KR20150034863A - Method for Providing Transacting Linked Authentication Code - Google Patents

Abstract

The present invention relates to a transaction-linked authentication code providing method which is performed in a server processing a non-face-to-face financial transaction by receiving the N (N>=2) number of sets of transaction information from a user terminal. The transaction-linked authentication code providing method by the present invention includes: a first step of confirming that designated items of the N number of sets of transaction information or the designated number of sets of the transaction information are transmitted by being inputted (or selected) through a user terminal for a non-face-to-face financial transaction; a second step of generating or extracting code information uniquely identifying the transaction information; and a third step of transmitting the code information to the user terminal. The code information is used as a seed of a disposable authentication code dynamically generated for a non-face-to-face financial transaction.

Description

Method for Providing Transacted Linked Authentication Code [

The present invention is characterized in that a designated item or a specified number of pieces of transaction information to be inputted (or selected) through a user terminal for non-face financial transaction is inputted (or selected) through a user terminal Generating and extracting code information that uniquely identifies the transaction information and transmitting the generated code information to the user terminal so that the disposable authentication code for the non-face financial transaction is dynamically generated using the code information as a seed will be.

Recently, one-time authentication codes called OTP (One Time Password) have been used in various non-face-to-face financial transactions. It is generally known that OTP provides secure authentication means because it is an authentication code that is dynamically generated at each transaction point.

However, even if a secure OTP is maintained at a fixed value for a time (for example, two minutes) during which transaction continuity is maintained, if a memory hack occurs at this point, even a normal financial transaction can be turned into an unfair financial transaction. For example, even if an authentication error such as a password or an OTP occurs during a non-face-to-face financial transaction, a procedure for requesting input of the same OTP within five times within a certain period of time is provided to maintain user convenience and transaction continuity.

Memory hacking manipulates normal transactions by digging into the characteristics of the transaction procedure to maintain transaction continuity. In the conventional transaction procedure of the transfer transaction during the non-face financial transaction in the related art, various transaction information necessary for the transfer transaction is inputted and transmitted in one page (or user interface), and when the transfer of the transaction information is completed, Enter the number. At this time, the hacker (or malicious code) copies and stores the transaction information at the time of transmission of various transaction information, copies the dynamically generated OTP through the designated OTP token, copies it at the time of transmission, Thereby inducing an authentication error to occur. The system is then initialized to re-enter the transaction information. At this time, the hacker (or malicious code) repeats the transaction procedure with the manipulated transaction information using the copied OTP by manipulating the copied transaction information (for example, transferring the transferred transaction information to the illegal account of the hacker) Manipulate with fraudulent transactions. Of course, in order to prevent the memory hacking like this, when an OTP authentication error occurs, a new OTP can be regenerated through the OTP token and inputted. Even if the hacker (or malicious code) Since the OTP has already been changed, the illegal transaction can be blocked. However, such a solution is not related to transaction continuity, and causes another problem that hinders user convenience. Moreover, the case of memory hacking is not limited to the above-described method, and it can be variously changed by copying or replacing transaction information or OTP on the memory.

An object of the present invention to overcome the above problems is to provide an information processing apparatus and a method thereof, in which a specified item or a specified number of pieces of transaction information among N (N > = 2) transaction information to be inputted Generating or extracting code information uniquely identifying the transaction information and transmitting the code information to the user terminal when it is confirmed that the transaction information is input (or selected) through the terminal and transmits the non-face financial transaction using the code information as a seed And a method for providing a transaction-related authentication code in which a disposable authentication code for authentication is generated dynamically.

It is another object of the present invention to provide a method and system for providing a transaction to a user terminal when a specified item or a specified number of transaction information is input (or selected) for a non-face financial transaction in a user terminal, The information processing apparatus determines the code information that uniquely identifies the information and dynamically generates the authentication code for transaction authentication of the non-face financial transaction by using the code information. When the transaction information is changed, the authentication code is also changed, And to provide a transaction-linked authentication code providing method for blocking a memory hacking attempt for dealing or manipulating transaction information.

A method for providing a transaction interlocking authentication code according to the present invention is a method for providing a transaction interlocking authentication code executed in a server that receives N (N? 2) pieces of transaction information from a user terminal and processes non-face financial transactions, A first step of confirming that a designated item or a specified number of pieces of transaction information to be inputted (or selected) through the user terminal for the transaction is inputted (or selected) through the user terminal and transmitted; A second step of generating or extracting code information that uniquely identifies the non-face financial transaction; and a third step of transmitting the code information to the user terminal, It is used as a seed of authentication code.

According to the present invention, the authentication code can be dynamically generated using the code information as a seed in a designated terminal, or dynamically generated using the code information as a seed in a chip of a card interfaced with a terminal designated through NFC .

According to the present invention, the transaction information may include S (1? S <N) transaction information input (or selected) through the user terminal until the authentication code is input to the user terminal for the non-face financial transaction have.

According to the present invention, the transaction information may include s (1? S <N) pieces of transaction information input (or selected) through the user terminal until the authentication code is input to the user terminal for the non-face financial transaction, (1? S <S) transaction information.

According to the present invention, when the non-face financial transaction is a non-face-to-face financial transaction in which the non-face financial transaction is transferred, the transaction information includes at least one of N transaction information for non-face- (1 &amp;le; n &lt; N) transaction information related to the transaction side.

According to the present invention, when the non-face financial transaction is a non-face financial transaction in which the non-face financial transaction is transferred, the transaction information is transmitted to the non-face financial transaction, (1? R <(Nn)) pieces of transaction information excluding transaction information used as a verification code among (Nn) pieces of transaction information excluding 1? N <N) pieces of transaction information.

According to the present invention, when the non-face financial transaction is a non-face financial transaction in which the non-face financial transaction is transferred, the transaction information is transmitted to the non-face financial transaction, (1? R <(Nn)) pieces of transaction information excluding transaction information used as an authentication code out of (Nn) pieces of transaction information excluding 1? N <N pieces of transaction information and n pieces of transaction information n + R) pieces of transaction information.

According to the present invention, the first step may further include storing the transaction information.

According to the present invention, the second step may further include mapping the code information to the transaction information and storing the code information.

According to the present invention, the code information may include generation information generated using the transaction information.

According to the present invention, the code information may include generation information generated using at least one piece of the transaction information.

According to the present invention, the code information may include generation information generated using partial information of at least one of the transaction information.

According to the present invention, the code information may include generation information generated using at least one piece of the transaction information and at least one piece of partial information.

According to the present invention, the code information may include dynamically generated generation information.

According to the present invention, the code information may include index information uniquely assigned to identify the transaction information. On the other hand, the index information may be uniquely extracted from the designated DB without being duplicated, or may be determined not to be duplicated.

According to the present invention, the code information may include a code system capable of inputting a key to a designated terminal.

According to the present invention, the code information can be captured through a camera of a designated terminal and encoded into an interpretable code image.

According to another aspect of the present invention, there is provided a method for providing a transaction-related authentication code, the method comprising the steps of: encoding the code information into an interpretable code image captured through a camera of a designated terminal, To the terminal.

According to the present invention, the code information can be transmitted to a designated terminal through a designated communication network.

According to another aspect of the present invention, there is provided a method for providing a transaction interlocking authentication code, the method including the steps of: confirming communication connection information for a designated terminal; and transmitting the code information to the terminal using the communication connection information The method comprising the steps of:

According to another aspect of the present invention, there is provided a transaction interworking authentication code providing method, comprising: a fourth step of dynamically generating a code using the code information as a seed and then receiving an authentication code input to a user terminal; And a fifth step of controlling so that an authentication procedure for authenticating the validity of the authenticated authentication code is performed.

According to the present invention, the method further comprises: dynamically generating an authentication code using the code information as a seed; and mapping and storing the transaction information and the authentication code, A fourth step of receiving the authentication code input to the user terminal after being dynamically generated using the information as a seed, and a step of controlling the authentication procedure for authenticating the validity of the received authentication code using the stored authentication code It may further comprise five steps.

According to the present invention, when a specified item or a specified number of transaction information is input (or selected) for a non-face financial transaction in a user terminal, the specified item or a specified number of transaction information inputted (or selected) And generates an authentication code for authenticating a transaction of the non-face financial transaction using the code information. When the transaction information is changed, the authentication code is also changed and the authentication code or transaction information There is an advantage in that a memory hacking attempt to take over or manipulate the data is blocked.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram showing a configuration of a system for providing a single authentication code in cooperation with a transaction according to an embodiment of the present invention; FIG.
2 is a diagram illustrating a configuration of a banking server for processing non-face financial transactions according to an embodiment of the present invention.
3 is a diagram showing a functional configuration of a user terminal side program according to an embodiment of the present invention.
4 is a diagram showing a configuration of a card according to an embodiment of the present invention.
5 is a diagram illustrating a functional configuration of a terminal that interfaces with a card according to an embodiment of the present invention.
6 is a diagram showing a configuration of an authentication server according to an embodiment of the present invention.
7 is a diagram illustrating a process of transmitting n pieces of transaction information first according to an embodiment of the present invention.
FIG. 8 is a diagram illustrating a transaction information transmission / reception process according to an embodiment of the present invention.
FIG. 9 is a diagram illustrating a process of receiving acknowledgment for n pieces of transaction information and R (1? R <(Nn)) pieces of transaction information according to an embodiment of the present invention.
10 is a diagram illustrating a process of determining and providing code information that uniquely identifies transaction information according to an embodiment of the present invention.
11 is a diagram illustrating a process of generating an authentication code using code information according to an embodiment of the present invention.
12 is a diagram illustrating a process of generating an authentication code using code information according to another embodiment of the present invention.
FIG. 13 is a diagram illustrating a process of receiving (NnR) pieces of transaction information including an authentication code and processing authentication and / or transaction according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. For example, it is possible that a configuration provided on the server side is implemented on the terminal side, or conversely, a configuration portion provided on the terminal side is implemented on the server side.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 is a diagram showing a configuration of a system for providing a single authentication code in cooperation with a transaction according to an embodiment of the present invention.

More specifically, FIG. 1 illustrates a case where a specified item or a specified number of pieces of transaction information among N (N? 2) transaction information to be inputted (or selected) through the user terminal 100 for non- Generates or extracts code information that uniquely identifies the transaction information, and transmits the code information to the user terminal 100. When the code information is transmitted to the user terminal 100, 1 is a block diagram illustrating a system for processing a disposable authentication code for a transaction to be generated dynamically. Referring to FIG. 1 and / or modified by the person skilled in the art, (E.g., some of the components may be omitted, or broken down, or combined) to provide a disposable authentication code Would be chuhal, the present invention is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 1.

The transaction-linked disposable authentication code providing system of the present invention comprises a user terminal (100) used by a user for non-face financial transaction, a transaction processing unit (120) for receiving transaction information input through the user terminal (N &gt; = 2) pieces of transaction information to be input (or selected) through the user terminal 100 are transmitted to the user terminal 100 through the banking server 200 And an authentication server (600) for verifying that the input (or selected) has been transmitted and generating or extracting code information that uniquely identifies the transaction information and transmitting the generated code information to the user terminal (100) Is used as one of the seed values for dynamically generating the disposable authentication code in the chip 405 of the card 400 interfaced with the designated terminal 500 or the designated terminal 500 through the NFC. Although the banking server 200 and the authentication server 600 are illustrated as separate servers, the present invention is not limited thereto. The banking server 200 and the authentication server 600 may be a single server It can be implemented in server form. 1, the user terminal 100 and the terminal 500 are shown as separate terminals, but the present invention is not limited thereto. For example, the user's wireless terminal may be the user terminal 100 and the terminal 500 simultaneously if it is interfaced with the card 400 through the NFC while requesting a non-face financial transaction from the wireless terminal used by the user. That is, the name of each terminal or server shown in the embodiment of the present invention, including FIG. 1, is merely named to effectively describe a functional operation, and the name is never limited to a specific physical device.

The user terminal 100 is a name given to a terminal used by a user for non-face financial transactions, and is preferably connected to a wired terminal (e.g., a computer, a notebook computer, etc.) connected to a wired network and used for Internet banking, (E.g., a smart phone, a mobile phone, a tablet PC) used for mobile banking, a call terminal connected to a telephone network and used for phone banking (e.g., a wired telephone, a mobile phone, and the like).

The banking server 200 receives a transaction information input (or selected) from the user terminal 100 or receives a transaction information from the user terminal 100 as a name given to the server, Or selected transaction information can be received or verified, any server can be given the name of the banking server 200 of FIG. For example, a financial server for Internet banking that receives transaction information from a wired terminal for Internet banking, a financial server for mobile banking that receives transaction information from a mobile terminal for mobile banking, a server for receiving transaction information from a call terminal for phone banking A separate server connected to the banking financial server for communicating with the user terminal 100 for non-face-to-face financial transaction, an electronic banking server for linking the banking banking server with the banking banking server 110, The banking server 105 and the like can also be named as the banking server 200 of FIG.

The authentication server 600 transmits a specified item or a specified number of pieces of transaction information among N (N? 2) pieces of transaction information to be inputted (or selected) through the user terminal 100 for non-face financial transaction, (Or selected) and transmitted, generates and extracts code information that uniquely identifies the transaction information, and processes the code information to be transmitted to the user terminal 100, Is used as one of the seed values for dynamically generating the disposable authentication code in the chip 405 of the card 400 interfaced with the designated terminal 500 or the designated terminal 500 through the NFC.

The authentication server 600 receives the transaction information from the banking server 200 or receives a signal that the banking server 200 has received the transaction information from the user terminal 100. The authentication server 600 may receive the transaction information from the user terminal 100 according to an embodiment of the present invention. Hereinafter, technical features of the present invention will be described with reference to an embodiment in which the authentication server 600 receives transaction information from the banking server 200 for convenience.

The card 400 is a name assigned to a card 400 equipped with a chip 405 having a proximity wireless communication (NFC) function and having an encryption / decryption function. Preferably, the card 400 preferably includes the chip 405 And an antenna 450 are mounted. The chip 405 of the card 400 receives the code information from the terminal 500 interfaced through the proximity wireless communication function and transmits the code information requested by the user terminal 100 using the code information as one of the seed values And may provide the generated disposable authentication code to the terminal 500 through the proximity wireless communication after dynamically generating a disposable authentication code for authenticating the non-face financial transaction.

The terminal 500 is a name assigned to a terminal in which dynamically generated disposable authentication codes are displayed by using code information generated or extracted by the authentication server 600 as one of the seed values, A smart phone, a mobile phone, a tablet PC, etc.). According to an embodiment of the present invention, the terminal 500 may further include an OTP generation token, an OTP generation device, an OTP generation card having a display, and the like. Hereinafter, technical features of the present invention will be described with reference to an embodiment in which the terminal 500 is a wireless terminal.

The disposable authentication code is dynamically generated by using the code information as one of the seed values in the chip 405 of the card 400 interfaced with the terminal 500 through proximity wireless communication, And can be dynamically generated by using the code information as one of the seed values in the provided program 515.

According to the first code information transferring method of the present invention, the code information that uniquely identifies the transaction information is provided to the user terminal 100 and displayed on the screen, and the user is prompted to input the key into the terminal 500, And transmitted to the terminal 500. In this case, the terminal 500 may further include an OTP generation token, an OTP generation device, and an OTP generation card having a display, as well as a wireless terminal.

According to the second code information delivery method of the present invention, the code information that uniquely identifies the transaction information may be a code image (for example, a two-dimensional bar code image of a QR code standard, a two-dimensional bar code image of a data matrix standard Dimensional barcode image of the Maxi-code standard, a two-dimensional barcode image of the PDF-417 standard, etc.), and then provided to the user terminal 100 and displayed on the screen. And transmitted to the terminal 500 by being photographed and interpreted. In this case, the terminal 500 includes a wireless terminal having a camera. If the terminal includes a camera other than the wireless terminal, the terminal 500 may be referred to as the terminal 500. Meanwhile, the URL may be encoded in the code image, the code information may be stored in a medium corresponding to the URL, and then the code image may be provided to the terminal 500 that has captured and interpreted the code image.

According to the third code information delivery method of the present invention, the code information that uniquely identifies the transaction information can be transmitted to the terminal 500 through a designated communication network. In this case, the terminal 500 transmits the code information (E.g., the communication number of the terminal 500, the communication address, the unique identification value of the program 515 provided in the terminal 500, or a token for pushing) to be transmitted to the authentication server 600 . In this case, the terminal 500 includes a wireless terminal connected to a designated communication network and capable of receiving code information using the communication connection information. If the terminal 500 is connectable to a designated communication network other than the wireless terminal, the terminal 500 is referred to as the terminal 500 .

The code information transmitted to the terminal 500 may be used as one of the seed values for dynamically generating a disposable authentication code in the terminal 500. If the terminal 500 is interfaced with the card 400 through proximity wireless communication, the code information transmitted to the terminal 500 is transmitted to the chip 405 of the card 400 through the proximity wireless communication The chip 405 of the card 400 may dynamically generate a disposable authentication code using the code information as one of the seed values and then provide the disposable authentication code to the terminal 500. [

The disposable authentication code dynamically generated using the code information is input as one of the N pieces of transaction information input through the user terminal 100 and is transmitted to the banking server 200. The non- .

