second storage medium 1160. Characterized in that the storage, registration.

Here, the OTP generation key value may include one or more fixed seed values for generating an OTP and a parameter for determining a dynamic seed value.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP-generated key value includes a seed that is fixed to assign to a time-synchronized OTP generation algorithm. The parameter of the (KEY) value preferably includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization type OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation key (KEY) includes a seed fixed to be assigned to the challenge-response OTP generation algorithm, and the OTP generation key (KEY ) Parameter preferably includes a random number generation seed for generating a random number corresponding to the dynamic seed value of the challenge-response OTP.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the OTP generation key value is one or more for generating an OTP on the server on behalf of the customer mobile phone. It is preferred to include a fixed seed value and a parameter for determining the dynamic seed value.

If the customer mobile phone is provided with a mobile OTP generation program, in addition to using the customer mobile phone as the virtual OTP medium for mobile banking, the OTP generation key value is a mobile OTP generation program provided in the customer mobile phone. And at least one fixed seed value for generating an OTP and a parameter for determining a dynamic seed value, wherein the OTP generating key value is provided to the customer mobile phone and encrypted in the customer mobile phone memory. Or stored in the USIM provided in the customer's mobile phone (encryption storage possible).

The OTP generation program may program an OTP generation algorithm that generates an OTP using one or more fixed seed values identified through the OTP generation key value and one or more dynamic seed values dynamically determined / generated as seeds. Implemented in the form of code, when using the customer mobile phone as a virtual banking OTP medium for receiving and outputting the OTP generated in the server, the OTP generation program is provided on the server for generating the OTP, the customer mobile phone When the mobile OTP generation program is provided, the OTP generation program is implemented in the form of a mobile OTP generation program provided to the customer mobile phone.

According to the embodiment of the present invention, there may be a plurality of OTP generation algorithms for generating the OTP according to the type and modification, and in this case, a plurality of OTP generation programs may also exist according to the OTP generation algorithm.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer cellular phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the information registration means 1125 is configured to provide the customer personal identification number information and information through the server 1 and 1145. OTP identification information including one or more unique information of the customer's mobile phone is stored in the first storage medium 1150, and the OTP generation key (KEY) is stored in the second storage medium 1160 through the server 2 (1155). It is characterized in that the processing to be stored, registered in, and when there are a plurality of OTP generating program, to use to generate the OTP through the server (2) (1155) Preferably, the OTP generation program information is stored and registered in the second storage medium 1160.

Alternatively, when the mobile OTP generation program is provided in the customer mobile phone, the information registration means 1125 includes the OTP including one or more of the customer personal identification number information and the customer mobile phone unique information through the server (1) 1145. The identification information is stored in the first storage medium 1150, and the OTP generation program information corresponding to the OTP generation key (KEY) value and the mobile OTP generation program provided to the customer mobile phone through the server 2 (1155) (e.g., , Version, algorithm, etc.) may be stored and registered in the second storage medium 1160.

Through the server (1) 1145, OTP identification information including one or more pieces of customer personal identification number information and unique information of a customer mobile phone is stored in the first storage medium 1150, and the server 2 (1155) is stored. When an OTP generation key value or an OTP generation program is stored in the second storage medium 1160, the cellular phone processing means 1105 transmits the OTP generation key value and the OTP generation program to a customer mobile phone. Provide OTP program code for mobile phones to implement OTP.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer cellular phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the cellular phone processing means 1105 inputs a personal identification number during the mobile banking through the customer cellular phone to establish a mobile communication network. Transmit to the server through (eg, through a communication server provided in the mobile communication network), receive and output the OTP generated on behalf of the customer's mobile phone through the OTP generation key value and the OTP generation program in the server. A server for authenticating the OTP by inputting an OTP input interface for inputting the output OTP; The mobile banking linked OTP program code to be transmitted to the customer mobile phone is characterized in that it is provided.

According to an embodiment of the present invention, the mobile phone processing means 1105 transmits information (for example, callback UEL) for providing the mobile banking linked OTP program code to the customer mobile phone through a mobile communication network, When the mobile banking interworking OTP program code is requested through the information, the mobile banking interworking OTP program code may be provided to the customer mobile phone in response to the request.

According to another exemplary embodiment of the present invention, the mobile banking interworking OTP program code may be provided to the customer mobile phone through the window terminal (or a customer terminal), in which case the mobile phone processing means 1105 is the window terminal. (Or a customer terminal) to provide the mobile banking linked OTP program code to be provided in the customer mobile phone, or to provide the mobile banking linked OTP program code provided in the teller terminal (or customer terminal) to the customer mobile phone It is possible to process.

Here, the mobile banking interworking OTP program code, the encryption code for encrypting the personal identification number and transmits to the server via a mobile communication network, and preferably comprises a decryption code for decrypting the OTP encrypted and transmitted by the server; The encryption key for decryption or the decryption key for decryption is included in the encryption code or decryption code and provided to the customer mobile phone, or a key exchange procedure defined between the customer mobile phone and the server (eg, generating a session key). Is provided to the customer mobile phone according to the procedure for encrypting and exchanging a binary key.

When the mobile banking interworking OTP program code and the mobile OTP generation program code is provided together in the customer's mobile phone, and the encryption / decryption uses the encryption code and the decryption code included in the mobile OTP generation program code, the mobile banking interworking The OTP program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key may not be provided to the customer mobile phone.

In addition, the mobile banking interworking OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the Transport Layer Security (TLS) encryption section.

Alternatively, if the customer mobile phone is provided with a mobile OTP generation program, the mobile phone processing means 1105 transmits information (eg, callback UEL) for providing the mobile OTP generation program code to the customer mobile phone through a mobile communication network. When the customer mobile phone requests the mobile OTP generation program code through the information, it is preferable to provide the mobile OTP generation program code to the customer mobile phone correspondingly.

According to another exemplary embodiment of the present invention, the mobile OTP generation program code may be provided to the customer mobile phone through the window terminal (or a customer terminal), and in this case, the mobile phone processing means 1105 is the window terminal ( Or by providing the mobile OTP generation program code to a customer terminal) or processing the mobile OTP generation program code provided in the teller terminal (or the customer terminal) to be provided to the customer mobile phone. It is possible.

Herein, the mobile OTP generation program code includes an encryption code for encrypting an OTP generated by the customer mobile phone and transmitting the encrypted OTP to a server through a mobile communication network, and a decryption code for decrypting the information encrypted and transmitted by the server. Preferably, the encryption key for encryption or the decryption key for decryption is included in the encryption code or decryption code provided to the customer mobile phone, or a key exchange procedure (eg, session key) defined between the customer mobile phone and the server. It is preferable to provide to the customer mobile phone according to the procedure for generating and encrypting and exchanging the binary-type key.

If the customer's mobile phone is provided with the mobile banking linked OTP program code and the mobile OTP generating program code, and the encryption / decryption using the encryption code and decryption code included in the mobile banking linked OTP program code, the mobile OTP The generated program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key corresponding thereto may not be provided to the customer mobile phone.

In addition, the mobile OTP generation program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the TLS (Transport Layer Security) encryption section.

When the mobile OTP generation program code is provided in the customer mobile phone according to an embodiment of the present invention, when the mobile OTP generation program is first started in the mobile phone, the mobile OTP generation program is configured to authenticate the user according to a preset procedure (eg, After processing the predetermined mobile OTP generation program driving password authentication, input the customer authentication information (for example, phone number, social security number, personal identification information, etc.), and transmits after encrypting through the encryption code, the mobile phone processing means After the customer authentication for the customer authentication information from the (1105) to download the OTP generation key (KEY) value associated with the mobile OTP generation program and store in the customer's mobile phone memory, or stored in the USIM provided in the customer's mobile phone Preferably, the OTP is generated in the mobile OTP generating program code. Key (KEY) when the value is included, but may be a process of downloading the OTP generation key (KEY) values omitted.

According to another exemplary embodiment of the present invention, it is possible to include an integrated OTP generation program in which the mobile banking interworking OTP program code and the mobile OTP generation program code are integrated in the customer mobile phone, in which case the mobile phone processing means 1105 Sending information (eg, callback UEL) for providing the integrated OTP program code to the customer mobile phone through a mobile communication network, and requesting the integrated OTP program code through the information from the customer mobile phone, the corresponding customer It is desirable to provide the integrated OTP program code to a mobile phone.

According to another embodiment of the present invention, the integrated OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means 1105 is the window terminal (or Customer terminal) to provide the integrated OTP program code to be provided in the customer mobile phone, or to process the integrated OTP program code provided in the window terminal (or customer terminal) provided to the customer mobile phone.

Here, the integrated OTP program code, the encryption code for encrypting the personal identification number transmitted to the server through a mobile communication network, or encrypting the OTP generated by the customer mobile phone to the server via a mobile communication network, and in the server It is preferable to include a decryption code for decrypting the OTP to encrypt and transmit, or decrypt the information transmitted by encrypting in the server, the encryption key for encryption or decryption key for decryption to the encryption code or decryption code It is preferably provided to the customer mobile phone or provided to the customer mobile phone according to a defined key exchange procedure between the customer mobile phone and the server (for example, a process of generating a session key and encrypting and exchanging a binary key). Do.

