KR100653638B1 - System of providing mobile banking service and method for operating the system - Google Patents

Abstract

A system and a method for a mobile banking service are provided to enable a cooperated company server to stably and independently issue/operate an application to an IC chip without receiving control of an issuer server by encoding an application operation key issued from an issuer and operating the application according to the control of the encoded application operation key. A CA(Certificate Authority) server(110) records an authentication key to the first security area of the IC chip of a mobile terminal(140) by transmitting the authentication key to the mobile terminal performing mobile banking. The cooperated company server(130) records the application operation key to the second security area of the IC chip by transmitting the authentication operation key to the mobile terminal, encodes the authentication application key by the authentication key, and records the application to the second security area of the IC chip by transmitting the application to the mobile terminal. The issuer server(120) records a cooperated company operation key to the third security area of the IC chip by transmitting an issuer operation key to the mobile terminal.

Description

Mobile banking service system and method thereof {SYSTEM OF PROVIDING MOBILE BANKING SERVICE AND METHOD FOR OPERATING THE SYSTEM}

1 is a diagram showing the overall network configuration of a mobile banking system according to an embodiment of the present invention.

2 is a diagram illustrating a configuration of a portable terminal IC chip according to an embodiment of the present invention.

Figure 3 is a flow chart illustrating the flow of a method for providing a mobile banking service of the mobile banking system according to an embodiment of the present invention.

Figure 4 is a block diagram showing the configuration of a mobile terminal for implementing a mobile banking service according to another embodiment of the present invention.

5 is a flowchart illustrating a mobile banking service method of a mobile terminal according to another embodiment of the present invention.

6 is a diagram illustrating an example of an application operation key issuing process of the method for providing a mobile banking service according to the present invention.

<Explanation of symbols for main parts of the drawings>

110: certification authority server 120: issuer server

130: affiliate server 140: mobile terminal

150: communication network

The present invention relates to a method and a system for providing a mobile banking service, and more particularly, to a mobile banking system including a certificate authority server, an issuer server, and an affiliate server, wherein the mobile banking is performed. The authentication key issued by the certification authority is recorded on the IC chip of the terminal, and when the application of the affiliate server is issued to the IC chip, the application operation key is encrypted by using the authentication key to issue the application. The present invention relates to a mobile banking service providing method and a system for controlling an affiliate of the application issuing device, not an IC chip issuer.

Mobile Banking is a mobile terminal with internet access, anytime, anywhere bank balance inquiry, bank transfer, deposit inquiry, exchange rate inquiry, cashier's check, transaction history inquiry, credit card (credit card) transaction, cash service, etc. It means a financial transaction service that can receive various services. Recently, with the development of mobile communication technology, mobile banking users are increasing rapidly.

Mobile banking is distinguished from telebanking in that it can be used safely with security, and distinguished from internet banking in that it can be used on the go. Types of mobile banking include smart card chip (IC chip) method which saves its financial information on smart card (IC card) embedded in mobile terminal and improves convenience and security. There are a VM (Virtual Machine) method that executes a program every time a transaction is performed, and a WAP (Wireless Application Protocol) method, which transfers a transaction text by a text message between a mobile terminal and a banking system and performs a task.

In order to use the mobile banking service, a user must install an integrated circuit (IC) chip in his or her mobile terminal, which is literally an integrated circuit chip. IC chips include a CPU, memory (RAM, ROM), and a microprocessor for performing separate cryptographic processing. Currently, commercially available cards with 64 megabytes of memory capacity and 32-bit CPUs are emerging, which are virtually the same as the earliest computers. Thanks to this, IC chip is able to store huge amount of information as well as high level of encryption processing, and it is used mainly as mobile banking chip because of its excellent security.

The user can use the mobile banking service by receiving the IC chip from an issuer such as a mobile communication company and installing the IC chip in his mobile terminal. In addition, a user may install a predetermined application provided by the financial institution, that is, an affiliated company, on the IC chip in order to perform mobile banking of the financial institution desired by the user.

Security is important in this mobile banking. Therefore, an application issued to an IC chip by an affiliate, such as a financial institution, should be guaranteed independence only operated by the affiliate. However, the IC chip currently used for mobile banking has a built-in master key set by the issuer (mobile communication company) that issued the IC chip. The master key can control all applications installed in the IC chip. Is implemented.