2 is a diagram illustrating a configuration of a banking server 200 for processing non-face financial transactions according to an embodiment of the present invention.

2 illustrates a configuration of a banking server 200 for receiving N (N? 2) pieces of transaction information from a user terminal 100 requesting a non-face financial transaction and processing the requested non-face financial transaction Those skilled in the art will be able to refer to and / or modify the FIG. 2 to illustrate various implementations of the configuration of the banking server 200 (e.g., , Or subdivided, or combined). However, the present invention includes all of the above-mentioned embodiments, and the technical features of the present invention are not limited only by the method shown in FIG.

Referring to FIG. 2, the banking server 200 includes a non-face process execution unit 205 for performing a non-face process for at least one non-face financial transaction in cooperation with the user terminal 100, A transaction information receiving unit 210 receiving N (N? 2) pieces of transaction information for a non-face-to-face financial transaction according to a designated procedure from the transaction information storage unit 100, a transaction information storage unit 215 storing the received transaction information, And a transaction information providing unit 220 for providing a specified number of pieces of transaction information among the received transaction information to the specified authentication server 600. The transaction information providing unit 220 may be configured to receive transaction information and to control the provision of the transaction information to the authentication server 600 And a procedure control unit 225.

When the non-face financial transaction is initiated in the user terminal 100, the user terminal 100 performs a specified user authentication (e.g., ID / PW authentication or authorized certificate authentication) procedure and / A series of procedures for selecting a transaction type from among available transaction types (for example, account inquiry, account transfer, commodity subscription / termination, fund, loan, foreign exchange, asset management, etc.) is performed. The non-face-to-face procedure execution unit 205 performs at least one non-face-to-face procedure for user authentication and transaction type selection designated by the user terminal 100. The non-convergence procedure execution unit 205 provides a web page for performing the non-confrontation procedure to the user terminal 100 and / or receives information inputted through the web page and authenticates according to a designated procedure Procedure can be performed. Alternatively, the non-face-to-face procedure execution unit 205 may perform a server-side operation corresponding to the non-face-to-face procedure in conjunction with the program 300 provided in the user terminal 100. [ During or after the non-face-to-face procedure is performed, one type of transaction for non-face-to-face financial transactions is determined. Those skilled in the art will appreciate the various non-face-to-face procedures performed for non-face-to-face financial transactions, and a detailed description thereof will be omitted.

According to the first interface display method of the present invention, the user terminal 100 inputs N (N? 2) pieces of transaction information for non-face-to-face financial transactions in which funds are moved corresponding to the transaction type, Or select) an interface to receive.

When the interface for inputting (or selecting) the N pieces of transaction information is displayed, the user terminal 100 checks whether the transaction information of the designated item is inputted through the interface, And transmits the information to the banking server 200. The transaction information is transmitted and received securely according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

The transaction information receiving unit 210 receives transaction information of a designated item transmitted from the user terminal 100, and the transaction information storing unit 215 stores the received transaction information in a designated storage medium. The transaction procedure control unit 225 determines one or more pieces of transaction information to be provided to the specified authentication server 600 among the received transaction information and the transaction information providing unit 220 controls the transaction procedure control unit 225 And provides the determined one or more pieces of transaction information to the authentication server 600.

According to the first transaction interworking method of the present invention, the transaction information providing unit 220 selects an authentication code corresponding to the secure card random number or OTP among N (N? 2) transaction information for the non-face financial transaction S (1? S <N) pieces of transaction information input (or selected) through the user terminal 100 until the transaction information for the non-face financial transaction is input to the designated authentication server 600. According to an embodiment of the present invention, the transaction information providing unit 220 may provide the designated authentication server 600 with the identification information for identifying that the S transaction information has been received from the user terminal 100.

According to the second transaction interworking method of the present invention, the transaction information providing unit 220 may include an authentication code corresponding to the secure card random number or OTP among N (N? 2) pieces of transaction information for the non-face financial transaction (1 < S < S) transactions among the S (1 S &lt; N) transaction information input (or selected) through the user terminal 100 until the transaction information for the non- Information can be provided to the specified authentication server 600. According to an embodiment of the present invention, the transaction information providing unit 220 may provide the designated authentication server 600 with the identification information for identifying that the transaction information s has been received from the user terminal 100.

Meanwhile, according to the embodiment of the present invention, the transaction procedure control unit 225 confirms that the non-face financial transaction is a non-face financial transaction in which funds are transferred. If the non-face-to-face financial transaction is a financial transaction to which funds are transferred, the transaction procedure control unit 225 transmits at least one transaction information related to the depositing side of the money among the N transaction information, N) pieces of transaction information are received first and then (Nn) pieces of transaction information are transmitted afterwards.

According to the second interface display method of the present invention, when the non-face financial transaction is a financial transaction in which funds are transferred, the user terminal 100 transmits N (N &gt; = 2) An interface for inputting (or selecting) n (1 &lt; n &lt; N) pieces of transaction information preliminarily specified including at least one transaction information related to the depositing side of the money among transaction information.

Here, the n pieces of transaction information include at least one or more pieces of transaction information including at least one transaction information related to a depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are moved . Preferably, the n pieces of transaction information include n (1? N? <N) pieces of transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred, &Lt; = n < = n ").

According to an embodiment of the present invention, the n pieces of transaction information include transaction information corresponding to a required input item among transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred . For example, in the case of a money transfer transaction, transaction information related to the depositing side of the money among the N pieces of transaction information may include a depositing bank, a deposit account number, a transfer amount, a received bank note, and the like. At this time, it is preferable that the n pieces of transaction information include at least one or two or more combinations of deposit bank information, deposit account number information, and money amount information corresponding to a transfer amount corresponding to a required input item related to a deposit side of money.

According to an embodiment of the present invention, the n pieces of transaction information further include transaction information corresponding to an optional input item among transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred can do. For example, the n pieces of transaction information include at least one or two or more combinations of depositing bank information, deposit account number information, and money amount information corresponding to a transfer amount corresponding to a required input item related to the depositing side of the money, And may further include a received passbook memo corresponding to the optional entry.

Meanwhile, according to another embodiment of the present invention, the n pieces of transaction information include at least one piece of transaction information related to a depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred, And may further include one or more pieces of transaction information designated by the financial institution processing the financial transaction. For example, the n pieces of transaction information include at least one or two or more combinations of deposit bank information, deposit account number information, money amount information corresponding to a transfer amount, and received account memo associated with a deposit side of funds, But may further include transaction information of at least one of a withdrawal account number, an account password, an internal passbook memo, and a CMS code which is not directly related to the deposit side but is designated by a financial institution. That is, the transaction information is determined according to which transaction information is transmitted first in correspondence with each transaction type and is kept on the banking server 200 in order to prevent an illegal transaction due to memory hacking, The present invention is not limited to only the transaction information related to the depositing side of the money of the financial transaction. However, in the non-face-to-face financial transaction in which the funds are transferred, the transaction information related to the deposit side of the money is one of the main targets of the memory hacking. For example, in a non-face-to-face financial transaction in which funds are transferred, if the user has two withdrawal accounts, it is possible to select one withdrawal account number first and include it in n transaction information. Or if the withdrawal account is included in n pieces of transaction information, it is also possible that the account password is included in n pieces of transaction information and transmitted first.

When the interface for inputting the n pieces of transaction information is displayed, the user terminal 100 confirms that n pieces of transaction information designated through the interface are input, and transmits the checked n pieces of transaction information to the banking server 200 send.

According to the first transaction information exchange method of the present invention, it is possible to identify the other party between the program 300 of the user terminal 100 and the banking server 200 at a specified time point before, The transaction information receiving unit 210 receives the n pieces of transaction information, and the transaction information storage unit 215 maps the n pieces of transaction information and the identification token to the designated storage medium Can be stored.

According to the second transaction information exchange method of the present invention, when a communication channel is formed between the program 300 and the banking server 200, the transaction information receiving unit 210 receives the program 300 of the user terminal 100 (Or confirms) a session for managing a formed communication channel, and confirms session information for identifying the session, and receives the n pieces of transaction information, and the transaction information storage unit 215 stores the n pieces of transaction information And session information may be mapped and stored in a designated storage medium.

According to the third transaction information exchange method of the present invention, the transaction information transmitting unit may transmit the transaction information together with n transaction information to the banking server 200 to identify the user terminal 100 and / or the program 300, The transaction information receiving unit 210 receives the n pieces of transaction information, and the transaction information storage unit 215 stores the n pieces of transaction information and the identification information And stored in a designated storage medium.

According to an embodiment of the present invention, n pieces of transaction information stored in the storage medium are preferably stored until at least (Nn) pieces of transaction information are received.

According to the third transaction interworking method of the present invention, the transaction information providing unit 220 receives the transaction information from the user terminal 100 from the banking server 200 among N (N &gt; = 2) transaction information for the non- (1 &lt; n &lt; N) transaction information related to the money transfer side transmitted first to the designated authentication server 600. According to an embodiment of the present invention, the transaction information providing unit 220 may provide the designated authentication server 600 with the identification information for identifying that the n pieces of transaction information has been received from the user terminal 100.

Referring to FIG. 2, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 225 as a non-face financial transaction in which the non- The banking server 200 includes a transaction information verifying unit 230 for verifying the validity of the n pieces of transaction information received first.

When the n pieces of transaction information are received first through the transaction information receiving unit 210, the transaction information checking unit 230 checks the validity of the received n pieces of transaction information under the control of the transaction procedure controller 225 Verification and authentication can be performed. For example, when the n transaction information includes the deposit bank and the deposit account number, the transaction information confirmation unit 230 notifies the deposit bank of the account corresponding to the deposit account number as a valid account number actually opened, It is possible to perform a procedure of inquiring and authenticating the user. On the other hand, if the depositing bank does not provide a payee line inquiry for the transfer transaction from the other bank or does not accept it on the financial joint network supporting the bank-to-bank transaction, The recipient inquiry procedure for validity of the n pieces of transaction information may be omitted. Or the n pieces of transaction information includes the information used as the authentication means, the transaction information verification unit 230 may perform the authentication procedure for the information used as the authentication means.

According to the embodiment of the present invention, when validity of n pieces of transaction information is confirmed by the transaction information verifying unit 230, the transaction information storage unit 215 stores the n pieces of transaction information, , N pieces of transaction information may be stored in a storage medium designated to be linked with (Nn) pieces of transaction information to be received later.

Referring to FIG. 2, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 225 as a non-face financial transaction in which the non- The banking server 200 includes an acknowledgment transmitting unit 235 for transmitting acknowledgment information for the n pieces of received transaction information to the user terminal 100, And a transaction procedure control unit (225) for controlling the reception confirmation information to be transmitted to the user terminal (100).

When the received n pieces of transaction information are stored in a designated storage medium, the acknowledgment transmission unit 235 generates the equation confirmation information for the n pieces of transaction information under the control of the transaction procedure control unit 225, And transmits the generated acknowledgment information to the user terminal 100.

Meanwhile, when the validity checking procedure for the n pieces of transaction information is performed by the transaction information checking unit 230, the acknowledgment transmitting unit 235 checks the validity checking procedure according to the control of the transaction procedure controller 225 The acknowledgment information may be transmitted based on the result of the acknowledgment.

If the validity of the n pieces of transaction information is not verified as a result of validation of the n pieces of transaction information through the transaction information verifying unit 230 (e.g., when the validity of the n pieces of transaction information is not confirmed If the account corresponding to the deposit account number is not opened or valid depository information can not be obtained as a result of the recipient inquiry), the acknowledgment transmitting unit 235 transmits validity authentication failure information for the n pieces of transaction information And may transmit the generated acknowledgment information to the user terminal 100. [0050] FIG. The acknowledgment information may further include n pieces of transaction information that failed authentication. If the validity authentication of the n pieces of transaction information has failed, the transaction continuity for the n pieces of transaction information may not be maintained, and the n pieces of transaction information may not be stored in the storage medium.

If the validity authentication for the n pieces of transaction information has failed, the user terminal 100 performs the procedure for the non-face financial transaction again from the beginning (for example, authentication of the authorized certificate) . For this, the acknowledgment information includes all or a part of n pieces of transaction information received through the transaction information receiving unit 210, and the user terminal 100 initializes a non-face financial transaction currently being performed, (E. G., An authorized certificate authentication procedure or n &lt; / RTI &gt; transaction information input procedures, etc.). The user terminal 100 may control the non-face financial transaction currently being executed to be performed again from a designated procedure (for example, an authorized certificate authentication procedure or n transaction information input procedures) by the flag or indicator.

If validity authentication for the n pieces of transaction information is successful (for example, a valid account corresponding to the deposit account number is opened in the depository inquiry result depositing bank using the deposit bank and the deposit account number, or valid depository information as the payee inquiry result Or if the validity check of the n pieces of transaction information is omitted (although it is omitted at the time when n pieces of transaction information is first received, it is performed in the course of performing the transaction procedure using N pieces of transaction information) The acknowledgment transmitting unit 235 generates the mathematical identification information for the n pieces of transaction information and transmits the generated acknowledgment information to the user terminal 100. Preferably, the acknowledgment information includes the n transaction information. When n pieces of transaction information included in the acknowledgment information are output, the user can judge whether the n pieces of transaction information are information that is actually input by the user without being manipulated by the memory hacking.

According to an embodiment of the present invention, the acknowledgment information may include stored information stored in the banking server 200. For example, the acknowledgment information may include unique information or contents (e.g., image, character string, etc.) registered by the user in the banking server 200. For example, if a user registers an image or character string on the banking server 200, the user can only know the image or the character string. Therefore, it is possible to determine whether the code information is manipulated or transmitted from the banking server 200 do.

According to an embodiment of the present invention, the acknowledgment information may further include acquisition information acquired by the transaction information confirmation unit 230. For example, the acknowledgment information may further include a payee inquiry result using the n pieces of transaction information (for example, account holder information of a deposit account).

According to the embodiment of the present invention, before the acknowledgment information is transmitted to the user terminal 100, the acknowledgment transmitting unit 235 generates or extracts code information that uniquely identifies the n pieces of transaction information And may include the code information in the acknowledgment information and transmit it to the user terminal 100.

According to an embodiment of the present invention, the code information may include generation information generated using the n pieces of transaction information, generation information generated using at least one piece of the n pieces of transaction information, at least one of the n pieces of transaction information, The generation information generated using one piece of information, the generation information generated using at least one piece of the n pieces of transaction information and at least one piece of information, and the generation information generated by the banking server 200 (or the authentication server 600) The generated information may include at least one or more than two pieces of generation information.

For example, the code information may include generation information generated using the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information, etc.). For example, the code information may include: a value generated by hashing n transaction information through a specified hash algorithm; a value generated by substituting the n transaction information into a specified code generation algorithm; And generation information including at least one of the values generated by transforming according to the rule.

Alternatively, the code information may include generation information generated using at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and deposit account number information in the money information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information through a hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying information according to a specified rule.

Alternatively, the code information may include generation information generated using at least one piece of the at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and 8-digit number after the deposit account number in the money information) . For example, the code information may include a value generated by hashing at least one piece of information of at least one of n pieces of transaction information through a specified hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying one piece of information according to a specified rule.

Alternatively, the code information may include at least one of the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information in money information) and at least one piece of information (e.g., deposit bank information, , And the 8-digit number after the deposit account number in the amount information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information and at least one piece of information through a specified hash algorithm, assigning the at least one piece of information and some pieces of information to a designated code generation algorithm And a value generated by modifying the at least one piece of information and some pieces of information according to a specified rule.

Alternatively, the code information may include generation information (e.g., a random number value) dynamically generated through the designated random number algorithm.

According to the embodiment of the present invention, the code information may include index information given by the banking server 200 (or the authentication server 600) to identify the transaction information. The index information may be uniquely extracted uniquely from the designated DB, or may be determined sequentially (or dynamically) so as not to be duplicated.

According to an embodiment of the present invention, the code information may include session information for identifying a session assigned to the terminal by the banking server 200 (or the authentication server 600). For example, the code information may include session information identifying a session allocated (or confirmed) at the time when the user terminal 100 accesses the banking server 200 (or the authentication server 600) have.

According to an embodiment of the present invention, the acknowledgment information may include image information processed in the form of an image. For example, when the acknowledgment information includes code information, the code information may include a code image (e.g., a two-dimensional bar code or the like) according to at least one of a QR code, a data matrix, a maxi code, As shown in FIG. The code image may be generated in the banking server 200 or may be generated and provided from the authentication server 600. Meanwhile, the URL may be encoded in the code image, the code information may be stored in a medium corresponding to the URL, and then the code image may be provided to the terminal 500 that has captured and interpreted the code image.

According to an embodiment of the present invention, the acknowledgment information can be processed in whole or at least partly in the form of an image. For example, the acknowledgment information may be processed in the form of an image in which the n pieces of transaction information and code information are displayed in a font specified on the basis of the gradation-processed color and / or wavy pattern. In this case, even if some area of the image is manipulated or copied through memory hacking, the user can immediately recognize that the image has been manipulated.