In addition, the integrated OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the mobile phone to the TLS (Transport Layer Security) encryption section.

According to the present invention, the mobile OTP generation program code provided in the customer's mobile phone cannot be used for mobile banking due to the limitation of two-factor authentication that the electronic financial medium and the authentication medium must be separated. If the electronic financial medium is not a customer's mobile phone (eg, internet banking), it can be used as an OTP authentication medium, and as the OTP authentication medium for mobile banking, a mobile banking linked OTP program code is used, or the integrated OTP Only a portion of the program code that transmits customer identification number information to the server or receives an OTP generated by the server may be used.

Therefore, when OTP authentication is required when using mobile banking through the customer mobile phone, the customer mobile phone starts the mobile OTP generation program code (or integrated OTP program code) to output a personal identification number input interface, and the personal identification number. When the customer personal identification number information is input through the input interface, the input customer personal identification number information is encrypted and transmitted with a predetermined encryption key.

According to an embodiment of the present invention, the customer identification number information is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, It is preferable to encrypt twice through the TLS encryption method set in the communication interval between servers.

According to the method of the present invention, the mobile OTP generation program code (or integrated OTP program code) provided in the customer mobile phone is provided in the customer mobile phone, in addition to the customer personal identification number information input through the personal identification number input interface. One or more mobile phone unique identification information (e.g., including a terminal serial number (ESN) assigned to a customer mobile phone, a USIM serial number, a terminal identification code stored in a memory of the mobile phone, and one or more USIM identification codes recorded in the mobile phone USIM); It is possible to confirm, and further comprising the identified mobile phone identification information, and to transmit, whereby the present invention is not limited.

Alternatively, the personal identification number input interface may further include a user interface for inputting customer unique information (for example, a social security number), in addition to the user interface for inputting the customer personal identification number information. The mobile OTP generated program code (or integrated OTP program code) can be transmitted by further including the inputted customer unique information, in addition to the customer personal identification number information, thereby not limiting the present invention.

According to an embodiment of the present invention, when the OTP is input, the customer mobile phone checks the customer mobile phone unique information from the mobile phone memory (or USIM), and transmits the mobile phone further including the unique mobile phone unique information to the input OTP. It is possible that the customer's mobile phone unique information is preferably encrypted with the OTP.

The information authentication means 1130 receives the encrypted customer personal identification number information by the customer mobile phone, and confirms the original customer personal identification number information by decrypting the encrypted customer personal identification number information, the server (1) In operation 1145, the first storage medium 1150 is connected to the first storage medium 1150 to authenticate the validity of the customer identification number information.

When one or more mobile phone unique identification information or customer unique information is further received (and decrypted) from the customer mobile phone according to the embodiment of the present invention, the information authentication means 1130 further adds the mobile phone unique identification information or customer unique information. It is preferable to process to authenticate the validity through the server (1) (1145).

If the validity of the customer personal identification number information (which may further include mobile phone unique identification information or customer unique information) is authenticated, the information receiving means 1135 sends the customer personal identification to the server 2 (1155). OTP generation key (KEY) value or OTP generation program for providing an OTP identification information including the number information and one or more unique information of the customer mobile phone to replace OTP on behalf of the customer mobile phone from the server (2) 1155 Receive

Here, the unique information of the customer mobile phone is received, included in the customer personal identification number information, or confirmed from the caller information for the customer mobile phone, or confirmed from the mobile communication company server based on the caller information of the customer mobile phone. Possible, the present invention is not limited by the manner of confirming the unique information of the customer mobile phone.

The OTP processing means 1140 alternately generates an OTP to be generated in a customer mobile phone through the OTP generation key value or OTP generation program.

According to an embodiment of the present invention, when the OTP processing means 1140 is provided with an OTP generating function to replace the OTP to be generated by the customer mobile phone, the information receiving means 1135 is the server 2 (1155). Receive an OTP generation key (KEY) value for the alternative generation of the OTP on behalf of the customer's mobile phone, and the OTP processing means 1140 is one or more fixed seed value and dynamic from the OTP generation key (KEY) value The seed value may be checked / determined, and the fixed seed value and the dynamic seed value may be substituted into a preset OTP generation algorithm to alternately generate an OTP to be generated in the customer mobile phone.

According to another exemplary embodiment of the present invention, when the OTP processing means 1140 is provided with an OTP generation function for each of a plurality of OTP generation algorithms to replace the OTP to be generated by the customer mobile phone, the information receiving means 1135 An OTP generation program for selecting an OTP generation key (KEY) value for alternatively generating OTP on behalf of the customer mobile phone and an OTP generation algorithm for alternatively generating OTP to be generated in the customer mobile phone through the server (2) 1155. Receiving information, the OTP processing means 1140 checks / determines one or more fixed seed values and dynamic seed values corresponding to the OTP generation program information from the OTP generation key (KEY), Substituting the dynamic seed value into the OTP generation algorithm corresponding to the OTP generation program information, it is preferable to generate the OTP to be generated in the customer mobile phone.

According to another exemplary embodiment of the present invention, when the OTP processing means 1140 is not provided with an OTP generating function for replacing the OTP to be generated in the customer mobile phone, the information receiving means 1135 is the server 2. Receiving an OTP generation key value for alternately generating an OTP on behalf of the customer mobile phone and an OTP generation program code for alternatively generating an OTP to be generated by the customer mobile phone through 1155; 1140 checks / determines one or more fixed seed values and dynamic seed values from the OTP generation key value, and activates the OTP generation program code to generate at the customer mobile phone through the fixed seed values and dynamic seed values. It is desirable to produce alternative OTP to do.

When the OTP to be generated in the customer mobile phone is generated alternatively, the OTP processing means 1140 is characterized in that the encrypted OTP processing using the encryption key corresponding to the decryption key provided in the mobile phone.

According to an embodiment of the present invention, the alternatively generated OTP is encrypted using an end-to-end data encryption method (eg, AES 128 encryption method) between the customer mobile phone and the server through an encryption key paired with a decryption key provided to the customer mobile phone. It is preferable.

The OTP transmission means 1110 may process the encrypted OTP to be provided to the customer mobile phone through a mobile communication network.

According to the method of the present invention, the OTP transmission means 1110 encrypts the communication section between the mobile phone and the server by TLS encryption method to transmit the OTP to the customer mobile phone, whereby the OTP is the end It is encrypted twice by inter-data encryption and TLS encryption.

The customer cellular phone receives the substitute generated OTP through the mobile communication network, and if the received OTP is encrypted, decrypts the OTP using a predetermined decryption key and outputs the OTP to an OTP output area on the screen. And displaying an OTP input interface in a predetermined area near the OTP output area, and when the OTP is input through the OTP input interface, encrypting the input OTP and transmitting the encrypted OTP.

Here, the OTP is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, and the communication section between the mobile phone and the server that authenticates the OTP. It is preferable to encrypt twice through the set TLS encryption scheme.

The OTP authentication means 1115 receives an encrypted OTP from the customer mobile phone through the mobile communication network, and decrypts the encrypted OTP through a decryption key matched with an encryption key provided in the customer mobile phone. .

In addition, the OTP authentication means 1115 compares the decrypted OTP and the OTP generated by the OTP processing means 1140 to characterize the validity of the received OTP.

According to another exemplary embodiment of the present invention, the customer cellular phone may transmit the OTP to the mobile banking processing server 1100 in addition to the OTP authentication means 1115 or to a server that authenticates a separate OTP. In this case, the mobile banking processing server 1100 (or a server authenticating the OTP) receives and decrypts the OTP, and generates the OTP in the same manner as the OTP processing unit 1140 generates the OTP. It is possible to generate an OTP 'by checking a value or an OTP generating program, and to authenticate the validity of the OTP by comparing the OTP and the OTP'.

When the validity of the OTP is authenticated by the OTP authentication means 1115, the authentication result transmitting means 1120 is connected to the customer mobile phone and the mobile banking processing server for processing mobile banking It is characterized in that the processing to be transmitted to (1100), or transmitted to the mobile banking processing server 1100 via the customer mobile phone.

The server for authenticating the OTP receives and decrypts the OTP through the mobile communication network, generates an OTP 'by identifying an OTP generation key value or an OTP generation program corresponding to the received OTP, and generates the OTP. And OTP 'to perform OTP authentication for the mobile banking transaction, and the OTP authentication result is provided to a server providing the mobile banking.

12 is a diagram illustrating a first implementation process of registering information for mobile banking interworking OTP authentication according to a third embodiment of the present invention.