That is, the issuer (mobile communication company) may install, delete, or change the application of the affiliated company (financial institution) issued to the mobile terminal IC chip of each mobile banking user without any restriction. Therefore, a security problem is raised, and a problem that an independent mobile banking service of an affiliate is not guaranteed is raised.

Accordingly, there is a need for developing a stable and independent application issuance and operation method of an affiliate company that supplies an application to a mobile terminal IC chip of a user using a mobile banking service.

The present invention has been made to improve the prior art as described above, by encrypting the application operation key issued by the affiliate using the authentication key issued from a predetermined certification authority server, according to the control of the encrypted application operation key It is an object of the present invention to provide a method and a system for providing a mobile banking service that enables an affiliate server to issue and operate an application to an IC chip stably and independently without being controlled by the issuer server.

In addition, the present invention has a predetermined security area in which the authentication key issued from the certification authority server is recorded on the IC chip of a mobile terminal using a mobile banking service, and authenticates, installs, and executes an application issued by an affiliated company with the authentication key. It is an object of the present invention to provide a mobile banking service method and a mobile terminal of a mobile terminal, which is more secure by ensuring the independence of the application issued by the affiliate, by being able to delete, and delete.

In order to achieve the above object and to solve the problems of the prior art, a method of providing a mobile banking service of a mobile banking system including a certification authority server, an issuing server, and an affiliate server according to the present invention is the certification authority. A server transmitting an authentication key to a mobile terminal performing the mobile banking so that the authentication key is recorded in a first security area of the IC chip of the mobile terminal; Transmitting, by the affiliate server, an application operation key to the portable terminal so that the application operation key is recorded in the second security area of the IC chip; Controlling, by the affiliate server, the application operation key to be encrypted through the authentication key; And transmitting, by the affiliate server, a predetermined application to the portable terminal, and controlling the transmitted application to be recorded in the second security area of the IC chip.

In addition, the mobile banking service method of a mobile terminal according to the present invention, the method comprising the steps of: maintaining an IC chip including a first security area in which an authentication key received from a predetermined authority server; Requesting the issuance of the application to a predetermined affiliate server when there is a user's application issuance request; Receiving an application operation key from the affiliate server; Encrypting the received application operation key using the authentication key; Recording the encrypted application operating key in a second secure area of the IC chip; And receiving the application from the affiliated server and recording the application in the second security area.

Hereinafter, with reference to the accompanying drawings will be described an embodiment of the present invention;

1 is a diagram showing the overall network configuration of a mobile banking system according to an embodiment of the present invention.

According to an embodiment of the present invention, the mobile banking system includes a certification authority server 110, an issuing server server 120, an affiliate server 130, and a mobile terminal 140, and each of the server and the portable The terminals 140 may be connected to each other through the communication network 150.

The portable terminal referred to in this specification, including FIG. 1, may be a personal digital assistant (PDA), a cellular phone, a personal communication service (PCS) phone, a hand-held PC, a CDMA-2000 (1X, 3X) phone. , Wideband CDMA (WCDMA) phone, Dual Band / Dual Mode phone, Global Standard for Mobile (GSM) phone, Mobile Broadband System (MBS) phone, Satellite / Terrestrial Digital Multimedia Broadcasting (DMB) phone, At least one of a notebook, a portable game console, a PMP, or a navigation terminal is characterized in that the.

The certification authority server 110 transmits the authentication key to the mobile terminal 140 performing mobile banking so that the authentication key is recorded in the first security area of the IC chip of the mobile terminal 140. The certification authority server 110 is a server operated by a predetermined certification authority, and may be selected as an independent agency from the issuer and affiliate of the IC chip. For example, the certification body may be selected as a financial institution that issues a public certificate. The authentication key may be implemented as a predetermined public key pair set by the certification authority. For example, the authentication key may be implemented including an authentication public key and an authentication secret key.

The issuer server 120 may transmit the issuer operation key to the portable terminal 140 to control the issuer operation key to be recorded in the third security area of the IC chip. The issuer server 120 refers to a server operated by an issuer that issues the IC chip for mobile banking of the mobile terminal 140. Accordingly, the issuer may control a series of operations of the IC chip by recording a predetermined master key capable of controlling the configuration and operation of the IC chip, that is, the issuer operation key on the IC chip. The issuer operating key may be recorded in the IC chip in advance in the process of manufacturing the IC chip.