The user terminal 100 receives the acknowledgment information for the n pieces of transaction information transmitted from the banking server 200 first. The acknowledgment information is securely transmitted / received according to the encryption / decryption procedure of the secure communication channel formed between the user terminal 100 and the banking server 200. The user terminal 100 may output n pieces of transaction information included in the received acknowledgment information, and may further perform a validity authentication procedure on the received and / or outputted acknowledgment information.

Referring to FIG. 2, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 225 as a non-face financial transaction in which the non- The banking server 200 receives the authentication information from the user terminal 100 that has received the acknowledgment information and uses the authentication code such as the secret number of the security card or OTP among the (Nn) pieces of transaction information for the non-face financial transaction And a transaction information receiving unit 210 receiving R (1? R <(Nn)) pieces of transaction information excluding transaction information according to a specified procedure.

When the valid acknowledgment information is received and / or output for the n pieces of transaction information transmitted first, the user terminal 100 transmits the previously transmitted transaction information including the n pieces of transaction information among the N pieces of transaction information (N) pieces of transaction information excluding the transaction information used as the authentication code, and transmits the confirmed R pieces of transaction information to the banking server 200.

The R pieces of transaction information are collectively referred to as transaction information other than the transaction information used as an authentication code among the transaction information other than the n pieces of transaction information transmitted first among the N pieces of transaction information.

According to an embodiment of the present invention, the R pieces of transaction information include transaction information that is not specified as the n pieces of transaction information among N pieces of transaction information related to the depositing side of the money among N pieces of transaction information for non- As shown in FIG.

According to an embodiment of the present invention, the R pieces of transaction information may include at least one or more pieces of information among password information (for example, an account password and / or a transfer password) used as an authentication means of a non-face financial transaction.

According to the method of the present invention, some of the R pieces of transaction information may include a NULL value. In this case, the null value transaction information may be replaced with the information previously designated by the banking server 200, or the null value may be maintained when the null value transaction information is not used in the non-face financial transaction. For example, among the R transaction information, the &quot; my bankbook memo &quot; may include a null value. In this case, the &quot; my bankbook memo &quot; may include information previously specified by the banking server 200 Account holder information of the deposit account, etc.). Or &quot; CMS code &quot; out of the R pieces of transaction information can hold a null value as long as it is not a CMS transaction.

The transaction procedure control unit 225 controls the R transaction information to be received after the n pieces of transaction information is received first and the acknowledgment information is transmitted to the transaction procedure control unit 225. The transaction information receiving unit 210 receives, (R) transaction information from the user terminal (100) receiving the acknowledgment information under the control of the control unit (225). The R transaction information is transmitted and received securely according to the encryption / decryption procedure of the secure communication channel formed between the user terminal 100 and the banking server 200.

According to the first transaction information exchange method of the present invention, the user terminal 100 and the banking server 200 are provided with an identification token capable of identifying the other party before, during, and after the R transaction information is exchanged And the transaction information receiving unit 210 receives the R pieces of transaction information and confirms the n pieces of transaction information received first through the identification token.

According to the second transaction information exchange method of the present invention, when a communication channel is formed between the user terminal 100 and the banking server 200, the transaction information receiving unit 210 receives the communication (Or confirms) a session for managing a channel, and confirms session information for identifying the session. The transaction information receiving unit 210 receives the R pieces of transaction information, Check the transaction information.

According to the third transaction information exchange method of the present invention, the transaction information receiving unit 210 may allow the banking server 200 to identify the user terminal 100 and / or the program 300 together with R transaction information Or the identification information for identifying the user on the communication protocol. The transaction information receiving unit 210 receives the R pieces of transaction information and identifies the n pieces of transaction information received first through the identification information .

According to the fourth transaction interworking method of the present invention, the transaction information providing unit 220 may include R (1?) Other than the transaction information used as the authentication code among N (N? 2) transaction information for the non- R <(Nn)) pieces of transaction information to the designated authentication server 600. According to an embodiment of the present invention, the transaction information providing unit 220 may provide the designated authentication server 600 with the identification information for identifying that the R transaction information has been received from the user terminal 100.

According to the fifth transaction interworking method of the present invention, the transaction information providing unit 220 selects R (1 &amp;ge; 1) other than the transaction information used as the authentication code among N (N & (N + R) pieces of transaction information including R &lt; (Nn) pieces of transaction information and n pieces of transaction information related to the money depositing side first received from the user terminal 100 to the banking server 200, (600). According to an embodiment of the present invention, the transaction information providing unit 220 may provide the designated authentication server 600 with the identification information for identifying that (n + R) transaction information has been received from the user terminal 100.

According to the embodiment of the present invention, an item specified to the authentication server 600 specified by at least one transaction interlock among the first through fifth transaction interlocking methods or a specified number of transaction information is provided, or the user terminal 100 When the authentication server 600 is provided with the identification information for identifying that the item specified to the banking server 200 or the specified number of pieces of transaction information has been received from the banking server 200, Generates or extracts code information that uniquely identifies transaction information, transfers the generated or extracted code information to the banking server 200, or transmits the generated or extracted code information to the user terminal 100 .

2, the banking server 200 includes a code information checking unit 240 for checking code information generated or extracted through the authentication server 600, And a code information providing unit 245 for providing the code information. If n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 under the control of the transaction procedure control unit 225 as a non-face financial transaction in which the non-face financial transaction is transferred, If the information is included in the acknowledgment information and provided to the user terminal 100, the code information providing unit 245 may be omitted.

The code information verifying unit 240 verifies whether or not the transaction information (or the reception identification information) is designated by the transaction information providing unit 220 through at least one of the first to fifth transaction interlocking methods, Server 600, and receives code information that uniquely identifies the transaction information from the authentication server. If the banking server 200 and the authentication server 600 are implemented as a single server, the code information may be determined in the banking server 200. In this case, And the code information determined in the banking server 200 can be confirmed.

The code information providing unit 245 transmits the code information confirmed by the code information checking unit 240 to the user terminal 100 so that the code information is outputted through the screen of the user terminal 100. [ The code information is transmitted to the user terminal 100 in the form of confirmation information after the input (or selection) of the specific transaction information while the procedure of inputting (or selecting) N transaction information in the user terminal 100 is performed Lt; / RTI &gt;

Referring to FIG. 2, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 225 as a non-face financial transaction in which the non- The banking server 200 transmits the transaction information including the authentication code to the transaction information receiving unit 210 that receives (NnR) pieces of transaction information according to a designated procedure, in response to the authentication code being displayed on the designated terminal 500 .

The user terminal 100 displays an interface for inputting (NnR) pieces of transaction information including the authentication code displayed on the terminal 500, to induce a procedure for generating an authentication code through the designated terminal 500 do. When the (NnR) transaction information including the authentication code is input through the interface, the user terminal 100 transmits the (NnR) transaction information to the banking server 200.

According to an embodiment of the present invention, the (NnR) pieces of transaction information may include password information (for example, an account password and / or a transfer password) used as an authentication means of a non-face financial transaction. A random number of the secure card may be included in place of the authentication code displayed on the terminal 500 according to an embodiment of the present invention.

Referring to FIG. 2, the banking server 200 includes an authentication procedure performing unit 250 (FIG. 2) for performing an authentication process using one or more pieces of transaction information designated to be used as authentication means among the (Nn) . According to an embodiment of the present invention, the authentication procedure may be performed through a separate authentication system (not shown) or an authentication server 600. In this case, And requests the authentication procedure.

According to the first transaction authentication method of the present invention, the transaction information (for example, the account password, the transfer password, the security card random number, the authentication of the OTP, etc.) used as the authentication means of the non- (E.g., one or more pieces of transaction information designated by the means), the authentication procedure performing unit 250 selects one or more pieces of transaction information (for example, an account A password, a password for transfer, a random number of a secure card, and at least one transaction information designated as an authentication means of the OTP), and then perform a validity authentication procedure on the derived information. The authentication code included in the (NnR) pieces of transaction information among the (Nn) pieces of transaction information can be authenticated through the authentication server 600. For this purpose, To the authentication server 600, and receive the authentication result.

According to the second transaction authentication method of the present invention, transaction information (for example, an account password) used as an authentication means of the non-face financial transaction is included in the n pieces of transaction information received first, (For example, a transfer password, a random number of a security card, and at least one transaction information designated as an authentication means among OTPs) used as the authentication means of the non-face financial transaction, the authentication procedure performing unit 250 One or more pieces of transaction information (for example, an account password, a transfer password, a security card random number, and an authentication of OTP), which are designated to be used as the authentication means of the non-face financial transaction, Means for obtaining at least one transaction information), and then performing a validity authentication procedure on the derived information. The authentication code included in the transaction information of (NnR) of the N pieces of transaction information may be authenticated through the authentication server 600. For this purpose, the authentication procedure performing unit 250 may transmit the authentication code To the authentication server 600, and can receive the authentication result.

Referring to FIG. 2, the banking server 200 determines whether or not the non-face-to-face financial transaction is performed using T (1? T <N) transaction information excluding one or more transaction information used as an authentication means among N transaction information And a transaction procedure execution unit 255 that performs a transaction procedure. Preferably, the transaction procedure is performed in conjunction with the electronic financial server 105 or the financial system 110.

If the authentication procedure is successful, the transaction procedure execution unit 255 uses the T (1? T <N) transaction information excluding one or more transaction information used as the authentication means among the N transaction information, Perform the transaction procedure of the transaction.

If the authentication success and the transaction success occur during the execution of the designated procedure using the N pieces of transaction information, the transaction procedure execution unit 255 generates success confirmation information for the successful authentication and / or transaction, To the terminal (100). Preferably, the success confirmation information may include t (1? T? T) transaction information used in the transaction procedure of the successful non-face financial transaction. Here, the t transaction information includes T transaction information used in the non-face financial transaction, or includes information excluding some information (for example, received bank note, CMS code, etc.) from the T transaction information .

According to an embodiment of the present invention, the success confirmation information may include s (1? S) acquisition information in the t transaction information. The s acquisition information is a generic name of information obtained from the ledger in which the withdrawal account of the user is opened during the transaction procedure or information received from other financial companies participating in the non-face-to-face financial transaction. Preferably, the s acquiring information may include depositor information of the deposit account, information on the transaction date, and the like.

The user terminal 100 receives success confirmation information on procedures performed using the N pieces of transaction information from the banking server 200. [ The success confirmation information is transmitted and received securely according to the encryption / decryption procedure of the secure communication channel formed between the user terminal 100 and the banking server 200.

According to an embodiment of the present invention, the user terminal 100 authenticates the validity of the received success confirmation information. For example, when the success confirmation information is digitally signed through the certificate of the banking server 200, the user terminal 100 can authenticate the validity of the success confirmation information through a designated digital signature verification procedure. Alternatively, if the received transaction confirmation information includes t transaction information, the user terminal 100 may compare t transaction information included in the N transaction information with t transaction information included in the success information So that they can be authenticated.

The user terminal 100 outputs all or a part of the received success confirmation information through the screen of the user terminal 100. [ The output of the success confirmation information may be omitted according to the method. Meanwhile, when the success confirmation information is output, the output success confirmation information may include the t transaction information. Preferably, the output success confirmation information may further include s acquisition information together with the t transaction information.

According to the embodiment of the present invention, the user terminal 100 can authenticate the validity of the output success confirmation information. That is, the received success confirmation information and the output success confirmation information can be manipulated by memory hacking. The user terminal 100 authenticates the validity of the output success confirmation information. For example, when the success confirmation information is processed in the form of an image, the user terminal 100 determines whether or not the singularity of the image (for example, the level change of the gradation is different from the surrounding level, The validity of the output success confirmation information can be authenticated. Alternatively, the user terminal 100 may compare t transaction information included in the output success confirmation information with t transaction information included in the N transaction information, and authenticate whether or not they match.

When the success confirmation information is received and / or outputted, the user terminal 100 transmits the electronic signature of the user using the public certificate to the transaction history including the t transaction information and the s acquisition information included in the success confirmation information Perform the procedure to create and attach. The non-face-to-face financial transaction may be completed by an electronic signature procedure on the transaction details.

3 is a diagram showing a functional configuration of the user terminal 100 side program 300 according to an embodiment of the present invention.

More specifically, FIG. 3 illustrates a functional configuration of a program 300 provided in a user terminal 100 requesting non-face financial transaction by transmitting N (N? 2) transaction information to a designated banking server 200 And various modifications and changes may be made thereto by those skilled in the art to which the present invention pertains by referring to and / It is to be understood that the invention may be practiced otherwise than as specifically described herein, but it is to be understood and appreciated that the invention is not limited to the particular embodiments set forth herein, It is not limited.

The program 300 of the present invention may be applied to various types of applications such as an application form installed in the user terminal 100, a browser form provided in the user terminal 100, a plug-in form linked with the browser of the user terminal 100, (And / or a tag string) that is implemented as a combination of at least one or two or more of a web document and / or a script type interpreted through a browser. Hereinafter, an operation procedure of the program 300 The operation procedure corresponding to the present invention will be referred to as the name of the function configuration unit and its technical features will be described.

Referring to FIG. 3, the program 300 of the user terminal 100 includes a non-face process execution unit 305 for performing a non-face process for at least one non-face financial transaction in cooperation with the user terminal 100, An interface display unit 310 for displaying at least one interface for inputting (or selecting) transaction information of a designated item for a non-face financial transaction, and an information display unit 310 for displaying transaction information of a designated item input (or selected) And a transaction information transmission unit 320 for transmitting the transaction information of the designated item inputted (or selected) through the interface to the banking server 200 according to a designated procedure, And a transaction procedure control unit 325 for controlling interface display, transaction information input (or selection) for the non-face financial transaction, and transmission of the input (or selected) transaction information.

When the non-face financial transaction is started in the user terminal 100, the non-face process execution unit 305 performs a specified user authentication (for example, ID / PW authentication or authorized certificate authentication) in cooperation with the banking server 200 And performs a series of procedures to select any one of the types of transactions that can be performed and / or offered (for example, account inquiry, account transfer, commodity subscription / termination, fund, loan, foreign exchange, asset management, etc.). During or after the non-face-to-face procedure is performed, one type of transaction for non-face-to-face financial transactions is determined.

The transaction procedure control unit 325 checks the determined transaction type and displays the interface corresponding to the determined transaction type through the interface display unit 310. The interface display unit 310 displays, (Or selecting) the transaction information of the designated item under the control of the controller 325. [ Meanwhile, when the non-face financial transaction of the present invention is implemented through a web page, the transaction procedure controller 325 may be provided in the banking server 200 providing the web page.

According to the embodiment of the present invention, by confirming any one of the above-mentioned specific transaction types, N (N &gt; = 2) transaction information items to be input from the user for non-face financial transactions corresponding to the identified transaction types (Or determined). For example, if the confirmed transaction type is a money transfer transaction, the N pieces of transaction information to be input (or selected) from the user for the account transfer transaction are a withdrawal account number (note that the withdrawal account number is not input, (Or automatically assigned to a designated default withdrawal account), account password, deposit bank, transfer account number, transfer amount, received bankbook memo, my bankbook memo, CMS code, transfer password, secure card random number, OTP One Time Password). Some of the transaction information is a required entry item, and some other transaction information may be optional items. For example, the received bankbook memo, the bankbook memo, and the CMS code may correspond to optional input items that are automatically input (or omitted) when not input. Alternatively, the secure card random number and the OTP may be optional input items to which only one of them is inputted.

The interface display unit 310 displays one or more interfaces for receiving transaction information corresponding to a specified number of transaction information items for a non-face-to-face financial transaction corresponding to the confirmed transaction type. Meanwhile, when the non-face financial transaction of the present invention is implemented through a web page, the interface display unit 310 can be implemented through the web page.

According to the first interface display method of the present invention, the interface display unit 310 inputs N (N? 2) pieces of transaction information for non-face-to-face financial transactions in which funds are moved corresponding to the transaction type, Or selected) can be sequentially displayed according to a specified procedure. For example, if the confirmed transaction type is the account transfer transaction, the interface display unit 310 preferably selects the withdrawal account number (note that the withdrawal account number is not input (or is automatically selected as the default withdrawal account) , An account password, a deposit bank, a deposit account number, a transfer amount, a received passbook memo, an internal passbook memo, a CMS code, and an interface for inputting a transfer password and a secure card random number or OTP.

When an interface for inputting (or selecting) the N pieces of transaction information is displayed through the interface display unit 310, the transaction information checking unit 315 checks whether transaction information of a designated item is inputted through the interface.

The transaction procedure control unit 325 controls the transaction information input through the interface to be transferred to the banking server 200 according to a designated procedure and the transaction information transmission unit 320 controls the transaction procedure control unit 325 (Or selected) transaction information to the designated banking server 200 through the interface. The transaction information is transmitted and received securely according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

According to the first transaction interworking method of the present invention, the banking server 200 transmits the authentication code corresponding to the security card random number or the OTP among the N (N &gt; = 2) transaction information for the non- S (1? S <N) pieces of transaction information input (or selected) through the user terminal 100 to the designated authentication server 600 until the transaction information for the face-to-face financial transaction is inputted. According to an embodiment of the present invention, the banking server 200 may provide the designated authentication server 600 with identification information for identifying that S transaction information has been received from the user terminal 100. Alternatively, the transaction information transmitting unit 320 may transmit the S transaction information to the authentication server 600 in order to receive the code information.