More specifically, FIG. 12 receives OTP usage information from a window terminal at the information registration means 1125 on the OTP processing system shown in FIG. 11, and is included in the OTP usage information through the server 1 (1145). OTP identification information including one or more customer identification number information and the unique information of the customer mobile phone is stored in the first storage medium 1150, and alternatively to generate the OTP on behalf of the customer mobile phone through the server (2) (1155) FIG. 12 illustrates a process of storing and registering an OTP generation key (KEY) value or an OTP generation program in a second storage medium 1160. If a person of ordinary skill in the art belongs to the present invention, FIG. While reference and / or modification may infer various implementation methods for the information registration process (e.g., implementation steps in which some steps have been omitted or changed in order), the present invention is directed to all implementations inferred from the above. Is made, including the method, to which the technical feature that is not limited to the exemplary method shown in the figure 12.

Referring to FIG. 12, when a customer visits a bank branch to apply for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, When the counter terminal inputs and transmits OTP use application information including one or more customer mobile number information, customer personal identification number information, and customer unique information, the information receiving means 1135 receives the OTP use application information (1200). .

The information registration means 1125 provides the OTP identification information including one or more of the customer personal identification number information and the customer mobile phone unique information included in the OTP usage information to the server (1) 1145 to provide a first storage medium (1150). And a second storage medium 1160 by providing an OTP generating key value or an OTP generating program to the server 2 or 1155 for replacing and generating an OTP on behalf of the customer's mobile phone. Process the data to be stored in (1210).

If the OTP identification information is stored in the first storage medium 1150 and the OTP generation key value or the OTP generation program is connected and stored in the second storage medium 1160, the mobile phone is stored. The processing means 1105 provides an OTP program code, an encryption key, and a decryption key for the mobile phone to implement OTP through the OTP generation key value or the OTP generation program to the customer mobile phone (1220).

Here, the OTP program code for the mobile phone provided to the customer mobile phone in the mobile phone processing means 1105, to overcome the two-factor authentication limit that the electronic financial medium and the authentication medium must be separated when using the mobile banking through the customer mobile phone In order to provide the customer personal identification number information to the server, the server generates an alternative OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to provide to the customer mobile phone, the alternative generation It is preferable to include a mobile banking interworking OTP program code having a function of receiving and outputting the received OTP, and displays the OTP input interface near the area where the OTP is output to input the alternatively generated OTP. Mobile OTP endogenous in the mobile banking linked OTP program code according to the intention of It is possible to further comprises a program code, or an integrated OTP generation program code.

FIG. 13 is a diagram illustrating a second implementation process of registering information for mobile banking linked OTP authentication according to a third embodiment of the present invention.

In more detail, in FIG. 13, when the information registering means 1125 and the mobile phone processing means 1105 on the OTP processing system shown in FIG. 11 are implemented in a predetermined server form, the server may obtain OTP usage information from a window terminal in the server. Receive and store and register the OTP identification information and OTP generation key (KEY) or OTP generation program including one or more of the customer identification number information and the unique information of the customer mobile phone included in the OTP usage information in the storage medium As shown in the drawings, a person of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 13 to implement various methods of the information registration process (e.g., some steps may be omitted, or It is possible to infer a method of changing the order of the present invention), but the present invention includes all the methods of inferring the above, and is shown in FIG. Only when the method is not limited this technical feature.

Referring to FIG. 13, when a customer visits a bank branch and applies for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, When the counter terminal inputs and transmits OTP usage application information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means 1135 receives the OTP usage application information (1300). .

The server provides OTP identification information including one or more customer personal identification number information and customer mobile phone unique information included in the OTP usage information to the server (1) 1145 to be stored in the first storage medium 1150. In operation 1305, an OTP generating key value or an OTP generating program for replacing or generating an OTP on behalf of the customer's mobile phone is provided to the server 2 and 1155 to be stored in the second storage medium 1160. (1310).

If the OTP identification information is stored in the first storage medium 1150 and the OTP generation key or key generating program is connected and stored in the second storage medium 1160 (1315), the server In operation 1320, the mobile phone provides an OTP program code, an encryption key, and a decryption key for a mobile phone to implement OTP through the OTP generation key value or the OTP generation program.

Here, the OTP program code for the mobile phone provided to the customer mobile phone from the server, when using the mobile banking through the customer mobile phone, to overcome the two-factor authentication limitation that the electronic financial media and the authentication media must be separated from the individual customer to the server If the identification number information is provided, and the server generates an OTP to be generated in the customer's mobile phone through the OTP generation key value or an OTP generation program and provides it to the customer's mobile phone, the generated OTP is received. And a mobile banking interlocking OTP program code having a function of displaying an OTP input interface near the area where the OTP is output and inputting the alternatively generated OTP. Mobile OTP generation program code to mobile banking interlocking OTP program code It is possible to include more, or an integrated OTP generation program code.

14 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a third embodiment of the present invention.

In more detail, in FIG. 14, OTP identification information including one or more personal identification number information and unique mobile phone information is stored in the first storage medium 1150 through the information registration process illustrated in FIG. 12 or 13. After connecting the OTP generation key (KEY) or OTP generation program to the second storage medium 1160, the OTP program code, encryption key and decryption key provided with the mobile banking linked to the customer cell phone, the customer phone When the mobile banking processing through the mobile banking processing server 1100, OTP authentication is required, in order to overcome the two-factor authentication limit for the mobile banking in the customer's mobile phone by starting the mobile banking linked OTP program code to identify the customer When the number information is inputted and transmitted, the customer authentication number information is transmitted from the information authentication means 1130 through the server 1 and 1145. Authenticate and receive, from the server (2) 1155, an OTP generation key (KEY) value or an OTP generation program for substituting an OTP on behalf of the customer mobile phone from the information receiving means 1135, and the OTP processing. The means 1140 alternately generates and encrypts the OTP to be generated in the customer mobile phone through the OTP generation key value or the OTP generating program, and encrypts the encrypted OTP to the customer mobile phone in the OTP transmission means 1110. After transmitting, when the customer mobile phone outputs the OTP and then inputs and transmits the data through an OTP input interface, the OTP authentication means 1115 receives and decrypts the OTP to confirm validity, and the authentication result transmission means ( 1120 shows a process of providing a validity authentication result for the OTP to the mobile banking processing server 1100, having a general knowledge in the technical field to which the present invention belongs In this case, various implementation methods (e.g., some steps may be omitted or the order may be changed) may be inferred in connection with the mobile banking by referring to and / or modifying this drawing. However, the present invention includes all the implementation methods inferred above, and the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 14, OTP identification information including one or more customer identification number information and one or more mobile phone identification information is stored in the first storage medium 1150 through the information registration process illustrated in FIG. 12 or 13. The OTP generating key (KEY) or OTP generating program is stored in the second storage medium 1160, and the mobile banking interworking OTP program code, encryption key and decryption key are provided to the customer mobile phone, During the mobile banking processing (1400) through the banking processing server (1100), if OTP authentication is required (1405), the customer mobile phone to the mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking Starts and outputs the personal identification number information input interface, the customer personal identification number information is entered through the personal identification number information input interface. If so, the inputted customer identification number information is transmitted to the information authentication means 1130 (1410).

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information encrypted with an encryption key provided to the customer mobile phone through the information registration process shown in FIG. 12 or 13. The information authentication means 1130 decrypts the previously received customer identification number information through a decryption key matched with the encryption key.

The information authentication means 1130 compares the customer personal identification number information stored in the first storage medium 1150 with the customer personal identification number information through the server (1) 1145 to obtain the customer personal identification number information. Authenticate (1415).

If the customer personal identification number information is authenticated (1420), the information receiving means 1135 is an OTP generation key (KEY) value for replacing the OTP on behalf of the customer mobile phone from the server (2) 1155 Or check the OTP generation program (1425), the OTP processing means 1140 alternately generates (1430) OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program, and The generated generated OTP is encrypted (1435).

According to an embodiment of the present invention, the OTP processing means 1140 encrypts the generated OTP with an encryption key matching the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 12 or 13. Preferably, the customer cellular phone decrypts the received OTP with the decryption key.

The OTP transmission unit 1110 transmits the encrypted OTP to the customer mobile phone through a mobile communication network (1440).

After outputting the received OTP (1445), the customer mobile phone displays an OTP input interface in a predetermined area near the area where the OTP is output. If the output OTP is keyed through the OTP input interface (1450), the customer cellular phone encrypts the input OTP and transmits the OTP to the OTP authentication means 1115 through a mobile communication network (1455), and the OTP authentication. The means 1115 decodes the OTP, compares the decrypted OTP and the OTP generated by the OTP processing means 1140 to confirm the validity of the OTP (1460), and the authentication result transmission means 1120. The OTP validity authentication result is transmitted to the mobile banking processing server 1100 that provides mobile banking to the customer's mobile phone (1465), and the mobile banking processing server 1100 determines whether to approve a transaction according to the OTP validity authentication result. The processor determines and processes the mobile banking requested by the customer's mobile phone (1470).

FIG. 15 illustrates a second implementation process for authenticating OTP in association with mobile banking according to a third implementation method of the present invention.