The affiliate server 130 transmits the application operation key to the mobile terminal 140 to control the application operation key to be recorded in the second security area of the IC chip. The affiliate server 130 refers to a server operated by the mobile banking service affiliate. For example, when a user of the mobile terminal 140 wants to use a mobile banking service through a specific bank, an application issued by the bank must be recorded on the IC chip of the mobile terminal 140 to use the mobile banking service of the bank. It is available. Accordingly, the affiliate server 130 may transmit the application and an application operation key for the operation of the application to the mobile terminal 140.

After transmitting the application operation key, the affiliate server 130 may control the application operation key to be encrypted through the authentication key. For example, the application operation key may be controlled to be encrypted with the authentication public key of the authentication key. In addition, the affiliate server 130 may maintain the encrypted application operation key by encrypting the application operation key received from the certification authority server 110 and transmitted to the mobile terminal 140 with the authentication key.

Thereafter, the affiliate server 130 may transmit the application to the mobile terminal 140 and control the transmitted application to be recorded in the second security area of the IC chip. That is, the application operation key and the application may be recorded in a second security area that is separate from the third security area in which the issuer operation key is recorded, thereby preventing the application operation key from being controlled. have.

In other words, in order for the issuer operation key to control the application, the second security region must access the second security region, and the application operation key is recorded in the second security region to control the application. In addition, since the application operation key is encrypted with the authentication key, the application operation key must be decrypted with an authentication secret key included in the authentication key. The authentication key is a concept independent of the issuer operation key. The operation key cannot decrypt the application operation key.

Therefore, the application recorded in the second security zone is operated under the control of the encrypted application operation key without being controlled by the issuer operation key, thereby ensuring the independence of the affiliate server 130 in its operation. can do.

The communication network 150 may support a connection between the certification authority server 110, the issuer server 120, the affiliate server 130, and the mobile terminal 140. For the above operation, the communication network 150 is implemented as a mobile communication network supporting at least one of code division multiple access (CDMA), WCDMA, ALL IP, GSM, GPRS, and all existing mobile communication related access methods. Can be. In addition, the communication network 150 may be implemented by a wired Internet or a wireless Internet, and may include all communication networks that can be serviced in the future, such as a portable Internet and VoIP.

As described above, according to an embodiment of the present invention, three security regions may exist in the IC chip of the portable terminal 140. This will be described in more detail with reference to FIG. 2.

2 is a diagram illustrating a configuration of a portable terminal IC chip according to an embodiment of the present invention.

The IC chip 200 installed in a mobile terminal for performing a mobile banking service according to an embodiment of the present invention may include a first security area 210, a second security area 220, and a third security area 230. It can be configured to include.

An authentication key issued from the certification authority server may be recorded in the first security area 210. As described above, the authentication key may be configured to include an authentication public key and an authentication secret key. The first security region 210 may be set when the IC chip 200 is generated and when the issuer operation key is loaded. The authentication key recorded in the first security zone 210 may be implemented to be independent of a specific application operation key including the issuer operation key and to ensure independence. In addition, in order to encrypt the application operation key through the authentication key, the first security zone 210 may be implemented to allow access to the application operation key.

An application operation key and an application issued from the affiliate server may be recorded in the second security area 220. In the second security zone 220, at least one application operation key and an application received from at least one affiliate server may be recorded in order to implement a mobile banking service desired by the portable terminal user.

The issuer operation key issued from the issuer server may be recorded in the third security area 230. The issuer server refers to a server operated by the issuer that issued the IC chip 200. The issuer operation key may control the configuration and a series of operations of the IC chip 200. However, the issuer management key may be implemented to provide limited access to the second security zone 220 in which the application management key encrypted with the authentication key is recorded. In addition, the issuer management key may be implemented such that access to the first security area 210 in which the authentication key is recorded is impossible.

That is, the issuer server may control the configuration and operation of the IC chip 200 through the issuer operation key, but may not be able to control the operation of the application recorded in the second security area 220. . Therefore, the affiliate that issued the application may operate the application independently of the issuer. For example, the affiliate server may control installation or deletion of an application recorded in the second security area 220 through the encrypted application operation key, and the issuer server may perform the operation. It can be implemented to be impossible.

The configuration of the IC chip described with reference to FIG. 2 may be implemented to support a known global platform.

3 is a flowchart illustrating a flow of a method for providing a mobile banking service of a mobile banking system according to an embodiment of the present invention.