According to the second transaction interworking method of the present invention, the banking server 200 determines whether the authentication code corresponding to the secure card random number or OTP among the N (N &gt; = 2) transaction information for the non- (1? S <S) pieces of transaction information among S (1? S <N) pieces of transaction information input (or selected) through the user terminal 100 until the transaction information for the face- Can be provided to the specified authentication server 600. According to an embodiment of the present invention, the banking server 200 may provide the designated authentication server 600 with the identification information for identifying that s transaction information has been received from the user terminal 100. Alternatively, the transaction information transmitting unit 320 may transmit the s transaction information to the authentication server 600 in order to receive the code information.

According to the embodiment of the present invention, the transaction procedure control unit 325 confirms that the non-face financial transaction corresponding to the determined transaction type is a non-face financial transaction in which funds are transferred. If the non-face-to-face financial transaction is a financial transaction to which funds are transferred, the transaction procedure control unit 325 transmits at least one transaction information related to the depositing side of the money among the N transaction information, N) pieces of transaction information are first transmitted to the banking server 200 and then (Nn) pieces of transaction information are transferred later.

According to the second interface display method of the present invention, when the non-face financial transaction is a financial transaction in which funds are transferred, the interface display unit 310 displays N (N &gt; = 2) An interface for inputting (or selecting) n (1 &lt; n &lt; N) pieces of transaction information preliminarily specified including at least one transaction information related to the depositing side of the money among transaction information.

Here, the n pieces of transaction information include at least one or more pieces of transaction information including at least one transaction information related to a depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are moved . Preferably, the n pieces of transaction information include n (1? N? <N) pieces of transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred, &Lt; = n < = n ").

According to an embodiment of the present invention, the n pieces of transaction information include transaction information corresponding to a required input item among transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred . For example, in the case of a money transfer transaction, transaction information related to the depositing side of the money among the N pieces of transaction information may include a depositing bank, a deposit account number, a transfer amount, a received bank note, and the like. At this time, it is preferable that the n pieces of transaction information include at least one or two or more combinations of deposit bank information, deposit account number information, and money amount information corresponding to a transfer amount corresponding to a required input item related to a deposit side of money.

According to an embodiment of the present invention, the n pieces of transaction information further include transaction information corresponding to an optional input item among transaction information related to the depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred can do. For example, the n pieces of transaction information include at least one or two or more combinations of depositing bank information, deposit account number information, and money amount information corresponding to a transfer amount corresponding to a required input item related to the depositing side of the money, And may further include a received passbook memo corresponding to the optional entry.

Meanwhile, according to another embodiment of the present invention, the n pieces of transaction information include at least one piece of transaction information related to a depositing side of the money among N pieces of transaction information for non-face financial transactions in which funds are transferred, And may further include one or more pieces of transaction information designated by the financial institution processing the financial transaction. For example, the n pieces of transaction information include at least one or two or more combinations of deposit bank information, deposit account number information, money amount information corresponding to a transfer amount, and received account memo associated with a deposit side of funds, But may further include transaction information of at least one of a withdrawal account number, an account password, an internal passbook memo, and a CMS code which is not directly related to the deposit side but is designated by a financial institution. That is, the transaction information is determined according to which transaction information is transmitted first in correspondence with each transaction type and is kept on the banking server 200 in order to prevent an illegal transaction due to memory hacking, The present invention is not limited to only the transaction information related to the depositing side of the money of the financial transaction. However, in the non-face-to-face financial transaction in which the funds are transferred, the transaction information related to the deposit side of the money is one of the main targets of the memory hacking. For example, in a non-face-to-face financial transaction in which funds are transferred, if the user has two withdrawal accounts, it is possible to select one withdrawal account number first and include it in n transaction information. Or if the withdrawal account is included in n pieces of transaction information, it is also possible that the account password is included in n pieces of transaction information and transmitted first.

When the interface for inputting the n pieces of transaction information is displayed through the interface display unit 310, the transaction information confirmation unit 315 checks whether n pieces of transaction information specified through the interface are input. Preferably, the transaction information confirmation unit 315 checks whether the n pieces of transaction information are input by clicking a button (or an icon) on the interface while displaying the interface for inputting the n pieces of transaction information, If at least one of the pieces of transaction information is not inputted, it is possible to induce the user to click the button (or icon) after inputting all n pieces of transaction information.

The transaction procedure control unit 325 controls the n transaction information to be transmitted first and the transaction information transmission unit 320 transmits n transaction information to the designated banking server 200 ).

When n pieces of transaction information are inputted through the interface, the transaction information transmission unit 320 transmits the n pieces of transaction information inputted to the designated banking server 200 first. The n pieces of transaction information are transmitted and received securely according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

According to the first transaction information exchange method of the present invention, it is possible to identify the other party between the program 300 of the user terminal 100 and the banking server 200 at a specified time point before, The banking server 200 receives the n pieces of transaction information and stores the n pieces of transaction information and the identification tokens in a designated storage medium.

According to the second transaction information exchange method of the present invention, when a communication channel is formed between the program 300 and the banking server 200, the banking server 200 transmits the program 300 of the user terminal 100, (Or confirms) a session for managing a formed communication channel, and confirms session information for identifying the session. The banking server 200 receives the n pieces of transaction information, May be mapped and stored in a designated storage medium.

According to the third transaction information exchange method of the present invention, the transaction information transmission unit 320 may allow the banking server 200 to identify the user terminal 100 and / or the program 300 together with n pieces of transaction information The banking server 200 may receive the n pieces of transaction information, map the n pieces of transaction information to the identification information, and transmit the n pieces of transaction information to a designated storage medium Can be stored.

According to an embodiment of the present invention, n pieces of transaction information stored in the storage medium are preferably stored until at least (Nn) pieces of transaction information are received.

According to the third transaction interworking method of the present invention, the banking server 200 transmits the transaction information from the user terminal 100 to the banking server 200 among the N (N &gt; = 2) transaction information for the non- (1 &lt; n &lt; N) transaction information related to the transferred money depositing side to the designated authentication server 600. According to an embodiment of the present invention, the banking server 200 may provide the designated authentication server 600 with the identification information for identifying that n pieces of transaction information have been received from the user terminal 100. Alternatively, the transaction information transmission unit 320 may transmit the n pieces of transaction information to the authentication server 600 in order to receive the code information.

Referring to FIG. 3, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 325 as a non-face financial transaction in which the non- The program 300 of the user terminal 100 includes an acknowledgment determining unit 330 for receiving acknowledgment information on n transactions transmitted first from the banking server 200, And an acknowledgment output unit 335 for outputting all or part of the information in a specified manner.

According to an embodiment of the present invention, the banking server 200 can perform a procedure of verifying and authenticating the received n pieces of transaction information. For example, if the n transaction information includes a deposit bank and a deposit account number, the banking server 200 inquires of the deposit bank for a valid account number or payee who actually opened the account corresponding to the deposit account number Authentication procedures can be performed. On the other hand, if the depositing bank does not provide a payee line inquiry for the transfer transaction from the other bank or does not accept it on the financial joint network supporting the bank-to-bank transaction, The recipient inquiry procedure for validity of the n pieces of transaction information may be omitted.

If the validity of the n pieces of transaction information is not verified (for example, when the account information corresponding to the deposit account number is opened to the depositor inquiry result depositing bank using the deposit bank and the deposit account number The banking server 200 generates receipt confirmation information including the validity authentication failure information for the n pieces of transaction information, And may transmit the acknowledgment information to the program 300 of the user terminal 100. If the validity authentication of the n pieces of transaction information has failed, the transaction continuity for the n pieces of transaction information may not be maintained, and the n pieces of transaction information may not be stored in the storage medium.

If the validity authentication for the n pieces of transaction information has failed, the program 300 performs the procedure for the non-face financial transaction again from the beginning (for example, authentication of the authorized certificate) . For this, the acknowledgment information includes all or a part of n transaction information received and confirmed by the banking server 200, and the program 300 initializes a non-face-to-face financial transaction currently being performed, The authorized certificate authentication procedure, or the n-deal information input procedure), the flag or indicator corresponding to the validity authentication failure information. The transaction procedure control unit 325 can initialize the non-face financial transaction currently performed and control to perform the transaction again from a specified procedure (for example, an authorized certificate authentication procedure or n transaction information input procedures) . According to the control of the transaction procedure control unit 325, the interface display unit 310 displays an interface to be performed again from the designated shake-up procedure. Preferably, the interface display unit 310 may again perform the process of displaying the interface for re-inputting the n pieces of transaction information.

If validity authentication for the n pieces of transaction information is successful (for example, a valid account corresponding to the deposit account number is opened in the depository inquiry result depositing bank using the deposit bank and the deposit account number, or valid depository information as the payee inquiry result Or if the validity check of the n pieces of transaction information is omitted (although it is omitted at the time when n pieces of transaction information is first received, it is performed in the course of performing the transaction procedure using N pieces of transaction information) The banking server 200 stores the received n pieces of transaction information in a designated storage medium, generates mathematical identification information for the n pieces of transaction information, and transmits the generated acknowledgment information to the user terminal 100 To the program 300 of FIG. Preferably, the acknowledgment information includes n transaction information received and confirmed by the banking server 200. When the n pieces of transaction information included in the acknowledgment information are output through the program 300, the user can confirm that the n pieces of transaction information confirmed by the banking server 200 are not manipulated by the memory hacking, It is possible to judge whether the information is one.

According to an embodiment of the present invention, the acknowledgment information may include stored information stored in the banking server 200. For example, the acknowledgment information may include unique information or contents (e.g., image, character string, etc.) registered by the user in the banking server 200. For example, if a user registers an image or character string on the banking server 200, the user can only know the image or the character string. Therefore, it is possible to determine whether the code information is manipulated or transmitted from the banking server 200 do.

According to an embodiment of the present invention, the acknowledgment information may further include acquisition information acquired by the transaction information confirmation unit 315. [ For example, the acknowledgment information may further include a payee inquiry result using the n pieces of transaction information (for example, account holder information of a deposit account).

According to the embodiment of the present invention, when code information that uniquely identifies the n pieces of transaction information is generated or extracted before transferring the acknowledgment information to the user terminal 100, the acknowledgment transmitter transmits the acknowledgment information And transmits the code information to the user terminal 100.

According to an embodiment of the present invention, the code information may include generation information generated using the n pieces of transaction information, generation information generated using at least one piece of the n pieces of transaction information, at least one of the n pieces of transaction information, The generation information generated using one piece of information, the generation information generated using at least one piece of the n pieces of transaction information and at least one piece of information, and the generation information generated by the banking server 200 (or the authentication server 600) The generated information may include at least one or more than two pieces of generation information.

For example, the code information may include generation information generated using the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information, etc.). For example, the code information may include: a value generated by hashing n transaction information through a specified hash algorithm; a value generated by substituting the n transaction information into a specified code generation algorithm; And generation information including at least one of the values generated by transforming according to the rule.

Alternatively, the code information may include generation information generated using at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and deposit account number information in the money information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information through a hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying information according to a specified rule.

Alternatively, the code information may include generation information generated using at least one piece of the at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and 8-digit number after the deposit account number in the money information) . For example, the code information may include a value generated by hashing at least one piece of information of at least one of n pieces of transaction information through a specified hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying one piece of information according to a specified rule.

Alternatively, the code information may include at least one of the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information in money information) and at least one piece of information (e.g., deposit bank information, , And the 8-digit number after the deposit account number in the amount information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information and at least one piece of information through a specified hash algorithm, assigning the at least one piece of information and some pieces of information to a designated code generation algorithm And a value generated by modifying the at least one piece of information and some pieces of information according to a specified rule.

Alternatively, the code information may include generation information (e.g., a random number value) dynamically generated through the designated random number algorithm.

According to the embodiment of the present invention, the code information may include index information given by the banking server 200 (or the authentication server 600) to identify the transaction information. The index information may be uniquely extracted uniquely from the designated DB, or may be determined sequentially (or dynamically) so as not to be duplicated.

According to an embodiment of the present invention, the code information may include session information for identifying a session assigned to the terminal by the banking server 200 (or the authentication server 600). For example, the code information may include session information identifying a session allocated (or confirmed) at the time when the user terminal 100 accesses the banking server 200 (or the authentication server 600) have.

According to an embodiment of the present invention, the acknowledgment information may include image information processed in the form of an image. For example, when the acknowledgment information includes code information, the code information may include a code image (e.g., a two-dimensional bar code or the like) according to at least one of a QR code, a data matrix, a maxi code, As shown in FIG. The code image may be generated in the banking server 200 or may be generated and provided from the authentication server 600. Meanwhile, the URL may be encoded in the code image, the code information may be stored in a medium corresponding to the URL, and then the code image may be provided to the terminal 500 that has captured and interpreted the code image.

According to an embodiment of the present invention, the acknowledgment information can be processed in whole or at least partly in the form of an image. For example, the acknowledgment information may be processed in the form of an image in which the n pieces of transaction information and code information are displayed in a font specified on the basis of the gradation-processed color and / or wavy pattern. In this case, even if some area of the image is manipulated or copied through memory hacking, the user can immediately recognize that the image has been manipulated.

The acknowledgment determining unit 330 receives the acknowledgment information for the n pieces of transaction information transmitted first by the transaction information transmitting unit 320 from the banking server 200. [ The acknowledgment information is securely transmitted and received according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

According to the embodiment of the present invention, the acknowledgment determining unit 330 authenticates the validity of the received acknowledgment information. For example, when the acknowledgment information is digitally signed through the certificate of the banking server 200, the acknowledgment determining unit 330 may authenticate the validity of the acknowledgment information through a designated digital signature verification procedure . Alternatively, the acknowledgment determining unit 330 may compare the n pieces of transaction information included in the received acknowledgment information with the n pieces of transaction information transmitted to the banking server 200 by the transaction information transmitting unit 320, .

The acknowledgment output unit 335 outputs all or part of the received acknowledgment information through the screen of the user terminal 100. [ The output of the acknowledgment information may be omitted according to the method of operation. Meanwhile, when the acknowledgment information is output, the output acknowledgment information preferably includes the n transaction information.

According to the embodiment of the present invention, the acknowledgment output unit 335 authenticates the validity of the received acknowledgment information. That is, the received acknowledgment information and the outputted acknowledgment information can be manipulated by memory hacking. The acknowledgment output unit 335 authenticates the validity of the received acknowledgment information. For example, when the acknowledgment information is processed in the form of an image, the acknowledgment output unit 335 outputs a signal indicating that the level change of the image is different from the surrounding level, the part where the wavy pattern is broken Etc.), thereby validating the validity of the output confirmation information. Alternatively, the acknowledgment output unit 335 may compare the n pieces of transaction information included in the output acknowledgment information with the n pieces of transaction information transmitted to the banking server 200 by the transaction information transmission unit 320, .

The transaction procedure control unit 325 checks whether the acknowledgment information is received and / or output. When the n transaction information is transmitted to the banking server 200 by the transaction information transmission unit 320, Order 'of the user terminal 100 is not transferred to another process in the process of receiving and / or outputting the' z-order '. If the 'z-order' is forcibly transferred to another process, the transaction procedure control unit 325 may issue a warning message suspicely that a memory hack is being attempted.

Referring to FIG. 3, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 325 as a non-face financial transaction in which the non- , The program 300 of the user terminal 100 transmits R (1) pieces of transaction information excluding transaction information used as an authentication code such as a security card random number or OTP among (Nn) pieces of transaction information corresponding to the acknowledgment information An interface display unit 310 for displaying at least one interface for inputting (or selecting) transaction information of? R <(Nn)), a transaction for confirming R pieces of transaction information input (or selected) An information confirming unit 315 and a transaction information transmitting unit 320 for transmitting the confirmed R transaction information to the banking server 200. [

The transaction procedure control unit 325 checks whether the receipt confirmation information is received and / or output from the banking server 200 after n pieces of transaction information is transmitted to the banking server 200, The transaction procedure control unit 325 controls to display an interface for inputting R transaction information excluding transaction information used as an authentication code such as a security card random number or OTP among (Nn) pieces of transaction information, can do. The interface display unit 310 displays an interface for inputting R pieces of transaction information under the control of the transaction procedure control unit 325. [ According to an embodiment of the present invention, the transaction procedure control unit 325 may control the display unit 310 to display the interface for inputting the R pieces of transaction information and the acknowledgment information in one screen area, Lt; RTI ID = 0.0 &gt; 325 &lt; / RTI &gt;

In response to receipt and / or output of the receipt confirmation information, the transaction information confirmation unit 315 checks whether the R transaction information is inputted through the interface displayed through the interface display unit 310 and / And confirms the R pieces of transaction information inputted through the R.

The R pieces of transaction information are collectively referred to as transaction information other than the transaction information used as an authentication code among the transaction information other than the n pieces of transaction information transmitted first among the N pieces of transaction information.

According to an embodiment of the present invention, the R pieces of transaction information include transaction information that is not specified as the n pieces of transaction information among N pieces of transaction information related to the depositing side of the money among N pieces of transaction information for non- As shown in FIG.

According to an embodiment of the present invention, the R pieces of transaction information may include at least one or more pieces of information among password information (for example, an account password and / or a transfer password) used as an authentication means of a non-face financial transaction.