In more detail, FIG. 15 shows information authentication means 1130, information receiving means 1135, OTP processing means 1140, OTP transmission means 1110, OTP authentication means 1115 on the OTP processing system shown in FIG. And the authentication result transmission means 1120 in the form of a predetermined server, the customer personal identification number information and the unique mobile phone unique to the first storage medium 1150 through the information registration process shown in Figure 12 or 13 OTP identification information including one or more information is stored, and stored by connecting the OTP generation key (KEY) value or OTP generation program to a second storage medium (1160), the mobile banking interworking OTP program code and encryption to the customer cell phone After the key and the decryption key are provided, when the mobile banking processing is performed through the mobile banking processing server 1100 in the customer's mobile phone, when OTP authentication is required, the two-factor authentication for the mobile banking is performed on the mobile phone. In order to overcome the system, the mobile banking interlocking OTP program code is activated and the customer personal identification number information is inputted and transmitted, and the server authenticates the customer personal identification number information through the server (1) 1145, and the server (2) Receive an OTP generation key (KEY) value or OTP generation program for substituting OTP on behalf of the customer mobile phone from (1155), and the OTP generation key (KEY) value in the OTP processing means 1140 Alternatively, by alternatively generating and encrypting an OTP to be generated in the customer's mobile phone through an OTP generating program, transmitting the encrypted OTP to the customer's mobile phone, outputting the OTP in the customer's mobile phone, and then inputting it through an OTP input interface. When transmitting, the server receives and decrypts the OTP to confirm validity, and the validity authentication result of the OTP is transmitted to the mobile banking processing server 1100. As a process of providing the present invention, those skilled in the art to which the present invention pertains, various implementation methods for authenticating OTP in connection with the mobile banking by referring to and / or modifying the drawing 15 For example, some steps may be omitted, or the order of implementation may be changed). However, the present invention includes all the implementation methods inferred, and the technical features may be modified only by the implementation method shown in FIG. It is not limited.

Referring to FIG. 15, OTP identification information including one or more customer identification number information and one or more mobile phone unique information is stored in the first storage medium 1150 through the information registration process illustrated in FIG. 12 or 13. The OTP generating key (KEY) or OTP generating program is stored in the second storage medium 1160, and the mobile banking interworking OTP program code, encryption key and decryption key are provided to the customer mobile phone, During the mobile banking processing (1500) through the banking processing server (1100), if OTP authentication is required (1505), the customer mobile phone to the mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking Starts and outputs the personal identification number information input interface, the customer personal identification number information is entered through the personal identification number information input interface. If so, the inputted customer identification number information is transmitted to the server (1510).

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting the encryption key provided to the customer mobile phone through the information registration process shown in FIG. 12 or FIG. Decrypts the received customer personal identification number information through a decryption key matching the encryption key.

The server authenticates the customer personal identification number information by comparing the customer personal identification number information stored in the first storage medium 1150 with the customer personal identification number information through the server (1) 1145 (1515). .

If the customer identification number information is authenticated (1520), the server via the server (2) (1155) OTP generation key (KEY) value or OTP generation program for replacing the OTP on behalf of the customer mobile phone Verify (1525), and alternatively generates the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program (1530), and encrypts the substitution generated OTP (1535).

According to an embodiment of the present invention, the server encrypts the substitute generated OTP with an encryption key matching the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 12 or 13. The customer cellular phone decrypts the received OTP with the decryption key.

The server transmits the encrypted OTP to the customer mobile phone through the mobile communication network (1540).

After outputting the received OTP (1545), the customer mobile phone displays an OTP input interface in a predetermined area near the area where the OTP is output. If the outputted OTP is keyed through the OTP input interface (1550), the customer cellular phone encrypts the input OTP and transmits it to the server through a mobile communication network (1555), and the server decrypts the OTP. And comparing the decrypted OTP and the OTP generated by the OTP processing means 1140 to confirm the validity of the OTP (1560), and the mobile banking providing the mobile banking to the customer mobile phone with the OTP validity authentication result. Transmitting to the processing server 1100 (1565), the mobile banking processing server 1100 determines whether to approve a transaction according to the OTP validity authentication result and processes the mobile banking requested by the customer mobile phone (1570).

16 is a block diagram of an OTP processing system for mobile banking according to a fourth embodiment of the present invention.

In more detail, Figure 16 shows that the customer personal identification number information required for OTP authentication in the mobile banking process through the customer's mobile phone is set as an OTP generating condition and stored in a storage medium managed by the server 1, and then the customer's mobile phone. In the case of transmitting the customer personal identification number information to use the mobile banking, the server (1) authenticates the customer personal identification number information, if the customer identification number information is authenticated, OTP on behalf of the customer mobile phone By using the OTP generation key (KEY) value or the OTP generation program for the alternative generation to generate the OTP to be generated in the customer mobile phone, the OTP generated by the customer mobile phone can be decrypted through the decryption key provided in the customer mobile phone As a diagram showing a system configuration for encrypting with an encryption key provided to the customer mobile phone, the present invention belongs to Those skilled in the art can refer to and / or modify this drawing 16 to infer various implementation methods for the OTP processing system (e.g., some implementations are omitted, subdivided, or combined). Although there will be, the present invention includes all the implementation methods inferred, and the technical features are not limited only to the implementation method shown in FIG.

Referring to FIG. 16, the OTP processing system includes a customer mobile phone used as an electronic financial medium for mobile banking, customer personal identification number information and the customer personal identification required for OTP authentication in a mobile banking process through the customer mobile phone. A server 1 for managing a storage medium storing OTP generation condition information including number information, and OTP generation condition information including the customer personal identification number information is stored on the storage medium through the server (1). When using the mobile banking through the information registration means and the customer mobile phone, the customer mobile phone number is received from the customer mobile phone and the customer mobile phone number compared to the customer personal identification number information stored in the storage medium through the server (1) On behalf of the information authentication means for authenticating the alternative generation of the OTP and the customer mobile phone By using the OTP generation key (KEY) value or OTP generation program for the alternative generation of the OTP to generate the OTP to be generated in the customer mobile phone, the OTP corresponding to the decryption key previously stored in the mobile phone OTP processing means for encrypting using an encryption key and OTP transmission means for processing so that the encrypted OTP is transmitted to the mobile phone characterized in that it comprises a.

According to the invention, each means constituting the OTP processing system is implemented in the form of one independent server, or a combination of two or more means functions in the form of a server, or the means is implemented in the form of a server It is evident that all of these things are possible, and that the present invention is not limited by the implementation method constituting the above means.

A customer visits a bank branch to apply for mobile banking, or uses a mobile OTP generation program (e.g., an OTP generation key (KEY) value provided in the customer cell phone) to the customer cell phone in accordance with a preset OTP generation algorithm. Program code to generate and output OTP), or apply for OTP registration for mobile banking, the teller of the bank branch face-to-face authentication of the customer, and the customer terminal unique information and customer through the teller terminal Input and transmit OTP use application information including one or more personal identification number information and customer unique information (for example, information including the name and social security number information of the customer).

Alternatively, the customer applies for mobile banking through a customer terminal, or the customer according to a preset OTP generation algorithm through a mobile OTP generation program (eg, an OTP generation key (KEY) value provided in the customer's mobile phone). Program code for generating and outputting OTP in the mobile phone, or applying for OTP registration for mobile banking, the customer terminal identifies customer mobile phone number information and customer personal identification from the customer through a predetermined information input interface. Input and transmit the OTP use request information including one or more pieces of number information and customer specific information (for example, information including the name and social security number information of the customer).

Here, the unique information of the customer mobile phone, a virtual mobile OTP medium for receiving and outputting a customer mobile phone to use mobile banking, a customer mobile phone to be provided with a mobile OTP generation program, or OTP generated by the server on behalf of the customer mobile phone As the information for identifying the customer mobile phone corresponding to any one or more of the customer mobile phones to be used, it is preferable to include a telephone number assigned to the customer mobile phone.

According to the implementation method of the present invention, the unique information of the customer mobile phone, the terminal serial number (ESN), USIM serial number (for example, chip serial number, USIM manufacturing number, serial number recorded in the USIM) assigned to the customer mobile phone It further comprises, or comprises a terminal identification code stored in the memory of the mobile phone by generating and encrypting a code value that is not duplicated to identify the customer mobile phone, or one or more USIM identification code recorded in the USIM. desirable.

That is, the unique information of the customer mobile phone includes at least one of all mobile phone related identification information maintained through the memory (or USIM) of the mobile phone even when the customer mobile phone is connected or not connected to the mobile communication network. As a result, the unique information of the customer mobile phone of the present invention is not limited to the above description, and it is possible to include various identification information according to the type of the customer mobile phone and the fixed ID value uniquely identifying the mobile phone. It is apparent that the present invention is not limited by the type of.

The customer personal identification number information, if the mobile phone OTP generation program is provided in the customer mobile phone, to authenticate the generation of the OTP through the mobile OTP generation program, or instead of the customer mobile phone during mobile banking using the customer mobile phone As a personal identification number (PIN) for authenticating an OTP generated on behalf of the customer's mobile phone on the server by approving it as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server. It is preferable to include a password for generating an OTP registered through a PIN pad or a unique identification number uniquely registered so as not to be duplicated for each customer for generating the OTP.