According to an embodiment of the present invention, the mobile banking system may include an issuer server, a certification authority server, and an affiliate server, and provide the mobile banking service through an IC chip installed in a mobile terminal.

The issuer server transmits the issuer operation key to the portable terminal, so that the issuer operation key is recorded in the third security area of the IC chip (step 311). The certification authority server transmits an authentication key to the portable terminal so as to control the authentication key to be recorded in the first secure area of the IC chip (step 312).

The affiliate server transmits an application operation key to the portable terminal so as to control the application operation key to be recorded in the second security area of the IC chip (step 313). Thereafter, the affiliate server controls the application operation key to be encrypted through the authentication key recorded in the first security area (step 314). If the application operation key is encrypted through the authentication key, the affiliate server receives and maintains the encrypted application operation key from the mobile terminal (step 315).

The affiliate server transmits an application corresponding to the application operation key to the portable terminal (step 316), and controls the application to be recorded in the second secure area of the IC chip (step 317). Thereafter, the affiliate server may independently perform control of the application recorded in the second security area without being controlled by the issuer management key through the application management key (step 318).

So far, the subject of the mobile banking service according to an embodiment of the present invention has been described with reference to FIGS. 1 to 3 as an example of an authentication authority server, an issuer server, and an affiliate server. Hereinafter, another embodiment of the present invention will be described with reference to FIG. 4 and FIG. 5 as an example in which the subject of the mobile banking service is a mobile terminal.

4 is a block diagram illustrating a configuration of a mobile terminal for implementing a mobile banking service according to another embodiment of the present invention.

According to another embodiment of the present invention, the mobile terminal 400 implementing the mobile banking service includes an IC chip 410, an application operation unit 420, an encryption unit 430, a controller 440, and a communication module 450. It may be configured to include. In addition, the mobile terminal 400 may be connected to the certification authority server 471, the affiliate server 472, and the issuer server 473 through the communication network 460. The certification authority server 471, the affiliate server 472, and the issuer server 473 and the communication network 460 may be implemented with the same concept as that described with reference to FIG. 1.

IC chip 410 may comprise one or more secure areas. According to another embodiment of the present invention, the IC chip 410 may be configured to include a first security area, a second security area, and a third security area. The authentication key received from the certification authority server 471 may be recorded in the first security zone. An application operation key and an application received from the affiliate server 472 may be recorded in the second security zone. The issuer operation key received from the issuer server 473 may be recorded in the third security area.

The application operation unit 420 requests the issuance of the application to the affiliate server 472 when a user's application issuance request is requested. When receiving an application operation key and the application in response to a request for issuing the application from an affiliate server 472, the application operation unit 420 stores the application operation key and the application in the second security of the IC chip 410. Write in the area.

The encryption unit 430 encrypts the application operation key recorded in the second security area using the authentication key recorded in the first security area. When the authentication key is configured to include an authentication public key and an authentication secret key, the encryption unit 430 may encrypt the application operation key using the authentication public key.

The controller 440 may control a series of operations of the mobile terminal 400. That is, the operation of the application operating unit 420, the encryption unit 430, the IC chip 410, and the communication module 450 may be implemented to control the operations between the components. To this end, the controller 440 may be implemented to include a mobile station modem (MSM), a digital signal processor (DSP), an open multimedia application platform (OMAP), and the like.

The communication module 450 receives the authentication key from the certification authority server 471 through the communication network 460, receives the application and the application operation key from the affiliate server 472, and receives the application key from the issuer server 473. The issuer operation key can be received. In addition, the communication module 450 may be implemented to communicate with each of the servers to perform transmission and reception of various data and control signals. For the above operation, the communication module 450 is connected to the public switched telephone network (PSTN), as well as to the code division multiple access (CDMA), WCDMA, ALL IP, GSM, GPRS, and all existing mobile communications. It can support one or more of the access methods, and can be implemented to support one or more of the call control protocols for VoIP call connections such as H.323, Message Gateway Control Protocol (MGCP), Session Initiation Protocol (SIP), or Megaco. Can be. In addition, the communication module 190 may include one or more short range communication modules according to respective short range communication protocols such as Bluetooth, Zigbee, infrared communication (IrDA), or WLAN (IEEE802.11b).