According to the method of the present invention, some of the R pieces of transaction information may include a NULL value. In this case, the null value transaction information may be replaced with the information previously designated by the banking server 200, or the null value may be maintained when the null value transaction information is not used in the non-face financial transaction. For example, among the R transaction information, the &quot; my bankbook memo &quot; may include a null value. In this case, the &quot; my bankbook memo &quot; may include information previously specified by the banking server 200 Account holder information of the deposit account, etc.). Or &quot; CMS code &quot; out of the R pieces of transaction information can hold a null value as long as it is not a CMS transaction.

The transaction procedure control unit 325 controls the R transaction information to be transmitted after the n pieces of transaction information is first transmitted and received acknowledgment information is received and / Transmits R pieces of transaction information to the banking server 200 under the control of the transaction procedure control unit 325. [ The R transaction information is securely transmitted / received according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200. [

According to the first transaction information exchange method of the present invention, it is possible to identify the other party between the program 300 of the user terminal 100 and the banking server 200 at a specified time point before, And the banking server 200 receives the R transaction information and confirms n pieces of transaction information previously received through the identification token.

According to the second transaction information exchange method of the present invention, when a communication channel is formed between the program 300 and the banking server 200, the banking server 200 transmits the program 300 of the user terminal 100, (Or confirms) a session for managing a formed communication channel, and confirms session information for identifying the session. The banking server 200 receives the R transaction information, Check n transactions information.

According to the third transaction information exchange method of the present invention, the transaction information transmission unit 320 may identify the user terminal 100 and / or the program 300 together with R transaction information to the banking server 200 Alternatively, the banking server 200 may include identification information for identifying the user on the communication protocol, and the banking server 200 receives the R transaction information and confirms n pieces of transaction information previously received through the identification information .

According to the fourth transaction interworking method of the present invention, the banking server 200 transmits R (1 < R &lt; 2 &gt; (Nn)) pieces of transaction information to the designated authentication server 600. According to an embodiment of the present invention, the banking server 200 may provide the designated authentication server 600 with the identification information for identifying that the R transaction information has been received from the user terminal 100. Alternatively, the transaction information transmission unit 320 may transmit the R transaction information to the authentication server 600 in order to receive the code information.

According to the fifth transaction interworking method of the present invention, the banking server 200 transmits R (1 < R &lt; 2 &gt;) exclusive of transaction information used as an authentication code among N (N & (N + R) pieces of transaction information including the transaction information of the user terminal 100 and the transaction information previously received from the user terminal 100 to the banking server 200 from the specified authentication server 600 ). According to an embodiment of the present invention, the banking server 200 may provide the designated authentication server 600 with the identification information for identifying that (n + R) transaction information has been received from the user terminal 100. Alternatively, the transaction information transmitting unit 320 may transmit the (n + R) pieces of transaction information to the authentication server 600 in order to receive the code information.

According to the embodiment of the present invention, an item specified to the authentication server 600 specified by at least one transaction interlock among the first through fifth transaction interlocking methods or a specified number of transaction information is provided, or the user terminal 100 When the authentication server 600 is provided with the identification information for identifying that the item specified to the banking server 200 or the specified number of pieces of transaction information has been received from the banking server 200, Generates or extracts code information that uniquely identifies transaction information, transfers the generated or extracted code information to the banking server 200, or transmits the generated or extracted code information to the user terminal 100 .

Referring to FIG. 3, the banking server 200 includes a code information receiver 340 for receiving code information generated or extracted by the authentication server 600, a code information output unit 340 for outputting the code information, 345). If n pieces of transaction information among the N pieces of transaction information are transmitted first under the control of the transaction procedure control unit 325 as a non-face financial transaction in which the non-face financial transaction is transferred, The code information receiver 340 and the code information output unit 345 may be omitted if they are provided to the user terminal 100. [

The code information receiving unit 340 receives the code information determined through the authentication server 600 as a procedure after receiving (or selecting) a specified item or a specified number of pieces of transaction information from the N pieces of transaction information.

According to the first code information receiving method of the present invention, the code information receiving unit 340 can receive the code information from the banking server 200. [

According to the second code information receiving method of the present invention, the code information receiving unit 340 can communicate with the authentication server 600 and receive the code information from the authentication server 600.

The code information output unit 345 outputs the code information received through the code information receiving unit 340 through a screen.

According to the first code information outputting method of the present invention, the code information includes a key inputting code system, and the code information outputting unit 345 outputs a code system capable of key entry through the screen of the user terminal Code information can be output.

According to the second code information output method of the present invention, the code information is captured and encoded into an interpretable code image through a camera, and the code information output unit 345 outputs, You can output a code image.

The code information is key input to the designated terminal 500 or transmitted to the designated terminal 500 through camera photographing and is transmitted to the terminal 500 (or the chip 400 of the card 400 interfaced with the terminal 500) (405) uses the code information as one of the seed values to dynamically generate a disposable authentication code. In this case, the terminal 500 (or the chip 405 of the card 400, which is interfaced with the terminal 500) may transmit the code to the terminal 500 via the designated communication network, Information can be used as one of the seed values to dynamically generate a disposable authentication code.

The disposable authentication code that is dynamically generated using the code information as one of the seed values is displayed on the terminal 500 and is input as one of the N pieces of transaction information input through the user terminal 100.

According to the first transaction transaction method or the second transaction transaction method of the present invention, the authentication code may be input as an authentication code included in (NS) transaction information out of N (N? 2) transaction information for the non-face financial transaction have.

Referring to FIG. 3, n pieces of transaction information among the N pieces of transaction information are transferred to the banking server 200 in accordance with the control of the transaction procedure control unit 325 as a non-face financial transaction in which the non- The program 300 of the user terminal 100 may include at least one program code for receiving (NnR) pieces of transaction information including the authentication code in response to the authentication code being displayed in the designated terminal 500 A transaction information confirmation unit 315 for confirming (NnR) pieces of transaction information input through the interface, and a controller 310 for displaying the confirmed (NnR) transaction information to the banking server 200 And a transaction information transmitting unit 320 for transmitting the transaction information.

The transaction procedure control unit 325 induces a procedure for generating an authentication code to be performed through the designated terminal 500. The interface display unit 310 controls the operation of the designated terminal 500 under the control of the transaction procedure control unit 325, (NnR) pieces of transaction information including the authentication code displayed on the terminal 500, while inducing the terminal 500 to generate an authentication code through the Internet.

The transaction information confirmation unit 315 verifies whether (NnR) pieces of transaction information are input through the displayed interface through the interface display unit 310 and / or confirms (NnR) pieces of transaction information input through the interface do.

According to an embodiment of the present invention, the (NnR) pieces of transaction information may include password information (for example, an account password and / or a transfer password) used as an authentication means of a non-face financial transaction. A random number of the secure card may be included in place of the authentication code displayed on the terminal 500 according to an embodiment of the present invention.

The transaction procedure control unit 325 controls the (NnR) pieces of transaction information to be transferred to the banking server 200. The transaction information transfer unit 320 transmits (NnR) transaction information to the banking server 200 under the control of the transaction procedure control unit 325, Transaction information to the banking server 200. The (NnR) pieces of transaction information are securely transmitted / received according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

Referring to FIG. 3, the program 300 of the user terminal 100 receives success confirmation information for an authentication or transaction using the n transmitted transaction information and the transmitted (Nn) transaction information, Or a transaction success / failure determination unit 350 that receives failure confirmation information for an authentication or transaction, and a transaction success / failure output unit 355 that outputs all or a part of the success / failure information or the failure / And a transaction procedure control unit 325 for controlling the (Nn) pieces of transaction information to be transmitted after the n pieces of transaction information are transmitted first.

According to the first transaction authentication method of the present invention, the transaction information (for example, the account password, the transfer password, the security card random number, the authentication of the OTP, etc.) used as the authentication means of the non- (For example, one or more transaction information designated by the banking server 200), the banking server 200 transmits one or more pieces of transaction information (for example, an account password, an account password, etc.) designated to be used as an authentication means of the non- The one or more pieces of transaction information designated as the authenticating means among the OTPs), and then perform the validity authentication procedure for the derived information.

According to the second transaction authentication method of the present invention, transaction information (for example, an account password) used as an authentication means of the non-face financial transaction is included in the n pieces of transaction information received first, (For example, a transfer password, a random number of a security card, and at least one transaction information specified as an authentication means among OTPs) used as an authentication means of the non-face financial transaction, the banking server 200 first receives One or more pieces of transaction information (for example, an account password, a transfer password, a random number of a secure card, an OTP, etc.) designated to be used as the authentication means of the non-face financial transaction among the n transactions information and the (Nn) The specified one or more pieces of transaction information), and then perform the validity authentication procedure for the derived information.

If the authentication procedure is successful, the banking server 200 obtains T (1 < = N) pieces of transaction information excluding one or more pieces of transaction information used as an authentication unit among the N pieces of transaction information, T <N) transaction information to perform the transaction procedure of the non-face financial transaction.

If the authentication success and the transaction success occur during the execution of the designated procedure using the N transaction information, the banking server 200 generates success confirmation information for the successful authentication and / or transaction, 100 to the program 300 of FIG. Preferably, the success confirmation information may include t (1? T? T) transaction information used in the transaction procedure of the successful non-face financial transaction. Here, the t transaction information includes T transaction information used in the non-face financial transaction, or includes information excluding some information (for example, received bank note, CMS code, etc.) from the T transaction information .

According to an embodiment of the present invention, the success confirmation information may include s (1? S) acquisition information in the t transaction information. The s acquisition information is a generic name of information obtained from the ledger in which the withdrawal account of the user is opened during the transaction procedure or information received from other financial companies participating in the non-face-to-face financial transaction. Preferably, the s acquiring information may include depositor information of the deposit account, information on the transaction date, and the like.

The transaction success / failure determination unit 350 receives success confirmation information for a procedure performed using the N pieces of transaction information from the banking server 200. [ The success confirmation information is securely transmitted / received according to the encryption / decryption procedure of the secure communication channel formed between the program 300 and the banking server 200.

According to the embodiment of the present invention, the transaction success / failure determination unit 350 authenticates the validity of the received success confirmation information. For example, when the success confirmation information is digitally signed through the certificate of the banking server 200, the transaction success / failure determination unit 350 may authenticate the validity of the success confirmation information through a designated digital signature verification procedure . Alternatively, if the transaction success / failure determination unit 350 includes t transaction information in the received success confirmation information, the transaction success / failure determination unit 350 determines t transactions included in the N transaction information transmitted to the banking server 200, It is possible to compare t transactions information included in the information and verify that they match.

The transaction success / failure output unit 355 outputs all or a part of the received success confirmation information through the screen of the user terminal 100. [ The output of the success confirmation information may be omitted according to the method. Meanwhile, when the success confirmation information is output, the output success confirmation information may include the t transaction information. Preferably, the output success confirmation information may further include s acquisition information together with the t transaction information.

According to the embodiment of the present invention, the transaction success / failure output unit 355 can authenticate the validity of the output success confirmation information. That is, the received success confirmation information and the output success confirmation information can be manipulated by memory hacking. In order to discriminate this, the transaction success / failure output unit 355 authenticates the validity of the output success confirmation information. For example, when the success confirmation information is processed in the form of an image, the transaction success / failure output unit 355 outputs the outlier of the image (for example, a portion where the level change of the gradation is different from the surrounding level, Etc.), thereby validating the validity of the output success confirmation information. Alternatively, the transaction success / failure output unit 355 compares the t transaction information included in the output success information and the t transaction information included in the N transaction information transmitted to the banking server 200, can do.

The transaction procedure control unit 325 checks whether the success confirmation information is received by the transaction success / failure determination unit 350 or the success confirmation information is output by the transaction success / failure output unit 355, When the confirmation information is received and / or output, a procedure for creating and attaching a digital signature of a user using a public certificate to a transaction history including t transaction information and s acquisition information included in the success confirmation information is performed do. The non-face-to-face financial transaction may be completed by an electronic signature procedure on the transaction details.

4 is a diagram showing a configuration of a card 400 according to an embodiment of the present invention.

4 illustrates a functional configuration of a card 400 having a proximity wireless communication function and an authentication code generation function. As a person skilled in the art to which the present invention pertains, Reference and / or variations may be envisaged to encompass various implementations of the configuration of the card 400 (e.g., some configuration portions may be omitted, or subdivided, or combined) And the technical features thereof are not limited only by the method shown in FIG.

The card 400 of the present invention is a general term of a card having a proximity wireless communication function and an authentication code generation function, and is preferably formed in the form of a card equipped with a chip 405 and an antenna 450 for the proximity wireless communication. For example, the card 400 of the present invention may include a financial IC card 400, an NFC card 400, and an RF card 400 having a proximity wireless communication function and an authentication code generation function.

Referring to FIG. 4, the card 400 includes a wireless communication unit 435 for providing a proximity wireless communication function, a wireless communication unit 435 for receiving code information from the terminal 500 through the wireless communication, A control unit 410 for controlling a process of dynamically generating a disposable authentication code by using the authentication code as one of the authentication codes and outputting the disposable authentication code through the terminal 500 and a control unit 410 for controlling at least one program code or data set A chip 405 in which a configuration corresponding to the memory unit 440 for storing the chip 405 is mounted. When the card 400 is a combination financial IC card 400, the chip 405 further includes an interface unit 445 forming a contact interface with the terminal 500, A contact point 455 (for example, a COB (Chip On Board)) electrically connected to the interface unit 445 is provided at a designated position on the surface.

The wireless communication unit 435 collectively refers to a component that performs wireless communication with a terminal 500 of a proximity distance (e.g., about 10 cm) using a radio frequency signal of a designated frequency band (e.g., 13.56 MHz) To provide proximity wireless communication capability according to the NFC standard.

The memory unit 440 is a collective term of a nonvolatile memory corresponding to a storage resource of the chip 405. The memory unit 440 preferably includes a ROM (Read Only Memory), an EEPROM (Electrically Erasable and Programmable Read Only Memory) And the like. Preferably, the memory unit 440 includes both a NAND-type memory and a NOR-type memory. And may be included in the category of the memory unit 440 as a RAM (Random Access Memory) provided in the chip 405 according to an implementation method. According to the embodiment of the present invention, the memory unit 440 stores program codes corresponding to COS (Chip Operating System), and program codes corresponding to the applets corresponding to the services to be provided through the card 400 .

The controller 410 is a collective term for controlling the operation of the chip 405. The controller 410 preferably controls the operation of one or more of a central processing unit (CPU), a micro processing unit (MPU), and a coprocessor Lt; / RTI &gt; According to the embodiment of the present invention, the control unit 410 may define a state in which the program code corresponding to the COS recorded in the memory unit 440 is loaded into the execution memory and operated by the processor, A program code corresponding to an applet operating on an application program according to an embodiment of the present invention will be described with reference to FIG.

4, the chip 405 of the card 400 includes an information receiving unit 415 that receives a designated input value from the terminal 500 interfaced via the near field wireless communication, And a code providing unit (425) for providing the generated authentication code to the terminal (500) interfaced through the proximity wireless communication, wherein the authentication code And an authentication processing unit 430 for processing the designated authentication to generate the authentication information.

When the card 400 is interfaced with the nearby terminal 500 through the wireless communication unit 435, the information receiving unit 415 receives the designated input value from the interfaced terminal 500 . The input value collectively includes a value designated to be inputted from the terminal 500 to dynamically generate an authentication code, and preferably includes code information transmitted to the terminal 500. [ According to an embodiment of the present invention, the input value may further include a time value matching the International Standard Time obtained through the timer of the terminal 500, and a unique ID of the terminal 500. Meanwhile, the input value is not limited to the code information, the time value, and the unique ID, and may include any value as long as it is a value input from the terminal 500 to generate a disposable authentication code.

The code generation unit 420 includes the code generation algorithm and dynamically generates an authentication code of a designated code system by including the input value received through the information receiving unit 415 in the seed value of the code generation algorithm. Preferably, the code generator 420 dynamically generates an authentication code using the code information included in the input value as one of the seed values. If the input value further includes a time value or a unique ID, the code generating unit 420 may dynamically generate the authentication code by further including the time value or the unique ID in the seed value.

According to an embodiment of the present invention, the seed for generating the authentication code may further include a storage value stored in the memory unit 440. In this case, the code generation unit 420 may store the stored value in the seed Value to dynamically generate the authentication code.

Meanwhile, the authentication processing unit 430 receives the input value from the terminal 500 from the time when the terminal 500 is interfaced with the terminal 500 through the proximity wireless communication, Lt; RTI ID = 0.0 &gt; dynamically &lt; / RTI &gt; Preferably, the designated authentication may include PIN (Personal Identification Number) authentication. The authentication processing unit 430 stores a PIN authentication value for PIN authentication, receives a PIN value from the interfaced terminal 500, and can authenticate the received PIN value using the PIN authentication value. For example, the PIN value may be received and authenticated before the time value is received, or received and authenticated with the time value. According to an embodiment of the present invention, the time when the authentication is processed may be performed before the authentication code is provided from the chip 405 of the card 400 to the terminal 500, and thus the present invention is not limited thereto. The authentication process may be omitted according to the intention of those skilled in the art.