If the customer personal identification number information includes a unique identification number uniquely registered so as not to be duplicated for each customer, the unique identification number is N (N> 1) through a predetermined number server (not shown) to the information registration means The number of digits is automatically numbered, or is determined by allowing the customer to enter a non-overlapping N-digit unique identification number through the PIN pad, or n (1 <entered by the customer through the PIN pad). = n <N) by combining a first number of digits with a second number of (Nn) digits uniquely assigned to the customer (for example, the unique information of the customer's mobile phone or a resident registration number included in the unique customer information). Two or more numbers that are determined by the unique identification number of the digit or uniquely assigned to the customer (or the mobile phone unique information constituting the customer mobile phone information) A part (or all) of the combination) is determined by an N-digit unique identification number, or a part (or all) of the combination of the customer mobile phone unique information and the number (eg, social security number) included in the customer unique information is N-digit. It is preferably determined by a unique identification number.

The customer unique information is customer information including the name and resident registration number of the customer. When the customer is registered as a financial transaction customer of the bank, the customer unique information is customer information registered in the customer ledger provided in the bank. It is preferable that the customer identification information is included to check the customer information, and if the customer is a new customer of the bank, the customer unique information is customer information (eg, name, social security number, Address, contact information, etc.).

The teller terminal (or the customer terminal) transmits the input OTP use request information, and the information registration means receives the OTP use request information from the teller terminal (or customer terminal).

According to an embodiment of the present invention, when the OTP use application information is received, the information registration means uses the customer mobile phone number information and the customer unique information through a mobile communication company server for the validity of the customer and the validity of the customer mobile phone The process of checking the validity of one or more of the steps can be performed.

The information registration means transmits the customer mobile phone number information and the customer unique information included in the OTP use request information to the mobile communication company server to confirm the validity of at least one of the validity of the customer and the validity of the customer mobile phone.

The mobile communication company server inquires subscriber D / B through the received customer mobile phone number information to confirm subscriber information, compares the subscriber information with the customer unique information, or the subscriber D through the received customer unique information. Check the subscriber information by querying / B, and compares the customer mobile phone number information and the received customer mobile phone number information included in the subscriber information to verify that the mobile phone subscriber and the customer applying for the OTP is the same Check.

In addition, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone corresponding to the customer mobile phone number information to verify the customer mobile phone validity that can use the OTP service applied by the customer through the customer mobile phone It is possible to check more.

According to an embodiment of the present invention, when the OTP service requested by the customer operates by installing a specific OTP generating program in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone. It is preferable to check the validity of the customer mobile phone to confirm whether the operating platform that can operate by installing the OTP generation program on the customer mobile phone is provided.

Alternatively, when the OTP service requested by the customer is operated using the USIM provided in the customer's mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer's mobile phone and the USIM is read in the customer's mobile phone. It is desirable to check the validity of the customer cell phone to verify that it is equipped.

Alternatively, when the OTP service requested by the customer is operated using the financial IC chip provided in the customer mobile phone, the mobile communication company server reads the terminal information (or device information) for the customer mobile phone to the customer mobile phone. It is desirable to check the validity of the customer's mobile phone to check whether the financial IC chip is provided.

According to another exemplary embodiment of the present invention, the mobile communication company server checks the validity of the customer and provides terminal information (or device information) for the customer mobile phone to the information registration means, thereby allowing the customer mobile phone in the information registration means. It is possible to confirm the validity, whereby the present invention is not limited.

The information registering means may set the customer personal identification number information included in the OTP use application information as OTP generation condition information and provide the server 1 to be stored in a storage medium.

Here, the OTP generation condition information, when using the mobile banking through the customer mobile phone, if the personal identification number information transmitted from the customer mobile phone is authenticated, OTP generation key (KEY) value for generating an OTP on behalf of the customer mobile phone Or information for identifying an OTP generating program, wherein the OTP generating condition information is linked with an OTP generating key or a OTP generating program for generating an OTP on behalf of the customer's mobile phone when using mobile banking through the customer's mobile phone. And stored.

According to an embodiment of the present invention, when the customer personal identification number information includes a unique identification number that is uniquely registered so as not to be duplicated for each customer, the OTP generation condition information preferably includes the customer personal identification number information. Do.

If the customer personal identification number information does not include the unique identification number or the customer personal identification number information includes the unique identification number, according to the intention of the person skilled in the art, the OTP generation condition information is unique to the customer mobile phone information (for example, , Mobile phone number), customer unique information (e.g. social security number), one or more mobile phone unique identification information (e.g., terminal serial number (ESN) assigned to the customer mobile phone, USIM serial number, terminal identification code stored in the memory of the mobile phone) , Including at least one USIM identification code recorded in the mobile phone USIM, and the present invention is not limited thereto.

The mobile phone processing means provides an OTP program code for a mobile phone for implementing OTP through the OTP generation key value and the OTP generation program to a customer mobile phone.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer's mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the mobile phone processing means inputs a personal identification number during the mobile banking through the customer's mobile phone (eg, through a mobile communication network). , Through the communication server provided in the mobile communication network) to the server, and receives and outputs the OTP generated on behalf of the customer's mobile phone through the OTP generating key value and the OTP generating program, and outputs the The OTP input interface for inputting the OTP to the server for authenticating the OTP To provide a mobile banking interworking OTP program code to the customer cell phone.

According to an embodiment of the present invention, the mobile phone processing means transmits information (eg, callback UEL) for providing the mobile banking linked OTP program code to the customer mobile phone through a mobile communication network, and transmits the information on the customer mobile phone. When the mobile banking interworking OTP program code is requested, it is preferable to provide the mobile banking interworking OTP program code to the customer mobile phone corresponding thereto.

According to another embodiment of the present invention, the mobile banking interworking OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means is the window terminal (or customer). Terminal) to provide the mobile banking linked OTP program code to be provided in the customer mobile phone, or to process the mobile banking linked OTP program code provided in the teller terminal (or customer terminal) provided to the customer mobile phone. It is possible.

Here, the mobile banking interworking OTP program code, the encryption code for encrypting the personal identification number and transmits to the server via a mobile communication network, and preferably comprises a decryption code for decrypting the OTP encrypted and transmitted by the server; The encryption key for decryption or the decryption key for decryption is included in the encryption code or decryption code and provided to the customer mobile phone, or a key exchange procedure defined between the customer mobile phone and the server (eg, generating a session key). Is provided to the customer mobile phone according to the procedure for encrypting and exchanging a binary key.

When the mobile banking interworking OTP program code and the mobile OTP generation program code is provided together in the customer's mobile phone, and the encryption / decryption uses the encryption code and the decryption code included in the mobile OTP generation program code, the mobile banking interworking The OTP program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key may not be provided to the customer mobile phone.

In addition, the mobile banking interworking OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the Transport Layer Security (TLS) encryption section.

Alternatively, when the customer mobile phone is provided with a mobile OTP generation program, the mobile phone processing means transmits information (eg, callback UEL) for providing the mobile OTP generation program code to the customer mobile phone through a mobile communication network, When the customer mobile phone requests the mobile OTP generation program code through the information, it is preferable to provide the mobile OTP generation program code to the customer mobile phone correspondingly.

According to another embodiment of the present invention, the mobile OTP generation program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means is the window terminal (or customer terminal). It is possible to provide the mobile OTP generating program code to the customer mobile phone or to process the mobile OTP generating program code provided in the window terminal (or customer terminal) to be provided to the customer mobile phone.

Herein, the mobile OTP generation program code includes an encryption code for encrypting an OTP generated by the customer mobile phone and transmitting the encrypted OTP to a server through a mobile communication network, and a decryption code for decrypting the information encrypted and transmitted by the server. Preferably, the encryption key for encryption or the decryption key for decryption is included in the encryption code or decryption code provided to the customer mobile phone, or a key exchange procedure (eg, session key) defined between the customer mobile phone and the server. It is preferable to provide to the customer mobile phone according to the procedure for generating and encrypting and exchanging the binary-type key.

If the customer's mobile phone is provided with the mobile banking linked OTP program code and the mobile OTP generating program code, and the encryption / decryption using the encryption code and decryption code included in the mobile banking linked OTP program code, the mobile OTP The generated program code may not include the encryption code and the decryption code, and a separate encryption key or decryption key corresponding thereto may not be provided to the customer mobile phone.

In addition, the mobile OTP generation program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer cell phone to the TLS (Transport Layer Security) encryption section.

When the mobile OTP generation program code is provided in the customer mobile phone according to an embodiment of the present invention, when the mobile OTP generation program is first started in the mobile phone, the mobile OTP generation program is configured to authenticate the user according to a preset procedure (eg, After processing the predetermined mobile OTP generation program driving password authentication, input the customer authentication information (for example, phone number, social security number, personal identification information, etc.), and transmits after encrypting through the encryption code, the mobile phone processing means After the customer authentication for the customer authentication information from the OTP generation key (KEY) value associated with the mobile OTP generation program is downloaded and stored in the customer's mobile phone memory, or stored in the USIM provided in the customer's mobile phone, The OTP generation key ( If a KEY) value is included, the process of downloading the OTP generation key value may be omitted.