According to another embodiment of the present invention described with reference to FIG. 4, the operation of the mobile terminal 400 supporting the mobile banking service may be implemented including all the methods of providing the mobile banking service of the mobile banking system described with reference to FIGS. 1 to 3. Can be. However, in another embodiment of the present invention, the subject performing the operation is the portable terminal 400. This may also be applied to the mobile banking service method of the mobile terminal according to another embodiment of the present invention described below with reference to FIG. 5.

5 is a diagram illustrating a flow of a mobile banking service method of a mobile terminal according to another embodiment of the present invention.

According to another embodiment of the present invention, the portable terminal maintains an IC chip including a first security area in which an authentication key received from a predetermined authority server is recorded (step 511). When receiving a request for issuing an application from a user, the portable terminal requests issuance of the application to an affiliate server corresponding to the application (step 512).

When the application management key is received in response to the application issuance request from the affiliate server (step 514), the portable terminal uses the received application operation key using the authentication key recorded in the first security area. Encrypt (step 515).

The portable terminal writes the encrypted application operation key to the second secure area of the IC chip (step 516). Thereafter, the encrypted application operation key is transmitted to the affiliate server (step 517), and the requested application is received from the affiliate server (step 518). The portable terminal may independently operate the application through the received application without being controlled by the issuer server that issued the IC chip (step 519).

6 is a diagram illustrating an example of an application operation key issuing process of the method for providing a mobile banking service according to the present invention.

The application operation key issuing process illustrated in FIG. 6 is based on a RSA (Rivest Shamir Adleman) public key encryption algorithm. In addition, in FIG. 6, the application operation key may be implemented as K.

The IC chip installed in the portable terminal receives a certificate (CICC) that encrypts the IC chip's public key (PICC) with the card's public key pair (PICC, SICC) and the certificate authority server's secret key (SCA). Can be recorded. When the user requests to issue a new service, that is, a new application by using the wireless Internet or SMS, the portable terminal transmits the card certificate (CICC) stored in the IC chip.

The affiliate server decrypts the certificate (CICC) received from the mobile terminal with the public key (PCA) of the certificate authority server, verifies the certificate, and obtains the public key (PICC) of the IC chip. In addition, the affiliate server generates a symmetric key (KBANK) to be part of the initial issuing key and encrypts (MBANK) with a public key (PICC) of the card, and then the public key (PBANK) of the affiliate server is the certificate authority server The partner certificate CBANK encrypted with the secret key SCA is transmitted to the mobile terminal.

Since the portable terminal has received the information MBANK from the affiliated server encrypted with the public key (PICC) of the IC chip, the portable terminal decrypts it using the secret key (SICC) of the IC chip. (KBANK) can be obtained. In addition, the mobile terminal may generate another symmetric key (KICC) using a predetermined random number and perform an XOR with the symmetric key (KBANK) received from the affiliate server to calculate an initial issued key (K).

The mobile terminal decrypts the certificate CBANK of the affiliated server with the public key PCA of the certification authority server, verifies the certificate to obtain the public key PBANK of the affiliated server, and generates the symmetric. The key KICC is encrypted with the public key PBANK of the affiliate server and then transmitted to the affiliate server.

Since the affiliated server decrypts the information MICC received from the mobile terminal with the public key KBANK of the affiliated server, decrypts it with the secret key SBANK of the affiliated server, and then initializes the same method as described above. The issuance key K can be obtained. As such, the affiliate server may securely issue an application to the IC chip of the portable terminal using an initial issued key K shared with the portable terminal.

The method for providing a mobile banking service according to the present invention described above may be embodied in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. The medium may be a transmission medium such as an optical or metal wire, a waveguide, or the like including a carrier wave for transmitting a signal specifying a program command, a data structure, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While specific embodiments of the present invention have been described so far, various modifications are possible without departing from the scope of the present invention.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the claims below, but also by the equivalents of the claims.

According to the method and system for providing a mobile banking service of the present invention, an application operation key issued by an affiliate is encrypted using an authentication key issued from a predetermined certification authority server, and the application is controlled according to the control of the encrypted application operation key. By operating, the affiliate server can stably and independently issue and operate an application on the IC chip without being controlled by the issuer server.

In addition, according to the mobile banking service method of the mobile terminal and the mobile terminal of the present invention, a predetermined security area is recorded on the IC chip of the mobile terminal using the mobile banking service, the authentication key issued from the certification authority server, By authenticating, installing, executing, and deleting an application issued by an affiliate with the authentication key, the independence of an application issued by an affiliate can be ensured, thereby increasing the security.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above-described embodiments, which can be variously modified and modified by those skilled in the art to which the present invention pertains. Modifications are possible. Accordingly, the spirit of the present invention should be understood only by the claims set forth below, and all equivalent or equivalent modifications thereof will belong to the scope of the present invention.