The code providing unit 425 provides the generated authentication code to the terminal 500 interfaced with the wireless communication. The terminal 500 outputs the received authentication code to the user terminal 100 (e.g., the terminal 500 or a separate terminal used by the user for non-face financial transaction in addition to the terminal 500) And may be used as an authentication means of a transaction requested through the user terminal 100. [

5 is a functional block diagram of a terminal 500 that interfaces with a card 400 according to an embodiment of the present invention.

5 illustrates a configuration of a terminal 500 that interfaces with a chip 405 of the card 400 shown in FIG. 4 through a proximity wireless communication and a configuration of a program 515 operating in the terminal 500 Those skilled in the art will be able to refer to and / or modify the FIG. 5 to deduce various implementations of the functional configuration of the terminal 500 However, the present invention is not limited to the above-described embodiments, and the technical features of the present invention are not limited only by the method shown in FIG. The terminal 500 of the present invention is a collective term for all terminals that are interfaced with the card 400 through proximity wireless communication and will hereinafter be referred to as a terminal 500 that interfaces with the chip 405 of the card 400 through close- A functional configuration of the terminal 500 will be described with reference to an embodiment of a wireless terminal 500 such as a smart phone, a tablet PC, and a mobile phone.

5, the wireless terminal 500, which interfaces with the chip 405 of the card 400, includes a control unit 501, a memory unit 510, a screen output unit 502, a key input unit 503, A sound processing unit 504, a wireless network communication unit 508, a short range wireless communication unit 507, a proximity wireless communication unit 505, a USIM reader unit 509 and a USIM, and has a battery 506 for power supply .

The control unit 501 is a general term for controlling the operation of the wireless terminal 500. The control unit 501 includes at least one processor and an execution memory, BUS). According to the present invention, the control unit 501 loads at least one program code included in the wireless terminal 500 into the execution memory through the processor, and outputs the result through at least one configuration And controls the operation of the mobile terminal 500. [ Hereinafter, the configuration of the program 515 of the present invention, which is implemented in the form of program code for convenience, will be described in the control unit 501. FIG.

The memory unit 510 is a general term of a nonvolatile memory corresponding to a storage resource of the wireless terminal 500 and includes at least one program code executed through the control unit 501 and at least one Save and maintain the dataset. The memory unit 510 basically includes a system program code and a system data set corresponding to the operating system of the wireless terminal 500, a communication program code and a communication data set for processing a wireless communication connection of the wireless terminal 500, The program code and data set corresponding to the program 515 of the present invention are also stored in the memory unit 510. FIG.

The screen output unit 502 includes a screen output device (e.g., a liquid crystal display (LCD)) corresponding to the output resource of the wireless terminal 500 and a driving module for driving the screen output device. And outputs the calculation result corresponding to the screen output among the various calculation results of the controller 501 to the screen output device.

The key input unit 503 may include at least one user input device corresponding to the input resource of the wireless terminal 500 such as a button, a keypad, a touch pad, a touch screen linked to the screen output unit 502, And inputs a command for instructing various operations of the control unit 501 in cooperation with the control unit 501 or inputs data necessary for the operation of the control unit 501. [

The sound processing unit 504 includes a speaker corresponding to the output resource of the wireless terminal 500, a microphone corresponding to the input resource of the wireless terminal 500, and a drive module for driving the microphone, And outputs the operation result corresponding to the sound output from the various operation results of the controller 501 through the speaker or transmits the sound data input through the microphone to the controller 501. [ The driving module decodes sound data to be outputted through the speaker and converts the sound data into a sound signal or encodes the sound signal inputted through the microphone to encode the sound signal.

The proximity wireless communication unit 505 is a communication unit that processes at least one of proximity wireless communication, bidirectional proximity wireless communication, full-duplex proximity wireless communication, and half-duplex proximity wireless communication using a radio frequency signal as a communication medium at a close distance (e.g., As a collective term of resources, it is possible to process the proximity wireless communication according to the NFC (Near Field Communication) standard of the 13.56 Mz frequency band. Alternatively, the proximity wireless communication unit 505 may process proximity wireless communication of the ISO 18000 series standard, in which case it may process proximity wireless communication for a frequency band other than the 13.56 Mz frequency band. For example, the proximity wireless communication unit 505 can operate in a reader mode, a tag mode, or a bidirectional communication mode. Meanwhile, the proximity wireless communication unit 505 may be included in a communication resource for connecting the wireless terminal 500 to a communication network according to an object to be communicated nearby.

The wireless network communication unit 508 and the short-range wireless communication unit 507 are collectively referred to as communication resources for connecting the wireless terminal 500 to a designated communication network. Preferably, the wireless terminal 500 may include a wireless network communication unit 508 as a basic communication resource, and may include one or more short-range wireless communication units 507.

The wireless network communication unit 508 collectively refers to a communication resource for connecting the wireless terminal 500 to a wireless communication network via a base station. The wireless communication unit 508 includes an antenna, an RF module, a baseband module, And at least one processing module. The control unit 501 is connected to the control unit 501 and transmits the calculation result corresponding to the wireless communication among the various calculation results of the control unit 501 through the wireless communication network or receives data through the wireless communication network To the control unit 501, and performs the connection, registration, communication, and handoff procedures of the wireless communication. According to the present invention, the wireless network communication unit 508 can connect the wireless terminal 500 to a telephone communication network including a communication channel and a data channel via the exchange, and in some cases, May be connected to a data network providing communication-based wireless network data communication (e.g., the Internet).

According to an embodiment of the present invention, the wireless network communication unit 508 is a mobile communication unit that performs at least one connection, a location registration, a call processing, a call connection, a data communication, and a handoff to a mobile communication network according to the CDMA / WCDMA / &Lt; / RTI &gt; Meanwhile, according to the intention of the person skilled in the art, the wireless network communication unit 508 may further include a portable internet communication configuration for performing at least one of connection to the portable Internet, location registration, data communication and handoff according to the IEEE 802.16 standard, It is evident that the present invention is not limited by the wireless communication configuration provided by the wireless network communication unit 508. [ That is, the wireless network communication unit 508 is a general term for a configuration unit that connects to a wireless communication network through a cell-based base station irrespective of a frequency band of a wireless section, a type of a communication network, or a protocol.

The short-range wireless communication unit 507 is a generic name of communication resources connecting a communication session using a radio frequency signal within a predetermined distance (for example, 10 m) as a communication medium and connecting the wireless terminal 500 to the communication network based on the communication session , The wireless terminal 500 may be connected to the communication network through at least one of Wi-Fi communication, Bluetooth communication, public wireless communication, and UWB. According to an embodiment of the present invention, the short-range wireless communication unit 507 may be integrated with or separated from the wireless network communication unit 508. According to the present invention, the short-range wireless communication unit 507 connects the wireless terminal 500 to a data network providing packet-based short-range wireless data communication through a wireless AP.

The USIM reader unit 509 is a generic term of a configuration for exchanging at least one data set with a universal subscriber identity module that is mounted or detached from the mobile station 500 based on the ISO / IEC 7816 standard , And the data set is exchanged in a half duplex communication manner through an APDU (Application Protocol Data Unit).

The USIM is an SIM type card having an IC chip conforming to the ISO / IEC 7816 standard, and includes an input / output interface including at least one contact connected to the USIM reader unit 509, a program code for at least one IC chip (Or processing) the program code for the IC chip in accordance with at least one command transmitted from the wireless terminal 500, or extracting (or processing) the data set in association with the input / output interface To the input / output interface.

The program 515 of the present invention is downloaded from a program providing server (for example, an Apple AppStore or the like) through a data network to which the communication resource can be connected, and is stored in the memory unit 510. The downloaded program 515 operates in conjunction with the designated authentication server 600, and can be manually driven by a user, or can be activated (or activated) automatically after user confirmation or automatically by receiving a message. In order to drive the program 515 after user confirmation or automatically, a separate program 515 may be running in advance, so that the present invention is not limited thereto.

5, the program 515 of the wireless terminal 500 accesses a specified authentication server 600 through a data network to which the communication resource is connectable, thereby joining the user as a member, An authentication procedure unit 525 for performing a procedure for authenticating the validity of the program 515 through at least one communication network connectable through the communication resource, And an identification value registration unit 530 that registers the terminal identification value provided or assigned to the terminal 500 in the specified authentication server 600. [ At least one component of the membership subscription / authentication unit 520, the authentication procedure unit 525, and the identification value registration unit 530 may be omitted according to the method.

The program 515 includes communication connection macro information for accessing a specified authentication server 600 through a data network to which the communication resource is connectable. The subscription / authentication unit 520 includes a screen output unit 502, (E.g., name, resident registration number, and the like) for joining the user as a member via the data network, and transmits the user information input through the interface to the authentication server 600 designated through the data network And transmits the member account to join the user as a member.

Meanwhile, the subscription of the user can be subscribed through a separate user terminal 100 in addition to the mobile terminal 500. Therefore, when the user is already a member or is registered as a member through the user terminal 100, the membership subscription / authentication unit 520 outputs an interface for inputting the user account of the user, And transmits the member account inputted through the interface to the authentication server 600 designated through the data network to authenticate the user as a member.

The authentication procedure unit 525 authenticates the validity of the program 515 by the authentication server 600 designated through at least one communication network among the data network and the telephone network to which the communication resource is connectable. According to the embodiment of the present invention, the process of authenticating the validity of the program 515 is performed by performing an encryption / decryption communication process previously agreed upon between the program 515 and the specified authentication server 600, A detailed description of the decoding process will be omitted.

According to the first program authentication method of the present invention, the program 515 can be downloaded through the program providing server in a state in which a unique value for identifying the program operated by the specified authentication server 600 is set. In this case, the authentication procedure unit 525 transmits the eigenvalue to the specified authentication server 600 or performs a key exchange procedure according to the designated authentication server 600 and the designated key exchange protocol based on the unique value , It is possible to authenticate that the program 515 is a program operated by the designated authentication server 600.

According to the second program authentication method of the present invention, the program 515 is downloaded via the program providing server, and is then downloaded to the computer via a token value (e.g., A device token assigned by the APNS, etc.) may be assigned. In this case, the authentication procedure unit 525 may transmit the token value to the designated authentication server 600 according to the designated path, thereby authenticating that the program 515 is a program operated by the designated authentication server 600 .

According to the third program authentication method of the present invention, the program 515 constructs hash information by hashing at least one file corresponding to the program 515 according to a specified hash algorithm, (600), the program (515) can be authenticated as a valid program operated by the specified authentication server (600). Meanwhile, the authentication procedure unit 525 may configure the hash information by using the key value internally determined or exchanged with the specified authentication server 600 in the process of configuring the hash information.

According to the fourth program authentication method of the present invention, the program 515 is downloaded through a program providing server in a state in which a certificate for performing a specified authentication procedure is loaded, or after being downloaded through a program providing server, Certificates can be loaded according to roaming procedures. In this case, the authentication procedure unit 525 may selectively use the key exchange protocol and the encryption / decryption rule, the at least one key value set in the certificate according to the authentication procedure defined in the certificate, It is possible to authenticate that the program is operated by the server 600. The certificate may include a certificate of the specified authentication server 600 or a certificate of the user using the program 515.

According to the fifth program authentication method of the present invention, when the authentication number transmitted from the authentication server 600 specified through the message exchange protocol of the telephone network is received, the wireless terminal 500 receives the received authentication number And transmits the program 515 to the designated authentication server 600 through the data network, thereby authenticating that the program 515 is a program operated by the specified authentication server 600.

According to the sixth program authentication method of the present invention, the authentication procedure unit 525 receives from the authentication server 600 designated through the authentication method that selectively combines at least one of the first through fifth program authentication methods, 515) can be authenticated, and thus the present invention is not limited thereto.

The authentication procedure unit 525 may control the memory unit 510 or the SE of the wireless terminal 500 at any time point before, during, or after the process of performing the first to sixth program authentication schemes, Unique information stored in a secure storage area of at least one of a Universal Subscriber Identify Module (USIM), an Integrated Circuit (IC) chip, and an embedded chip of an external memory (eg, SD memory) mounted on or detached from the terminal 500, Or transmits the unique information allocated by the communication terminal side resource to the specified authentication server 600 in the process of connecting or holding the wireless terminal 500 to the designated communication network through the wireless network communication unit 508, Is a program operated by the specified authentication server 600 and can simultaneously authenticate that the program 515 is being driven by the wireless terminal 500. [

The identification value registration unit 530 registers information stored in the reading area of the terminal 500, information stored in the unique storage area of the terminal 500, information recorded in the H / W configuration of the terminal 500, The terminal identification value including at least one of the information assigned / assigned by the network to which the terminal 500 is connected, and / or the program authentication process or authentication performed through the first through sixth program authentication methods, (515), information stored in the terminal (500) by the program (515), and transmits the confirmed terminal identification value to the specified authentication server (600 ).

5, the program 515 of the wireless terminal 500 includes a code information obtaining unit 535 for obtaining code information that uniquely identifies a specified item or a specified number of pieces of transaction information transmitted from the user terminal 100 .

According to the first code information acquisition method of the present invention, the code information acquisition unit 535 receives the code information outputted to the user terminal 100 through the key input unit 503.

According to the second code information obtaining method of the present invention, the code information obtaining unit 535 activates the photographing function of the camera unit and photographs and analyzes the code image outputted to the user terminal 100, And receives the encoded code information. If the URL on the network in which the code information is stored is encoded in the code image, the code information obtaining unit 535 analyzes the code image to extract a URL, accesses the medium corresponding to the URL, Lt; / RTI &gt;

According to the third code information acquisition method of the present invention, the code information acquisition unit 535 communicates with a server (e.g., the authentication server 600 or the banking server 200) that transmits the code information, And can receive the code information through the connected communication.

5, when the authentication code is dynamically generated through the chip 405 of the card 400 interfaced via the proximity wireless communication, the program 515 of the wireless terminal 500 performs the proximity wireless communication Code information providing unit 540 for providing the obtained code information to the chip 405 of the card 400 interfaced with the chip 400 via the chip 405 of the interfaced card 400; An authentication code receiving unit 545 for receiving the authentication code dynamically generated by using the received authentication code, and an authentication code output unit 550 for outputting the received authentication code.

When the authentication code is dynamically generated through the chip 405 of the card 400 interfaced via the proximity wireless communication, the code information providing unit 540 transmits the code to the chip 400 of the interfaced card 400 405 to provide the code information obtained in the first to third code information acquisition schemes. The code information providing unit 540 may transmit the time information of the wireless terminal 500 or the unique ID of the wireless terminal 500 to the chip 405 of the interface card 400 in addition to the code information .

The chip 405 of the card 400 dynamically generates a disposable authentication code using the code information as a seed value and transmits the generated authentication code to the wireless terminal 500 through the proximity wireless communication.

The authentication code receiving unit 545 receives the authentication code dynamically generated by using the code information as one of the seed values in the chip 405 of the card 400 interfaced with the authentication code, And outputs the authentication code received from the chip 405 of the card 400 through the screen output unit 502.

5, when the authentication code is dynamically generated in the wireless terminal 500, the program 515 of the wireless terminal 500 uses the obtained code information as one of the seed values to generate an authentication code A code generation unit 555 for dynamically generating an authentication code, and an authentication code output unit 550 for outputting the generated authentication code.

When the authentication code is dynamically generated in the wireless terminal 500, the code generator 555 uses the code information obtained in the first to third code information acquisition schemes as one of the seed values to generate a disposable authentication code &Lt; / RTI &gt; The code generation unit 555 may further use the time value of the wireless terminal 500 or the unique ID of the wireless terminal 500 as the seed value or use one of the values stored in the memory unit 510 You can further use the seed value to dynamically generate a disposable authorization code. The authentication code output unit 550 outputs the disposable authentication code dynamically generated through the code generation unit 555 through the screen output unit 502. [

6 is a diagram illustrating a configuration of an authentication server 600 according to an embodiment of the present invention.

6 is a flowchart illustrating an operation of inputting (or selecting) a specified item or a specified number of pieces of transaction information among N (N? 2) transaction information to be inputted (or selected) through the user terminal 100 And generates and extracts code information that uniquely identifies the transaction information and transmits the generated code information to the user terminal 100. The present invention is not limited to the configuration of the authentication server 600, Those skilled in the art will be able to refer and / or modify FIG. 6 to illustrate various implementations of the configuration of the authentication server 600 (e.g., some configuration portions may be omitted, or subdivided, However, it should be understood that the present invention includes all of the above-described methods of practicing the invention, and the technical characteristics thereof are limited only by the method shown in FIG. 6 It does.

The authentication server 600 of the present invention may be configured such that a designated item or a specified number of pieces of transaction information among N (N? 2) pieces of transaction information to be inputted (or selected) through the user terminal 100 is transmitted to the user terminal 100 Generates or extracts code information that uniquely identifies the transaction information, and transmits the generated or extracted code information to the terminal 500 shown in FIG. 5 through a designated path And a function of processing the data to be provided. The configuration of the authentication server 600 shown in FIG. 6 may be implemented through a physical server provided on a network, or in the form of a program module implemented in a server built on a network. That is, it is evident that the present invention is not limited by the manner in which the authentication server 600 of the present invention is implemented.