According to another exemplary embodiment of the present invention, it is possible to include an integrated OTP generation program in which the mobile banking interworking OTP program code and the mobile OTP generation program code are integrated in the customer's mobile phone. Transmitting information (eg, callback UEL) for providing the integrated OTP program code to the customer mobile phone, and requesting the integrated OTP program code through the information from the customer mobile phone, in response to the request It is desirable to provide integrated OTP program code.

According to another exemplary embodiment of the present invention, the integrated OTP program code may be provided to the customer mobile phone through the window terminal (or customer terminal), in which case the mobile phone processing means is the window terminal (or customer terminal). It is possible to provide the integrated OTP program code to be provided to the customer mobile phone, or to process the integrated OTP program code provided to the customer terminal (or customer terminal) to be provided to the customer mobile phone.

Here, the integrated OTP program code, the encryption code for encrypting the personal identification number transmitted to the server through a mobile communication network, or encrypting the OTP generated by the customer mobile phone to the server via a mobile communication network, and in the server It is preferable to include a decryption code for decrypting the OTP to encrypt and transmit, or decrypt the information transmitted by encrypting in the server, the encryption key for encryption or decryption key for decryption to the encryption code or decryption code It is preferably provided to the customer mobile phone or provided to the customer mobile phone according to a defined key exchange procedure between the customer mobile phone and the server (for example, a process of generating a session key and encrypting and exchanging a binary key). Do.

In addition, the integrated OTP program code is preferably provided with a function to set the communication section with the server connected via the mobile communication network in the customer mobile phone to the TLS (Transport Layer Security) encryption section.

According to the present invention, the mobile OTP generation program code provided in the customer's mobile phone cannot be used for mobile banking due to the limitation of two-factor authentication that the electronic financial medium and the authentication medium must be separated. If the electronic financial medium is not a customer's mobile phone (eg, internet banking), it can be used as an OTP authentication medium, and as the OTP authentication medium for mobile banking, a mobile banking linked OTP program code is used, or the integrated OTP Only a portion of the program code that transmits customer identification number information to the server or receives an OTP generated by the server may be used.

Therefore, when OTP authentication is required when using mobile banking through the customer mobile phone, the customer mobile phone starts the mobile OTP generation program code (or integrated OTP program code) to output a personal identification number input interface, and the personal identification number. When the customer personal identification number information is input through the input interface, the input customer personal identification number information is encrypted and transmitted with a predetermined encryption key.

According to an embodiment of the present invention, the customer identification number information is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, It is preferable to encrypt twice through the TLS encryption method set in the communication interval between servers.

According to the method of the present invention, the mobile OTP generation program code (or integrated OTP program code) provided in the customer mobile phone is provided in the customer mobile phone, in addition to the customer personal identification number information input through the personal identification number input interface. One or more mobile phone unique identification information (e.g., including a terminal serial number (ESN) assigned to a customer mobile phone, a USIM serial number, a terminal identification code stored in a memory of the mobile phone, and one or more USIM identification codes recorded in the mobile phone USIM); It is possible to confirm, and further comprising the identified mobile phone identification information, and to transmit, whereby the present invention is not limited.

Alternatively, the personal identification number input interface may further include a user interface for inputting customer unique information (for example, a social security number), in addition to the user interface for inputting the customer personal identification number information. The mobile OTP generated program code (or integrated OTP program code) can be transmitted by further including the inputted customer unique information, in addition to the customer personal identification number information, thereby not limiting the present invention.

According to an embodiment of the present invention, when the OTP is input, the customer mobile phone checks the customer mobile phone unique information from the mobile phone memory (or USIM), and transmits the mobile phone further including the unique mobile phone unique information to the input OTP. It is possible that the customer's mobile phone unique information is preferably encrypted with the OTP.

The information authentication means receives the encrypted customer personal identification number information by the customer mobile phone, and confirms the original customer personal identification number information by decrypting the encrypted customer personal identification number information, and through the server (1) Process to authenticate the validity of the customer identification number information in connection with the storage medium.

When one or more mobile phone unique identification information or customer unique information is further received (and decrypted) from the customer mobile phone according to the method of the present invention, the information authentication means further uses the mobile phone unique identification information or customer unique information. It is preferable to process to authenticate validity through the server 1.

If the validity of the customer personal identification number information (which may further include mobile phone unique identification information or customer unique information) is authenticated, the OTP processing means uses the OTP generation key value or the OTP generation program. Characterized by generating an OTP to be generated in the mobile phone.

Here, the OTP generation key value may include one or more fixed seed values for generating an OTP and a parameter for determining a dynamic seed value.

For example, if the OTP is generated in a time-synchronized manner, the fixed seed value of the OTP-generated key value includes a seed that is fixed to assign to a time-synchronized OTP generation algorithm. The parameter of the (KEY) value preferably includes synchronization time setting information for determining a synchronization time corresponding to the dynamic seed value of the time-synchronization type OTP.

Or, if the OTP is generated in a challenge-response manner, the fixed seed value of the OTP generation key (KEY) includes a seed fixed to be assigned to the challenge-response OTP generation algorithm, and the OTP generation key (KEY ) Parameter preferably includes a random number generation seed for generating a random number corresponding to the dynamic seed value of the challenge-response OTP.

When using the mobile banking through the customer mobile phone according to an embodiment of the present invention, if the personal identification number information transmitted from the customer mobile phone is authenticated, by generating an OTP on the server in place of the customer mobile phone and transmits to the customer mobile phone, When the customer mobile phone is used as a virtual OTP medium for mobile banking that receives and outputs the OTP generated by the server, the OTP generation key value is one or more for generating an OTP on the server on behalf of the customer mobile phone. It is preferred to include a fixed seed value and a parameter for determining the dynamic seed value.

If the customer mobile phone is provided with a mobile OTP generation program, in addition to using the customer mobile phone as the virtual OTP medium for mobile banking, the OTP generation key value is a mobile OTP generation program provided in the customer mobile phone. And at least one fixed seed value for generating an OTP and a parameter for determining a dynamic seed value, wherein the OTP generating key value is provided to the customer mobile phone and encrypted in the customer mobile phone memory. Or stored in the USIM provided in the customer's mobile phone (encryption storage possible).

The OTP generation program may program an OTP generation algorithm that generates an OTP using one or more fixed seed values identified through the OTP generation key value and one or more dynamic seed values dynamically determined / generated as seeds. Implemented in the form of code, when using the customer mobile phone as a virtual banking OTP medium for receiving and outputting the OTP generated in the server, the OTP generation program is provided on the server for generating the OTP, the customer mobile phone When the mobile OTP generation program is provided, the OTP generation program is implemented in the form of a mobile OTP generation program provided to the customer mobile phone.

According to the embodiment of the present invention, there may be a plurality of OTP generation algorithms for generating the OTP according to the type and modification, and in this case, a plurality of OTP generation programs may also exist according to the OTP generation algorithm.

According to an embodiment of the present invention, when the OTP processing means is provided with an OTP generating function to replace the OTP to be generated by the customer mobile phone, the OTP processing means may include one or more fixed seeds from the OTP generating key value. The value and the dynamic seed value may be checked / determined, and the fixed seed value and the dynamic seed value may be substituted into a preset OTP generation algorithm to alternately generate an OTP to be generated in the customer mobile phone.

According to another embodiment of the present invention, when the OTP processing means is provided with a plurality of OTP generation functions for each of the OTP generation algorithms to replace the OTP to be generated in the customer's mobile phone, the OTP processing means may include the OTP generation key (KEY Determine / determine one or more fixed seed values and dynamic seed values corresponding to the OTP generation program information from the value), and substitute the fixed seed values and dynamic seed values into an OTP generation algorithm corresponding to the OTP generation program information. It is desirable to create an alternative OTP to be generated in the customer's mobile phone.

According to another embodiment of the present invention, if the OTP processing means is not provided with an OTP generating function to replace the OTP to be generated in the customer mobile phone, the OTP processing means is one from the OTP generation key (KEY) value. It is preferable to check / determine the above fixed seed value and the dynamic seed value, and to generate the OTP to be generated in the customer mobile phone through the fixed seed value and the dynamic seed value by starting the OTP generating program code.

When the OTP to be generated in the customer mobile phone is generated alternatively, the OTP processing means is characterized by encrypting the alternative generated OTP using an encryption key corresponding to the decryption key provided in the mobile phone.

According to an embodiment of the present invention, the alternatively generated OTP is encrypted using an end-to-end data encryption method (eg, AES 128 encryption method) between the customer mobile phone and the server through an encryption key paired with a decryption key provided to the customer mobile phone. It is preferable.

The OTP transmission means is characterized in that for processing to provide the encrypted OTP to the customer mobile phone via a mobile communication network.

According to an embodiment of the present invention, it is preferable that the OTP transmission means encrypts the communication section between the mobile phone and the server by TLS encryption and transmits the OTP to the customer mobile phone, whereby the OTP encrypts the end-to-end data. It is encrypted twice by the method and TLS encryption method.