Claims (13)

In the method of providing a mobile banking (Mobile Banking) service of a mobile banking system including a certification authority server, an issuing server server, and an affiliate server, Controlling, by the certification authority server, to transmit an authentication key to the mobile terminal performing the mobile banking so that the authentication key is recorded in the first security area of the IC chip of the mobile terminal; Transmitting, by the affiliate server, an application operation key to the portable terminal so that the application operation key is recorded in the second security area of the IC chip; Controlling, by the affiliate server, the application operation key to be encrypted through the authentication key; And The affiliate server transmitting a predetermined application to the portable terminal, and controlling the transmitted application to be recorded in a second security area of the IC chip; Mobile banking service providing method of a mobile banking system comprising a. The method of claim 1, The affiliate server receiving the encrypted application operating key from the mobile terminal More, And the affiliate server controls the installation or deletion of the application recorded in the second security area of the IC chip through the encrypted application operation key. The method of claim 1, Transmitting, by the issuer server, the issuer operation key to the portable terminal so that the issuer operation key is recorded in the third security area of the IC chip; More, The issuing server server controls the operation of the IC chip except for the operation of the application recorded in the second security area through the issuer operation key mobile banking service providing method of the mobile banking system. In the mobile banking service method of a mobile terminal, Maintaining an IC chip including a first security area in which an authentication key received from a predetermined certification authority server is recorded; Requesting the issuance of the application to a predetermined affiliate server when there is a user's application issuance request; Receiving an application operation key from the affiliate server; Encrypting the received application operation key using the authentication key; Recording the encrypted application operating key in a second secure area of the IC chip; And Receiving the application from the affiliate server and recording the application in the second security zone; Mobile banking service method of a mobile terminal comprising a. The method of claim 4, wherein The application may be installed or deleted according to the control of the encrypted application operation key mobile banking service method of a mobile terminal. The method of claim 4, wherein Transmitting the encrypted application operation key to the affiliate server More, The affiliated server controls the operation of an application recorded in the IC chip through the application operation key. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 6. In the mobile banking system that provides a mobile banking service, An authentication authority server which transmits an authentication key to the mobile terminal performing the mobile banking so that the authentication key is recorded in the first security area of the IC chip of the mobile terminal; And Transmits an application operation key to the mobile terminal to control the application operation key to be recorded in a second security area of the IC chip, controls the application operation key to be encrypted through the authentication key, Affiliate server for controlling the transmission of the application to be recorded in the second security area of the IC chip Mobile banking system comprising a. The method of claim 8, The affiliate server receives the encrypted application operation key from the mobile terminal, and controls installation or deletion of an application recorded in the second security area of the IC chip through the encrypted application operation key. Mobile banking system. The method of claim 8, Issuer server for controlling the issuer operation key is recorded in the third security area of the IC chip by transmitting the issuer operation key to the portable terminal More, The issuer server controls the operation of the IC chip except for the operation of the application recorded in the second security area through the issuer operation key. In a mobile terminal that supports mobile banking, An IC chip including one or more security zones, for recording and holding an authentication key received from a predetermined certification authority server in a first security zone; An application operating unit for requesting issuance of the application to a predetermined affiliate server, receiving an application operation key and an application from the affiliate server, and recording the application in a second security area of the IC chip; And An encryption unit for encrypting the received application operation key using the authentication key and recording the encrypted application operation key in the second security area Mobile banking portable terminal comprising a. The method of claim 11, The application manager transmits the encrypted application manager key to the affiliate server, The affiliated server controls the application manager to operate the application through the application operation key. The method of claim 11, The portable terminal includes a personal digital assistant (PDA), a cellular phone, a personal communication service (PCS) phone, a hand-held PC, a CDMA-2000 (1X, 3X) phone, a WCDMA (Wideband CDMA) phone, dual Dual Band / Dual Mode phones, Global Standard for Mobile (GSM) phones, Mobile Broadband System (MBS) phones, satellite / terrestrial Digital Multimedia Broadcasting (DMB) phones, laptops, handheld game consoles, PMPs, or navigation Mobile banking portable terminal, characterized in that any one of the terminal.

Images