Referring to FIG. 6, the authentication server 600 includes a member management unit 605 for subscribing and authenticating a user who has been issued the card 400 of FIG. 4 as a member, A program authentication unit 610 for authenticating the validity of the program 515 and an information storage unit for registering and storing information for authenticating the terminal 500 (or the program 515 of the terminal 500) (615).

The member management unit 605 receives a user who has been issued the card 400 of FIG. 4 as a member. The subscription may be performed in cooperation with the subscription / authentication unit of the program 515 shown in FIG. 5, or may be performed through a separate user terminal 100 in addition to the terminal 500 shown in FIG. Or a management terminal provided in the card issuing organization or a management terminal managing the authentication server 600 at the time of issuing the card 400 of FIG. 4 to the user.

Meanwhile, the authentication code service according to the present invention may be provided only by program authentication or terminal authentication without joining a member, or by using membership information subscribed to a separate server (e.g., a banking server 200 or the like) The member operation unit 605 may be omitted.

The program authenticating unit 610 may authenticate the validity of the program 515 provided in the terminal 500 according to the first to sixth program authentication methods in cooperation with the authentication procedure unit of the program 515 shown in FIG. do.

The information storage unit 615 stores information allocated to the program 515 in the process of authenticating the validity of the program 515 included in the terminal 500 through the program authentication unit 610, The terminal identification value including at least one of the information stored in the terminal 500 and the identification value of the program 515 shown in FIG. Information stored in the unique storage area of the terminal 500, information recorded in the H / W configuration of the terminal 500, and information allocated / assigned in the network to which the terminal 500 accesses, , And stores the identified terminal identification value in a designated storage medium.

Referring to FIG. 6, the authentication server 600 determines whether a designated item or a specified number of pieces of transaction information to be input (or selected) through the user terminal 100 for a non-face financial transaction, (Or selected) through the input unit 100 and confirming that it has been transmitted.

The transaction information verifying unit 620 receives from the banking server 200 shown in FIG. 2 a predetermined item or a specified number of N pieces of transaction information to be inputted (or selected) through the user terminal 100 for non- It is possible to confirm that the designated item or the specified number of pieces of transaction information are inputted (or selected) through the user terminal 100 and transmitted.

Alternatively, the transaction information verifying unit 620 may identify a specified item or a specified number of pieces of transaction information among N pieces of transaction information to be input (or selected) through the user terminal 100 for a non-face-to-face financial transaction from the user terminal 100 It is possible to confirm that the designated item or the specified number of pieces of transaction information is inputted (or selected) through the user terminal 100 and transmitted.

According to the first transaction interlocking method of the present invention, the transaction information verifying unit 620 determines whether the authentication code corresponding to the secure card random number or the OTP among the N (N &gt; = 2) transaction information for the non- It is possible to receive S (1? S <N) pieces of transaction information input (or selected) through the user terminal 100 until the transaction information for the non-face financial transaction is inputted.

According to the second transaction interlocking method of the present invention, the transaction information verifying unit 620 determines whether the authentication code corresponding to the secure card random number or OTP among the N (N &gt; = 2) transaction information for the non- (1 < S &lt; S) transactions among the S (1 S &lt; N) transaction information input (or selected) through the user terminal 100 until the transaction information for the non- Information can be received.

According to the third transaction interworking method of the present invention, the transaction information verifying unit 620 may be configured to identify the transaction information from among the N (N &gt; = 2) transaction information for the non-face financial transaction, (1 &lt; n &lt; N) transaction information associated with the transaction information.

According to the fourth transaction interlocking method of the present invention, the transaction information verifying unit 620 determines R (1 &amp;ge; 1) other than transaction information used as an authentication code out of N (N & R &lt; (Nn)) pieces of transaction information.

According to the fifth transaction interlocking method of the present invention, the transaction information verifying unit 620 determines R (1 &amp;ge; 1) other than the transaction information used as the authentication code among N (N & (N + R) pieces of transaction information including R <(Nn) pieces of transaction information and n pieces of transaction information related to the money depositing party received from the user terminal 100 in advance.

Meanwhile, the transaction information verifying unit 620 identifies a designated item or a designated item among the N pieces of transaction information to be inputted (or selected) through the user terminal 100 for non-face financial transaction from the banking server 200 shown in FIG. It is possible to confirm that the specified item or the specified number of pieces of transaction information is inputted (or selected) through the user terminal 100 and transmitted by receiving the received identification information that identifies that the number of pieces of transaction information has been received by the banking server 200 .

According to the first transaction interlocking method of the present invention, the transaction information verifying unit 620 determines whether the authentication code corresponding to the secure card random number or the OTP among the N (N &gt; = 2) transaction information for the non- (1 &lt; S &lt; N) transaction information inputted (or selected) through the user terminal 100 until the transaction information for the non-face financial transaction is input to the banking server 200 Information can be received.

According to the second transaction interlocking method of the present invention, the transaction information verifying unit 620 determines whether the authentication code corresponding to the secure card random number or OTP among the N (N &gt; = 2) transaction information for the non- (1 < S &lt; S) transactions among the S (1 S &lt; N) transaction information input (or selected) through the user terminal 100 until the transaction information for the non- And may receive acknowledgment information identifying that the information has been received by the banking server 200. [

According to the third transaction interworking method of the present invention, the transaction information verifying unit 620 may be configured to identify the transaction information from among the N (N &gt; = 2) transaction information for the non-face financial transaction, (1 &amp;le; n &lt; N) transaction information related to the transaction information received by the banking server 200 is received by the banking server 200. [

According to the fourth transaction interlocking method of the present invention, the transaction information verifying unit 620 determines R (1 &amp;ge; 1) other than transaction information used as an authentication code out of N (N & Rn &lt; (Nn)) pieces of transaction information are received by the banking server 200.

According to the fifth transaction interlocking method of the present invention, the transaction information verifying unit 620 determines R (1 &amp;ge; 1) other than the transaction information used as the authentication code among N (N & (N + R) pieces of transaction information including R <(Nn) pieces of transaction information and n pieces of transaction information related to the money depositing side received from the user terminal 100 are received by the banking server 200 Receiving acknowledgment information.

6, the authentication server 600 includes a code information determination unit 625 that generates or extracts code information that uniquely identifies the transaction information, a code information management unit 630 that stores the code information, And a code information transmitter (635) for processing the code information to be transmitted to the user terminal (100).

When it is confirmed that the designated item or the specified number of transaction information is input (or selected) through the user terminal 100 through the transaction information confirmation unit 620, the code information determination unit 625 determines the transaction information And generates or extracts code information uniquely identifying it.

According to an embodiment of the present invention, the code information may include generation information generated using the n pieces of transaction information, generation information generated using at least one piece of the n pieces of transaction information, at least one of the n pieces of transaction information, Generation information generated using one piece of information, at least one piece of the n pieces of transaction information, and at least one piece of partial information, and at least one of generating information dynamically generated in the authentication server 600 And may include one or more generation information.

For example, the code information may include generation information generated using the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information, etc.). For example, the code information may include: a value generated by hashing n transaction information through a specified hash algorithm; a value generated by substituting the n transaction information into a specified code generation algorithm; And generation information including at least one of the values generated by transforming according to the rule.

Alternatively, the code information may include generation information generated using at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and deposit account number information in the money information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information through a hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying information according to a specified rule.

Alternatively, the code information may include generation information generated using at least one piece of the at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and 8-digit number after the deposit account number in the money information) . For example, the code information may include a value generated by hashing at least one piece of information of at least one of n pieces of transaction information through a specified hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying one piece of information according to a specified rule.

Alternatively, the code information may include at least one of the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information in money information) and at least one piece of information (e.g., deposit bank information, , And the 8-digit number after the deposit account number in the amount information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information and at least one piece of information through a specified hash algorithm, assigning the at least one piece of information and some pieces of information to a designated code generation algorithm And a value generated by modifying the at least one piece of information and some pieces of information according to a specified rule.

Alternatively, the code information may include generation information (e.g., a random number value) dynamically generated through the designated random number algorithm. In particular, the generation information generated through the random number algorithm can be generated even if the transaction information is not received by the authentication server.

According to the embodiment of the present invention, the code information may include index information given by the authentication server 600 to identify the transaction information. The index information may be uniquely extracted uniquely from the designated DB, or may be determined sequentially (or dynamically) so as not to be duplicated. The index information may be determined even if the transaction information is not received by the authentication server.

According to an embodiment of the present invention, the code information may include session information for identifying a session assigned to the terminal by the authentication server 600. [ For example, the code information may include session information for identifying a session allocated (or confirmed) at the time when the user terminal 100 accesses the authentication server 600.

According to an embodiment of the present invention, the code information determination unit 625 determines at least one of the generation information, index information, and session information according to at least one of a QR code, a data matrix, a maxi code, and a PDF- Code information including two or more codes can be encoded to generate a code image (e.g., two-dimensional bar code, etc.). On the other hand, the code image may be generated by the banking server 200 according to the method.

According to the first code information management method of the present invention, the code information management unit 630 maps the generated or extracted code information to transaction information (or reception identification information) confirmed through the transaction information verification unit 620 And stored in a designated storage medium. In this case, the dynamically generated authentication code is input to the user terminal 100 using the code information as one of the seed values, and when the authentication code is requested for authentication, the user terminal 100 uses the stored code information, The validity of the input authentication code can be authenticated.

According to the second code information management method of the present invention, the code information management unit 630 dynamically generates an authentication code using the generated or extracted code information as one of the seed values, and transmits the generated authentication code to transaction information confirmation (Or reception identification information) that is identified through the reception unit 620 and stores the mapped transaction information (or reception identification information) in a designated storage medium. In this case, the dynamically generated authentication code is input to the user terminal 100 using the code information as one of the seed values, and when authentication of the authentication code is requested, the user terminal 100 uses the stored authentication code, The validity of the input authentication code can be authenticated.

According to the first code information transferring method of the present invention, the code information transmitting unit 635 can transmit the generated or extracted code information to the designated banking server 200, and the banking server 200 transmits the code information To the user terminal (100). The code information transmitted to the user terminal 100 may be output through a screen of the user terminal 100 and then key input to the designated terminal 500. [ Meanwhile, when the code information is implemented in the form of a code image by the code information determination unit 625 (or the banking server 200), the code image transmitted to the user terminal 100 is transmitted to the user terminal 100 And is then captured and interpreted through the camera of the designated terminal 500 and transmitted to the terminal 500.

According to the third code information transferring method of the present invention, the code information transmitting unit 635 transmits the code information to the user terminal 100 through a communication connection (or communication link) And transmit the extracted code information to the designated user terminal 100. The code information transmitted to the user terminal 100 may be output through a screen of the user terminal 100 and then key input to the designated terminal 500. [ If the code information is implemented in the form of a code image by the code information determination unit 625, the code image transmitted to the user terminal 100 is outputted through the screen of the user terminal 100, Is captured and interpreted through the camera of the terminal (500) and transmitted to the terminal (500).

According to the third code information transferring method of the present invention, the code information transmitting unit 635 confirms the communication connection information for the terminal 500 that has received the code information, 500, and transmits the generated or extracted code information to the terminal 500.

According to the present invention, the code information is transmitted to the terminal 500 shown in FIG. 5 via a designated path according to a method of combining at least one or two or more of the first to third code information transfer methods.

Referring to FIG. 6, the authentication server 600 includes an authentication processing unit 640 for controlling an authentication procedure for a dynamically generated authentication code by using the code information as one of the seed values.

When the code information is stored according to the first code information management method of the present invention, the authentication processing unit 640 receives the authentication code input through the user terminal 100 from the banking server 200 (however, An identifier (e.g., a part of transaction information, a pre-exchanged token, etc.) capable of identifying the code information stored at the time of receiving the authentication code from the server 200 is received together) After generating the authentication code by using the stored code information as one of the seed values according to the same rule, authenticates the validity of the received authentication code by comparing the generated authentication code with the received authentication code, And may respond to the banking server 200.

When the authentication code generated through the code information is stored according to the second code information management method of the present invention, the authentication processing unit 640 transmits the authentication code input through the user terminal 100 from the banking server 200 (For example, a part of transaction information, a pre-exchanged token, and the like) capable of identifying the authentication code stored at the time of receiving the authentication code from the banking server 200 are received together) The authentication code may be compared with the received authentication code to authenticate the validity of the received authentication code, and the result may be returned to the banking server 200.

Hereinafter, the process of transmitting the n pieces of transaction information among the N pieces of transaction information will be described.

7 is a diagram illustrating a process of transmitting n pieces of transaction information first according to an embodiment of the present invention.

More specifically, FIG. 7 shows a case where n (1? N < N) pieces of transaction information including at least one transaction information related to the depositing side of the money among N pieces of transaction information for non- And transmits it to the designated banking server 200. It will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the present invention by referring to and / It is to be understood that the present invention may be embodied in many different forms and should not be construed as being limited by the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. Features are not limited.

Referring to FIG. 7, when the non-face financial transaction is initiated, the user terminal 100 performs a designated non-face process for non-face financial transactions in conjunction with the designated banking server 200 (700). The user terminal 100 confirms the type of non-face financial transaction during or after the non-face-to-face procedure 705. If the transaction type is a transaction irrelevant to the movement of funds, The non-face financial transaction procedure is performed in conjunction with the non-face-to-face financial transaction procedure (710).

Meanwhile, if the identified transaction type is a non-face financial transaction (for example, a bank transfer transaction) in which funds are transferred, the user terminal 100 may use N (N &gt; = 2) transactions for non-face- (715) an interface capable of inputting (or selecting) n (1? N <N) pieces of transaction information including predetermined at least one transaction information related to the deposit side of the money.

The user terminal 100 confirms whether at least one transaction information including at least one transaction information related to the money depositing side is input (or selected) through the interface (operation 720). If the n pieces of transaction information are inputted (or selected), the user terminal 100 firstly transmits the input (or selected) n pieces of transaction information to the designated banking server 200 (725).

8 is a diagram illustrating a transaction information transmission / reception process according to an embodiment of the present invention.

More specifically, FIG. 8 illustrates a case where n transaction information related to a money depositing side of N transaction information is first transmitted to a designated banking server 200 in the user terminal 100, and the n transaction information It will be understood by those skilled in the art that various changes and modifications may be made without departing from the scope of the present invention by referring to and / The present invention is not limited to the above-described embodiments, and various modifications may be made without departing from the scope of the present invention.

Referring to FIG. 8, if n pieces of transaction information are transmitted first from the user terminal 100 through the process shown in FIG. 7, the banking server 200 first receives n pieces of transaction information from the user terminal 100 (800), and stores the n pieces of transaction information in a storage medium designated to be linked with (Nn) pieces of transaction information to be received (805).

The banking server 200 performs a procedure for checking the validity of the n pieces of transaction information (810), and preferably performs a procedure of inquiring payee information corresponding to the money depositing side (810).

If the validity of the n pieces of transaction information is not confirmed, the banking server 200 discards the stored n pieces of transaction information and transmits validity authentication failure information for the n pieces of transaction information to the user terminal 100 (815). The user terminal 100 receives the acknowledgment information including the validity authentication failure information (820), and outputs the acknowledgment information. At the same time, The face-to-face financial transaction is initialized (825), and the process shown in FIG. 7 is repeated from the designated procedure.

Meanwhile, when the validity of the n pieces of transaction information is confirmed (for example, success of payee information retrieval, etc.), the banking server 200 processes the received n pieces of transaction information to be confirmed through the authentication server 600 830)

According to the third transaction interworking method of the present invention, the banking server 200 is connected to the money depositing side received from the user terminal 100 among N (N &gt; = 2) transaction information for the non-face financial transaction n (1? n <N) transaction information to the designated authentication server 600 (830). Alternatively, the banking server 200 may provide 830 the received identification information to the designated authentication server 600, which identifies that n transaction information has been received from the user terminal 100.

The banking server 200 transmits acknowledgment information for the n pieces of transaction information to the user terminal 100 (835). If code information for uniquely identifying the n pieces of transaction information is received from the authentication server 600 before transmitting the acknowledgment information, the banking server 200 includes the code information in the acknowledgment information To the user terminal 100 (835).

FIG. 9 is a diagram illustrating a process of receiving acknowledgment of n pieces of transaction information and R (1? R <(Nn)) pieces of transaction information according to an embodiment of the present invention.

In more detail, FIG. 9 shows a case where the user terminal 100 first receives n pieces of transaction information to the designated banking server 200, receives and discriminates receipt confirmation information for the n pieces of transaction information, <(Nn)) pieces of transaction information are inputted (or selected) and transferred to the banking server 200 afterwards, and those having ordinary skill in the art will refer to FIG. 9 (For example, some steps are omitted or the order is changed to the order of R (1? R <(Nn)) pieces of transaction information, However, the present invention includes all of the above-described embodiments, and the technical features of the present invention are not limited to those shown in FIG.

Referring to FIG. 9, if acknowledgment information for the n pieces of transaction information is transmitted from the banking server 200 receiving and confirming n pieces of transaction information through the process shown in FIG. 8, the user terminal 100 transmits Receiving acknowledgment information for the n pieces of transaction information transmitted first through the process shown in FIG. 7 from the server 200 (900) and authenticating the validity of n pieces of transaction information included in the acknowledgment information (905). If the validity of the n pieces of transaction information included in the acknowledgment information is not authenticated, the user terminal 100 processes the non-face-to-face financial transaction currently being performed (910) .