The customer cellular phone receives the substitute generated OTP through the mobile communication network, and if the received OTP is encrypted, decrypts the OTP using a predetermined decryption key and outputs the OTP to an OTP output area on the screen. And displaying an OTP input interface in a predetermined area near the OTP output area, and when the OTP is input through the OTP input interface, encrypting the input OTP and transmitting the encrypted OTP.

Here, the OTP is encrypted by an end-to-end data encryption method (for example, AES 128 encryption method) between the customer mobile phone and the server through an encryption key provided in the customer mobile phone, and the communication section between the mobile phone and the server that authenticates the OTP. It is preferable to encrypt twice through the set TLS encryption scheme.

The OTP authentication means receives an encrypted OTP from the customer mobile phone through the mobile communication network, and decrypts the encrypted OTP through a decryption key matched with an encryption key provided in the customer mobile phone.

The OTP authentication means may compare the decrypted OTP and the OTP generated by the OTP processing means to authenticate the validity of the received OTP.

According to another exemplary embodiment of the present invention, the customer cellular phone may transmit the OTP to a mobile banking processing server in addition to the OTP authentication means or to a server for authenticating a separate OTP, in which case the mobile banking processing A server (or a server that authenticates an OTP) receives and decrypts the OTP, and generates an OTP 'by checking an OTP generating key value or an OTP generating program in the same manner as the OTP generating means generates the OTP. In addition, it is possible to authenticate the validity of the OTP by comparing the OTP and OTP '.

When the validity of the OTP is authenticated by the OTP authentication means, the authentication result transmitting means transmits the confirmed OTP validity authentication result to the mobile banking processing server connected to the customer mobile phone to process mobile banking, or the Characterized in that the processing to be transmitted to the mobile banking processing server via the customer mobile phone.

The server for authenticating the OTP receives and decrypts the OTP through the mobile communication network, generates an OTP 'by identifying an OTP generation key value or an OTP generation program corresponding to the received OTP, and generates the OTP. And OTP 'to perform OTP authentication for the mobile banking transaction, and the OTP authentication result is provided to a server providing the mobile banking.

FIG. 17 is a diagram illustrating a first implementation process of registering information for mobile banking linked OTP authentication according to a fourth embodiment of the present invention.

In more detail, FIG. 17 receives OTP usage information from a window terminal in the information registration means on the OTP processing system shown in FIG. 16, and sets customer personal identification number information included in the OTP usage information as OTP generation condition information. The process of storing and registering in the storage medium through the server (1), and those skilled in the art to which the present invention pertains, refer to and / or modify this drawing 17 to the information registration process. Various implementation methods (e.g., implementation steps in which some steps are omitted or changed in order) may be inferred, but the present invention includes all the implementation methods inferred from the above, and is shown in FIG. The technical features are not limited only.

Referring to FIG. 17, when a customer visits a bank branch and applies for mobile banking, or requests to provide a mobile OTP generation program to the customer's mobile phone, or applies for OTP registration for mobile banking, the diagram shown in FIG. When the counter terminal inputs and transmits the OTP use request information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means receives the OTP use request information (1700).

The information registration means sets the customer personal identification number information included in the OTP usage information as an OTP generation condition (1705), and provides it to the server 1 to be stored in the storage medium (1710).

If the OTP generation condition is stored in the storage medium (1715), the mobile phone processing means encrypts the OTP program code for the mobile phone to implement OTP through the OTP generation key value or OTP generation program to the customer mobile phone. The key and the decryption key are provided (1720).

Here, the OTP program code for the mobile phone provided to the customer mobile phone in the mobile phone processing means, when using the mobile banking through the customer mobile phone, to overcome the two-factor authentication limit that the electronic financial medium and the authentication medium must be separated to the server Providing the customer personal identification number information, and if the server generates the OTP to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to provide to the customer mobile phone, the alternative generated OTP It is preferable to include a mobile banking interlocking OTP program code having a function of receiving and outputting, and displaying the OTP input interface near the area where the OTP is output to input the alternatively generated OTP. According to the mobile banking interworking OTP program code mobile OTP generation program It is possible to further comprises a program code, or an integrated OTP generation program code.

FIG. 18 is a diagram illustrating a second implementation process of registering information for mobile banking-linked OTP authentication according to a fourth embodiment of the present invention.

In more detail, FIG. 18 shows that when the information registration means and the mobile phone processing means on the OTP processing system shown in FIG. 16 are implemented in a predetermined server form, the server receives OTP usage information from a window terminal and uses the OTP. It shows a process of storing and registering in the storage medium by linking OTP identification information and OTP generation key (KEY) value or OTP generation program including one or more customer identification number information and unique information of the customer's mobile phone included in the information, Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 18 to implement various methods for the information registration process (for example, some steps may be omitted or the order may be changed). It may be inferred that, but the present invention includes all the implementation methods inferred, the implementation method shown in Figure 18 As not exclusively those technical features.

Referring to FIG. 18, when a customer visits a bank branch and applies for mobile banking, or requests to provide a mobile OTP generating program to the customer's mobile phone, or applies for OTP registration for mobile banking, the diagram shown in FIG. When the counter terminal inputs and transmits OTP usage application information including one or more customer mobile phone number information, customer personal identification number information, and customer unique information, the information receiving means receives the OTP usage application information (1800).

The server sets the customer personal identification number information included in the OTP usage information as an OTP generation condition (1805), and provides the server 1 to be stored in a storage medium (1810).

If the OTP generation condition is stored in the storage medium (1815), the server transmits the OTP program code and encryption key for the mobile phone to implement OTP through the OTP generation key (KEY) value or OTP generation program to the customer mobile phone; Provide a decryption key (1820).

Here, the OTP program code for the mobile phone provided to the customer mobile phone from the server, when using the mobile banking through the customer mobile phone, to overcome the two-factor authentication limitation that the electronic financial media and the authentication media must be separated from the individual customer to the server If the identification number information is provided, and the server generates an OTP to be generated in the customer's mobile phone through the OTP generation key value or an OTP generation program and provides it to the customer's mobile phone, the generated OTP is received. And a mobile banking interlocking OTP program code having a function of displaying an OTP input interface near the area where the OTP is output and inputting the alternatively generated OTP. Mobile OTP generation program code to mobile banking interlocking OTP program code It is possible to include more, or an integrated OTP generation program code.

19 is a diagram illustrating a first implementation process for authenticating OTP in association with mobile banking according to a fourth embodiment of the present invention.

In more detail, in FIG. 19, after the OTP generation condition is stored in the storage medium through the information registration process shown in FIG. 17 or 18, the mobile banking interworking OTP program code, encryption key, and decryption key are provided, When OTP authentication is required when the mobile banking processing is performed through the mobile banking processing server in the customer's mobile phone, the customer's mobile phone starts the mobile banking interworking OTP program code to overcome the two-factor authentication limit for the mobile banking. When the identification number information is input and transmitted, the information authentication means authenticates the customer personal identification number information through the server 1, and the OTP processing means replaces the OTP on behalf of the customer mobile phone. Generate OTP to be generated in the customer's mobile phone through the key value or OTP generating program. After generating and encrypting, and transmitting the encrypted OTP to the customer mobile phone in the OTP transmission means, after outputting the OTP in the customer mobile phone and input through the OTP input interface to transmit, the OTP authentication means Receiving and decrypting to confirm the validity, and showing the process of providing a validity authentication result for the OTP to the mobile banking processing server in the authentication result transmission means, a person having ordinary knowledge in the technical field to which the present invention belongs If so, various implementation methods (e.g., some steps may be omitted or the order may be changed) for the process of authenticating OTP in connection with the mobile banking by referring to and / or modifying the drawing 19 may be inferred. The present invention comprises all the inferred implementation methods, and only the implementation method shown in FIG. The technical features are not limited to.

Referring to FIG. 19, after the OTP generation condition is stored in the storage medium through the information registration process illustrated in FIG. 17 or 18, the mobile banking interworking OTP program code, encryption key, and decryption key are provided to the mobile phone. Mobile banking processing in the customer's mobile phone through the mobile banking processing server (1900), if OTP authentication is required (1905), the customer's mobile phone to the mobile banking linked OTP program code to overcome the two-factor authentication limit for the mobile banking Starts and outputs the personal identification number information input interface, and if the customer personal identification number information is input through the personal identification number information input interface, and transmits the input customer personal identification number information to the information authentication means (1910). .

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting the encryption key provided to the customer mobile phone through the information registration process shown in FIG. 17 or 18. The authentication means decrypts the previously received customer identification number information through a decryption key matching the encryption key.

The information authentication means authenticates the customer personal identification number information by comparing the customer personal identification number information stored in the storage medium with the customer personal identification number information through the server 1 (1915).

If the customer identification number information is authenticated (1920), the OTP processing means is generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to replace the OTP on behalf of the customer mobile phone Alternately generates the OTP to be performed (1930), and encrypts the alternately generated OTP (1935).