Meanwhile, if the validity of the n pieces of transaction information included in the acknowledgment information is authenticated, the user terminal 100 outputs n pieces of transaction information included in the acknowledgment information to the user so that the user can input (or select) (915), and verifies the validity of the output n pieces of transaction information (920). On the other hand, when the acknowledgment information includes code information for uniquely identifying the n pieces of transaction information, the user terminal 100 outputs the code information (915), the code information is transmitted to the terminal (500). The code information may be keyed into the terminal 500 or output in the form of a code image to be captured and interpreted.

If the validity of the output n pieces of transaction information is not authenticated or if the user does not confirm the output n pieces of transaction information by information inputted (or selected) by the user, (910) and repeats the process shown in Figure 7 from the designated procedure.

On the other hand, if the validity of the n pieces of transaction information is authenticated and the user confirms the output n pieces of transaction information as information inputted (or selected) by himself / herself, the user terminal 100 authenticates An interface for inputting (or selecting) R (1 < R &lt; (Nn)) pieces of transaction information excluding transaction information used as a code is displayed 925. When transaction information is inputted (or selected) (Or selected) transaction information to the banking server 200 through the interface according to a designated procedure (930), and the process is performed at least once until the R transaction information is transmitted.

When transaction information is transmitted from the user terminal 100 according to a designated procedure, the banking server 200 receives the transaction information from the user terminal 100 according to a designated procedure (935). When the R transaction information is received from the user terminal 100, the banking server 200 provides the specified number of transaction information to the authentication server 600.

According to the fourth transaction interworking method of the present invention, the banking server 200 transmits R (1 < R &lt; 2 &gt; (Nn)) transaction information to the designated authentication server 600 (940). Alternatively, the banking server 200 may provide the designated authentication server 600 with the identification information for identifying that the R transaction information has been received from the user terminal 100 (step 940).

Meanwhile, the banking server 200 can check n transaction information mapped with the R transaction information (945)

According to the fifth transaction interworking method of the present invention, the banking server 200 transmits R (1 < R &lt; 2 &gt;) exclusive of transaction information used as an authentication code among N (N & (N + R) pieces of transaction information including the transaction information of the user terminal 100 and the transaction information previously received from the user terminal 100 to the banking server 200 from the specified authentication server 600 (950). Alternatively, the banking server 200 may provide 950 the received identification information to the designated authentication server 600 to identify that (n + R) transaction information has been received from the user terminal 100.

FIG. 10 is a diagram illustrating a process of determining and providing code information that uniquely identifies transaction information according to an embodiment of the present invention.

10 is a diagram illustrating an example of a case where a specified item or a specified number of pieces of transaction information among N (N? 2) pieces of transaction information to be input (or selected) through the user terminal 100 in the authentication server 600 is transmitted to the user terminal 100 (Or selected) and transmitted, and generates or extracts code information that uniquely identifies the transaction information and processes the code information to be transmitted to the user terminal 100. In the present invention, Those skilled in the art will be able to refer to and / or modify the FIG. 10 to implement various implementations of the code information determination and provision process (e.g., some of the steps may be omitted or the sequence may have changed) However, it should be understood that the present invention includes all of the above-described embodiments, and the technical features thereof are not limited only by the method shown in FIG. You.

Referring to FIG. 10, the authentication server 600 may include a first or a second transaction linking method, or a combination of at least one or more of the third to fifth transaction linking methods shown in FIG. 8 or 9 Receiving the specified item or the specified number of transaction information input (or selected) through the user terminal 100 or receiving identification information for identifying that the transaction information has been received by the banking server 200, (1000) that a designated item or a specified number of pieces of transaction information to be inputted (or selected) through the user terminal 100 is inputted (or selected) through the user terminal 100 and transmitted. The authentication server 600 receives (1000) a specified item or a specified number of transaction information from the user terminal 100 based on information provided from the banking server 200 according to an embodiment of the present invention, (Or selected) N items of transaction information to be input (or selected) through the user terminal 100 (step S100).

When it is confirmed that the designated item or the specified number of transaction information is inputted (or selected) and transmitted through the user terminal 100, the authentication server 600 is inputted (or selected) through the user terminal 100 Code information that uniquely identifies the transferred designated item or the specified number of transaction information is generated or extracted (1005).

According to an embodiment of the present invention, the code information may include generation information generated using the n pieces of transaction information, generation information generated using at least one piece of the n pieces of transaction information, at least one of the n pieces of transaction information, Generation information generated using one piece of information, at least one piece of the n pieces of transaction information, and at least one piece of partial information, and at least one of generating information dynamically generated in the authentication server 600 And may include one or more generation information.

For example, the code information may include generation information generated using the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information, etc.). For example, the code information may include: a value generated by hashing n transaction information through a specified hash algorithm; a value generated by substituting the n transaction information into a specified code generation algorithm; And generation information including at least one of the values generated by transforming according to the rule.

Alternatively, the code information may include generation information generated using at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and deposit account number information in the money information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information through a hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying information according to a specified rule.

Alternatively, the code information may include generation information generated using at least one piece of the at least one of the n pieces of transaction information (for example, deposit bank information, deposit account number information, and 8-digit number after the deposit account number in the money information) . For example, the code information may include a value generated by hashing at least one piece of information of at least one of n pieces of transaction information through a specified hash algorithm, a value generated by substituting the at least one piece of information into a specified code generation algorithm, And generation information including at least one of values generated by modifying one piece of information according to a specified rule.

Alternatively, the code information may include at least one of the n pieces of transaction information (e.g., deposit bank information, deposit account number information, amount information in money information) and at least one piece of information (e.g., deposit bank information, , And the 8-digit number after the deposit account number in the amount information). For example, the code information may include a value generated by hashing at least one piece of n pieces of transaction information and at least one piece of information through a specified hash algorithm, assigning the at least one piece of information and some pieces of information to a designated code generation algorithm And a value generated by modifying the at least one piece of information and some pieces of information according to a specified rule.

Alternatively, the code information may include generation information (e.g., a random number value) dynamically generated through the designated random number algorithm. In particular, the generation information generated through the random number algorithm can be generated even if the transaction information is not received by the authentication server.

According to the embodiment of the present invention, the code information may include index information given by the authentication server 600 to identify the transaction information. The index information may be uniquely extracted uniquely from the designated DB, or may be determined sequentially (or dynamically) so as not to be duplicated. The index information may be determined even if the transaction information is not received by the authentication server.

According to an embodiment of the present invention, the code information may include session information for identifying a session assigned to the terminal by the authentication server 600. [ For example, the code information may include session information for identifying a session allocated (or confirmed) at the time when the user terminal 100 accesses the authentication server 600.

If the code information is generated or extracted, the authentication server 600 maps the code information to the transaction information and stores the code information in operation 1010, maps the code information to the received identification information and stores the code information in operation 1010, After generating the authentication code using the code information as a seed value, the authentication code may be mapped to the transaction information and stored (1010), and the authentication code may be mapped with the reception identification information and stored (1010).

The authentication server 600 may transmit the code information uniquely identifying the transaction information to the banking server 200 or transmit the code information to the banking server 200 in step 1015 and transmit the code information to the user terminal 100 in step 1015, The code information may be transmitted to the terminal 500 used for generating the authentication code through the code information (1015).

Meanwhile, when the code information is transmitted to the banking server 200, the banking server 200 receives the code information from the authentication server 600 (1020) and inputs (or selects) N transaction information And transmits the code information to the user terminal 100 performing the transmitting procedure (1025).

The user terminal 100 receives code information uniquely identifying the transaction information input (or selected) for the ongoing non-face financial transaction from the authentication server 600 or the banking server 200 in operation 1030, , And outputs the received code information (1035). The code information can be displayed on the screen in the form of a key inputable code system or displayed in the form of a code image generated by the authentication server 600 or the banking server 200.

FIG. 11 is a diagram illustrating a process of generating an authentication code using code information according to an embodiment of the present invention.

In more detail, FIG. 11 illustrates a method of generating a disposable authentication code by using code information that uniquely identifies transaction information through the chip 405 of the card 400 interfaced with the terminal 500 via the NFC as one of the seed values Those skilled in the art will be able to refer to and / or modify this FIG. 11 to illustrate various implementations of the authentication code generation process (e.g., some steps may be omitted The present invention is not limited to the above-described embodiments, and the present invention is not limited to the above-described embodiments.

Referring to FIG. 11, the terminal 500 receives a key input from the user terminal 100 through the process illustrated in FIG. 10, or captures and analyzes a code image displayed on the user terminal 100 , And obtains code information that uniquely identifies the transaction information that has been previously input (or selected) for the ongoing non-face financial transaction through the user terminal 100 (1100). Alternatively, the terminal 500 receives the code information from the authentication server 600 through the designated communication network, thereby receiving transaction information (or selected transaction information) about the ongoing non-face financial transaction through the user terminal 100 Code information that uniquely identifies can be obtained (1100).

The terminal 500 confirms whether it is interfaced with the designated card 400 through the NFC (1105). If the terminal 400 is interfaced with the card 400, the terminal 500 provides the input value including the obtained code information through the NFC to the chip 405 of the interfaced card 400 (step 1110) The chip 405 of the card 400 receives the input value including the code information from the terminal 500 via NFC (1115).

The chip 405 of the card 400 dynamically generates a disposable authentication code using the code information included in the input value as one of the seed values 1120 and transmits the dynamically generated authentication code through the NFC To the terminal 500 (1125).

The terminal 500 receives the authentication code dynamically generated in the chip 405 of the card 400 using the card information as a seed value through the NFC 1130, (1135).

FIG. 12 illustrates a process of generating an authentication code using code information according to another embodiment of the present invention.

12 shows a process of dynamically generating a disposable authentication code by using code information that uniquely identifies transaction information in the terminal 500 as one of the seed values. In the technology of the present invention, Those skilled in the art will be able to refer to and / or modify FIG. 12 to infer various implementations of the authentication code generation process (e.g., omitting some steps or changing the order) The present invention is not limited to the above-described embodiments, and various modifications may be made without departing from the scope of the present invention.

Referring to FIG. 12, the terminal 500 receives a key input from the user terminal 100 through the process shown in FIG. 10, or captures and analyzes a code image displayed on the user terminal 100 , And acquires code information (1200) that uniquely identifies the transaction information previously entered (or selected) for the ongoing non-face financial transaction through the user terminal (100). Alternatively, the terminal 500 receives the code information from the authentication server 600 through the designated communication network, thereby receiving transaction information (or selected transaction information) about the ongoing non-face financial transaction through the user terminal 100 Code information that uniquely identifies can be obtained 1200.

The terminal 500 dynamically generates a disposable authentication code using the obtained code information as one of the seed values (1205), and displays the generated authentication code on the screen (1210).

FIG. 13 is a diagram illustrating a process of receiving (NnR) pieces of transaction information including an authentication code according to an embodiment of the present invention and processing authentication and / or transaction.

More specifically, FIG. 13 is a flowchart illustrating the operation of the banking server 200 by inputting (NnR) pieces of transaction information including the authentication code displayed on the terminal 500 through the process shown in FIG. 11 or FIG. 12 in the user terminal 100, The banking server 200 processes the authentication and the transaction using the banking server 200. Referring to FIG. 13, the banking server 200 processes the authentication and the transaction, (E.g., omitting some of the steps or changing the order) for processing the (NnR) number of receipt and authentication / transactions, the present invention can be applied to all of the above- And the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 13, the user terminal 100 displays an interface for inputting (NnR) pieces of transaction information including authentication codes displayed on the terminal 500 through the process shown in FIG. 11 or FIG. 12 (1300 , And transmits the (NnR) pieces of transaction information input through the interface to the banking server 200 (1305).

The banking server 200 receives (NnR) pieces of transaction information including the authentication code displayed on the terminal 500 from the user terminal 100 according to a designated procedure (1310). Upon receiving (NnR) transaction information from the user terminal 100, the banking server 200 checks n transaction information mapped with the received (NnR) transaction information (1305) ) Transaction information or N pieces of transaction information, and performs an authentication procedure (1320).

If the authentication procedure using one or more pieces of transaction information used as the authentication means is successful, the banking server 200 transmits the non-contact information using the T pieces of transaction information excluding the transaction information used as the authentication means among the N pieces of transaction information The transaction procedure of the financial transaction is performed (1325).

If both the authentication procedure and the transaction procedure are successful, the banking server 200 transmits successful authentication information for the successful authentication and transaction to the user terminal 100 (1330) And receives and outputs the success confirmation information (1335), and performs an electronic signature process on the transaction details included in the success confirmation information (1340). The banking server 200 completes the non-face financial transaction by receiving and / or authenticating 1345 an electronic signature for the transaction history.

100: user terminal 200: banking server
300: program 400: card
500: terminal 600: authentication server

Claims (23)

A method for providing a transaction interlocking authentication code to be executed in a server that receives N (N? 2) pieces of transaction information from a user terminal and processes non-face financial transactions,
A first step of confirming that a designated item or a specified number of pieces of transaction information to be inputted (or selected) through the user terminal for non-face financial transaction is inputted (or selected) through a user terminal and transmitted;
A second step of generating or extracting code information that uniquely identifies the transaction information; And
And a third step of transmitting the code information to the user terminal,
Wherein the code information is used as a seed of a disposable authentication code that is dynamically generated for the non-face financial transaction.
The authentication system according to claim 1,
Dynamically generated by using the code information as a seed in a designated terminal, or
Wherein the code is dynamically generated using a chip of the code in a chip of a card interfaced with a terminal specified through NFC.
The information processing apparatus according to claim 1,
(S < S &lt; N) transaction information input (or selected) through the user terminal until the authentication code is input to the user terminal for the non-face financial transaction, Way.
The information processing apparatus according to claim 1,
(1 < S < S) transactions from among S (1 &lt; S &lt; N) transaction information input (or selected) through the user terminal until the authentication code is input to the user terminal for non- Wherein the information includes at least one of information about a transaction and a transaction.
The information processing apparatus according to claim 1,
If the non-face-to-face financial transaction is a non-face-to-face financial transaction that transfers funds,
And n (1 < n &lt; N) pieces of transaction information related to the money depositing side received from the user terminal, among N pieces of transaction information for non-face financial transactions for moving the funds, Code delivery method.
The information processing apparatus according to claim 1,
If the non-face-to-face financial transaction is a non-face-to-face financial transaction that transfers funds,
(Nn) pieces of transaction information excluding n (1? N <N) pieces of transaction information related to the money depositing side received from the user terminal for non-face financial transaction to transfer the money, (1 < R &lt; (Nn)) pieces of transaction information excluding the transaction information.
The information processing apparatus according to claim 1,
If the non-face-to-face financial transaction is a non-face-to-face financial transaction that transfers funds,
(Nn) pieces of transaction information excluding n (1? N <N) pieces of transaction information related to the money depositing side received from the user terminal for non-face financial transaction to transfer the money, (N + R) pieces of transaction information including R (1? R <(Nn)) pieces of transaction information and n pieces of transaction information excluding the transaction information.
2. The method according to claim 1,
And storing the transaction information in the transaction information storing step.
2. The method according to claim 1,
Further comprising the step of mapping the code information to the transaction information and storing the transaction information.
The information processing apparatus according to claim 1,
Wherein the transaction information includes generation information generated using the transaction information.
The information processing apparatus according to claim 1,
And generating information using at least one of the transaction information and the generated transaction information.
The information processing apparatus according to claim 1,
And generating information using at least one piece of information of the transaction information.
The information processing apparatus according to claim 1,
And generating information using at least one of the transaction information and at least one partial information.
The information processing apparatus according to claim 1,
And generating generated information that is dynamically generated.
The information processing apparatus according to claim 1,
And the transaction information includes index information uniquely assigned to identify the transaction information.
16. The method of claim 15,
Wherein the transaction-related authorization code is determined to be uniquely extracted from the designated DB without being duplicated, or not duplicated.
The information processing apparatus according to claim 1,
And a code system capable of inputting a key to a designated terminal.
The information processing apparatus according to claim 1,
And the code is captured in an interpretable code image taken through a camera of a designated terminal.
The method according to claim 1,
Further comprising encoding the code information to a code image that is captured and interpretable via a camera of a designated terminal,
And the third step transmits the code image to the user terminal.
The information processing apparatus according to claim 1,
And transmitting the transaction authentication authorization code to a designated terminal through a designated communication network.
The method according to claim 1,
Further comprising confirming communication connection information for the designated terminal,
Wherein the third step further comprises transmitting the code information to the terminal using the communication connection information.
The method according to claim 1,
A fourth step of dynamically generating the code information using a seed, and then receiving an authentication code input to the user terminal; And
And a fifth step of controlling the authentication procedure to authenticate the validity of the received authentication code using the stored code information.
The method according to claim 1,
Dynamically generating an authentication code using the code information as a seed; And
And mapping and storing the transaction information and the authentication code,
A fourth step of dynamically generating the code information using a seed, and then receiving an authentication code input to the user terminal; And
And a fifth step of controlling the authentication procedure to authenticate the validity of the received authentication code by using the stored authentication code.

Images