According to the method of the present invention, the OTP processing means preferably encrypts the generated OTP with an encryption key that matches the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 17 or 18. The customer cellular phone decrypts the received OTP with the decryption key.

The OTP transmission means transmits the encrypted OTP to the customer mobile phone through a mobile communication network (1940).

After outputting the received OTP (1945), the customer mobile phone displays an OTP input interface in a predetermined area near the area where the OTP is output. If the outputted OTP is keyed through the OTP input interface (1950), the customer cellular phone encrypts the input OTP and transmits the encrypted OTP to an OTP authentication means through a mobile communication network (1955). Decrypting OTP, comparing the decrypted OTP and the OTP generated by the OTP processing means to confirm the validity of the OTP (1960), and the authentication result transmission means is to transfer the OTP validity authentication result to the customer mobile phone The mobile banking processing server transmits to the mobile banking processing server providing banking (1965). The mobile banking processing server determines whether to approve a transaction according to the OTP validity authentication result and processes the mobile banking requested by the customer's mobile phone (1970).

20 is a diagram illustrating a second implementation process for authenticating OTP in association with mobile banking according to the fourth embodiment of the present invention.

In more detail, FIG. 20 shows the information authentication means, the OTP processing means, the OTP transmission means, the OTP authentication means, and the authentication result transmission means on the OTP processing system shown in FIG. Alternatively, the OTP generation condition is stored in the storage medium through the information registration process shown in FIG. 18, and the mobile banking interworking OTP program code, encryption key, and decryption key are provided to the customer's mobile phone, and then the mobile phone is processed through the mobile banking processing server. When OTP authentication is required in the mobile banking process, in order to overcome the two-factor authentication limit for the mobile banking in the mobile phone, the mobile banking interworking OTP program code is activated and transmitted by inputting the customer's personal identification number information. The server authenticates the customer identification number information through the server (1), and transmits to the OTP processing means. Alternately generates and encrypts the OTP to be generated by the customer mobile phone through the OTP generation key (KEY) value or OTP generating program for alternatively generating the OTP on behalf of the customer mobile phone, and transmits the encrypted OTP to the customer mobile phone. After the OTP is output from the customer's mobile phone and input through an OTP input interface, the OTP is received and decrypted by the server to confirm validity, and the validity authentication result of the OTP is transmitted to the mobile banking processing server. As a process of providing the present invention, those of ordinary skill in the art to which the present invention pertains, various implementation methods for authenticating OTP in connection with the mobile banking by referring to and / or modifying the drawing 20 (Eg, some steps may be omitted or the order of implementation changed), but the present invention It is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 20.

Referring to FIG. 20, after the OTP generation condition is stored in the storage medium through the information registration process illustrated in FIG. 17 or 18, the mobile banking interworking OTP program code, encryption key, and decryption key are provided to the customer's mobile phone. During the mobile banking processing through the mobile banking processing server in the customer's mobile phone (2000), when OTP authentication is required (2005), the customer's mobile phone is a mobile banking linked OTP program to overcome the two-factor authentication limit for the mobile banking When the code is activated, the personal identification number information input interface is output, and when the customer personal identification number information is input through the personal identification number information input interface, the inputted customer personal identification number information is transmitted to the server (2010).

According to an embodiment of the present invention, the customer mobile phone preferably transmits the customer personal identification number information by encrypting the encryption key provided to the customer mobile phone through the information registration process shown in Fig. 17 or 18, the server Decrypts the received customer personal identification number information through a decryption key matching the encryption key.

The server authenticates the customer personal identification number information by comparing the customer personal identification number information stored in the storage medium with the customer personal identification number information through the server 1 (2015).

If the customer identification number information is authenticated (2020), the server is to be generated in the customer mobile phone through the OTP generation key (KEY) value or OTP generation program to replace the OTP on behalf of the customer mobile phone Alternately generates the OTP (2030) and encrypts the alternately generated OTP (2035).

According to an embodiment of the present invention, the server encrypts the substitute generated OTP with an encryption key matching the decryption key provided to the customer mobile phone through the information registration process shown in FIG. 17 or 18. The customer cellular phone decrypts the received OTP with the decryption key.

The server transmits the encrypted OTP to the customer mobile phone through a mobile communication network (2040).

After the customer mobile phone outputs the received OTP (2045), it displays the OTP input interface in a predetermined area near the area where the OTP is output. If the output OTP is keyed through the OTP input interface (2050), the customer cellular phone encrypts the input OTP and transmits the encrypted OTP to the server through a mobile communication network (2055), and the server decrypts the OTP. The decoded OTP is compared with the OTP generated by the OTP processing means to confirm the validity of the OTP (2060), and the mobile banking processing server providing mobile banking to the customer mobile phone with the OTP validity authentication result. In operation 2065, the mobile banking processing server determines whether to approve a transaction according to the OTP validity authentication result and processes the mobile banking requested by the customer's mobile phone (2070).

100: mobile banking processing server 105: information registration means
110: mobile phone processing means 115: information authentication means
120: OTP transmission means 125: OTP authentication means
130: authentication result transmission means 135: OTP processing means
140: information confirmation means 145: storage medium

Claims (13)

In the OTP processing method using the customer mobile phone executed by the server communicating with the customer mobile phone,
The unique information of the customer's mobile phone having a program to display the OTP (One Time Password), the customer's unique information of the customer using the program of the customer's mobile phone, and the OTP generated dynamically through the OTP generating program on the designated server, the program of the customer's mobile phone. A first step of storing personal identification number information for providing;
A second step of receiving a personal identification number input through the customer mobile phone from a program of the customer mobile phone corresponding to the unique information of the customer mobile phone;
A third step of authenticating the personal identification number received from the program of the customer cellular phone by using the personal identification number information mapped to the unique information of the customer cellular phone;
A fourth step of confirming, when the personal identification number is authenticated, an OTP dynamically generated for providing to the program of the customer's mobile phone through an OTP generation program of a designated server;
A fifth step of encrypting the OTP to be decryptable through a program of the customer mobile phone; And
And a sixth step of transmitting the encrypted OTP to a program of the customer's mobile phone.
The method of claim 1, wherein the customer mobile phone unique information,
The phone number of the customer's mobile phone with the program, the terminal information of the customer's mobile phone with the program, an identification code uniquely generated and stored in the memory of the customer's mobile phone with the program, the USIM of the customer's mobile phone with the program OTP treatment method using a customer mobile phone, characterized in that it comprises at least one of identification codes stored in the.
The method of claim 1,
And processing to provide the program for displaying the OTP generated dynamically through the OTP generation program on the designated server to the customer mobile phone.
The method of claim 1,
And processing so that a decryption key for decrypting the encrypted OTP is provided by a program of the customer cellular phone.
2. The method according to claim 1,
Receiving the unique information of the customer mobile phone from the program of the customer mobile phone further comprises the OTP processing method using a customer mobile phone characterized in that it is made.
2. The method according to claim 1,
And authenticating the customer mobile phone having the program with an OTP medium displaying the OTP dynamically generated through the OTP generation program of the designated server using the customer mobile phone unique information received from the program of the customer mobile phone. OTP treatment method using a customer mobile phone, characterized in that.
7. The method of claim 6,
An OTP medium displaying an OTP dynamically generated through an OTP generation program of a designated server through the customer mobile phone unique information is authenticated as an OTP medium, and the OTP generation program is identified through the personal identification number. The OTP processing method using the customer's mobile phone, characterized in that to check the OTP generated dynamically through the OTP generation program of the designated server when it is authenticated to provide the program of the customer's mobile phone through the dynamically generated OTP.
The method of claim 1,
Mapping the customer mobile phone unique information or customer unique information with an OTP generation program of a designated server to dynamically generate an OTP to be displayed through a program of the customer mobile phone,
The fourth step, the OTP processing method using a customer mobile phone, characterized in that to check the OTP dynamically generated through the mapped OTP generation program.
The method of claim 1,
Mapping the generated customer key information or the customer unique information with a generation key value for dynamically generating an OTP to be displayed through a program of the customer mobile phone,
The fourth step, the OTP processing method using a customer mobile phone, characterized in that to apply the mapped generated key value to the OTP generation program of the specified server to identify the dynamically generated OTP.
The method of claim 1,
Generating an encryption key corresponding to a decryption key corresponding to a program of the customer mobile phone using the customer mobile phone unique information,
The fifth step, the OTP processing method using a customer mobile phone, characterized in that for encrypting the OTP using the generated encryption key.
The method of claim 1,
An OTP processing method using a customer mobile phone, characterized in that further comprising the step of connecting an encrypted communication section between the server and the program of the customer mobile phone.
The method of claim 11, wherein the OTP,
The OTP processing method using the customer mobile phone, characterized in that the encryption is double-encrypted by the end-to-end encryption method using the encryption key and the encryption method corresponding to the encrypted communication interval.
The method of claim 1,
The server for communicating with the customer mobile phone and the server having the OTP generating program comprises a single server, or a separate server linked to each other, characterized in that the OTP processing method using a customer mobile phone.

Images